Skip to content

ci: Bump the actions group across 1 directory with 2 updates#265

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-f5f430d9f8
Open

ci: Bump the actions group across 1 directory with 2 updates#265
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/actions-f5f430d9f8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the actions group with 2 updates in the / directory: docker/login-action and actions/attest-build-provenance.

Updates docker/login-action from 4.4.0 to 4.5.0

Release notes

Sourced from docker/login-action's releases.

v4.5.0

Full Changelog: docker/login-action@v4.4.0...v4.5.0

Commits
  • 06fb636 Merge pull request #1037 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
  • a8bc953 [dependabot skip] chore: update generated content
  • f54b901 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
  • 77f18f6 Merge pull request #1049 from docker/dependabot/github_actions/codeql-actions...
  • ec0bf28 Merge pull request #1050 from docker/dependabot/npm_and_yarn/docker/actions-t...
  • e37171e [dependabot skip] chore: update generated content
  • 1d3a717 build(deps): bump @​docker/actions-toolkit from 0.93.0 to 0.94.0
  • a5e9150 Merge pull request #1048 from docker/dockerhub-oidc-support
  • a482ba4 build(deps): bump the codeql-actions group with 2 updates
  • 9e3d36e chore: update generated content
  • Additional commits viewable in compare view

Updates actions/attest-build-provenance from 2.4.0 to 4.1.1

Release notes

Sourced from actions/attest-build-provenance's releases.

v4.1.1

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.1.0...v4.1.1

v4.1.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v4.0.0...v4.1.0

v4.0.0

[!NOTE] As of version 4, actions/attest-build-provenance is simply a wrapper on top of actions/attest.

Existing applications may continue to use the attest-build-provenance action, but new implementations should use actions/attest instead.

What's Changed

Full Changelog: actions/attest-build-provenance@v3.2.0...v4.0.0

v3.2.0

What's Changed

Full Changelog: actions/attest-build-provenance@v3.1.0...v3.2.0

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 23, 2026
Bumps the actions group with 2 updates in the / directory: [docker/login-action](https://github.com/docker/login-action) and [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance).


Updates `docker/login-action` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@af1e73f...06fb636)

Updates `actions/attest-build-provenance` from 2.4.0 to 4.1.1
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](actions/attest-build-provenance@e8998f9...0f67c3f)

---
updated-dependencies:
- dependency-name: actions/attest-build-provenance
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: docker/login-action
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title ci: Bump the actions group with 2 updates ci: Bump the actions group across 1 directory with 2 updates Jul 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-f5f430d9f8 branch from 8948418 to 0498bf4 Compare July 24, 2026 04:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants