ci: pin manylinux wheel images for release builds (#3689)

chaokunyang · web-flow · commit 5a17ad78a906 · 2026-05-18T12:29:30.000+08:00
## Why? ## What does this PR do? ## Related issues ## AI Contribution Checklist - [ ] Substantial AI assistance was used in this PR: `yes` / `no` - [ ] If `yes`, I included a completed [AI Contribution Checklist](https://github.com/apache/fory/blob/main/AI_POLICY.md#9-contributor-checklist-for-ai-assisted-prs) in this PR description and the required `AI Usage Disclosure`. - [ ] If `yes`, my PR description includes the required `ai_review` summary and screenshot evidence of the final clean AI review results from both fresh reviewers on the current PR diff or current HEAD after the latest code changes. ## Does this PR introduce any user-facing change? - [ ] Does this PR introduce any public API change? - [ ] Does this PR introduce any binary protocol compatibility change? ## Benchmark
diff --git a/.github/workflows/release-dart.yaml b/.github/workflows/release-dart.yaml
@@ -51,17 +51,13 @@ jobs:
           set -euo pipefail
           VERSION="${{ github.ref_name }}"
           VERSION="${VERSION#v}"
-          DART_VERSION="$VERSION"
-          if [[ "$VERSION" =~ ^(.+)-rc([0-9]+)$ ]]; then
-            DART_VERSION="${BASH_REMATCH[1]}-rc.${BASH_REMATCH[2]}"
-          fi
-          python ci/release.py bump_version -l dart -version "$DART_VERSION"
+          python ci/release.py bump_version -l dart -version "$VERSION"
           if [[ "$VERSION" == *-rc* ]]; then
             echo "PUB_PUBLISH_VALIDATION_FLAGS=--skip-validation" >> "$GITHUB_ENV"
           else
             echo "PUB_PUBLISH_VALIDATION_FLAGS=" >> "$GITHUB_ENV"
           fi
-          VERSION="$DART_VERSION" ruby <<'RUBY'
+          VERSION="$VERSION" ruby <<'RUBY'
           require "yaml"
 
           expected = ENV.fetch("VERSION")
diff --git a/ci/build_linux_wheels.py b/ci/build_linux_wheels.py
@@ -42,11 +42,11 @@
 CONTAINER_SCRIPT_PATH = "ci/tasks/python_container_build_script.sh"
 
 DEFAULT_X86_IMAGES = [
-    "quay.io/pypa/manylinux2014_x86_64:latest",
+    "quay.io/pypa/manylinux2014_x86_64@sha256:a6ccaa6194d55e9e8564ba7b70f396934e72e383c241ef711358e2ef96e9e635",
 ]
 
 DEFAULT_AARCH64_IMAGES = [
-    "quay.io/pypa/manylinux2014_aarch64:latest",
+    "quay.io/pypa/manylinux2014_aarch64@sha256:9ec54d4892c8f5cf6ce6888582adecb108a27147a4f0f02696cfbb4baa8ab496",
 ]
 
 ARCH_ALIASES = {

Original file line number	Diff line number	Diff line change
`@@ -42,11 +42,11 @@`
`42`	`42`	`CONTAINER_SCRIPT_PATH = "ci/tasks/python_container_build_script.sh"`
`43`	`43`
`44`	`44`	`DEFAULT_X86_IMAGES = [`
`45`		`- "quay.io/pypa/manylinux2014_x86_64:latest",`
	`45`	`+ "quay.io/pypa/manylinux2014_x86_64@sha256:a6ccaa6194d55e9e8564ba7b70f396934e72e383c241ef711358e2ef96e9e635",`
`46`	`46`	`]`
`47`	`47`
`48`	`48`	`DEFAULT_AARCH64_IMAGES = [`
`49`		`- "quay.io/pypa/manylinux2014_aarch64:latest",`
	`49`	`+ "quay.io/pypa/manylinux2014_aarch64@sha256:9ec54d4892c8f5cf6ce6888582adecb108a27147a4f0f02696cfbb4baa8ab496",`
`50`	`50`	`]`
`51`	`51`
`52`	`52`	`ARCH_ALIASES = {`