chore(deps): bump docker/login-action from 4.4.0 to 4.6.0 by dependabot[bot] · Pull Request #4724 · OpenHands/software-agent-sdk

dependabot · 2026-08-30T19:26:32Z

Bumps docker/login-action from 4.4.0 to 4.6.0.

Release notes

Sourced from docker/login-action's releases.

v4.6.0

Harden buildx scoped config path handling by @crazy-max in docker/login-action#1059

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in docker/login-action#1051

Bump js-yaml from 5.2.1 to 5.2.2 in docker/login-action#1057

Bump postcss from 8.5.10 to 8.5.22 in docker/login-action#1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Surface Docker Hub OIDC error responses by @crazy-max in docker/login-action#1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Support dhi.io as Docker Hub OIDC registry by @crazy-max in docker/login-action#1054

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Docker Hub OIDC login support by @crazy-max in docker/login-action#1048

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in docker/login-action#1037

Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in docker/login-action#1044 docker/login-action#1050

Bump brace-expansion from 1.1.13 to 1.1.16 in docker/login-action#1046

Bump js-yaml from 5.2.0 to 5.2.1 in docker/login-action#1038

Full Changelog: docker/login-action@v4.4.0...v4.5.0

Commits

dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
5bcb015 [dependabot skip] chore: update generated content
b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
0009830 [dependabot skip] chore: update generated content
2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
Additional commits viewable in compare view

🐳 Agent Server images for this PR — GHCR package, pull/run commands, and all pushed tags (click to expand)

• GHCR package: https://github.com/OpenHands/agent-sdk/pkgs/container/agent-server

Variants & Base Images

Variant	Architectures	Base Image	Docs / Tags
java	amd64, arm64	`eclipse-temurin:17-jdk`	Link
python-slim	amd64, arm64	`nikolaik/python-nodejs:python3.13-nodejs22-slim`	Link
python	amd64, arm64	`nikolaik/python-nodejs:python3.13-nodejs22-slim`	Link
golang	amd64, arm64	`golang:1.21-bookworm`	Link

Pull (multi-arch manifest)

# Each variant is a multi-arch manifest supporting both amd64 and arm64
docker pull ghcr.io/openhands/agent-server:860acde-python

Run

docker run -it --rm \
  -p 8000:8000 \
  --name agent-server-860acde-python \
  ghcr.io/openhands/agent-server:860acde-python

All tags pushed for this build

ghcr.io/openhands/agent-server:860acde-golang-amd64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-golang-amd64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-golang-amd64
ghcr.io/openhands/agent-server:860acde-golang_tag_1.21-bookworm-amd64
ghcr.io/openhands/agent-server:860acde-golang-arm64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-golang-arm64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-golang-arm64
ghcr.io/openhands/agent-server:860acde-golang_tag_1.21-bookworm-arm64
ghcr.io/openhands/agent-server:860acde-java-amd64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-java-amd64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-java-amd64
ghcr.io/openhands/agent-server:860acde-eclipse-temurin_tag_17-jdk-amd64
ghcr.io/openhands/agent-server:860acde-java-arm64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-java-arm64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-java-arm64
ghcr.io/openhands/agent-server:860acde-eclipse-temurin_tag_17-jdk-arm64
ghcr.io/openhands/agent-server:860acde-python-amd64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-python-amd64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-python-amd64
ghcr.io/openhands/agent-server:860acde-nikolaik_s_python-nodejs_tag_python3.13-nodejs22-slim-amd64
ghcr.io/openhands/agent-server:860acde-python-arm64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-python-arm64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-python-arm64
ghcr.io/openhands/agent-server:860acde-nikolaik_s_python-nodejs_tag_python3.13-nodejs22-slim-arm64
ghcr.io/openhands/agent-server:860acde-python-slim-amd64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-python-slim-amd64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-python-slim-amd64
ghcr.io/openhands/agent-server:860acde-nikolaik_s_python-nodejs_tag_python3.13-nodejs22-slim-slim-amd64
ghcr.io/openhands/agent-server:860acde-python-slim-arm64
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-python-slim-arm64
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-python-slim-arm64
ghcr.io/openhands/agent-server:860acde-nikolaik_s_python-nodejs_tag_python3.13-nodejs22-slim-slim-arm64
ghcr.io/openhands/agent-server:860acde-golang
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-golang
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-golang
ghcr.io/openhands/agent-server:860acde-golang_tag_1.21-bookworm
ghcr.io/openhands/agent-server:860acde-java
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-java
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-java
ghcr.io/openhands/agent-server:860acde-eclipse-temurin_tag_17-jdk
ghcr.io/openhands/agent-server:860acde-python-slim
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-python-slim
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-python-slim
ghcr.io/openhands/agent-server:860acde-nikolaik_s_python-nodejs_tag_python3.13-nodejs22-slim-slim
ghcr.io/openhands/agent-server:860acde-python
ghcr.io/openhands/agent-server:860acde55ddd32efb6e89aec8c1275ce1aad4086-python
ghcr.io/openhands/agent-server:dependabot-github-actions-docker-login-action-4.6.0-python
ghcr.io/openhands/agent-server:860acde-nikolaik_s_python-nodejs_tag_python3.13-nodejs22-slim

