This is an automated email from the ASF dual-hosted git repository.
jshao pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/main by this push:
new 0ed25153c1 build(deps): bump docker/login-action from 2 to 3 (#6586)
0ed25153c1 is described below
commit 0ed25153c109ea0bbb24c41756d785638f4a9448
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Mar 5 11:30:40 2025 +0800
build(deps): bump docker/login-action from 2 to 3 (#6586)
Bumps [docker/login-action](https://github.com/docker/login-action) from
2 to 3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases";>docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.0.0</h2>
<ul>
<li>Node 20 as default runtime (requires <a
href="https://github.com/actions/runner/releases/tag/v2.308.0";>Actions
Runner v2.308.0</a> or later) by <a
href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/593";>docker/login-action#593</a></li>
<li>Bump <code>@actions/core</code> from 1.10.0 to 1.10.1 in <a
href="https://redirect.github.com/docker/login-action/pull/598";>docker/login-action#598</a></li>
<li>Bump <code>@aws-sdk/client-ecr</code> and
<code>@aws-sdk/client-ecr-public</code> to 3.410.0 in <a
href="https://redirect.github.com/docker/login-action/pull/555";>docker/login-action#555</a>
<a
href="https://redirect.github.com/docker/login-action/pull/560";>docker/login-action#560</a>
<a
href="https://redirect.github.com/docker/login-action/pull/582";>docker/login-action#582</a>
<a
href="https://redirect.github.com/docker/login-action/pull/599";>docker/login-action#599</a></li>
<li>Bump semver from 6.3.0 to 6.3.1 in <a
href="https://redirect.github.com/docker/login-action/pull/556";>docker/login-action#556</a></li>
<li>Bump https-proxy-agent to 7.0.2 <a
href="https://redirect.github.com/docker/login-action/pull/561";>docker/login-action#561</a>
<a
href="https://redirect.github.com/docker/login-action/pull/588";>docker/login-action#588</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v2.2.0...v3.0.0";>https://github.com/docker/login-action/compare/v2.2.0...v3.0.0</a></p>
<h2>v2.2.0</h2>
<ul>
<li>Switch to actions-toolkit implementation by <a
href="https://github.com/crazy-max";><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/409";>docker/login-action#409</a>
<a
href="https://redirect.github.com/docker/login-action/pull/470";>docker/login-action#470</a>
<a
href="https://redirect.github.com/docker/login-action/pull/476";>docker/login-action#476</a></li>
<li>Bump <code>@aws-sdk/client-ecr</code> and
<code>@aws-sdk/client-ecr-public</code> to 3.347.1 in <a
href="https://redirect.github.com/docker/login-action/pull/524";>docker/login-action#524</a>
<a
href="https://redirect.github.com/docker/login-action/pull/364";>docker/login-action#364</a>
<a
href="https://redirect.github.com/docker/login-action/pull/363";>docker/login-action#363</a></li>
<li>Bump minimatch from 3.0.4 to 3.1.2 in <a
href="https://redirect.github.com/docker/login-action/pull/354";>docker/login-action#354</a></li>
<li>Bump json5 from 2.2.0 to 2.2.3 in <a
href="https://redirect.github.com/docker/login-action/pull/378";>docker/login-action#378</a></li>
<li>Bump http-proxy-agent from 5.0.0 to 7.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/509";>docker/login-action#509</a></li>
<li>Bump https-proxy-agent from 5.0.1 to 7.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/508";>docker/login-action#508</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v2.1.0...v2.2.0";>https://github.com/docker/login-action/compare/v2.1.0...v2.2.0</a></p>
<h2>v2.1.0</h2>
<ul>
<li>Ensure AWS temp credentials are redacted in workflow logs by <a
href="https://github.com/crazy-max";><code>@crazy-max</code></a> (<a
href="https://redirect.github.com/docker/login-action/issues/275";>#275</a>)</li>
<li>Bump <code>@actions/core</code> from 1.6.0 to 1.10.0 (<a
href="https://redirect.github.com/docker/login-action/issues/252";>#252</a>
<a
href="https://redirect.github.com/docker/login-action/issues/292";>#292</a>)</li>
<li>Bump <code>@aws-sdk/client-ecr</code> from 3.53.0 to 3.186.0 (<a
href="https://redirect.github.com/docker/login-action/issues/298";>#298</a>)</li>
<li>Bump <code>@aws-sdk/client-ecr-public</code> from 3.53.0 to 3.186.0
(<a
href="https://redirect.github.com/docker/login-action/issues/299";>#299</a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v2.0.0...v2.1.0";>https://github.com/docker/login-action/compare/v2.0.0...v2.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/docker/login-action/commit/9780b0c442fbb1117ed29e0efdff1e18412f7567";><code>9780b0c</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/741";>#741</a>
from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
<li><a
href="https://github.com/docker/login-action/commit/2fa130caf4961ac37a295018c0f97fa9da3e1f52";><code>2fa130c</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/5e87b2aca7d49b75a206090eca3b79f40316332b";><code>5e87b2a</code></a>
build(deps): bump https-proxy-agent</li>
<li><a
href="https://github.com/docker/login-action/commit/e0394952cebdc98290d4844a810ce80c18a05e48";><code>e039495</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/754";>#754</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="https://github.com/docker/login-action/commit/9af18aa7d8432fc31be2d1180f4bd68f162efb1c";><code>9af18aa</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/docker/login-action/commit/668190adc5b80f56970e2513a4c8783c3b738c80";><code>668190a</code></a>
switch to Docker exec</li>
<li><a
href="https://github.com/docker/login-action/commit/be5150d9fe8f63dc1e2f68759894be69bac660c3";><code>be5150d</code></a>
build(deps): bump <code>@docker/actions-toolkit</code> from 0.24.0 to
0.35.0</li>
<li><a
href="https://github.com/docker/login-action/commit/e80ebcad716081acf5e6f0df3180e53a003ee605";><code>e80ebca</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/730";>#730</a>
from docker/dependabot/npm_and_yarn/braces-3.0.3</li>
<li><a
href="https://github.com/docker/login-action/commit/75ee3eaf5349e1d9e6aae6b1969b8a30368dd421";><code>75ee3ea</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/733";>#733</a>
from docker/dependabot/github_actions/docker/bake-act...</li>
<li><a
href="https://github.com/docker/login-action/commit/793c19c8fc1a0a6e836dc7ff6d64f331d131a3fb";><code>793c19c</code></a>
build(deps): bump docker/bake-action from 4 to 5</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/login-action/compare/v2...v3";>compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <supp...@github.com>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
.github/workflows/docker-image.yml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/.github/workflows/docker-image.yml
b/.github/workflows/docker-image.yml
index de31a7ded8..31fb940740 100644
--- a/.github/workflows/docker-image.yml
+++ b/.github/workflows/docker-image.yml
@@ -106,7 +106,7 @@ jobs:
uses: docker/setup-qemu-action@v3
- name: Login to Docker Hub
- uses: docker/login-action@v2
+ uses: docker/login-action@v3
with:
username: ${{ github.event.inputs.username }}
password: ${{ secrets.DOCKER_REPOSITORY_PASSWORD }}
