This is an automated email from the ASF dual-hosted git repository.
janhoy pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/solr-operator.git
The following commit(s) were added to refs/heads/main by this push:
new bbb5a3d Use the ASF-approved azure/setup-helm SHA (#857)
bbb5a3d is described below
commit bbb5a3d4b9c231eebefa2c446cb2ccee63c62bca
Author: Jan Høydahl <[email protected]>
AuthorDate: Sat Oct 24 03:02:55 2026 +0200
Use the ASF-approved azure/setup-helm SHA (#857)
---
.github/workflows/publish-helm-oci.yaml | 6 +++++-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/.github/workflows/publish-helm-oci.yaml
b/.github/workflows/publish-helm-oci.yaml
index bbdf72f..de095d2 100644
--- a/.github/workflows/publish-helm-oci.yaml
+++ b/.github/workflows/publish-helm-oci.yaml
@@ -72,8 +72,12 @@ jobs:
steps:
# Both the action and the Helm version it installs are pinned: this
workflow publishes
# release artifacts, so it must not change behaviour because an upstream
tag moved.
+ #
+ # The action SHA must be one the ASF allowlist approves, or the run
fails at startup
+ # before any step executes. The approved SHAs live in
apache/infrastructure-actions,
+ # in actions.yml, so do not bump this to a newer release without
checking there first.
- name: Install Helm
- uses: azure/setup-helm@1a275c3b69536ee54be43f2070a358922e12c8d4 #
v4.3.1
+ uses: azure/setup-helm@9bc31f4ebc9c6b171d7bfbaa5d006ae7abdb4310 #
v5.0.1
with:
version: 'v4.3.1'
