)]}'
{
  "commit": "ea2fb09b0736cbbcc28b66ca57ca6513f6c9284f",
  "tree": "fe89cfbabf3ae73f9dbdcbfd474e53afdbdbd06d",
  "parents": [
    "19095163842d199571c3e85e25b6e291915a9bd2"
  ],
  "author": {
    "name": "吴晟 Wu Sheng",
    "email": "wu.sheng@foxmail.com",
    "time": "Sun Sep 27 21:50:46 2026 +0800"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Sun Sep 27 21:50:46 2026 +0800"
  },
  "message": "Re-pin docker actions to currently ASF-approved commit SHAs (#836)\n\npublish-docker fails at startup: the ASF allow-list rotated and no longer\ncontains the SHAs pinned for docker/login-action (v4.2.0),\ndocker/setup-qemu-action (v4.1.0) and docker/setup-buildx-action (v4.1.0).\nRe-pin each to the latest non-expiring entry in\napache/infrastructure-actions\u0027 approved_patterns.yml:\n\n- docker/login-action        dbcb813823bdd20940b903addbd779551569679f (v4.6.0)\n- docker/setup-qemu-action   99012661954931238ded8c8b007157a8430204e1 (v4.4.0)\n- docker/setup-buildx-action f87e5991a6d7451dcb8d9637bfbc97413f497069 (v4.4.1)",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "17da4c62bc9450e5e8c749b4e5be052fcaac6cab",
      "old_mode": 33188,
      "old_path": ".github/workflows/publish-docker.yaml",
      "new_id": "58e63e13286b49c9db97bf2c29abb27de2efa48e",
      "new_mode": 33188,
      "new_path": ".github/workflows/publish-docker.yaml"
    }
  ]
}