build(deps): bump @docker/actions-toolkit from 0.94.0 to 0.107.0 by dependabot[bot] · Pull Request #1100 · docker/login-action

dependabot · 2026-10-23T15:01:21Z

Bumps @docker/actions-toolkit from 0.94.0 to 0.107.0.

Release notes

Sourced from @docker/actions-toolkit's releases.

v0.107.0

github-builder: resolve source date epochs for reproducible builds by @crazy-max in docker/actions-toolkit#1376

docker(install): update Undock to v0.14.1 in docker/actions-toolkit#1394

build(deps): bump js-yaml from 5.4.3 to 5.5.0 in docker/actions-toolkit#1380

build(deps): bump vite from 7.3.6 to 7.3.7 in docker/actions-toolkit#1389

Full Changelog: docker/actions-toolkit@v0.106.0...v0.107.0

v0.106.0

github-builder: forward docker metadata outputs for bake vars by @crazy-max in docker/actions-toolkit#1373

Full Changelog: docker/actions-toolkit@v0.105.0...v0.106.0

v0.105.0

github-builder: update runner mappings to ubuntu-26.04 by @crazy-max in docker/actions-toolkit#1372

build(deps): bump @actions/artifact from 6.2.1 to 6.3.1 in docker/actions-toolkit#1366

build(deps): bump handlebars from 4.7.9 to 4.7.10 in docker/actions-toolkit#1361

build(deps): bump he from 1.2.0 to 2.0.0 in docker/actions-toolkit#1357

build(deps): bump js-yaml from 5.4.2 to 5.4.3 in docker/actions-toolkit#1360

build(deps): bump source-map-js from 1.2.1 to 1.2.2 in docker/actions-toolkit#1365

build(deps): bump tar-stream from 3.2.1 to 3.2.2 in docker/actions-toolkit#1356

Full Changelog: docker/actions-toolkit@v0.104.0...v0.105.0

v0.104.0

github-builder: resolve explicit Bake variables by @crazy-max in docker/actions-toolkit#1353

github-builder: support Docker Hub OIDC scopes by @crazy-max in docker/actions-toolkit#1355

docker(install): update lima images to 20260926 in docker/actions-toolkit#1352

Full Changelog: docker/actions-toolkit@v0.103.0...v0.104.0

v0.103.0

github-builder: reject duplicate Bake secret IDs by @crazy-max in docker/actions-toolkit#1349

Full Changelog: docker/actions-toolkit@v0.102.0...v0.103.0

v0.102.0

github-builder: add Azure ACR and Chainguard registry identities by @crazy-max in docker/actions-toolkit#1335

github-builder: support additional ECR account ID by @crazy-max in docker/actions-toolkit#1336

github-builder: restore registry identity logs by @crazy-max in docker/actions-toolkit#1338

build(deps): bump @actions/cache from 6.2.0 to 6.3.0 in docker/actions-toolkit#1342

build(deps): bump brace-expansion from 1.1.18 to 1.1.21 in docker/actions-toolkit#1348

build(deps): bump csv-parse from 7.0.2 to 7.0.3 in docker/actions-toolkit#1339

build(deps): bump undici from 6.28.0 to 6.29.0 in docker/actions-toolkit#1341

Full Changelog: docker/actions-toolkit@v0.101.0...v0.102.0

v0.101.0

docker: support endpoints when pulling images by @crazy-max in docker/actions-toolkit#1326

buildx: add index annotation conversion helper by @crazy-max in docker/actions-toolkit#1332

... (truncated)

Commits

7ba5a65 Merge pull request #1379 from docker/dependabot/github_actions/docker/bake-ac...
4cff8c0 Merge pull request #1378 from docker/dependabot/github_actions/docker/bake-ac...
9809c7b Merge pull request #1374 from docker/dependabot/github_actions/codeql-actions...
9ddbbb8 Merge pull request #1380 from docker/dependabot/npm_and_yarn/js-yaml-5.5.0
6c88bb4 Merge pull request #1389 from docker/dependabot/npm_and_yarn/vite-7.3.7
82d6953 Merge pull request #1394 from docker/deps/undock-version
f3217b8 chore(deps): update Undock version to v0.14.1
9dfbd08 Merge pull request #1392 from docker/deps/cosign-version
f3f47b6 chore(deps): update Cosign version to v3.1.4
e142bf9 Merge pull request #1391 from docker/deps/compose-version
Additional commits viewable in compare view

