chore(deps): update docker/login-action action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	major	v3 → v4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

docker/login-action (docker/login-action)

v4.6.0

Compare Source

v4.5.2

Compare Source

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.0

Compare Source

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in #​960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in #​970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #​993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #​963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #​961
• Bump postcss from 8.5.6 to 8.5.10 in #​979
• Bump tar from 6.2.1 to 7.5.15 in #​991
• Bump vite from 7.3.1 to 7.3.3 in #​986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

• Fix scoped Docker Hub cleanup path when registry is omitted by @​crazy-max in #​945
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1020.0 in #​930
• Bump @​docker/actions-toolkit from 0.77.0 to 0.86.0 in #​932 #​936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #​942
• Bump flatted from 3.3.3 to 3.4.2 in #​944
• Bump glob from 10.3.12 to 10.5.0 in #​940
• Bump handlebars from 4.7.8 to 4.7.9 in #​949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #​937
• Bump lodash from 4.17.23 to 4.18.1 in #​958
• Bump minimatch from 3.1.2 to 3.1.5 in #​941
• Bump picomatch from 4.0.3 to 4.0.4 in #​948
• Bump undici from 6.23.0 to 6.24.1 in #​938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​929
• Switch to ESM and update config/test wiring by @​crazy-max in #​927
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​919
• Bump @​aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #​909 #​920
• Bump @​aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #​909 #​920
• Bump @​docker/actions-toolkit from 0.63.0 to 0.77.0 in #​910 #​928
• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in #​921
• Bump js-yaml from 4.1.0 to 4.1.1 in #​901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• v4.1.0: Fixed scoped Docker Hub cleanup path when registry is omitted
• Multiple dependency updates and AWS SDK bumps

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime

Code Changes Required

None - the action interface is backward compatible. Used in release.yml for logging into GHCR.

Security Impact

No security fixes mentioned. This is primarily a maintenance update.

Recommendation

Safe to merge — The action interface is backward compatible. GitHub-hosted runners support Node 24. Used for Docker registry authentication in the release workflow.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM and update config/test wiring
• Preserve names in esbuild bundle
• Dependency updates: @aws-sdk/client-ecr, @aws-sdk/client-ecr-public, @docker/actions-toolkit, @sigstore/core, etc.

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 support
• ESM module conversion (internal change, should be transparent to users)
• AWS SDK updates to 3.1000.0+ (verify AWS ECR usage if applicable)

Code Changes Required

• Verify Actions Runner version meets v2.327.1+ requirement
• No code changes expected for current usage (GHCR login)
• AWS SDK updates if using ECR (not currently in use - using GHCR)

Security Impact

• No direct security impact
• Dependency updates include security patches for underlying packages
• AWS SDK updates include security improvements for ECR authentication
• Sigstore library updates for improved verification

Recommendation

Safe to merge — Routine major version update for Docker build infrastructure. AWS SDK changes don't affect current GHCR usage. Node 24 runtime requirement aligns with other Docker action updates.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM and update config/test wiring
• Bumped @actions/core, @aws-sdk/client-ecr, @aws-sdk/client-ecr-public, @docker/actions-toolkit, js-yaml, http-proxy-agent, https-proxy-agent
• Fixed scoped Docker Hub cleanup path when registry is omitted
• Preserve names in esbuild bundle

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 runtime support

Code Changes Required

• Verify Actions Runner version is v2.327.1 or later
• No workflow changes needed - action inputs remain backward compatible

Security Impact

• No direct security impact
• Dependency updates include security patches for AWS SDK and other npm packages
• Bug fix for scoped Docker Hub cleanup path improves correctness

Recommendation

Safe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Action inputs remain compatible. Bug fixes improve reliability.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• v4.6.0-v4.2.0: Dependency updates, AWS SDK updates, sigstore updates, bundle name preservation
• v4.1.0: Fix scoped Docker Hub cleanup path when registry is omitted
• v4.0.0: Node 24 as default runtime (requires Actions Runner v2.327.1+), switched to ESM, updated config/test wiring, dependency updates

Breaking Changes

• Requires Actions Runner v2.327.1 or later (Node 24)
• Switched to ESM (no impact on usage)

Code Changes Required

• None. Workflow uses only uses: docker/login-action@v3 with standard registry/username/password inputs, which will change to @v4 automatically

Security Impact

• No security fixes mentioned. This is primarily a platform upgrade to Node 24 with dependency updates

Recommendation

Safe to merge — This Docker login action update requires Actions Runner v2.327.1+, which GitHub-hosted runners support. Our workflow uses standard registry credentials with no deprecated features.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• v4.3.0: Preserve names in esbuild bundle, bump AWS SDK and sigstore dependencies
• v4.2.0: Bump actions/core to 3.0.1, AWS SDK to 3.1050.0
• v4.1.0: Fix scoped Docker Hub cleanup path, dependency updates
• v4.0.0: Node 24 as default runtime, switch to ESM, bump AWS SDK to 3.1000.0

Breaking Changes

• Node 24 as default runtime requires Actions Runner v2.327.1 or later
• Switch to ESM module system

Code Changes Required

None - update action version in .github/workflows/release.yml line 31

Security Impact

No security fixes. This action handles Docker registry login credentials (via secrets.GITHUB_TOKEN), but the update doesn't change the security model.

