[dependabot]

Bumps the github-actions group with 1 update: docker/login-action.

Updates docker/login-action from 4.7.0 to 4.8.0

Release notes

Sourced from docker/login-action's releases.

v4.8.0

• Set Docker Hub OIDC token lifetime default to 1 hour by @​crazy-max in docker/login-action#1070
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1161.0 in docker/login-action#1103
• Bump @​docker/actions-toolkit from 0.107.0 to 0.109.0 in docker/login-action#1105
• Bump vite from 7.3.6 to 7.3.7 in docker/login-action#1101

Full Changelog: docker/login-action@v4.7.0...v4.8.0

Commits

• 8aa5831 Merge pull request #1105 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 043f81d [dependabot skip] chore: update generated content
• 3ff6998 build(deps): bump @​docker/actions-toolkit from 0.107.0 to 0.109.0
• 694ef6a Merge pull request #1103 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• 7c6e412 [dependabot skip] chore: update generated content
• aa2441f build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• d6c10b0 Merge pull request #1106 from docker/dependabot/github_actions/codeql-actions...
• 319f1ee Merge pull request #1104 from docker/dependabot/github_actions/actions/setup-...
• b483b7f Merge pull request #1101 from docker/dependabot/npm_and_yarn/vite-7.3.7
• dc7d67c Merge pull request #1070 from crazy-max/increase-oidc-default-expiry
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Updated the automation used to publish container images. This maintenance change does not alter application features or behavior.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The image workflow updates the GHCR login step from docker/login-action v4.7.0 to v4.8.0. Its registry and credential inputs remain unchanged.

Changes: Image Workflow

Layer / File(s)	Summary
Update GHCR login action version .github/workflows/image.yml	The GHCR login step uses docker/login-action v4.8.0 instead of v4.7.0. Its registry and credential inputs are unchanged.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Change: Other

Merge Risk: Minimal · up to ffcd0

The GHCR login configuration remains unchanged. No merge-blocking issue was identified.

Pre-merge checks: 5

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title clearly identifies the dependency update from docker/login-action 4.7.0 to 4.8.0.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: f69145a9-e02b-4ed8-895a-29409263f7fe

Commits

Reviewing files that changed from the base of the PR and between 9e78960 and ffcd039.

Files selected for processing: 1

• .github/workflows/image.yml

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.