chore(deps): bump docker/login-action from 4 to 4.5.2 - #57
chore(deps): bump docker/login-action from 4 to 4.5.2#57dependabot[bot] wants to merge 1 commit into
Conversation
Bumps [docker/login-action](https://github.com/docker/login-action) from 4 to 4.5.2. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v4...v4.5.2) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
There was a problem hiding this comment.
Pull request overview
Note
Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.
Pins the GitHub Action used for Docker Hub authentication to a specific docker/login-action patch version across the docker-ops workflow.
Changes:
- Updated all
docker/login-actionreferences from@v4to@v4.5.2in the workflow.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| - name: Log in to Docker Hub | ||
| if: env.DOCKER_HAS_CREDENTIALS == 'true' | ||
| uses: docker/login-action@v4 | ||
| uses: docker/login-action@v4.5.2 |
|
|
||
| - name: Log in | ||
| uses: docker/login-action@v4 | ||
| uses: docker/login-action@v4.5.2 |
|
|
||
| - name: Log in | ||
| uses: docker/login-action@v4 | ||
| uses: docker/login-action@v4.5.2 |
|
|
||
| - name: Log in | ||
| uses: docker/login-action@v4 | ||
| uses: docker/login-action@v4.5.2 |
| - name: Log in to Docker Hub | ||
| if: env.DOCKER_HAS_CREDENTIALS == 'true' | ||
| uses: docker/login-action@v4 | ||
| uses: docker/login-action@v4.5.2 |
| - name: Log in to Docker Hub | ||
| if: env.DOCKER_HAS_CREDENTIALS == 'true' | ||
| uses: docker/login-action@v4 | ||
| uses: docker/login-action@v4.5.2 |
|
Safe to merge: Minor bump docker/login-action 4 -> 4.5.2; no risk terms found in Dependabot release notes Changed files: .github/workflows/docker-ops.yml. Classification: safe. |
udx-github
left a comment
udx-github
left a comment
There was a problem hiding this comment.
Approved by Dependabot Actions review automation.
udx-github
left a comment
udx-github
left a comment
There was a problem hiding this comment.
Approved by Dependabot Actions review automation.
udx-github
left a comment
udx-github
left a comment
There was a problem hiding this comment.
Approved by Dependabot Actions review automation.
udx-github
left a comment
udx-github
left a comment
There was a problem hiding this comment.
Approved by Dependabot Actions review automation.
Bumps docker/login-action from 4 to 4.5.2.
Release notes
Sourced from docker/login-action's releases.
... (truncated)
Commits
a5e9150Merge pull request #1048 from docker/dockerhub-oidc-supporta482ba4build(deps): bump the codeql-actions group with 2 updates9e3d36echore: update generated content14d6a79docker hub oidc support03c8510Merge pull request #1044 from docker/dependabot/npm_and_yarn/docker/actions-t...ad8a81fMerge pull request #1046 from docker/dependabot/npm_and_yarn/brace-expansion-...6d219a4[dependabot skip] chore: update generated contentb320069build(deps): bump@docker/actions-toolkitfrom 0.92.0 to 0.93.008d3680[dependabot skip] chore: update generated content381f5a4Merge pull request #1042 from docker/dependabot/github_actions/codeql-actions...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)