Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
Bump brace-expansion from 1.1.12 to 1.1.13 in #952
Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
Bump flatted from 3.3.3 to 3.4.2 in #944
Bump glob from 10.3.12 to 10.5.0 in #940
Bump handlebars from 4.7.8 to 4.7.9 in #949
Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
Bump lodash from 4.17.23 to 4.18.1 in #958
Bump minimatch from 3.1.2 to 3.1.5 in #941
Bump picomatch from 4.0.3 to 4.0.4 in #948
Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: https://github.com/docker/login-action/compare/v4.0.0...v4.1.0

Compare Source

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
Switch to ESM and update config/test wiring by @crazy-max in #927
Bump @actions/core from 1.11.1 to 3.0.0 in #919
Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: https://github.com/docker/login-action/compare/v3.7.0...v4.0.0

Compare Source

Add scope input to set scopes for the authentication token by @crazy-max in #912
Add support for AWS European Sovereign Cloud ECR by @dphi in #914
Ensure passwords are redacted with registry-auth input by @crazy-max in #911
build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: https://github.com/docker/login-action/compare/v3.6.0...v3.7.0

Compare Source

Add registry-auth input for raw authentication to registries by @crazy-max in #887
Bump @aws-sdk/client-ecr to 3.890.0 in #882 #890
Bump @aws-sdk/client-ecr-public to 3.890.0 in #882 #890
Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in #883
Bump brace-expansion from 1.1.11 to 1.1.12 in #880
Bump undici from 5.28.4 to 5.29.0 in #879
Bump tmp from 0.2.3 to 0.2.4 in #881

Full Changelog: https://github.com/docker/login-action/compare/v3.5.0...v3.6.0

Compare Source

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in #874 #876
Bump @aws-sdk/client-ecr to 3.859.0 in #860 #878
Bump @aws-sdk/client-ecr-public to 3.859.0 in #860 #878
Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in #870
Bump form-data from 2.5.1 to 2.5.5 in #875

Full Changelog: https://github.com/docker/login-action/compare/v3.4.0...v3.5.0

Compare Source

Bump @actions/core from 1.10.1 to 1.11.1 in #791
Bump @aws-sdk/client-ecr to 3.766.0 in #789 #856
Bump @aws-sdk/client-ecr-public to 3.758.0 in #789 #856
Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in #801 #806 #858
Bump cross-spawn from 7.0.3 to 7.0.6 in #814
Bump https-proxy-agent from 7.0.5 to 7.0.6 in #823
Bump path-to-regexp from 6.2.2 to 6.3.0 in #777

Full Changelog: https://github.com/docker/login-action/compare/v3.3.0...v3.4.0

Compare Source

Bump @docker/actions-toolkit from 0.24.0 to 0.35.0 in #754
Bump https-proxy-agent from 7.0.4 to 7.0.5 in #741
Bump braces from 3.0.2 to 3.0.3 in #730

Full Changelog: https://github.com/docker/login-action/compare/v3.2.0...v3.3.0

Compare Source

Improve missing username/password by @Frankkkkk in #706
Bump @docker/actions-toolkit from 0.18.0 to 0.24.0 in #715 #721
Bump aws-sdk-dependencies to 3.583.0 in #720
Bump undici from 5.28.3 to 5.28.4 in #694

Full Changelog: https://github.com/docker/login-action/compare/v3.1.0...v3.2.0

Compare Source

Bump @babel/traverse from 7.17.3 to 7.23.2 in #618
Bump @docker/actions-toolkit from 0.12.0 to 0.18.0 in #616 #636 #682
Bump aws-sdk dependencies to 3.529.1 in #624 #685
Bump http-proxy-agent to 7.0.2 in #676
Bump https-proxy-agent to 7.0.4 in #676
Bump undici from 5.26.5 to 5.28.3 in #677

