From 2cbd1490aecf1bbd8357d465bf01fd6734bb71bd Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 00:32:48 +0000 Subject: [PATCH 1/2] Bump docker/login-action Bumps the docker-publish-actions group with 1 update: [docker/login-action](https://github.com/docker/login-action). Updates `docker/login-action` from 4.6.0 to 4.7.0 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: docker-publish-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/publish-container-security-patch.yml | 2 +- .github/workflows/publish-worker-container.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish-container-security-patch.yml b/.github/workflows/publish-container-security-patch.yml index 3b3ac43..7f0c35b 100644 --- a/.github/workflows/publish-container-security-patch.yml +++ b/.github/workflows/publish-container-security-patch.yml @@ -87,7 +87,7 @@ jobs: driver: docker-container - name: Log in to the GitHub Container Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/publish-worker-container.yml b/.github/workflows/publish-worker-container.yml index 269a0d7..27051d5 100644 --- a/.github/workflows/publish-worker-container.yml +++ b/.github/workflows/publish-worker-container.yml @@ -87,7 +87,7 @@ jobs: driver: docker-container - name: Log in to the GitHub Container Registry - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0 + uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} From c905da85f5b24dda74c9468e6b44445f5a3edaf4 Mon Sep 17 00:00:00 2001 From: jeremydixon22 Date: Mon, 26 Oct 2026 09:42:47 -0400 Subject: [PATCH 2/2] Authorize Docker login action update --- scripts/verify-container-security-release.py | 2 +- scripts/verify-worker-container-release.py | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/scripts/verify-container-security-release.py b/scripts/verify-container-security-release.py index c55cc3d..47c59f5 100644 --- a/scripts/verify-container-security-release.py +++ b/scripts/verify-container-security-release.py @@ -61,7 +61,7 @@ def main() -> int: "id-token: write", "docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069", "driver: docker-container", - "docker/login-action@dbcb813823bdd20940b903addbd779551569679f", + "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6", "docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc", "sbom: true", "provenance: mode=max", diff --git a/scripts/verify-worker-container-release.py b/scripts/verify-worker-container-release.py index fcb5a52..0d9fc0d 100755 --- a/scripts/verify-worker-container-release.py +++ b/scripts/verify-worker-container-release.py @@ -67,7 +67,7 @@ def main() -> int: "id-token: write", "docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069", "driver: docker-container", - "docker/login-action@dbcb813823bdd20940b903addbd779551569679f", + "docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6", "docker/build-push-action@c3c9e263c25d99ce0380d002d59b67737d91b0dc", "sbom: true", "provenance: mode=max",