chore(deps): update docker/login-action action to v4.5.2

[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
docker/login-action	action	minor	v4.2.0 → v4.5.2	v4.6.0

---

Release Notes

docker/login-action (docker/login-action)

v4.5.2

Compare Source

• Surface Docker Hub OIDC error responses by @​crazy-max in #​1058

Full Changelog: docker/login-action@v4.5.1...v4.5.2

v4.5.1

Compare Source

• Support dhi.io as Docker Hub OIDC registry by @​crazy-max in #​1054

Full Changelog: docker/login-action@v4.5.0...v4.5.1

v4.5.0

Compare Source

• Docker Hub OIDC login support by @​crazy-max in #​1048
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1091.0 in #​1037
• Bump @​docker/actions-toolkit from 0.92.0 to 0.94.0 in #​1044 #​1050
• Bump brace-expansion from 1.1.13 to 1.1.16 in #​1046
• Bump js-yaml from 5.2.0 to 5.2.1 in #​1038

Full Changelog: docker/login-action@v4.4.0...v4.5.0

v4.4.0

Compare Source

• Skip empty registry-auth secret mask by @​crazy-max in #​1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 #​1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Dependency Bump Evaluation

Version change: docker/login-action v4.2.0 → v4.5.2 (minor, spans 5 releases)
Semver bump type: minor

Changes (v4.3.0–v4.5.2):

• v4.3.0: Internal dependency bumps (AWS SDK, sigstore, undici), esbuild bundle fix
• v4.4.0: Skip empty registry-auth secret mask, AWS SDK bumps
• v4.5.0: Docker Hub OIDC login support (new additive feature), dependency bumps
• v4.5.1: Support dhi.io as Docker Hub OIDC registry
• v4.5.2: Surface Docker Hub OIDC error responses

Breaking changes: None

Security concerns: None — internal dependency bumps and additive OIDC features only

Impact on codebase: The workflow uses standard username/password authentication to ghcr.io. None of the new Docker Hub OIDC features are relevant to this login method. The only file changed is .github/workflows/build.yaml (SHA pin + version comment update on line 41). No impact on existing behavior.

Recommendation: SAFE TO MERGE — once CI is green

Notes: CI checks (build, test) were still in progress at time of evaluation. Lint passed. The bump is purely additive — all new functionality (Docker Hub OIDC) is opt-in and not used by this workflow.

— Claude Code