From 39e22e073b8b2e4eab2e570bd705b4f0fa3f8645 Mon Sep 17 00:00:00 2001
From: Sal <59910950+ss-o@users.noreply.github.com>
Date: Sat, 26 Sep 2026 08:03:02 +0100
Subject: [PATCH] fix(ci): pin setup-buildx-action to its real v4.0.0 commit

test-matrix.yml pinned docker/setup-buildx-action to
4d04d5d2235566ea9c44d6d2594696e5d0117bbb, which does not exist upstream
(GitHub returns 422). The v4.0.0 tag resolves to
4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd; the two share only the
7-character prefix. pinact flags the bad pin, which keeps the weekly
Trunk run on main red.

Refs #28
---
 .github/workflows/test-matrix.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/test-matrix.yml b/.github/workflows/test-matrix.yml
index 2e60a21..992ea6a 100644
--- a/.github/workflows/test-matrix.yml
+++ b/.github/workflows/test-matrix.yml
@@ -22,7 +22,7 @@ jobs:
         zsh_version: ["5.5.1", "5.6.2", "5.7.1", "5.8", "5.8.1", "5.9"]
     steps:
       - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
-      - uses: docker/setup-buildx-action@4d04d5d2235566ea9c44d6d2594696e5d0117bbb # v4.0.0
+      - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0
       - name: Build test image
         run: |
           cat > Dockerfile.ci <<'EOF'