Skip to content

Bump azure/login from 3.0.1 to 3.0.2 - #596

Merged
cleverchuk merged 1 commit into
mainfrom
dependabot/github_actions/azure/login-3.0.2
Sep 3, 2026
Merged

Bump azure/login from 3.0.1 to 3.0.2#596
cleverchuk merged 1 commit into
mainfrom
dependabot/github_actions/azure/login-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026

Copy link
Copy Markdown
Contributor

Bumps azure/login from 3.0.1 to 3.0.2.

Release notes

Sourced from azure/login's releases.

Azure Login Action v3.0.2

What's Changed

Security & hardening

  • Refactor PowerShell login to a static param()-bound script — eliminates string-interpolation in the AzPS login path so credential/config values can never be re-parsed as PowerShell (injection-safe by construction) by @​MaddyMicrosoft in Azure/login#607
  • Pin third-party GitHub Actions to commit SHAs — supply-chain hardening for the CI/release workflows by @​MaddyMicrosoft in Azure/login#615
  • Add admin-gated Release workflow — reproducible, approval-gated release + rollback pipeline by @​MaddyMicrosoft in Azure/login#610

Telemetry

  • Emit the real action ref in telemetry via GITHUB_ACTION_REF — corrects the previously stale hard-coded value so usage reports the version consumers actually pin by @​MaddyMicrosoft in Azure/login#614

Dependencies

Maintenance & docs

Full Changelog: Azure/login@v3.0.1...v3.1.0

Commits
  • 7ddb5af prepare release v3.0.2
  • d90bae5 Cap @​actions/exec and @​actions/core below the ESM-only 3.x majors (#628)
  • ff48d59 Bump uuid and @​actions/core (#589)
  • a26a331 Bump brace-expansion from 1.1.12 to 1.1.18 (#616)
  • ca06f43 Refactor PS login to use a static param()-bound script (#607)
  • 905554e Add admin-gated Release workflow (#610)
  • 1029b1a Bump the github-actions group across 1 directory with 7 updates (#621)
  • ae37a0d Harden Dependabot config for the CommonJS ncc build (#622)
  • 43c6847 Docs uplift (#620)
  • cf887bb Bump picomatch from 2.3.1 to 2.3.2 (#582)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [azure/login](https://github.com/azure/login) from 3.0.1 to 3.0.2.
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@f5d393a...7ddb5af)

---
updated-dependencies:
- dependency-name: azure/login
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 2, 2026
@dependabot
dependabot Bot requested review from a team as code owners September 2, 2026 19:54
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Sep 2, 2026
@cleverchuk
cleverchuk merged commit 69d7216 into main Sep 3, 2026
16 checks passed
@cleverchuk
cleverchuk deleted the dependabot/github_actions/azure/login-3.0.2 branch September 3, 2026 17:29
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Development

Successfully merging this pull request may close these issues.

1 participant