• Preserve explicit ECR settings in registry-auth by @crazy-max in #1089
• Use registry hosts for scoped credentials by @crazy-max in #1088
• Raise Docker Hub OIDC max expiry to 6 hours by @crazy-max in #1068
• Log Docker Hub OIDC token exchange progress by @crazy-max in #1061
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1154.0 in #1093
• Bump @docker/actions-toolkit from 0.94.0 to 0.107.0 in #1100
• Bump @humanfs/node from 0.16.7 to 0.16.8 in #1077
• Bump csv-parse from 7.0.1 to 7.0.3 in #1078
• Bump handlebars from 4.7.9 to 4.7.10 in #1091
• Bump js-yaml from 5.2.2 to 5.5.0 in #1066
• Bump postcss from 8.5.22 to 8.5.26 in #1071
• Bump postcss-selector-parser from 7.1.1 to 7.1.6 in #1092
• Bump source-map-js from 1.2.1 to 1.2.2 in #1090
• Bump undici from 6.27.0 to 6.29.1 in #1085
• Bump uuid from 14.0.1 to 14.0.3 in #1096

Full Changelog: v4.6.0...v4.7.0

• Harden buildx scoped config path handling by @crazy-max in #1059
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in #1051
• Bump js-yaml from 5.2.1 to 5.2.2 in #1057
• Bump postcss from 8.5.10 to 8.5.22 in #1056

Full Changelog: v4.5.2...v4.6.0

• Surface Docker Hub OIDC error responses by @crazy-max in #1058

Full Changelog: v4.5.1...v4.5.2

• Support dhi.io as Docker Hub OIDC registry by @crazy-max in #1054

Full Changelog: v4.5.0...v4.5.1

• Docker Hub OIDC login support by @crazy-max in #1048
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in #1037
• Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in #1044 #1050
• Bump brace-expansion from 1.1.13 to 1.1.16 in #1046
• Bump js-yaml from 5.2.0 to 5.2.1 in #1038

Full Changelog: v4.4.0...v4.5.0

• Skip empty registry-auth secret mask by @crazy-max in #1035
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 #1034

Full Changelog: v4.3.0...v4.4.0

• Preserve names in esbuild bundle by @crazy-max in #1022
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
• Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
• Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
• Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #1028
• Bump sigstore from 4.1.0 to 4.1.1 in #1031
• Bump tmp from 0.2.5 to 0.2.7 in #1002
• Bump undici from 6.24.1 to 6.27.0 in #1020
• Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: v4.2.0...v4.3.0

• Bump @actions/core from 3.0.0 to 3.0.1 in #976
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
• Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
• Bump postcss from 8.5.6 to 8.5.10 in #979
• Bump tar from 6.2.1 to 7.5.15 in #991
• Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: v4.1.0...v4.2.0

• Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
• Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
• Bump flatted from 3.3.3 to 3.4.2 in #944
• Bump glob from 10.3.12 to 10.5.0 in #940
• Bump handlebars from 4.7.8 to 4.7.9 in #949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
• Bump lodash from 4.17.23 to 4.18.1 in #958
• Bump minimatch from 3.1.2 to 3.1.5 in #941
• Bump picomatch from 4.0.3 to 4.0.4 in #948
• Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: v4.0.0...v4.1.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
• Switch to ESM and update config/test wiring by @crazy-max in #927
• Bump @actions/core from 1.11.1 to 3.0.0 in #919
• Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
• Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
• Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
• Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
• Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: v3.7.0...v4.0.0