Skip to content

Bump docker/login-action from 4.5.1 to 4.6.0 - #13

Closed
dependabot[bot] wants to merge 41 commits into
mainfrom
dependabot/github_actions/docker/login-action-4.6.0
Closed

dependabot[bot] wants to merge 41 commits into
mainfrom
dependabot/github_actions/docker/login-action-4.6.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 26, 2026

Copy link
Copy Markdown
Contributor

Bumps docker/login-action from 4.5.1 to 4.6.0.

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Full Changelog: docker/login-action@v4.5.1...v4.5.2

Commits
  • dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • 5bcb015 [dependabot skip] chore: update generated content
  • b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
  • 0009830 [dependabot skip] chore: update generated content
  • 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
  • 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
  • 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
  • e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
  • a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

ehsanullahjan and others added 30 commits May 2, 2026 00:13
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 7.0.0 to 7.0.1.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@bbbca2d...043fb46)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: 7.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 4.0.0 to 4.1.2.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@faadad0...6f9f177)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@030e881...80c7e94)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@4907a6d...650006c)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 6.0.3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@de0fac2...df4cb1c)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
This is largely a copy of Silverstone with minor modifications. The most
important difference is that no Flatpaks are installed by default, and,
of course, this image is based off of Fedora COSMIC instead of
Silverblue.
…tions/upload-artifact-7.0.1

Bump actions/upload-artifact from 7.0.0 to 7.0.1
…gstore/cosign-installer-4.1.2

Bump sigstore/cosign-installer from 4.0.0 to 4.1.2
Nerd fonts patched by che/nerd-fonts mostly work, but break in some
situations (e.g., when using custom font heights). For rock solid
compatability, it's best to download desired fonts directly from
https://www.nerdfonts.com.
…cker/metadata-action-6.1.0

Bump docker/metadata-action from 6.0.0 to 6.1.0
…cker/login-action-4.2.0

Bump docker/login-action from 4.1.0 to 4.2.0
…tions/checkout-6.0.3

Bump actions/checkout from 6.0.2 to 6.0.3
Remove image metadata step for artifacthub to sync the workflow with the
upstream template. Also, we're not using artifacthub for the image
(yet).
Co-authored-by: opencode-agent[bot] <opencode-agent[bot]@users.noreply.github.com>
This is needed for the 1Password native app to be able to open the file
dialog (to attach files to an entry, for example). Setting ptrace scope
to `restricted` also improves the system's security posture because it
requires `sudo` to allow a process (e.g., a debugger) to attach to an
arbitrary process (e.g., an already running process).
ehsanullahjan and others added 11 commits September 24, 2026 01:31
Adding che/nerd-fonts back to ensure nerd-fonts are supported out of the
box. It turns out that che/nerd-fonts provide comprehensive support for
nerd-font symbols (e.g., starship nerd-font-symbols preset).
Discrepencies in, say, starship default prompt rendering, which uses
icons, is almost certainly due to limited support for icon rendering in
different terminals (e.g., Alacritty).

With che/nerd-fonts patch available by default, fonts like `Adwaita
Mono` (GNOME default) will render nerd-font symbols correctly.
rocm tools should be installed in a container (e.g., distrobox) if
needed.
- Add GPU drivers from terra-mesa
- Leave fedora-cisco-openh264 repo alone
- Add openh264 codecs for native firefox
- Rename rpmfusion.sh to multimeda.sh
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.5.1 to 4.6.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@abd2ef4...dbcb813)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 26, 2026
@dependabot @github

dependabot Bot commented on behalf of github Oct 8, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/github_actions/docker/login-action-4.6.0 branch October 8, 2026 00:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant