[PR #391] chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 #384

New issue

Open

opened 2026-11-03 21:02:01 +00:00 by slurdge · 0 comments

slurdge commented

2026-11-03 21:02:01 +00:00

Owner

📋 Pull Request Information

Original PR: https://github.com/slurdge/goeland/pull/391
Author: @dependabot[bot]
Created: 11/3/2026
Status: 🔄 Open

Base: master ← Head: dependabot/github_actions/docker/login-action-4.7.0

📝 Commits (1)

7fbe828 chore(deps): bump docker/login-action from 4.6.0 to 4.7.0

📊 Changes

1 file changed (+2 additions, -2 deletions)

View changed files

📝 .github/workflows/docker.yml (+2 -2)

📄 Description

Bumps docker/login-action from 4.6.0 to 4.7.0.

Release notes

Sourced from docker/login-action's releases.

v4.7.0

Preserve explicit ECR settings in registry-auth by @crazy-max in docker/login-action#1089

Use registry hosts for scoped credentials by @crazy-max in docker/login-action#1088

Raise Docker Hub OIDC max expiry to 6 hours by @crazy-max in docker/login-action#1068

Log Docker Hub OIDC token exchange progress by @crazy-max in docker/login-action#1061

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1154.0 in docker/login-action#1093

Bump @docker/actions-toolkit from 0.94.0 to 0.107.0 in docker/login-action#1100

Bump @humanfs/node from 0.16.7 to 0.16.8 in docker/login-action#1077

Bump csv-parse from 7.0.1 to 7.0.3 in docker/login-action#1078

Bump handlebars from 4.7.9 to 4.7.10 in docker/login-action#1091

Bump js-yaml from 5.2.2 to 5.5.0 in docker/login-action#1066

Bump postcss from 8.5.22 to 8.5.26 in docker/login-action#1071

Bump postcss-selector-parser from 7.1.1 to 7.1.6 in docker/login-action#1092

Bump source-map-js from 1.2.1 to 1.2.2 in docker/login-action#1090

Bump undici from 6.27.0 to 6.29.1 in docker/login-action#1085

Bump uuid from 14.0.1 to 14.0.3 in docker/login-action#1096

Full Changelog: https://github.com/docker/login-action/compare/v4.6.0...v4.7.0

Commits

81c6f93 Merge pull request #1100 from docker/dependabot/npm_and_yarn/docker/actions-t...
1b16c8d Merge pull request #1096 from docker/dependabot/npm_and_yarn/uuid-14.0.3
ac86b5e [dependabot skip] chore: update generated content
1476d84 build(deps): bump @docker/actions-toolkit from 0.94.0 to 0.107.0
503cee6 Merge pull request #1095 from docker/dependabot/github_actions/actions/create...
f093535 Merge pull request #1099 from docker/dependabot/github_actions/codecov/codeco...
d5ae7f1 Merge pull request #1098 from docker/dependabot/github_actions/docker/bake-ac...
6f97507 Merge pull request #1097 from docker/dependabot/github_actions/docker/bake-ac...
006d61f Merge pull request #1094 from docker/dependabot/github_actions/codeql-actions...
93f5f52 Merge pull request #1093 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/slurdge/goeland/pull/391 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 11/3/2026 **Status:** 🔄 Open **Base:** `master` ← **Head:** `dependabot/github_actions/docker/login-action-4.7.0` --- ### 📝 Commits (1) - [`7fbe828`](https://github.com/slurdge/goeland/commit/7fbe82811f6e5ee8ad34a8e77c72ff959883b083) chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 ### 📊 Changes **1 file changed** (+2 additions, -2 deletions) <details> <summary>View changed files</summary> 📝 `.github/workflows/docker.yml` (+2 -2) </details> ### 📄 Description Bumps [docker/login-action](https://github.com/docker/login-action) from 4.6.0 to 4.7.0. <details> <summary>Release notes</summary> Sourced from <a href="https://github.com/docker/login-action/releases">docker/login-action's releases</a>. <blockquote> <h2>v4.7.0</h2> <ul> <li>Preserve explicit ECR settings in <code>registry-auth</code> by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1089">docker/login-action#1089</a></li> <li>Use registry hosts for scoped credentials by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1088">docker/login-action#1088</a></li> <li>Raise Docker Hub OIDC max expiry to 6 hours by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1068">docker/login-action#1068</a></li> <li>Log Docker Hub OIDC token exchange progress by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://redirect.github.com/docker/login-action/pull/1061">docker/login-action#1061</a></li> <li>Bump <code>@aws-sdk/client-ecr</code> and <code>@aws-sdk/client-ecr-public</code> to 3.1154.0 in <a