Full Changelog: https://github.com/docker/login-action/compare/v3.0.0...v3.1.0

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/webgrip/infrastructure/pull/29 **Author:** [@webgrip-renovate[bot]](https://github.com/apps/webgrip-renovate) **Created:** 6/2/2026 **Status:** ❌ Closed **Base:** `main` ← **Head:** `renovate/docker-login-action-4.x` --- ### 📝 Commits (1) - [`b6a33e7`](https://github.com/webgrip/infrastructure/commit/b6a33e753dab2423ae198cd1ce8af18b7078caec) chore(deps): update docker/login-action action to v4 ### 📊 Changes **1 file changed** (+1 additions, -1 deletions) <details> <summary>View changed files</summary> 📝 `.github/actions/cosign-sign-attest/action.yml` (+1 -1) </details> ### 📄 Description This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/login-action](https://redirect.github.com/docker/login-action) | action | major | `v3` → `v4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the warning logs for more information. --- ### Release Notes <details> <summary>docker/login-action (docker/login-action)</summary> ### [`v4.2.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.2.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4.1.0...v4.2.0) - Bump [@actions/core](https://redirect.github.com/actions/core) from 3.0.0 to 3.0.1 in [#976](https://redirect.github.com/docker/login-action/pull/976) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.1050.0 in [#960](https://redirect.github.com/docker/login-action/pull/960) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.86.0 to 0.90.0 in [#970](https://redirect.github.com/docker/login-action/pull/970) - Bump brace-expansion from 2.0.1 to 5.0.6 in [#993](https://redirect.github.com/docker/login-action/pull/993) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#985](https://redirect.github.com/docker/login-action/pull/985) - Bump fast-xml-parser from 5.3.6 to 5.8.0 in [#963](https://redirect.github.com/docker/login-action/pull/963) - Bump http-proxy-agent and https-proxy-agent to 9.0.0 in [#961](https://redirect.github.com/docker/login-action/pull/961) - Bump postcss from 8.5.6 to 8.5.10 in [#979](https://redirect.github.com/docker/login-action/pull/979) - Bump tar from 6.2.1 to 7.5.15 in [#991](https://redirect.github.com/docker/login-action/pull/991) - Bump vite from 7.3.1 to 7.3.3 in [#986](https://redirect.github.com/docker/login-action/pull/986) **Full Changelog**: <https://github.com/docker/login-action/compare/v4.1.0...v4.2.0> ### [`v4.1.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.1.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4...v4.1.0) - Fix scoped Docker Hub cleanup path when registry is omitted by [@crazy-max](https://redirect.github.com/crazy-max) in [#945](https://redirect.github.com/docker/login-action/pull/945) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.1020.0 in [#930](https://redirect.github.com/docker/login-action/pull/930) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.77.0 to 0.86.0 in [#932](https://redirect.github.com/docker/login-action/pull/932) [#936](https://redirect.github.com/docker/login-action/pull/936) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#952](https://redirect.github.com/docker/login-action/pull/952) - Bump fast-xml-parser from 5.3.4 to 5.3.6 in [#942](https://redirect.github.com/docker/login-action/pull/942) - Bump flatted from 3.3.3 to 3.4.2 in [#944](https://redirect.github.com/docker/login-action/pull/944) - Bump glob from 10.3.12 to 10.5.0 in [#940](https://redirect.github.com/docker/login-action/pull/940) - Bump handlebars from 4.7.8 to 4.7.9 in [#949](https://redirect.github.com/docker/login-action/pull/949) - Bump http-proxy-agent and https-proxy-agent to 8.0.0 in [#937](https://redirect.github.com/docker/login-action/pull/937) - Bump lodash from 4.17.23 to 4.18.1 in [#958](https://redirect.github.com/docker/login-action/pull/958) - Bump minimatch from 3.1.2 to 3.1.5 in [#941](https://redirect.github.com/docker/login-action/pull/941) - Bump picomatch from 4.0.3 to 4.0.4 in [#948](https://redirect.github.com/docker/login-action/pull/948) - Bump undici from 6.23.0 to 6.24.1 in [#938](https://redirect.github.com/docker/login-action/pull/938) **Full Changelog**: <https://github.com/docker/login-action/compare/v4.0.0...v4.1.0> ### [`v4.0.0`](https://redirect.github.com/docker/login-action/releases/tag/v4.0.