This is an automated email from the ASF dual-hosted git repository.

kou pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/arrow.git


The following commit(s) were added to refs/heads/main by this push:
     new 22bbf58006 MINOR: [CI] Bump docker/login-action from 4.6.0 to 4.7.0 
(#55289)
22bbf58006 is described below

commit 22bbf58006b0ad90dadc075b0da2ff13c718be1f
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Oct 28 09:12:17 2026 +0900

    MINOR: [CI] Bump docker/login-action from 4.6.0 to 4.7.0 (#55289)
    
    Bumps [docker/login-action](https://github.com/docker/login-action) from 
4.6.0 to 4.7.0.
    <details>
    <summary>Release notes</summary>
    <p><em>Sourced from <a 
href="https://github.com/docker/login-action/releases";>docker/login-action's 
releases</a>.</em></p>
    <blockquote>
    <h2>v4.7.0</h2>
    <ul>
    <li>Preserve explicit ECR settings in <code>registry-auth</code> by <a 
href="https://github.com/crazy-max";><code>@​crazy-max</code></a> in <a 
href="https://redirect.github.com/docker/login-action/pull/1089";>docker/login-action#1089</a></li>
    <li>Use registry hosts for scoped credentials by <a 
href="https://github.com/crazy-max";><code>@​crazy-max</code></a> in <a 
href="https://redirect.github.com/docker/login-action/pull/1088";>docker/login-action#1088</a></li>
    <li>Raise Docker Hub OIDC max expiry to 6 hours by <a 
href="https://github.com/crazy-max";><code>@​crazy-max</code></a> in <a 
href="https://redirect.github.com/docker/login-action/pull/1068";>docker/login-action#1068</a></li>
    <li>Log Docker Hub OIDC token exchange progress by <a 
href="https://github.com/crazy-max";><code>@​crazy-max</code></a> in <a 
href="https://redirect.github.com/docker/login-action/pull/1061";>docker/login-action#1061</a></li>
    <li>Bump <code>@​aws-sdk/client-ecr</code> and 
<code>@​aws-sdk/client-ecr-public</code> to 3.1154.0 in <a 
href="https://redirect.github.com/docker/login-action/pull/1093";>docker/login-action#1093</a></li>
    <li>Bump <code>@​docker/actions-toolkit</code> from 0.94.0 to 0.107.0 in <a 
href="https://redirect.github.com/docker/login-action/pull/1100";>docker/login-action#1100</a></li>
    <li>Bump <code>@​humanfs/node</code> from 0.16.7 to 0.16.8 in <a 
href="https://redirect.github.com/docker/login-action/pull/1077";>docker/login-action#1077</a></li>
    <li>Bump csv-parse from 7.0.1 to 7.0.3 in <a 
href="https://redirect.github.com/docker/login-action/pull/1078";>docker/login-action#1078</a></li>
    <li>Bump handlebars from 4.7.9 to 4.7.10 in <a 
href="https://redirect.github.com/docker/login-action/pull/1091";>docker/login-action#1091</a></li>
    <li>Bump js-yaml from 5.2.2 to 5.5.0 in <a 
href="https://redirect.github.com/docker/login-action/pull/1066";>docker/login-action#1066</a></li>
    <li>Bump postcss from 8.5.22 to 8.5.26 in <a 
href="https://redirect.github.com/docker/login-action/pull/1071";>docker/login-action#1071</a></li>
    <li>Bump postcss-selector-parser from 7.1.1 to 7.1.6 in <a 
href="https://redirect.github.com/docker/login-action/pull/1092";>docker/login-action#1092</a></li>
    <li>Bump source-map-js from 1.2.1 to 1.2.2 in <a 
href="https://redirect.github.com/docker/login-action/pull/1090";>docker/login-action#1090</a></li>
    <li>Bump undici from 6.27.0 to 6.29.1 in <a 
href="https://redirect.github.com/docker/login-action/pull/1085";>docker/login-action#1085</a></li>
    <li>Bump uuid from 14.0.1 to 14.0.3 in <a 
href="https://redirect.github.com/docker/login-action/pull/1096";>docker/login-action#1096</a></li>
    </ul>
    <p><strong>Full Changelog</strong>: <a 
href="https://github.com/docker/login-action/compare/v4.6.0...v4.7.0";>https://github.com/docker/login-action/compare/v4.6.0...v4.7.0</a></p>
    </blockquote>
    </details>
    <details>
    <summary>Commits</summary>
    <ul>
    <li><a 
href="https://github.com/docker/login-action/commit/81c6f93d4bc991e510b342a00b419b3bb4efc5c6";><code>81c6f93</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1100";>#1100</a> 
from docker/dependabot/npm_and_yarn/docker/actions-t...</li>
    <li><a 
href="https://github.com/docker/login-action/commit/1b16c8d1815e1d951d87a3522ff48a76d073735a";><code>1b16c8d</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1096";>#1096</a> 
from docker/dependabot/npm_and_yarn/uuid-14.0.3</li>
    <li><a 
href="https://github.com/docker/login-action/commit/ac86b5e9e9d2db43b12b2d3afb9140a427d69d65";><code>ac86b5e</code></a>
 [dependabot skip] chore: update generated content</li>
    <li><a 
href="https://github.com/docker/login-action/commit/1476d845f08dd8309a938959a280f2e23c0cba14";><code>1476d84</code></a>
 build(deps): bump <code>@​docker/actions-toolkit</code> from 0.94.0 to 
0.107.0</li>
    <li><a 
href="https://github.com/docker/login-action/commit/503cee68d85e94275776fcc6f5315f19207f7567";><code>503cee6</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1095";>#1095</a> 
from docker/dependabot/github_actions/actions/create...</li>
    <li><a 
href="https://github.com/docker/login-action/commit/f0935357f5c539aeb7ff6b886ba5434ab76e9de3";><code>f093535</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1099";>#1099</a> 
from docker/dependabot/github_actions/codecov/codeco...</li>
    <li><a 
href="https://github.com/docker/login-action/commit/d5ae7f188776587b12b77b45e29ea21332462da9";><code>d5ae7f1</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1098";>#1098</a> 
from docker/dependabot/github_actions/docker/bake-ac...</li>
    <li><a 
href="https://github.com/docker/login-action/commit/6f9750797f6e7186f18c069a7e97abc1dcf1006b";><code>6f97507</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1097";>#1097</a> 
from docker/dependabot/github_actions/docker/bake-ac...</li>
    <li><a 
href="https://github.com/docker/login-action/commit/006d61fa598847d65f6670d1569545fa2af9cf02";><code>006d61f</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1094";>#1094</a> 
from docker/dependabot/github_actions/codeql-actions...</li>
    <li><a 
href="https://github.com/docker/login-action/commit/93f5f522eea5eacabf35cc89b9d19ec23e742471";><code>93f5f52</code></a>
 Merge pull request <a 
href="https://redirect.github.com/docker/login-action/issues/1093";>#1093</a> 
from docker/dependabot/npm_and_yarn/aws-sdk-dependen...</li>
    <li>Additional commits viewable in <a 
href="https://github.com/docker/login-action/compare/dbcb813823bdd20940b903addbd779551569679f...81c6f93d4bc991e510b342a00b419b3bb4efc5c6";>compare
 view</a></li>
    </ul>
    </details>
    <br />
    
