fix(deps, ci): bump sbt/setup-sbt to v1.5.7 to restore CI - #7710
Conversation
The ASF actions allowlist stopped permitting carabiner-dev/actions@2a11d59, which v1.5.2 reaches transitively through carabiner-dev/actions@94f2939. Every job that sets sbt up now fails during "Prepare all required actions", before checkout. v1.5.7 routes through ampel/verify@36a39ef -> install/ampel@2fec8bd8 instead, and no longer pulls install/bnd at all.
Automated Reviewer SuggestionsBased on the
|
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #7710 +/- ##
============================================
+ Coverage 90.93% 90.95% +0.01%
- Complexity 4450 4456 +6
============================================
Files 1175 1175
Lines 47140 47140
Branches 5284 5284
============================================
+ Hits 42865 42874 +9
+ Misses 2582 2580 -2
+ Partials 1693 1686 -7
☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
|
| config | throughput | MB/s | latency | max Δ latest / 7d | |
|---|---|---|---|---|---|
| 🔴 | bs=10 sw=10 sl=64 | 404 | 0.246 | 23,707/30,775/30,775 us | 🟢 -16.5% / 🔴 +90.3% |
| 🟢 | bs=100 sw=10 sl=64 | 800 | 0.488 | 124,880/146,676/146,676 us | 🟢 -5.2% / 🔴 +38.9% |
| ⚪ | bs=1000 sw=10 sl=64 | 910 | 0.555 | 1,099,506/1,183,774/1,183,774 us | ⚪ within ±5% / 🔴 +17.0% |
Baseline details
Latest main 9d58135 from same runner
| config | metric | PR | latest main | 7d avg | Δ latest | Δ 7d |
|---|---|---|---|---|---|---|
| bs=10 sw=10 sl=64 | throughput | 404 tuples/sec | 403 tuples/sec | 784.16 tuples/sec | +0.2% | -48.5% |
| bs=10 sw=10 sl=64 | MB/s | 0.246 MB/s | 0.246 MB/s | 0.479 MB/s | 0.0% | -48.6% |
| bs=10 sw=10 sl=64 | p50 | 23,707 us | 22,553 us | 12,626 us | +5.1% | +87.8% |
| bs=10 sw=10 sl=64 | p95 | 30,775 us | 36,877 us | 16,169 us | -16.5% | +90.3% |
| bs=10 sw=10 sl=64 | p99 | 30,775 us | 36,877 us | 18,986 us | -16.5% | +62.1% |
| bs=100 sw=10 sl=64 | throughput | 800 tuples/sec | 794 tuples/sec | 1,023 tuples/sec | +0.8% | -21.8% |
| bs=100 sw=10 sl=64 | MB/s | 0.488 MB/s | 0.485 MB/s | 0.625 MB/s | +0.6% | -21.9% |
| bs=100 sw=10 sl=64 | p50 | 124,880 us | 122,346 us | 99,185 us | +2.1% | +25.9% |
| bs=100 sw=10 sl=64 | p95 | 146,676 us | 154,705 us | 105,616 us | -5.2% | +38.9% |
| bs=100 sw=10 sl=64 | p99 | 146,676 us | 154,705 us | 113,681 us | -5.2% | +29.0% |
| bs=1000 sw=10 sl=64 | throughput | 910 tuples/sec | 904 tuples/sec | 1,057 tuples/sec | +0.7% | -13.9% |
| bs=1000 sw=10 sl=64 | MB/s | 0.555 MB/s | 0.552 MB/s | 0.645 MB/s | +0.5% | -13.9% |
| bs=1000 sw=10 sl=64 | p50 | 1,099,506 us | 1,109,023 us | 965,435 us | -0.9% | +13.9% |
| bs=1000 sw=10 sl=64 | p95 | 1,183,774 us | 1,150,646 us | 1,012,135 us | +2.9% | +17.0% |
| bs=1000 sw=10 sl=64 | p99 | 1,183,774 us | 1,150,646 us | 1,042,088 us | +2.9% | +13.6% |
Raw CSV
config_idx,batch_size,schema_width,string_len,num_batches,total_ms,total_tuples,total_bytes,tuples_per_sec,mb_per_sec,lat_p50_us,lat_p95_us,lat_p99_us
0,10,10,64,20,495.48,200,128000,404,0.246,23706.71,30774.88,30774.88
1,100,10,64,20,2499.84,2000,1280000,800,0.488,124879.76,146675.81,146675.81
2,1000,10,64,20,21984.73,20000,12800000,910,0.555,1099506.46,1183774.42,1183774.42|
Backport PR opened: draft #7716 (#7716) to |
What changes were proposed in this PR?
CI has been red repo-wide since 2026-08-16 ~02:00 UTC —
main, the merge queue, and every PR that runs a Scala stack. The jobs die in 3–7s during Prepare all required actions, before checkout, so they produce no test output at all.The cause is the ASF actions allowlist, not anything in this repository.
sbt/setup-sbtreaches a nestedcarabiner-devaction that is no longer permitted:Nothing in the tree changed — every link in that chain is SHA-pinned, and the
sbt/setup-sbtpin last moved in #6710 on 2026-07-22. The same2a11d59downloaded successfully at2026-08-15T02:01Z(#7674's amber job) and is rejected at2026-08-17T02:13Z. Last clean run before the break: merge-queuepr-7699at2026-08-16T01:52:00Z; first failure:mainat2026-08-16T02:04:42Z.This bumps all 9 call sites from v1.5.2 to v1.5.7, which resolves down a different path:
ampel/verify94f2939(v1.2.1)36a39ef(v1.2.6)install/ampel2a11d59— blocked2fec8bd8install/bnd2a11d59Call sites:
benchmarks.yml(1),build-and-push-images.yml(3),build.yml(4),dependency-graph.yml(1).Any related issues, documentation, discussions?
No issue filed — the regression originates outside the repository and this PR is the unblock. The previous bump of this pin was #6710.
How was this PR tested?
By this PR's CI, which is the only place the failure reproduces — it depends on the
apache/texeraactions policy and cannot be triggered locally or on a fork.The change touches
.github/**, so the labeler appliesci, andcimaps to every stack inLABEL_STACKS(.github/workflows/precheck.yml) —frontend,amber,amber-integration,platform,platform-integration,pyamber,agent-service,infra,pyright-language-service— plusBench. Every job that consumessbt/setup-sbtis therefore exercised here.Was this PR authored or co-authored using generative AI tooling?
Generated-by: Claude Code (Claude Opus 5)