About Multi-Architecture Support

Each variant tag (e.g., 860acde-python) is a multi-arch manifest supporting both amd64 and arm64
Docker automatically pulls the correct architecture for your platform
Individual architecture tags (e.g., 860acde-python-amd64) are also available if needed

all-hands-bot · 2026-08-30T19:26:41Z

👋 This PR needs a couple of things fixed before OpenHands can review it:

the PR description's HUMAN: section needs at least 20 characters describing what you tested, not just the template placeholder

Push an update once this is addressed and this check re-runs automatically.

This is an automated check - no AI was used to generate this comment.

all-hands-bot · 2026-08-30T19:26:42Z

👋 This PR needs a couple of things fixed before OpenHands can review it:

the PR description's HUMAN: section needs at least 20 characters describing what you tested, not just the template placeholder

Push an update once this is addressed and this check re-runs automatically.

This is an automated check - no AI was used to generate this comment.

github-actions · 2026-08-30T19:29:40Z

Python API breakage checks — ✅ PASSED

Result: ✅ PASSED

Action log

github-actions · 2026-08-30T19:32:00Z

Endpoint audit

⚠️ 18 actionable Agent Server contract divergence(s) · report-only

Contract: pinned release artifact

Category	Count
Actionable client-only calls	0
Actionable server-only operations	18
Documented non-divergences	13
Agent Server contract operations	129
Audited handwritten client endpoints	119

Actionable client-only calls (0)

none

Actionable server-only operations (18)

DELETE /api/canvas-extensions/installed/{}
DELETE /api/llm/provider-connections/{}
GET /api/canvas-extensions/installed
GET /api/canvas-extensions/installed/{}
GET /api/canvas-extensions/installed/{}/bundle
GET /api/conversations/{}/events
GET /api/file/archive
GET /api/git/commits
GET /api/git/commits/{}/changes
GET /api/init
GET /api/llm/provider-connections
PATCH /api/canvas-extensions/installed/{}
PATCH /api/llm/provider-connections/{}
POST /api/canvas-extensions/install
POST /api/conversations/{}/load_plugin
POST /api/file/create_directory
POST /api/init
POST /api/llm/provider-connections

Documented non-divergences (13)

Client calls intentionally absent from the filtered contract (11)

GET /
GET /alive
GET /health
GET /ready
GET /server_info

Reason: Operational Agent Server endpoints intentionally excluded from the filtered public release artifact.
Owner: OpenHands runtime maintainers

DELETE /api/meta-profiles/{}
GET /api/meta-profiles
GET /api/meta-profiles/{}
POST /api/meta-profiles/{}
POST /api/meta-profiles/{}/activate

