You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@iggy.apache.org by gk...@apache.org on 2026/07/07 11:49:56 UTC
(iggy) branch master updated: ci: bump docker/build-push-action to allowlisted v7.3.0 (#3624)
This is an automated email from the ASF dual-hosted git repository.
numinnex pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/iggy.git
The following commit(s) were added to refs/heads/master by this push:
new 37d880006 ci: bump docker/build-push-action to allowlisted v7.3.0 (#3624)
37d880006 is described below
commit 37d880006d8e96121b590855b1d7267a27e9aeaa
Author: Hubert Gruszecki <h....@gmail.com>
AuthorDate: Tue Jul 7 13:49:52 2026 +0200
ci: bump docker/build-push-action to allowlisted v7.3.0 (#3624)
The ASF org allowlist (approved_patterns.yml in
apache/infrastructure-actions) gates every third-party action by
pinned SHA. Its periodic "Remove Expired Refs" job de-listed the
v7.0.0 SHA we pinned, so all post-merge Docker publish jobs failed
with "action is not allowed in apache/iggy".
Bump to v7.3.0 (53b7df9), the newest SHA currently on the
allowlist, to restore image publishing.
---
.github/actions/utils/docker-buildx/action.yml | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/.github/actions/utils/docker-buildx/action.yml b/.github/actions/utils/docker-buildx/action.yml
index 803c8832e..dc318b686 100644
--- a/.github/actions/utils/docker-buildx/action.yml
+++ b/.github/actions/utils/docker-buildx/action.yml
@@ -338,7 +338,7 @@ runs:
- name: Build and push (by digest)
id: build-push
if: steps.config.outputs.should_push == 'true'
- uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+ uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with:
context: ${{ steps.ctx.outputs.context }}
file: ${{ steps.config.outputs.dockerfile }}
@@ -353,7 +353,7 @@ runs:
- name: Build only (dry-run)
id: build-only
if: steps.config.outputs.should_push != 'true'
- uses: docker/build-push-action@d08e5c354a6adb9ed34480a06d141179aa583294 # v7.0.0
+ uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
with:
context: ${{ steps.ctx.outputs.context }}
file: ${{ steps.config.outputs.dockerfile }}