From d1b8f34aa69c7300c09d48a2e99856a5de638048 Mon Sep 17 00:00:00 2001 From: kayx23 Date: Fri, 21 Aug 2026 17:45:39 +0800 Subject: [PATCH] fix(ci): pin allowlisted qemu and buildx actions The Docker image workflow now fails at startup because docker/setup-qemu-action@ce360397 and docker/setup-buildx-action@4d04d5d9 were dropped from the ASF approved actions list. Pin the newest remaining allowlisted SHAs so release/apisix-3.18.0 can publish Hub tags. Signed-off-by: kayx23 --- .github/workflows/apisix_push_docker_hub.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/apisix_push_docker_hub.yaml b/.github/workflows/apisix_push_docker_hub.yaml index db2b717a..bcd8b9c0 100644 --- a/.github/workflows/apisix_push_docker_hub.yaml +++ b/.github/workflows/apisix_push_docker_hub.yaml @@ -59,10 +59,10 @@ jobs: fi - name: Set up QEMU - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a + uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd + uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c - name: Login to Docker Hub if: ${{ startsWith(github.ref_name, 'release/apisix') }}