[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
docker/login-action	action	minor	v4 → v4.8.0
ocm		minor	v0.52.0 → v0.54.0

---

Release Notes

docker/login-action

v4.8.0

Compare Source

• Set Docker Hub OIDC token lifetime default to 1 hour by @​crazy-max in #​1070
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1161.0 in #​1103
• Bump @​docker/actions-toolkit from 0.107.0 to 0.109.0 in #​1105
• Bump vite from 7.3.6 to 7.3.7 in #​1101

Full Changelog: docker/login-action@v4.7.0...v4.8.0

v4.7.0

Compare Source

• Preserve explicit ECR settings in registry-auth by @​crazy-max in #​1089
• Use registry hosts for scoped credentials by @​crazy-max in #​1088
• Raise Docker Hub OIDC max expiry to 6 hours by @​crazy-max in #​1068
• Log Docker Hub OIDC token exchange progress by @​crazy-max in #​1061
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1154.0 in #​1093
• Bump @​docker/actions-toolkit from 0.94.0 to 0.107.0 in #​1100
• Bump @​humanfs/node from 0.16.7 to 0.16.8 in #​1077
• Bump csv-parse from 7.0.1 to 7.0.3 in #​1078
• Bump handlebars from 4.7.9 to 4.7.10 in #​1091
• Bump js-yaml from 5.2.2 to 5.5.0 in #​1066
• Bump postcss from 8.5.22 to 8.5.26 in #​1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #​1092
• Bump source-map-js from 1.2.1 to 1.2.2 in #​1090
• Bump undici from 6.27.0 to 6.29.1 in #​1085
• Bump uuid from 14.0.1 to 14.0.3 in #​1096

Full Changelog: docker/login-action@v4.6.0...v4.7.0

v4.6.0

Compare Source

• Harden buildx scoped config path handling by @​crazy-max in #​1059
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1095.0 in #​1051
• Bump js-yaml from 5.2.1 to 5.2.2 in #​1057
• Bump postcss from 8.5.10 to 8.5.22 in #​1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

Compare Source

• Surface Docker Hub OIDC error responses by @​crazy-max in #​1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Compare Source

• Support dhi.io as Docker Hub OIDC registry by @​crazy-max in #​1054

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Compare Source

• Docker Hub OIDC login support by @​crazy-max in #​1048
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1091.0 in #​1037
• Bump @​docker/actions-toolkit from 0.92.0 to 0.94.0 in #​1044 #​1050
• Bump brace-expansion from 1.1.13 to 1.1.16 in #​1046
• Bump js-yaml from 5.2.0 to 5.2.1 in #​1038

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Compare Source

• Skip empty registry-auth secret mask by @​crazy-max in #​1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 #​1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Compare Source

• Bump @​actions/core from 3.0.0 to 3.0.1 in #​976
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1050.0 in #​960
• Bump @​docker/actions-toolkit from 0.86.0 to 0.90.0 in #​970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #​993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #​985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #​963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #​961
• Bump postcss from 8.5.6 to 8.5.10 in #​979
• Bump tar from 6.2.1 to 7.5.15 in #​991
• Bump vite from 7.3.1 to 7.3.3 in #​986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

v4.1.0

Compare Source

• Fix scoped Docker Hub cleanup path when registry is omitted by @​crazy-max in #​945
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1020.0 in #​930
• Bump @​docker/actions-toolkit from 0.77.0 to 0.86.0 in #​932 #​936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #​942
• Bump flatted from 3.3.3 to 3.4.2 in #​944
• Bump glob from 10.3.12 to 10.5.0 in #​940
• Bump handlebars from 4.7.8 to 4.7.9 in #​949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #​937
• Bump lodash from 4.17.23 to 4.18.1 in #​958
• Bump minimatch from 3.1.2 to 3.1.5 in #​941
• Bump picomatch from 4.0.3 to 4.0.4 in #​948
• Bump undici from 6.23.0 to 6.24.1 in #​938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

open-component-model/ocm (ocm)

v0.54.0

Compare Source

What's Changed

🐛 Bug Fixes

• fix(config): prevent finalizer cycles in configuration contexts by @​c5426746 in #​2144

⬆️ Dependencies

• chore(deps): bump the go group across 1 directory with 9 updates by @​dependabot[bot] in #​2140
• chore: bump go - move golangci-lint to tools/ - fix linting findings by @​frewilhelm in #​2141
• chore(deps): bump the go group across 1 directory with 24 updates by @​dependabot[bot] in #​2146

🧰 Maintenance

• chore: bump VERSION to 0.54.0-dev by @​ocmbot[bot] in #​2138

New Contributors

• @​c5426746 made their first contribution in #​2144

Full Changelog: open-component-model/ocm@v0.53...v0.54.0

v0.53.0

Compare Source

What's Changed

🐛 Bug Fixes

• fix(git): normalize tar headers of git archives by @​matthiasbruns in #​2124

⬆️ Dependencies

• chore(deps): bump github.com/containerd/containerd/v2 from 2.4.0 to 2.4.1 by @​dependabot[bot] in #​2125
• chore(deps): bump the go group across 1 directory with 17 updates (fix 2129) by @​frewilhelm in #​2130
• chore(deps): bump the go group across 1 directory with 8 updates by @​dependabot[bot] in #​2135

🧰 Maintenance

• chore: bump VERSION to 0.53.0-dev by @​ocmbot[bot] in #​2121
• chore: Add alias for access type by @​jneisener in #​2123
• chore: Add alias for input type by @​jneisener in #​2128

New Contributors

• @​jneisener made their first contribution in #​2123

Full Changelog: open-component-model/ocm@v0.52...v0.53.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 5am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: ed50c4d9-e7bb-4e01-ae54-0df5f66b3d96

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn