Bump docker/login-action from 3 to 4 by dependabot[bot] · Pull Request #451 · senzing-garage/sz-sdk-python-grpc

dependabot · 2026-03-25T09:54:49Z

Release notes

Sourced from docker/login-action's releases.

v4.0.0

Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in docker/login-action#929

Switch to ESM and update config/test wiring by @crazy-max in docker/login-action#927

Bump @actions/core from 1.11.1 to 3.0.0 in docker/login-action#919

Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in docker/login-action#909 docker/login-action#920

Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in docker/login-action#909 docker/login-action#920

Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in docker/login-action#910 docker/login-action#928

Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in docker/login-action#921

Bump js-yaml from 4.1.0 to 4.1.1 in docker/login-action#901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

v3.7.0

Add scope input to set scopes for the authentication token by @crazy-max in docker/login-action#912

Add support for AWS European Sovereign Cloud ECR by @dphi in docker/login-action#914

Ensure passwords are redacted with registry-auth input by @crazy-max in docker/login-action#911

build(deps): bump lodash from 4.17.21 to 4.17.23 in docker/login-action#915

Full Changelog: docker/login-action@v3.6.0...v3.7.0

v3.6.0

Add registry-auth input for raw authentication to registries by @crazy-max in docker/login-action#887

Bump @aws-sdk/client-ecr to 3.890.0 in docker/login-action#882 docker/login-action#890

Bump @aws-sdk/client-ecr-public to 3.890.0 in docker/login-action#882 docker/login-action#890

Bump @docker/actions-toolkit from 0.62.1 to 0.63.0 in docker/login-action#883

Bump brace-expansion from 1.1.11 to 1.1.12 in docker/login-action#880

Bump undici from 5.28.4 to 5.29.0 in docker/login-action#879

Bump tmp from 0.2.3 to 0.2.4 in docker/login-action#881

Full Changelog: docker/login-action@v3.5.0...v3.6.0

v3.5.0

Support dual-stack endpoints for AWS ECR by @Spacefish @crazy-max in docker/login-action#874 docker/login-action#876

Bump @aws-sdk/client-ecr to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @aws-sdk/client-ecr-public to 3.859.0 in docker/login-action#860 docker/login-action#878

Bump @docker/actions-toolkit from 0.57.0 to 0.62.1 in docker/login-action#870

Bump form-data from 2.5.1 to 2.5.5 in docker/login-action#875

Full Changelog: docker/login-action@v3.4.0...v3.5.0

v3.4.0

Bump @actions/core from 1.10.1 to 1.11.1 in docker/login-action#791

Bump @aws-sdk/client-ecr to 3.766.0 in docker/login-action#789 docker/login-action#856

Bump @aws-sdk/client-ecr-public to 3.758.0 in docker/login-action#789 docker/login-action#856

Bump @docker/actions-toolkit from 0.35.0 to 0.57.0 in docker/login-action#801 docker/login-action#806 docker/login-action#858

Bump cross-spawn from 7.0.3 to 7.0.6 in docker/login-action#814

Bump https-proxy-agent from 7.0.5 to 7.0.6 in docker/login-action#823

Bump path-to-regexp from 6.2.2 to 6.3.0 in docker/login-action#777

Full Changelog: docker/login-action@v3.3.0...v3.4.0

... (truncated)

Commits

b45d80f Merge pull request #929 from crazy-max/node24
176cb9c node 24 as default runtime
cad8984 Merge pull request #920 from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...
92cbcb2 chore: update generated content
5a2d6a7 build(deps): bump the aws-sdk-dependencies group with 2 updates
44512b6 Merge pull request #928 from docker/dependabot/npm_and_yarn/docker/actions-to...
28737a5 chore: update generated content
dac0793 build(deps): bump @docker/actions-toolkit from 0.76.0 to 0.77.0
62029f3 Merge pull request #919 from docker/dependabot/npm_and_yarn/actions/core-3.0.0
08c8f06 chore: update generated content
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v3...v4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-25T09:55:30Z

🤖 Claude Code Review

Code Review

Code Quality

✅ Style guide - Simple version bump, no style concerns.

✅ No commented-out code - Clean diff.

✅ Meaningful variable names - N/A for this change.

✅ DRY principle - The same version bump is applied consistently across all 5 workflow files.

✅ No defects - Straightforward dependency version bump from docker/login-action@v3 to @v4. No logic errors or edge cases apply.

✅ CLAUDE.md - Not affected by this change.

Testing

✅ Tests - N/A for GitHub Actions workflow version bumps. The CI workflows themselves serve as integration validation.

Documentation

✅ README - No update needed.

✅ API docs - No update needed.

✅ Inline comments - N/A.

⚠️ CHANGELOG.md - Not updated. Whether this warrants a changelog entry depends on project conventions, but a dependency bump of this nature is often tracked.

✅ Markdown formatting - N/A for YAML files.

Security

✅ No hardcoded credentials - Secrets are properly referenced via ${{ secrets.DOCKERHUB_USERNAME }} and ${{ secrets.DOCKERHUB_ACCESS_TOKEN }}.

✅ No sensitive data - Clean.

✅ No license files - None present.

Summary: This is a clean, low-risk dependency bump updating `docker/login-action` from v3 to v4 across all 5 CI workflow files. The change is consistent and complete. The only minor note is the missing CHANGELOG entry, which is low priority for a tooling dependency bump.

Automated code review analyzing defects and coding standards

github-actions · 2026-03-25T09:56:40Z

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing_grpc
szabstractfactory.py
Project Total

_{This report was generated by python-coverage-comment-action}

github-actions · 2026-03-25T09:56:54Z

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

dependabot bot assigned kernelsam Mar 25, 2026

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Mar 25, 2026

dependabot bot requested a review from a team as a code owner March 25, 2026 09:54

docktermj approved these changes Mar 25, 2026

View reviewed changes

docktermj merged commit 9e8991c into main Mar 25, 2026
59 checks passed

docktermj deleted the dependabot/github_actions/docker/login-action-4 branch March 25, 2026 12:33

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump docker/login-action from 3 to 4#451

Bump docker/login-action from 3 to 4#451
docktermj merged 1 commit intomainfrom
dependabot/github_actions/docker/login-action-4

dependabot bot commented on behalf of github Mar 25, 2026 •

edited by github-actions bot

Loading

Uh oh!

github-actions bot commented Mar 25, 2026

Uh oh!

github-actions bot commented Mar 25, 2026

Uh oh!

github-actions bot commented Mar 25, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabot bot commented on behalf of github Mar 25, 2026 • edited by github-actions bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.0.0

v3.7.0

v3.6.0

v3.5.0

v3.4.0

Uh oh!

github-actions bot commented Mar 25, 2026

🤖 Claude Code Review

Code Review

Code Quality

Testing

Documentation

Security

Summary: This is a clean, low-risk dependency bump updating docker/login-action from v3 to v4 across all 5 CI workflow files. The change is consistent and complete. The only minor note is the missing CHANGELOG entry, which is low priority for a tooling dependency bump.

Uh oh!

github-actions bot commented Mar 25, 2026

Coverage report

Uh oh!

github-actions bot commented Mar 25, 2026

Super-linter summary

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

dependabot bot commented on behalf of github Mar 25, 2026 •

edited by github-actions bot

Loading

Summary: This is a clean, low-risk dependency bump updating `docker/login-action` from v3 to v4 across all 5 CI workflow files. The change is consistent and complete. The only minor note is the missing CHANGELOG entry, which is low priority for a tooling dependency bump.