Bumps [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.94.0 to 0.107.0. - [Release notes](https://github.com/docker/actions-toolkit/releases) - [Commits](docker/actions-toolkit@v0.94.0...v0.107.0) --- updated-dependencies: - dependency-name: "@docker/actions-toolkit" dependency-version: 0.107.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

@crazy-max

##### [\`v4.7.0\`](https://github.com/docker/login-action/releases/tag/v4.7.0) - Preserve explicit ECR settings in `registry-auth` by [@crazy-max](https://github.com/crazy-max) in [#1089](docker/login-action#1089) - Use registry hosts for scoped credentials by [@crazy-max](https://github.com/crazy-max) in [#1088](docker/login-action#1088) - Raise Docker Hub OIDC max expiry to 6 hours by [@crazy-max](https://github.com/crazy-max) in [#1068](docker/login-action#1068) - Log Docker Hub OIDC token exchange progress by [@crazy-max](https://github.com/crazy-max) in [#1061](docker/login-action#1061) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1154.0 in [#1093](docker/login-action#1093) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.94.0 to 0.107.0 in [#1100](docker/login-action#1100) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1077](docker/login-action#1077) - Bump csv-parse from 7.0.1 to 7.0.3 in [#1078](docker/login-action#1078) - Bump handlebars from 4.7.9 to 4.7.10 in [#1091](docker/login-action#1091) - Bump js-yaml from 5.2.2 to 5.5.0 in [#1066](docker/login-action#1066) - Bump postcss from 8.5.22 to 8.5.26 in [#1071](docker/login-action#1071) - Bump postcss-selector-parser from 7.1.1 to 7.1.6 in [#1092](docker/login-action#1092) - Bump source-map-js from 1.2.1 to 1.2.2 in [#1090](docker/login-action#1090) - Bump undici from 6.27.0 to 6.29.1 in [#1085](docker/login-action#1085) - Bump uuid from 14.0.1 to 14.0.3 in [#1096](docker/login-action#1096) **Full Changelog**: <docker/login-action@v4.6.0...v4.7.0> --- ##### [\`v4.6.0\`](https://github.com/docker/login-action/releases/tag/v4.6.0) - Harden buildx scoped config path handling by [@crazy-max](https://github.com/crazy-max) in [#1059](docker/login-action#1059) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1095.0 in [#1051](docker/login-action#1051) - Bump js-yaml from 5.2.1 to 5.2.2 in [#1057](docker/login-action#1057) - Bump postcss from 8.5.10 to 8.5.22 in [#1056](docker/login-action#1056) **Full Changelog**: <docker/login-action@v4.5.2...v4.6.0> --- ##### [\`v4.5.2\`](https://github.com/docker/login-action/releases/tag/v4.5.2) - Surface Docker Hub OIDC error responses by [@crazy-max](https://github.com/crazy-max) in [#1058](docker/login-action#1058) **Full Changelog**: <docker/login-action@v4.5.1...v4.5.2> --- ##### [\`v4.5.1\`](https://github.com/docker/login-action/releases/tag/v4.5.1) - Support `dhi.io` as Docker Hub OIDC registry by [@crazy-max](https://github.com/crazy-max) in [#1054](docker/login-action#1054) **Full Changelog**: <docker/login-action@v4.5.0...v4.5.1> --- ##### [\`v4.5.0\`](https://github.com/docker/login-action/releases/tag/v4.5.0) - [Docker Hub OIDC](https://github.com/docker/login-action#docker-hub) login support by [@crazy-max](https://github.com/crazy-max) in [#1048](docker/login-action#1048) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1091.0 in [#1037](docker/login-action#1037) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.94.0 in [#1044](docker/login-action#1044) [#1050](docker/login-action#1050) - Bump brace-expansion from 1.1.13 to 1.1.16 in [#1046](docker/login-action#1046) - Bump js-yaml from 5.2.0 to 5.2.1 in [#1038](docker/login-action#1038) **Full Changelog**: <docker/login-action@v4.4.0...v4.5.0> --- ##### [\`v4.4.0\`](https://github.com/docker/login-action/releases/tag/v4.4.0) - Skip empty `registry-auth` secret mask by [@crazy-max](https://github.com/crazy-max) in [#1035](docker/login-action#1035) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1077.0 [#1034](docker/login-action#1034) **Full Changelog**: <docker/login-action@v4.3.0...v4.4.0> --- ##### [\`v4.3.0\`](https://github.com/docker/login-action/releases/tag/v4.3.0) - Preserve names in esbuild bundle by [@crazy-max](https://github.com/crazy-max) in [#1022](docker/login-action#1022) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1076.0 [#999](docker/login-action#999) [#1030](docker/login-action#1030) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#1004](docker/login-action#1004) [#1027](docker/login-action#1027) - Bump [@sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#1023](docker/login-action#1023) - Bump [@sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#1029](docker/login-action#1029) - Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [#1017](docker/login-action#1017) - Bump js-yaml from 4.1.1 to 5.2.0 in [#1028](docker/login-action#1028) - Bump sigstore from 4.1.0 to 4.1.1 in [#1031](docker/login-action#1031) - Bump tmp from 0.2.5 to 0.2.7 in [#1002](docker/login-action#1002) - Bump undici from 6.24.1 to 6.27.0 in [#1020](docker/login-action#1020) - Bump vite from 7.3.3 to 7.3.6 in [#1019](docker/login-action#1019) **Full Changelog**: <docker/login-action@v4.2.0...v4.3.0> --- ##### [\`v4.2.0\`](https://github.com/docker/login-action/releases/tag/v4.2.0) - Bump [@actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#976](docker/login-action#976) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1050.0 in [#960](docker/login-action#960) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.86.0 to 0.90.0 in [#970](docker/login-action#970) - Bump brace-expansion from 2.0.1 to 5.0.6 in [#993](docker/login-action#993) - Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#985](docker/login-action#985) - Bump fast-xml-parser from 5.3.6 to 5.8.0 in [#963](docker/login-action#963) - Bump http-proxy-agent and https-proxy-agent to 9.0.0 in [#961](docker/login-action#961) - Bump postcss from 8.5.6 to 8.5.10 in [#979](docker/login-action#979) - Bump tar from 6.2.1 to 7.5.15 in [#991](docker/login-action#991) - Bump vite from 7.3.1 to 7.3.3 in [#986](docker/login-action#986) **Full Changelog**: <docker/login-action@v4.1.0...v4.2.0> --- ##### [\`v4.1.0\`](https://github.com/docker/login-action/releases/tag/v4.1.0) - Fix scoped Docker Hub cleanup path when registry is omitted by [@crazy-max](https://github.com/crazy-max) in [#945](docker/login-action#945) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1020.0 in [#930](docker/login-action#930) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.77.0 to 0.86.0 in [#932](docker/login-action#932) [#936](docker/login-action#936) - Bump brace-expansion from 1.1.12 to 1.1.13 in [#952](docker/login-action#952) - Bump fast-xml-parser from 5.3.4 to 5.3.6 in [#942](docker/login-action#942) - Bump flatted from 3.3.3 to 3.4.2 in [#944](docker/login-action#944) - Bump glob from 10.3.12 to 10.5.0 in [#940](docker/login-action#940) - Bump handlebars from 4.7.8 to 4.7.9 in [#949](docker/login-action#949) - Bump http-proxy-agent and https-proxy-agent to 8.0.0 in [#937](docker/login-action#937) - Bump lodash from 4.17.23 to 4.18.1 in [#958](docker/login-action#958) - Bump minimatch from 3.1.2 to 3.1.5 in [#941](docker/login-action#941) - Bump picomatch from 4.0.3 to 4.0.4 in [#948](docker/login-action#948) - Bump undici from 6.23.0 to 6.24.1 in [#938](docker/login-action#938) **Full Changelog**: <docker/login-action@v4.0.0...v4.1.0> --- ##### [\`v4.0.0\`](https://github.com/docker/login-action/releases/tag/v4.0.0) - Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@crazy-max](https://github.com/crazy-max) in [#929](docker/login-action#929) - Switch to ESM and update config/test wiring by [@crazy-max](https://github.com/crazy-max) in [#927](docker/login-action#927) - Bump [@actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#919](docker/login-action#919) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) from 3.890.0 to 3.1000.0 in [#909](docker/login-action#909) [#920](docker/login-action#920) - Bump [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) from 3.890.0 to 3.1000.0 in [#909](docker/login-action#909) [#920](docker/login-action#920) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.63.0 to 0.77.0 in [#910](docker/login-action#910) [#928](docker/login-action#928) - Bump [@isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#921](docker/login-action#921) - Bump js-yaml from 4.1.0 to 4.1.1 in [#901](docker/login-action#901) **Full Changelog**: <docker/login-action@v3.7.0...v4.0.0>