    [![Dependabot compatibility 
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.6.0&new-version=4.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
    
    Dependabot will resolve any conflicts with this PR as long as you don't 
alter it yourself. You can also trigger a rebase manually by commenting `@ 
dependabot rebase`.
    
    [//]: # (dependabot-automerge-start)
    [//]: # (dependabot-automerge-end)
    
    ---
    
    <details>
    <summary>Dependabot commands and options</summary>
    <br />
    
    You can trigger Dependabot actions by commenting on this PR:
    - `@ dependabot rebase` will rebase this PR
    - `@ dependabot recreate` will recreate this PR, overwriting any edits that 
have been made to it
    - `@ dependabot show <dependency name> ignore conditions` will show all of 
the ignore conditions of the specified dependency
    - `@ dependabot ignore this major version` will close this PR and stop 
Dependabot creating any more for this major version (unless you reopen the PR 
or upgrade to it yourself)
    - `@ dependabot ignore this minor version` will close this PR and stop 
Dependabot creating any more for this minor version (unless you reopen the PR 
or upgrade to it yourself)
    - `@ dependabot ignore this dependency` will close this PR and stop 
Dependabot creating any more for this dependency (unless you reopen the PR or 
upgrade to it yourself)
    
    </details>
    
    Authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
    Signed-off-by: Sutou Kouhei <[email protected]>
---
 .github/workflows/package_linux.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/package_linux.yml 
b/.github/workflows/package_linux.yml
index 3da39e0a8e..8c68badf89 100644
--- a/.github/workflows/package_linux.yml
+++ b/.github/workflows/package_linux.yml
@@ -231,7 +231,7 @@ jobs:
           rake version:update
           popd
       - name: Login to GitHub Container registry
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # 
v4.6.0
+        uses: docker/login-action@81c6f93d4bc991e510b342a00b419b3bb4efc5c6 # 
v4.7.0
         with:
           registry: ghcr.io
           username: ${{ github.actor }}

Reply via email to