davidzollo opened a new pull request, #12356: URL: https://github.com/apache/seatunnel/pull/12356
## What does this PR do? Pins the three Docker Actions used by `publish-docker.yaml` to immutable full commit SHAs already used successfully by Apache Flink. ## Why is the change needed? The release Docker workflow fails before a job starts because ASF Actions policy rejects the mutable `@v3` references for `docker/login-action`, `docker/setup-qemu-action`, and `docker/setup-buildx-action`. The replacement SHAs target Docker official Action releases v4.6.0, v4.3.0, and v4.3.0 respectively. ## Verification - Local formatting, build, and test commands were intentionally not run at the requesters direction. - GitHub CI is pending. `publish-docker` only runs on tag pushes, so its login/build/push path cannot execute on this pull request event. - Independent maintainer review: passed with no non-CI blocking findings. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
