deps: bump docker/login-action from 4.5.1 to 4.6.0

[dependabot]

Bumps docker/login-action from 4.5.1 to 4.6.0.

Release notes

Sourced from docker/login-action's releases.

v4.6.0

• Harden buildx scoped config path handling by @​crazy-max in docker/login-action#1059
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1095.0 in docker/login-action#1051
• Bump js-yaml from 5.2.1 to 5.2.2 in docker/login-action#1057
• Bump postcss from 8.5.10 to 8.5.22 in docker/login-action#1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

v4.5.2

• Surface Docker Hub OIDC error responses by @​crazy-max in docker/login-action#1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

Commits

• dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• 5bcb015 [dependabot skip] chore: update generated content
• b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
• 0009830 [dependabot skip] chore: update generated content
• 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
• 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
• 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
• e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
• a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codacy-production]

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.}

[vyruss]

@coderabbitai is this safe to merge?

[coderabbitai]

Tip

For best results, initiate chat on the files or code changes.

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

repo="pgEdge/coldfront"
pr="72"

echo "== PR metadata and merge status =="
gh pr view "$pr" --repo "$repo" \
  --json number,title,state,isDraft,mergeable,mergeStateStatus,baseRefName,headRefName,changedFiles,additions,deletions,statusCheckRollup \
  --jq '{
    number, title, state, isDraft, mergeable, mergeStateStatus,
    baseRefName, headRefName, changedFiles, additions, deletions,
    checks: [.statusCheckRollup[]? | {
      name: .name,
      status: .status,
      conclusion: .conclusion,
      workflowName: .workflowName
    }]
  }'

echo
echo "== PR file diff =="
gh pr diff "$pr" --repo "$repo" --patch

echo
echo "== All docker/login-action workflow references on the PR branch =="
rg -n -C 2 '^\s*uses:\s*docker/login-action@' .github 2>/dev/null || true

echo
echo "== Action pinning convention in workflow files =="
rg -n -C 1 '^\s*uses:\s*[^#[:space:]]+@' .github/workflows 2>/dev/null || true

Length of output: 13789

---

🏁 Script executed:

#!/bin/bash
set -euo pipefail

repo="pgEdge/coldfront"
pr="72"
action_repo="docker/login-action"
action_sha="dbcb813823bdd20940b903addbd779551569679f"

echo "== PR review decision and merge requirements =="
gh pr view "$pr" --repo "$repo" \
  --json reviewDecision,reviews,latestReviews,mergeStateStatus \
  --jq '{
    mergeStateStatus,
    reviewDecision,
    reviews: [.reviews[]? | {
      author: .author.login,
      state: .state,
      submittedAt: .submittedAt
    }],
    latestReviews: [.latestReviews[]? | {
      author: .author.login,
      state: .state,
      submittedAt: .submittedAt
    }]
  }'

echo
echo "== Branch protection and required contexts for main =="
gh api "repos/$repo/branches/main/protection" \
  --jq '{
    required_status_checks: (
      .required_status_checks // null |
      if . == null then null else {
        strict,
        contexts,
        checks
      } end
    ),
    required_pull_request_reviews: .required_pull_request_reviews,
    required_conversation_resolution: .required_conversation_resolution
  }' 2>&1 || true

echo
echo "== Official upstream commit identity =="
gh api "repos/$action_repo/commits/$action_sha" \
  --jq '{
    sha: .sha,
    html_url: .html_url,
    message: .commit.message,
    author: .author.login,
    committer: .committer.login,
    verification: .commit.verification
  }'

Length of output: 3758

---

@vyruss Yes. The change is safe to approve and merge from the code and CI evidence available.

• The PR changes one pinned GitHub Action commit in .github/workflows/ci-walkthrough.yml.
• The new commit is the official docker/login-action v4.6.0 commit.
• GitHub reports a valid verified signature for that commit.
• All completed checks passed.
• The full CI matrix was skipped. It did not fail.

GitHub currently blocks the merge because the branch requires a review. No review exists yet. After a required reviewer approves, the PR can merge.

_{You are interacting with an AI system.}