Skip to content

Commit bd2db9b

Browse files
ci(deps): keep docker/login-action on the floating v4 major
Dependabot's group bump narrowed this pin from `@v3` to the exact patch `@v4.5.2`. Two problems with that. Every other action ref in the repo is pinned to a floating major (`@vN`) — after the group bump this was the only exception left. And an exact patch stops fixes inside v4 from arriving on their own, while making Dependabot open a PR for every login-action patch release. `refs/tags/v4` exists and floats, so `@v4` is the same upgrade with the convention kept. It is not a stale-latest question either: v4.6.0 was released 2026-07-29, two days before this PR was opened, so the exact pin was already behind when it landed.
1 parent 2a35d71 commit bd2db9b

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/build-ollama-image.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
steps:
2929
- uses: actions/checkout@v7
3030
- name: Log in to ghcr
31-
uses: docker/login-action@v4.5.2
31+
uses: docker/login-action@v4
3232
with:
3333
registry: ghcr.io
3434
username: ${{ github.actor }}

0 commit comments

Comments
 (0)