Reason: Client-ahead API stacked on the pending Agent Server meta-profiles implementation.
Owner: OpenHands SDK maintainers
Tracking: #3744

POST /api/profiles/{}/validate

Reason: Client-ahead API stacked on the pending Agent Server pre-flight LLM validation endpoint.
Owner: OpenHands TypeScript client maintainers
Tracking: #4422

Server operations covered by an exposed browser URL (2)

GET /api/conversations/{}/workspace
GET /api/conversations/{}/workspace/{}

Reason: RemoteWorkspace.startWorkspaceSession exposes these authenticated URLs for browser iframe and file requests; they are not HttpClient method calls.
Owner: OpenHands TypeScript client maintainers

github-actions · 2026-08-30T19:35:13Z

REST API breakage checks (OpenAPI) — ✅ PASSED

Result: ✅ PASSED

Action log

neubig

Approved and merged by an AI agent (OpenHands) on behalf of the user. All CI checks pass.

neubig · 2026-09-14T18:33:06Z

@dependabot rebase

Bumps [docker/login-action](https://github.com/docker/login-action) from 4.4.0 to 4.6.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@af1e73f...dbcb813) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 30, 2026

neubig approved these changes Sep 14, 2026

View reviewed changes

neubig enabled auto-merge (squash) September 14, 2026 18:31

dependabot Bot changed the title ~~chore(deps): bump docker/login-action from 4.2.0 to 4.6.0~~ chore(deps): bump docker/login-action from 4.4.0 to 4.6.0 Sep 14, 2026

dependabot Bot force-pushed the dependabot/github_actions/docker/login-action-4.6.0 branch from e52669e to 860acde Compare September 14, 2026 18:39

neubig merged commit c580b41 into main Sep 14, 2026
41 of 44 checks passed

neubig deleted the dependabot/github_actions/docker/login-action-4.6.0 branch September 14, 2026 18:59

github-actions Bot mentioned this pull request Sep 15, 2026

Release v1.48.0 #5079

Merged

6 of 7 tasks

Navigation Menu

Repository navigation

chore(deps): bump docker/login-action from 4.4.0 to 4.6.0 - #4724

chore(deps): bump docker/login-action from 4.4.0 to 4.6.0#4724
neubig merged 1 commit into
mainfrom
dependabot/github_actions/docker/login-action-4.6.0

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited by github-actions Bot

Loading

Uh oh!

all-hands-bot commented Aug 30, 2026

Uh oh!

all-hands-bot commented Aug 30, 2026

Uh oh!

github-actions Bot commented Aug 30, 2026

Uh oh!

github-actions Bot commented Aug 30, 2026

Client calls intentionally absent from the filtered contract (11)

Server operations covered by an exposed browser URL (2)

Uh oh!

github-actions Bot commented Aug 30, 2026 •

edited

Loading

Uh oh!

neubig left a comment

Uh oh!

neubig commented Sep 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Aug 30, 2026 • edited by github-actions Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.6.0

v4.5.2

v4.5.1

v4.5.0

Uh oh!

all-hands-bot commented Aug 30, 2026

Uh oh!

all-hands-bot commented Aug 30, 2026

Uh oh!

github-actions Bot commented Aug 30, 2026

Python API breakage checks — ✅ PASSED

Uh oh!

github-actions Bot commented Aug 30, 2026

Endpoint audit

Actionable client-only calls (0)

Actionable server-only operations (18)

Client calls intentionally absent from the filtered contract (11)

Server operations covered by an exposed browser URL (2)

Uh oh!

github-actions Bot commented Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

REST API breakage checks (OpenAPI) — ✅ PASSED

Uh oh!

neubig left a comment

Choose a reason for hiding this comment

Uh oh!

neubig commented Sep 14, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot Bot commented on behalf of github Aug 30, 2026 •

edited by github-actions Bot

Loading

github-actions Bot commented Aug 30, 2026 •

edited

Loading