(sling-org-apache-sling-starter) branch master updated: Fix unapproved docker/setup-buildx-action SHA in GH workflows (#665)

[rombert]

This is an automated email from the ASF dual-hosted git repository.

rombert pushed a commit to branch master
in repository 
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-starter.git


The following commit(s) were added to refs/heads/master by this push:
     new 1bb173e  Fix unapproved docker/setup-buildx-action SHA in GH workflows 
(#665)
1bb173e is described below

commit 1bb173ef59ba354afcfd023f04f988bc133089af
Author: Robert Munteanu <romb...@apache.org>
AuthorDate: Tue Aug 18 15:54:18 2026 +0200

    Fix unapproved docker/setup-buildx-action SHA in GH workflows (#665)
    
    The pinned SHA for docker/setup-buildx-action was dropped from the
    ASF INFRA GitHub Actions allowlist, causing docker-push.yml and
    docker-release.yml to fail with startup_failure. Repin to the
    currently approved v4.2.0 SHA.
    
    Co-authored-by: Claude Sonnet 5 <nore...@anthropic.com>
---
 .github/workflows/docker-push.yml    | 2 +-
 .github/workflows/docker-release.yml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/docker-push.yml 
b/.github/workflows/docker-push.yml
index 85f4e53..58c445a 100644
--- a/.github/workflows/docker-push.yml
+++ b/.github/workflows/docker-push.yml
@@ -43,6 +43,6 @@ jobs:
       - name: Set up QEMU # https://github.com/docker/buildx/issues/499
         uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
       - name: Set up Docker Buildx
-        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
+        uses: 
docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Push Docker image
         run: mvn --batch-mode clean install 
-Ddocker.platforms=linux/amd64,linux/arm64 -Dmaven.test.skip=true 
-Ddocker.skip=false -Ddocker.skip.push=false
diff --git a/.github/workflows/docker-release.yml 
b/.github/workflows/docker-release.yml
index 342051b..1cf6a8d 100644
--- a/.github/workflows/docker-release.yml
+++ b/.github/workflows/docker-release.yml
@@ -43,7 +43,7 @@ jobs:
       - name: Set up QEMU # https://github.com/docker/buildx/issues/499
         uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a
       - name: Set up Docker Buildx
-        uses: 
docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd
+        uses: 
docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
       - name: Push Docker image
         run: |
           version=$(mvn help:evaluate -Dexpression=project.version -q 
-DforceStdout)