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/login-action](https://github.com/docker/login-action) | action | minor | `v4.6.0` → `v4.7.0` | --- ### Release Notes <details> <summary>docker/login-action</summary> ### [`v4.7.0`](https://github.com/docker/login-action/releases/tag/v4.7.0) [Compare Source](docker/login-action@v4.6.0...v4.7.0) - Preserve explicit ECR settings in `registry-auth` by [@crazy-max](https://github.com/crazy-max) in [#1089](docker/login-action#1089) - Use registry hosts for scoped credentials by [@crazy-max](https://github.com/crazy-max) in [#1088](docker/login-action#1088) - Raise Docker Hub OIDC max expiry to 6 hours by [@crazy-max](https://github.com/crazy-max) in [#1068](docker/login-action#1068) - Log Docker Hub OIDC token exchange progress by [@crazy-max](https://github.com/crazy-max) in [#1061](docker/login-action#1061) - Bump [@aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1154.0 in [#1093](docker/login-action#1093) - Bump [@docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.94.0 to 0.107.0 in [#1100](docker/login-action#1100) - Bump [@humanfs/node](https://github.com/humanfs/node) from 0.16.7 to 0.16.8 in [#1077](docker/login-action#1077) - Bump csv-parse from 7.0.1 to 7.0.3 in [#1078](docker/login-action#1078) - Bump handlebars from 4.7.9 to 4.7.10 in [#1091](docker/login-action#1091) - Bump js-yaml from 5.2.2 to 5.5.0 in [#1066](docker/login-action#1066) - Bump postcss from 8.5.22 to 8.5.26 in [#1071](docker/login-action#1071) - Bump postcss-selector-parser from 7.1.1 to 7.1.6 in [#1092](docker/login-action#1092) - Bump source-map-js from 1.2.1 to 1.2.2 in [#1090](docker/login-action#1090) - Bump undici from 6.27.0 to 6.29.1 in [#1085](docker/login-action#1085) - Bump uuid from 14.0.1 to 14.0.3 in [#1096](docker/login-action#1096) **Full Changelog**: <docker/login-action@v4.6.0...v4.7.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).  Reviewed-on: https://codeberg.org/umati/Sample-Server/pulls/1807 Signed-off-by: umati-bot <git-bot@umati.org>

dependabot Bot added bot dependencies labels Oct 23, 2026

dependabot Bot force-pushed the dependabot/npm_and_yarn/docker/actions-toolkit-0.107.0 branch from d5e1567 to 1476d84 Compare October 23, 2026 15:06

[dependabot skip] chore: update generated content

ac86b5e

crazy-max approved these changes Oct 23, 2026

View reviewed changes

crazy-max merged commit 81c6f93 into master Oct 23, 2026
11 checks passed

dependabot Bot deleted the dependabot/npm_and_yarn/docker/actions-toolkit-0.107.0 branch October 23, 2026 15:11

sdbondi mentioned this pull request Oct 26, 2026

chore(deps): bump docker/login-action from 4.6.0 to 4.7.0 tari-project/tari-ootle#3119

Merged

Navigation Menu

Repository navigation

build(deps): bump @docker/actions-toolkit from 0.94.0 to 0.107.0 - #1100

build(deps): bump @docker/actions-toolkit from 0.94.0 to 0.107.0#1100
crazy-max merged 2 commits into
masterfrom
dependabot/npm_and_yarn/docker/actions-toolkit-0.107.0

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Oct 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.107.0

v0.106.0

v0.105.0

v0.104.0

v0.103.0

v0.102.0

v0.101.0

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Oct 23, 2026 •

edited

Loading