This is an automated email from the ASF dual-hosted git repository. rombert pushed a commit to branch fix/docker-setup-buildx-action-allowlist in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-starter.git
commit 742af8ed6f55d8505d770abe98b12882a6686788 Author: Robert Munteanu <[email protected]> AuthorDate: Tue Aug 18 14:49:30 2026 +0200 Fix unapproved docker/setup-buildx-action SHA in GH workflows The pinned SHA for docker/setup-buildx-action was dropped from the ASF INFRA GitHub Actions allowlist, causing docker-push.yml and docker-release.yml to fail with startup_failure. Repin to the currently approved v4.2.0 SHA. Co-Authored-By: Claude Sonnet 5 <[email protected]> --- .github/workflows/docker-push.yml | 2 +- .github/workflows/docker-release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-push.yml b/.github/workflows/docker-push.yml index 85f4e53..58c445a 100644 --- a/.github/workflows/docker-push.yml +++ b/.github/workflows/docker-push.yml @@ -43,6 +43,6 @@ jobs: - name: Set up QEMU # https://github.com/docker/buildx/issues/499 uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Push Docker image run: mvn --batch-mode clean install -Ddocker.platforms=linux/amd64,linux/arm64 -Dmaven.test.skip=true -Ddocker.skip=false -Ddocker.skip.push=false diff --git a/.github/workflows/docker-release.yml b/.github/workflows/docker-release.yml index 342051b..1cf6a8d 100644 --- a/.github/workflows/docker-release.yml +++ b/.github/workflows/docker-release.yml @@ -43,7 +43,7 @@ jobs: - name: Set up QEMU # https://github.com/docker/buildx/issues/499 uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0 - name: Push Docker image run: | version=$(mvn help:evaluate -Dexpression=project.version -q -DforceStdout)
