Commit bd2db9b
committed
ci(deps): keep docker/login-action on the floating v4 major
Dependabot's group bump narrowed this pin from `@v3` to the exact patch
`@v4.5.2`. Two problems with that. Every other action ref in the repo is
pinned to a floating major (`@vN`) — after the group bump this was the
only exception left. And an exact patch stops fixes inside v4 from
arriving on their own, while making Dependabot open a PR for every
login-action patch release.
`refs/tags/v4` exists and floats, so `@v4` is the same upgrade with the
convention kept. It is not a stale-latest question either: v4.6.0 was
released 2026-07-29, two days before this PR was opened, so the exact
pin was already behind when it landed.1 parent 2a35d71 commit bd2db9b
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | | - | |
| 31 | + | |
32 | 32 | | |
33 | 33 | | |
34 | 34 | | |
| |||
0 commit comments