ci(github-action): update action docker/login-action (v4.5.0 → v4.5.1) - #259
Conversation
![its-saffron[bot]](https://avatars.githubusercontent.com/in/3901073?s=60&v=4){kind=small}
There was a problem hiding this comment.
AI Automated Review
Full PR review.
Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — escalated (fast_low_confidence)
PR Review: Update docker/login-action v4.5.0 → v4.5.1
Recommendation: Approve
This is a straightforward patch update to a trusted GitHub Action by Renovate bot. All CI checks passed.
Change-by-Change Findings
.github/workflows/build.yml
The PR updates the docker/login-action reference from v4.5.0 to v4.5.1 at two locations within the build workflow:
- Line 30: "Log in to GHCR" step in the API image build job
- Line 112: "Log in to GHCR" step in the E2E test job
Both are updated to the new pinned commit SHA abd2ef45e78c5afb21d64d4ca52ee8550d9572c7.
The upstream v4.5.1 release adds support for dhi.io as a Docker Hub OIDC registry (PR [PR 1054](upstream docker/login-action PR 1054)), which is a minor feature addition with no breaking changes.
Standards Compliance
| Check | Result |
|---|---|
| Pinned action commit SHA used | ✅ Yes (abd2ef45e78c5afb21d64d4ca52ee8550d9572c7) |
| Version bump type correct (patch) | ✅ Yes — v4.5.0 → v4.5.1 |
| Automerge policy followed | ✅ Yes — GitHub Actions (trusted) auto-merge enabled per .renovaterc.json5 |
| CI checks passed | ✅ All 14 checks succeeded |
| Workflow modified correctly | ✅ Two occurrences updated consistently |
Tool Harness Findings
No tool calls were issued; analysis is based solely on the provided corpus.
Unknowns or Needs Verification
None. The diff is minimal, the upstream release is verified, and all CI gates passed.
This PR contains the following updates:
v4.5.0→v4.5.1Release Notes
docker/login-action (docker/login-action)
v4.5.1Compare Source
dhi.ioas Docker Hub OIDC registry by @crazy-max in #1054Full Changelog: docker/login-action@v4.5.0...v4.5.1
Configuration
📅 Schedule: (in timezone America/Edmonton)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate.