build(deps): bump docker/login-action from 3.7.0 to 4.4.0 by dependabot[bot] · Pull Request #33 · rmems/engram-parser

dependabot · 2026-07-15T02:24:37Z

Bumps docker/login-action from 3.7.0 to 4.4.0.

Release notes

Sourced from docker/login-action's releases.

v4.4.0

Skip empty registry-auth secret mask by @crazy-max in docker/login-action#1035

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Preserve names in esbuild bundle by @crazy-max in docker/login-action#1022

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030

Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027

Bump @sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023

Bump @sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029

Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017

Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028

Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031

Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002

Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020

Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

v4.2.0

Bump @actions/core from 3.0.0 to 3.0.1 in docker/login-action#976

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in docker/login-action#960

Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in docker/login-action#970

Bump brace-expansion from 2.0.1 to 5.0.6 in docker/login-action#993

Bump fast-xml-builder from 1.1.4 to 1.2.0 in docker/login-action#985

Bump fast-xml-parser from 5.3.6 to 5.8.0 in docker/login-action#963

Bump http-proxy-agent and https-proxy-agent to 9.0.0 in docker/login-action#961

Bump postcss from 8.5.6 to 8.5.10 in docker/login-action#979

Bump tar from 6.2.1 to 7.5.15 in docker/login-action#991

Bump vite from 7.3.1 to 7.3.3 in docker/login-action#986

Full Changelog: docker/login-action@v4.1.0...v4.2.0

v4.1.0

Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in docker/login-action#945

Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in docker/login-action#930

Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in docker/login-action#932 docker/login-action#936

Bump brace-expansion from 1.1.12 to 1.1.13 in docker/login-action#952

Bump fast-xml-parser from 5.3.4 to 5.3.6 in docker/login-action#942

Bump flatted from 3.3.3 to 3.4.2 in docker/login-action#944

Bump glob from 10.3.12 to 10.5.0 in docker/login-action#940

Bump handlebars from 4.7.8 to 4.7.9 in docker/login-action#949

Bump http-proxy-agent and https-proxy-agent to 8.0.0 in docker/login-action#937

Bump lodash from 4.17.23 to 4.18.1 in docker/login-action#958

Bump minimatch from 3.1.2 to 3.1.5 in docker/login-action#941

Bump picomatch from 4.0.3 to 4.0.4 in docker/login-action#948

Bump undici from 6.23.0 to 6.24.1 in docker/login-action#938

... (truncated)

Commits

af1e73f Merge pull request #1034 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
da722bd [dependabot skip] chore: update generated content
2916ad6 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
ca0a662 Merge pull request #1035 from crazy-max/fix-registry-auth-empty-mask
c455755 chore: update generated content
4835190 skip empty registry-auth secret mask
992421c Merge pull request #1033 from docker/dependabot/github_actions/docker/bake-ac...
b249b43 Merge pull request #1032 from docker/dependabot/github_actions/docker/bake-ac...
1b67977 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
9d49d6a build(deps): bump docker/bake-action/subaction/matrix
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

Chores
- Improved the Docker image build and publishing workflow by updating the container registry login action to a newer, pinned version for greater reliability.
Style
- Simplified a small internal constant representation used for parsing, with no intended change to behavior.

Bumps [docker/login-action](https://github.com/docker/login-action) from 3.7.0 to 4.4.0. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@c94ce9f...af1e73f) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-07-15T02:24:52Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 49d1b430-6211-4302-9929-55a6eb2d330d

📥 Commits

Reviewing files that changed from the base of the PR and between 0fd2f4f and 411a48e.

📒 Files selected for processing (1)

src/gguf/cursor.rs

📝 Walkthrough

Walkthrough

The Docker build workflow updates its pinned registry login action to v4.4.0, while the GGUF cursor expresses the unchanged magic-byte value with a byte-string literal.

Changes

Docker workflow

Layer / File(s)	Summary
Update registry authentication action `.github/workflows/docker-build.yml`	The registry login step switches from the previous v3 commit to the pinned v4.4.0 commit.

GGUF cursor

Layer / File(s)	Summary
Simplify GGUF magic constant `src/gguf/cursor.rs`	`GGUF_MAGIC` retains its `[u8; 4]` type and value while using `*b"GGUF"` for initialization.

Estimated code review effort: 1 (Trivial) | ~3 minutes

Possibly related PRs

Limen-Neural/engram-parser#17: Touches the Docker workflow and GGUF_MAGIC areas.
Limen-Neural/engram-parser#31: Makes the same GGUF_MAGIC initializer change.

Suggested labels: CI/CD, docker

Suggested reviewers: rmems

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main dependency bump in the workflow changes and is concise and specific.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

_{Comment @coderabbitai help to get the list of available commands.}

codacy-production · 2026-07-15T02:25:31Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results

Complexity 0

Duplication 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

kilo-code-bot · 2026-07-15T02:32:56Z

Code Review Summary

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 file)

src/gguf/cursor.rs

Previous Review Summary (commit 0fd2f4f)

Current summary above is authoritative. Previous snapshots are kept for context only.

Previous review (commit `0fd2f4f`)

Status: No Issues Found | Recommendation: Merge

Files Reviewed (1 file)

.github/workflows/docker-build.yml

_{Reviewed by mimo-v2.5 · Input: 22.5K · Output: 2.3K · Cached: 90.6K}

Clippy byte_char_slices lint flags [b'G', b'G', b'U', b'F'] — use *b"GGUF" instead. Fixes CI failure with -D warnings. Co-Authored-By: Mimo Code agent: MiMo-V2.5

dependabot Bot added the dependencies label Jul 15, 2026

fix: use byte string literal for GGUF_MAGIC constant

411a48e

Clippy byte_char_slices lint flags [b'G', b'G', b'U', b'F'] — use *b"GGUF" instead. Fixes CI failure with -D warnings. Co-Authored-By: Mimo Code agent: MiMo-V2.5

rmems self-assigned this Jul 16, 2026

rmems merged commit 08030e8 into main Jul 16, 2026
6 checks passed

rmems deleted the dependabot/github_actions/docker/login-action-4.4.0 branch July 16, 2026 08:43

coderabbitai Bot mentioned this pull request Jul 16, 2026

build(deps): bump softprops/action-gh-release from 2.0.8 to 3.0.2 #34

Merged

coderabbitai Bot mentioned this pull request Jul 29, 2026

build(deps): bump docker/login-action from 4.4.0 to 4.5.2 #42

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump docker/login-action from 3.7.0 to 4.4.0 - #33

build(deps): bump docker/login-action from 3.7.0 to 4.4.0#33
rmems merged 2 commits into
mainfrom
dependabot/github_actions/docker/login-action-4.4.0

dependabot Bot commented on behalf of github Jul 15, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Jul 15, 2026 •

edited

Loading

Walkthrough

Changes

Uh oh!

codacy-production Bot commented Jul 15, 2026 •

edited

Loading

Uh oh!

kilo-code-bot Bot commented Jul 15, 2026 •

edited

Loading

Previous review (commit `0fd2f4f`)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Jul 15, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v4.4.0

v4.3.0

v4.2.0

v4.1.0

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Uh oh!

codacy-production Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Up to standards ✅

Uh oh!

kilo-code-bot Bot commented Jul 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Code Review Summary

Previous review (commit 0fd2f4f)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Jul 15, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jul 15, 2026 •

edited

Loading

codacy-production Bot commented Jul 15, 2026 •

edited

Loading

kilo-code-bot Bot commented Jul 15, 2026 •

edited

Loading

Previous review (commit `0fd2f4f`)