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v4...v4) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://redirect.github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://redirect.github.com/crazy-max) in [#929](https://redirect.github.com/docker/login-action/pull/929) - Switch to ESM and update config/test wiring by [@crazy-max](https://redirect.github.com/crazy-max) in [#927](https://redirect.github.com/docker/login-action/pull/927) - Bump [@actions/core](https://redirect.github.com/actions/core) from 1.11.1 to 3.0.0 in [#919](https://redirect.github.com/docker/login-action/pull/919) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) from 3.890.0 to 3.1000.0 in [#909](https://redirect.github.com/docker/login-action/pull/909) [#920](https://redirect.github.com/docker/login-action/pull/920) - Bump [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) from 3.890.0 to 3.1000.0 in [#909](https://redirect.github.com/docker/login-action/pull/909) [#920](https://redirect.github.com/docker/login-action/pull/920) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.63.0 to 0.77.0 in [#910](https://redirect.github.com/docker/login-action/pull/910) [#928](https://redirect.github.com/docker/login-action/pull/928) - Bump [@isaacs/brace-expansion](https://redirect.github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#921](https://redirect.github.com/docker/login-action/pull/921) - Bump js-yaml from 4.1.0 to 4.1.1 in [#901](https://redirect.github.com/docker/login-action/pull/901) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.7.0...v4.0.0> ### [`v4`](https://redirect.github.com/docker/login-action/compare/v3.7.0...v4) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.7.0...v4) ### [`v3.7.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.7.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.6.0...v3.7.0) - Add `scope` input to set scopes for the authentication token by [@crazy-max](https://redirect.github.com/crazy-max) in [#912](https://redirect.github.com/docker/login-action/pull/912) - Add support for AWS European Sovereign Cloud ECR by [@dphi](https://redirect.github.com/dphi) in [#914](https://redirect.github.com/docker/login-action/pull/914) - Ensure passwords are redacted with `registry-auth` input by [@crazy-max](https://redirect.github.com/crazy-max) in [#911](https://redirect.github.com/docker/login-action/pull/911) - build(deps): bump lodash from 4.17.21 to 4.17.23 in [#915](https://redirect.github.com/docker/login-action/pull/915) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.6.0...v3.7.0> ### [`v3.6.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.6.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.5.0...v3.6.0) - Add `registry-auth` input for raw authentication to registries by [@crazy-max](https://redirect.github.com/crazy-max) in [#887](https://redirect.github.com/docker/login-action/pull/887) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) to 3.890.0 in [#882](https://redirect.github.com/docker/login-action/pull/882) [#890](https://redirect.github.com/docker/login-action/pull/890) - Bump [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.890.0 in [#882](https://redirect.github.com/docker/login-action/pull/882) [#890](https://redirect.github.com/docker/login-action/pull/890) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.62.1 to 0.63.0 in [#883](https://redirect.github.com/docker/login-action/pull/883) - Bump brace-expansion from 1.1.11 to 1.1.12 in [#880](https://redirect.github.com/docker/login-action/pull/880) - Bump undici from 5.28.4 to 5.29.0 in [#879](https://redirect.github.com/docker/login-action/pull/879) - Bump tmp from 0.2.3 to 0.2.4 in [#881](https://redirect.github.com/docker/login-action/pull/881) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.5.0...v3.6.0> ### [`v3.5.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.5.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.4.0...v3.5.0) - Support dual-stack endpoints for AWS ECR by [@Spacefish](https://redirect.github.com/Spacefish) [@crazy-max](https://redirect.github.com/crazy-max) in [#874](https://redirect.github.com/docker/login-action/pull/874) [#876](https://redirect.github.com/docker/login-action/pull/876) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) to 3.859.0 in [#860](https://redirect.github.com/docker/login-action/pull/860) [#878](https://redirect.github.com/docker/login-action/pull/878) - Bump [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.859.0 in [#860](https://redirect.github.com/docker/login-action/pull/860) [#878](https://redirect.github.com/docker/login-action/pull/878) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.57.0 to 0.62.1 in [#870](https://redirect.github.com/docker/login-action/pull/870) - Bump form-data from 2.5.1 to 2.5.5 in [#875](https://redirect.github.com/docker/login-action/pull/875) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.4.0...v3.5.0> ### [`v3.4.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.4.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.3.0...v3.4.0) - Bump [@actions/core](https://redirect.github.com/actions/core) from 1.10.1 to 1.11.1 in [#791](https://redirect.github.com/docker/login-action/pull/791) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) to 3.766.0 in [#789](https://redirect.github.com/docker/login-action/pull/789) [#856](https://redirect.github.com/docker/login-action/pull/856) - Bump [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.758.0 in [#789](https://redirect.github.com/docker/login-action/pull/789) [#856](https://redirect.github.com/docker/login-action/pull/856) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.35.0 to 0.57.0 in [#801](https://redirect.github.com/docker/login-action/pull/801) [#806](https://redirect.github.com/docker/login-action/pull/806) [#858](https://redirect.github.com/docker/login-action/pull/858) - Bump cross-spawn from 7.0.3 to 7.0.6 in [#814](https://redirect.github.com/docker/login-action/pull/814) - Bump https-proxy-agent from 7.0.5 to 7.0.6 in [#823](https://redirect.github.com/docker/login-action/pull/823) - Bump path-to-regexp from 6.2.2 to 6.3.0 in [#777](https://redirect.github.com/docker/login-action/pull/777) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.3.0...v3.4.0> ### [`v3.3.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.3.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.2.0...v3.3.0) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.24.0 to 0.35.0 in [#754](https://redirect.github.com/docker/login-action/pull/754) - Bump https-proxy-agent from 7.0.4 to 7.0.5 in [#741](https://redirect.github.com/docker/login-action/pull/741) - Bump braces from 3.0.2 to 3.0.3 in [#730](https://redirect.github.com/docker/login-action/pull/730) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.2.0...v3.3.0> ### [`v3.2.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.2.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.1.0...v3.2.0) - Improve missing username/password by [@Frankkkkk](https://redirect.github.com/Frankkkkk) in [#706](https://redirect.github.com/docker/login-action/pull/706) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.18.0 to 0.24.0 in [#715](https://redirect.github.com/docker/login-action/pull/715) [#721](https://redirect.github.com/docker/login-action/pull/721) - Bump aws-sdk-dependencies to 3.583.0 in [#720](https://redirect.github.com/docker/login-action/pull/720) - Bump undici from 5.28.3 to 5.28.4 in [#694](https://redirect.github.com/docker/login-action/pull/694) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.1.0...v3.2.0> ### [`v3.1.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.1.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3...v3.1.0) - Bump [@babel/traverse](https://redirect.github.com/babel/traverse) from 7.17.3 to 7.23.2 in [#618](https://redirect.github.com/docker/login-action/pull/618) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.12.0 to 0.18.0 in [#616](https://redirect.github.com/docker/login-action/pull/616) [#636](https://redirect.github.com/docker/login-action/pull/636) [#682](https://redirect.github.com/docker/login-action/pull/682) - Bump aws-sdk dependencies to 3.529.1 in [#624](https://redirect.github.com/docker/login-action/pull/624) [#685](https://redirect.github.com/docker/login-action/pull/685) - Bump http-proxy-agent to 7.0.2 in [#676](https://redirect.github.com/docker/login-action/pull/676) - Bump https-proxy-agent to 7.0.4 in [#676](https://redirect.github.com/docker/login-action/pull/676) - Bump undici from 5.26.5 to 5.28.3 in [#677](https://redirect.github.com/docker/login-action/pull/677) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.0.0...v3.1.0> </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Amsterdam) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://redirect.github.com/renovatebot/renovate).  --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>

ryangr0

2026-06-08 09:03:25 +00:00