Skip to content

chore(ci): bump Docker login and GitHub Release actions - #952

Merged
tbphp merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-minor-and-patch-bf4d071e69
Nov 8, 2026
Merged

tbphp merged 3 commits into
mainfrom
dependabot/github_actions/github-actions-minor-and-patch-bf4d071e69

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 8, 2026 •

Copy link
Copy Markdown
Contributor

关联 Issue / Related Issue

Not linked to an issue.

变更内容 / Change Content

  • Bug 修复 / Bug fix
  • 新功能 / New feature
  • 其他改动 / Other changes

Upgrade the release workflow's 12 docker/login-action references to v4.8.0, pinned to 8aa5831fb8d48d8f76594c7ddde61ae58019f550, and softprops/action-gh-release to v3.0.4, pinned to 8a0cd651e5b2365bd640854a3fa5dfc70e4875f3. Both pins were checked against the upstream tags. Align the shared workflow-test constants with the new pins so the draft publication, verify-only rerun, digest verification and channel-promotion checks accept the upgrade.

Validation:

  • Reproduced the four workflow test failures before the fix and confirmed they pass afterward.
  • make check passed, including Go tests, vet, module checks, frontend lint/format/type checks, and builds.
  • git diff --check passed.

Workflow inputs are unchanged. No data migration or public documentation update is required. CI for the new commit has not been verified.

自查清单 / Checklist

  • 我已运行 make check,或在说明中写明无法运行的原因和未验证范围。 / I ran make check, or documented why it could not run and what remains unverified.
  • 本 PR 范围聚焦,未包含无关改动。 / This PR is focused and contains no unrelated changes.
  • 我已更新必要的公开文档或发布说明。 / I updated any required public documentation or release notes.
  • 我已确认提交、日志和测试数据不包含敏感信息。 / I confirmed that commits, logs, and fixtures contain no sensitive data.
  • 如适用,我已说明兼容性或数据迁移影响。 / Where applicable, I documented compatibility or data-migration impact.

Bumps the github-actions-minor-and-patch group with 2 updates: [docker/login-action](https://github.com/docker/login-action) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).


Updates `docker/login-action` from 4.7.0 to 4.8.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@81c6f93...8aa5831)

Updates `softprops/action-gh-release` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/softprops/action-gh-release/releases)
- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)
- [Commits](softprops/action-gh-release@efb3536...8a0cd65)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions-minor-and-patch
- dependency-name: softprops/action-gh-release
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-actions-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Nov 8, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@tbphp tbphp changed the title chore(ci): bump the github-actions-minor-and-patch group with 2 updates chore(ci): bump Docker login and GitHub Release actions Nov 8, 2026
@tbphp
tbphp merged commit d1b6daf into main Nov 8, 2026
12 checks passed
@tbphp
tbphp deleted the dependabot/github_actions/github-actions-minor-and-patch-bf4d071e69 branch November 8, 2026 13:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant