From 5eb9c51ee923b45d9912b2800528afd3d3d10d44 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 2 Aug 2026 22:53:48 +0000
Subject: [PATCH] chore(deps): bump the actions-minor-patch group with 2
 updates

Bumps the actions-minor-patch group with 2 updates: [docker/login-action](https://github.com/docker/login-action) and [actions/attest](https://github.com/actions/attest).


Updates `docker/login-action` from 4.5.0 to 4.6.0
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/06fb636fac595d6fb4b28a5dfcb21a6f5091859c...dbcb813823bdd20940b903addbd779551569679f)

Updates `actions/attest` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/actions/attest/releases)
- [Changelog](https://github.com/actions/attest/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest/compare/f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6...508db95dd578ae2727ebd6217d5ba78e4fbda05d)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions-minor-patch
- dependency-name: actions/attest
  dependency-version: 4.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/docker.yml   | 14 +++++++-------
 .github/workflows/security.yml |  2 +-
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
index 76cb432..4bdecd9 100644
--- a/.github/workflows/docker.yml
+++ b/.github/workflows/docker.yml
@@ -326,7 +326,7 @@ jobs:
 
       - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
-      - uses: docker/login-action@06fb636fac595d6fb4b28a5dfcb21a6f5091859c # v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -455,7 +455,7 @@ jobs:
         if: >-
           needs.publish-gate.outputs.release_is_public != 'true' &&
           steps.image-provenance.outputs.present != 'true'
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
         with:
           subject-name: ${{ needs.publish-gate.outputs.image }}
           subject-digest: ${{ steps.select-image.outputs.digest }}
@@ -489,7 +489,7 @@ jobs:
         if: >-
           needs.publish-gate.outputs.release_is_public != 'true' &&
           steps.image-sbom.outputs.present != 'true'
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
         with:
           subject-name: ${{ needs.publish-gate.outputs.image }}
           subject-digest: ${{ steps.select-image.outputs.digest }}
@@ -524,7 +524,7 @@ jobs:
 
       - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
-      - uses: docker/login-action@06fb636fac595d6fb4b28a5dfcb21a6f5091859c # v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
@@ -733,7 +733,7 @@ jobs:
         if: >-
           needs.publish-gate.outputs.release_is_public != 'true' &&
           steps.binary-provenance.outputs.present != 'true'
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
         with:
           subject-path: notify/dist/vaultsync-notify_*
 
@@ -765,7 +765,7 @@ jobs:
         if: >-
           needs.publish-gate.outputs.release_is_public != 'true' &&
           steps.binary-sbom.outputs.present != 'true'
-        uses: actions/attest@f7c74d28b9d84cb8768d0b8ca14a4bac6ef463e6 # v4.2.0
+        uses: actions/attest@508db95dd578ae2727ebd6217d5ba78e4fbda05d # v4.2.1
         with:
           subject-path: notify/dist/vaultsync-notify_*
           sbom-path: notify/dist/SBOM.spdx.json
@@ -1512,7 +1512,7 @@ jobs:
 
       - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4
 
-      - uses: docker/login-action@06fb636fac595d6fb4b28a5dfcb21a6f5091859c # v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.repository_owner }}
diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
index 9c4107f..9e411a1 100644
--- a/.github/workflows/security.yml
+++ b/.github/workflows/security.yml
@@ -176,7 +176,7 @@ jobs:
           printf '%s\n' "$digest" | grep -Eq '^sha256:[0-9a-f]{64}$'
           printf 'digest=%s\n' "$digest" >> "$GITHUB_OUTPUT"
 
-      - uses: docker/login-action@06fb636fac595d6fb4b28a5dfcb21a6f5091859c # v4
+      - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}