chore(deps): update docker/login-action action to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	major	v3.7.0 → v4.1.0

---

Release Notes

docker/login-action (docker/login-action)

v4.1.0

Compare Source

• Fix scoped Docker Hub cleanup path when registry is omitted by @​crazy-max in #​945
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1020.0 in #​930
• Bump @​docker/actions-toolkit from 0.77.0 to 0.86.0 in #​932 #​936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #​952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #​942
• Bump flatted from 3.3.3 to 3.4.2 in #​944
• Bump glob from 10.3.12 to 10.5.0 in #​940
• Bump handlebars from 4.7.8 to 4.7.9 in #​949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #​937
• Bump lodash from 4.17.23 to 4.18.1 in #​958
• Bump minimatch from 3.1.2 to 3.1.5 in #​941
• Bump picomatch from 4.0.3 to 4.0.4 in #​948
• Bump undici from 6.23.0 to 6.24.1 in #​938

Full Changelog: docker/login-action@v4.0.0...v4.1.0

v4.0.0

Compare Source

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @​crazy-max in #​929
• Switch to ESM and update config/test wiring by @​crazy-max in #​927
• Bump @​actions/core from 1.11.1 to 3.0.0 in #​919
• Bump @​aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #​909 #​920
• Bump @​aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #​909 #​920
• Bump @​docker/actions-toolkit from 0.63.0 to 0.77.0 in #​910 #​928
• Bump @​isaacs/brace-expansion from 5.0.0 to 5.0.1 in #​921
• Bump js-yaml from 4.1.0 to 4.1.1 in #​901

Full Changelog: docker/login-action@v3.7.0...v4.0.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Renovate PR Review Results

⚖️ Safety Assessment: ✅ Safe

🔍 Release Content Analysis

Major Changes in v4.0.0:

• Runtime Upgrade: Migrated to Node 24 as the default runtime (requires Actions Runner v2.327.1 or later)
• Module System: Switched from CommonJS to ES modules (ESM)
• Dependency Updates:
  • @actions/core: 1.11.1 → 3.0.0 (major version bump)
  • @docker/actions-toolkit: 0.63.0 → 0.77.0
  • AWS SDK clients: 3.890.0 → 3.1000.0

Improvements in v4.1.0:

• Bug Fix: Fixed scoped Docker Hub cleanup path when registry is omitted
• Security Patches: Multiple dependency security updates including:
  • lodash: 4.17.23 → 4.18.1
  • handlebars: 4.7.8 → 4.7.9
  • undici: 6.23.0 → 6.24.1
  • fast-xml-parser: 5.3.4 → 5.3.6
  • minimatch: 3.1.2 → 3.1.5
• Further Updates: @docker/actions-toolkit 0.77.0 → 0.86.0

Breaking Changes:
None that affect this codebase. The action's inputs and outputs remain identical between v3.7.0 and v4.1.0.

🎯 Impact Scope Investigation

Usage Location:

• Single usage in .github/workflows/release-please.yml:58
• Used in the publish job for authenticating to GitHub Container Registry (ghcr.io)

Current Implementation:

- uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0
  with:
    registry: ghcr.io
    username: ${{ github.actor }}
    password: ${{ github.token }}

Compatibility Analysis:

• Runner Compatibility: The workflow uses ubuntu-latest, which as of April 2026 runs Ubuntu 24.04 with GitHub Actions runner v2.328.0+. This runner version supports Node 24, which is required by docker/login-action v4.
• GitHub's Node 24 Timeline: GitHub will begin using Node 24 as default on June 2, 2026, making this upgrade proactive and aligned with GitHub's migration timeline.
• Input Parameters: All inputs used (registry, username, password) remain unchanged and fully compatible.
• No Code Changes Required: The action interface is backward compatible; no workflow modifications needed.

Impact on Other Dependencies:

• No cascading dependency impacts identified
• No configuration file changes required
• The action operates independently within the Docker ecosystem

💡 Recommended Actions

Immediate Actions:

1. Safe to Merge: This PR can be merged immediately without any code modifications
2. No Migration Required: The action inputs/outputs are fully backward compatible

Post-Merge Verification:

1. Monitor the next release workflow run to ensure successful Docker authentication and image publishing
2. Verify no issues with the fixed Docker Hub cleanup path (though this codebase uses ghcr.io, not Docker Hub)

Benefits of This Update:

• Proactive alignment with GitHub's Node 24 migration (effective June 2, 2026)
• Security improvements through dependency updates (lodash, handlebars, undici, etc.)
• Bug fixes for Docker Hub scoped registry handling
• Future-proofing against Node 20 deprecation in fall 2026

🔗 Reference Links

• docker/login-action v4.1.0 Release Notes
• docker/login-action v4.0.0 Release Notes
• GitHub Actions Runner v2.327.1
• Deprecation of Node 20 on GitHub Actions runners
• GitHub-hosted runners reference

Generated by koki-develop/claude-renovate-review