Recommendation

Safe to merge — Docker login action update with no code changes required, GitHub-hosted runners meet Node 24 requirement.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM and update config/test wiring
• v4.1.0: Fixed scoped Docker Hub cleanup path when registry is omitted
• v4.3.0: Preserve names in esbuild bundle, bump AWS SDK and sigstore dependencies

Breaking Changes

• Requires Actions Runner v2.327.1 or later for Node 24 support
• Switch to ESM module system

Code Changes Required

• Verify Actions Runner version is v2.327.1 or later
• No workflow changes needed - action inputs remain backward compatible

Security Impact

• No direct security impact
• Dependency updates include security patches for AWS SDK and other npm packages
• Bug fix for scoped Docker Hub cleanup path improves correctness

Recommendation

Safe to merge — GitHub-hosted runners use latest versions by default. Self-hosted runners must be on v2.327.1 or later. Used for logging into GHCR in the release workflow.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switch to ESM module format
• Fix for scoped Docker Hub cleanup path when registry is omitted
• Dependency updates: @actions/core, @docker/actions-toolkit, @aws-sdk packages

Breaking Changes

None affecting our usage. The action is used for logging into GHCR with registry, username, and password inputs which are unchanged.

Code Changes Required

None. The workflow at .github/workflows/release.yml:31 uses the action with standard inputs (registry, username, password) which are unchanged.

Security Impact

• No security fixes mentioned in release notes
• This is an infrastructure dependency (GitHub Actions) only used in CI/CD
• Does not affect application runtime or user-facing security

Recommendation

Safe to merge — This is a straightforward GitHub Actions version update with no breaking changes for our workflow usage. GitHub-hosted runners already meet the Actions Runner v2.327.1+ requirement.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switched to ESM and updated config/test wiring
• Multiple dependency updates (@actions/core, @aws-sdk/client-ecr, @docker/actions-toolkit, js-yaml)
• Scoped Docker Hub cleanup path fix (v4.1.0)
• Preserve names in esbuild bundle (v4.3.0)

Breaking Changes

• Node 24 runtime requirement: Requires Actions Runner v2.327.1 or later
• ESM switch: Internal refactoring, should not affect action usage

Code Changes Required

None. The action is used in .github/workflows/release.yml:31 with standard configuration:

- name: Log in to GHCR
  uses: docker/login-action@v3
  with:
    registry: ${{ env.REGISTRY }}
    username: ${{ github.actor }}
    password: ${{ secrets.GITHUB_TOKEN }}

Update to @v4 will handle automatically. No deprecated inputs are in use.

Security Impact

Positive. AWS SDK updates (3.890.0 → 3.1000.0) may include security fixes for ECR authentication. No direct security vulnerabilities addressed.

Recommendation

Safe to merge — This is a GitHub Actions major version update with Node 24 requirement. GitHub-hosted runners support Node 24. The update includes AWS SDK improvements for ECR authentication. No manual changes needed beyond merging.

[github-actions]

Renovate PR Analysis

Update Summary

• Dependency: docker/login-action
• Version: v3 → v4
• Type: major

Release Changes

Major version v4.0.0 and subsequent releases (v4.1.0, v4.2.0, v4.3.0, v4.4.0, v4.5.0, v4.5.1, v4.5.2, v4.6.0):

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later)
• Switched to ESM module system
• Various dependency updates (@docker/actions-toolkit, AWS SDK, sigstore, etc.)
• Fix for scoped Docker Hub cleanup path when registry is omitted (v4.1.0)

Breaking Changes

Yes, major version with breaking changes:

• Requires Actions Runner v2.327.1 or later (Node 24 runtime)

Code Changes Required

Check your GitHub Actions workflows for:

1. Actions Runner version compatibility (ensure runners are v2.327.1+)

Current usage: .github/workflows/*.yml files using docker/login-action@v3

Security Impact

No direct security impact. This is a CI/CD infrastructure update that may require runner compatibility checks. The v4.1.0 fix for scoped Docker Hub cleanup path is a bug fix.

Recommendation

Needs manual review — Major version bump with potential breaking changes (Node 24 runtime requirement). Verify that:

1. Your GitHub Actions Runner version is v2.327.1 or later
2. Test the workflow after merging to ensure Docker registry login still works correctly