href="https://redirect.github.com/docker/login-action/pull/1093">docker/login-action#1093</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.94.0 to 0.107.0 in <a href="https://redirect.github.com/docker/login-action/pull/1100">docker/login-action#1100</a></li> <li>Bump <code>@humanfs/node</code> from 0.16.7 to 0.16.8 in <a href="https://redirect.github.com/docker/login-action/pull/1077">docker/login-action#1077</a></li> <li>Bump csv-parse from 7.0.1 to 7.0.3 in <a href="https://redirect.github.com/docker/login-action/pull/1078">docker/login-action#1078</a></li> <li>Bump handlebars from 4.7.9 to 4.7.10 in <a href="https://redirect.github.com/docker/login-action/pull/1091">docker/login-action#1091</a></li> <li>Bump js-yaml from 5.2.2 to 5.5.0 in <a href="https://redirect.github.com/docker/login-action/pull/1066">docker/login-action#1066</a></li> <li>Bump postcss from 8.5.22 to 8.5.26 in <a href="https://redirect.github.com/docker/login-action/pull/1071">docker/login-action#1071</a></li> <li>Bump postcss-selector-parser from 7.1.1 to 7.1.6 in <a href="https://redirect.github.com/docker/login-action/pull/1092">docker/login-action#1092</a></li> <li>Bump source-map-js from 1.2.1 to 1.2.2 in <a href="https://redirect.github.com/docker/login-action/pull/1090">docker/login-action#1090</a></li> <li>Bump undici from 6.27.0 to 6.29.1 in <a href="https://redirect.github.com/docker/login-action/pull/1085">docker/login-action#1085</a></li> <li>Bump uuid from 14.0.1 to 14.0.3 in <a href="https://redirect.github.com/docker/login-action/pull/1096">docker/login-action#1096</a></li> </ul> Full Changelog: <a href="https://github.com/docker/login-action/compare/v4.6.0...v4.7.0">https://github.com/docker/login-action/compare/v4.6.0...v4.7.0</a> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/login-action/commit/81c6f93d4bc991e510b342a00b419b3bb4efc5c6"><code>81c6f93</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1100">#1100</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/login-action/commit/1b16c8d1815e1d951d87a3522ff48a76d073735a"><code>1b16c8d</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1096">#1096</a> from docker/dependabot/npm_and_yarn/uuid-14.0.3</li> <li><a href="https://github.com/docker/login-action/commit/ac86b5e9e9d2db43b12b2d3afb9140a427d69d65"><code>ac86b5e</code></a> [dependabot skip] chore: update generated content</li> <li><a href="https://github.com/docker/login-action/commit/1476d845f08dd8309a938959a280f2e23c0cba14"><code>1476d84</code></a> build(deps): bump <code>@docker/actions-toolkit</code> from 0.94.0 to 0.107.0</li> <li><a href="https://github.com/docker/login-action/commit/503cee68d85e94275776fcc6f5315f19207f7567"><code>503cee6</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1095">#1095</a> from docker/dependabot/github_actions/actions/create...</li> <li><a href="https://github.com/docker/login-action/commit/f0935357f5c539aeb7ff6b886ba5434ab76e9de3"><code>f093535</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1099">#1099</a> from docker/dependabot/github_actions/codecov/codeco...</li> <li><a href="https://github.com/docker/login-action/commit/d5ae7f188776587b12b77b45e29ea21332462da9"><code>d5ae7f1</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1098">#1098</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li><a href="https://github.com/docker/login-action/commit/6f9750797f6e7186f18c069a7e97abc1dcf1006b"><code>6f97507</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1097">#1097</a> from docker/dependabot/github_actions/docker/bake-ac...</li> <li><a href="https://github.com/docker/login-action/commit/006d61fa598847d65f6670d1569545fa2af9cf02"><code>006d61f</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1094">#1094</a> from docker/dependabot/github_actions/codeql-actions...</li> <li><a href="https://github.com/docker/login-action/commit/93f5f522eea5eacabf35cc89b9d19ec23e742471"><code>93f5f52</code></a> Merge pull request <a href="https://redirect.github.com/docker/login-action/issues/1093">#1093</a> from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li> <li>Additional commits viewable in <a href="https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6">compare view</a></li> </ul> </details> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.6.0&new-version=4.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --- 🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.