chore(deps): update docker/login-action action to v3.7.0 (core22-7)
Metadata
Current evaluation
Renovate bot PR bumping docker/login-action v3.5.0 to v3.7.0 on core22-7 branch. 336 days old, no maintainer engagement, CI partially failing. Current workflow no longer uses docker/login-action or targets core22 branches.
Suggested action: close stale
Reason: The current build-rock.yaml workflow only triggers on core2[24]-[78] branches and uses only actions/checkout@v4 and canonical/craft-actions/rockcraft-pack@main — docker/login-action is no longer referenced anywhere in the repo. The PR targets core22-7, a branch that is no longer in the workflow's scope, making the update moot. Additionally, 336 days of inactivity with 0 comments and 0 reviewers, plus failing self-hosted CI, confirm this is no longer actionable.
Impact:
5
Quick Win:
4.75
Staleness:
82
Complexity:
5
Confidence:
75
Issue body
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [docker/login-action](https://redirect.github.com/docker/login-action) | action | minor | `v3.5.0` → `v3.7.0` |
---
### Release Notes
<details>
<summary>docker/login-action (docker/login-action)</summary>
### [`v3.7.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.7.0)
[Compare Source](https://redirect.github.com/docker/login-action/compare/v3.6.0...v3.7.0)
- Add `scope` input to set scopes for the authentication token by [@​crazy-max](https://redirect.github.com/crazy-max) in [#​912](https://redirect.github.com/docker/login-action/pull/912)
- Add support for AWS European Sovereign Cloud ECR by [@​dphi](https://redirect.github.com/dphi) in [#​914](https://redirect.github.com/docker/login-action/pull/914)
- Ensure passwords are redacted with `registry-auth` input by [@​crazy-max](https://redirect.github.com/crazy-max) in [#​911](https://redirect.github.com/docker/login-action/pull/911)
- build(deps): bump lodash from 4.17.21 to 4.17.23 in [#​915](https://redirect.github.com/docker/login-action/pull/915)
**Full Changelog**: <https://github.com/docker/login-action/compare/v3.6.0...v3.7.0>
### [`v3.6.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.6.0)
[Compare Source](https://redirect.github.com/docker/login-action/compare/v3.5.0...v3.6.0)
- Add `registry-auth` input for raw authentication to registries by [@​crazy-max](https://redirect.github.com/crazy-max) in [#​887](https://redirect.github.com/docker/login-action/pull/887)
- Bump [@​aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) to 3.890.0 in [#​882](https://redirect.github.com/docker/login-action/pull/882) [#​890](https://redirect.github.com/docker/login-action/pull/890)
- Bump [@​aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.890.0 in [#​882](https://redirect.github.com/docker/login-action/pull/882) [#​890](https://redirect.github.com/docker/login-action/pull/890)
- Bump [@​docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.62.1 to 0.63.0 in [#​883](https://redirect.github.com/docker/login-action/pull/883)
- Bump brace-expansion from 1.1.11 to 1.1.12 in [#​880](https://redirect.github.com/docker/login-action/pull/880)
- Bump undici from 5.28.4 to 5.29.0 in [#​879](https://redirect.github.com/docker/login-action/pull/879)
- Bump tmp from 0.2.3 to 0.2.4 in [#​881](https://redirect.github.com/docker/login-action/pull/881)
**Full Changelog**: <https://github.com/docker/login-action/compare/v3.5.0...v3.6.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/snapcraft-rocks).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS4xMzEuOSIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoiY29yZTIyLTciLCJsYWJlbHMiOlsiZGVwZW5kZW5jaWVzIl19-->
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| qwen/qwen3.8-27b |
Impact:
5
Quick Win:
4.75
Staleness:
82
Complexity:
5
Confidence:
75
|
close stale | Renovate bot PR bumping docker/login-action v3.5.0 to v3.7.0 on core22-7 branch. 336 days old, no maintainer engagement, CI partially failing. Current workflow no longer uses docker/login-action or targets core22 branches. | |
| qwen/qwen3.6-35b-a3b |
Staleness:
80
Complexity:
5
Confidence:
75
|
needs review | Routine dependency update bumping docker/login-action from v3.5.0 to v3.7.0. Inactive for 104 days with no comments. CI passes on standard runners but fails on self-hosted builds. Awaiting maintainer triage. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
60
Complexity:
10
Confidence:
85
|
keep open | Updates docker/login-action GitHub Action from v3.5.0 to v3.7.0. Includes minor features and security patches. Currently inactive for 91 days with no maintainer comments. | |
| qwen3.6-35b-a3b-mtp-q6 |
Staleness:
60
Complexity:
10
Confidence:
85
|
keep open | Updates docker/login-action from v3.5.0 to v3.7.0. The request is inactive with no comments and automerge disabled, awaiting manual review and merge. |
Update history
No update history recorded yet.
Related work
-
Related To:
snapcraft-rocks#89
(confidence 90%)
Predecessor PR that updated docker/login-action to v3.5.0 on core22-7 (merged); this PR is the follow-up minor bump
-
Related To:
snapcraft-rocks#107
(confidence 85%)
Sibling PR: same docker/login-action v3.7.0 update for core22-8 branch, also still open
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #107 chore(deps): update docker/login-action action to v3.7.0 (core22-8) | snapcraft-rocks | open | Renovate bump of docker/login-action v3.5.0 to v3.7.0 on the core22-8 branch (1-line workflow change). Open 336 days, last activity 42 days ago, no comments; CI pending on lint and self-hosted build-rock jobs, CLA passing, automerge disabled. | |
| #89 chore(deps): update docker/login-action action to v3.5.0 (core22-7) | snapcraft-rocks | merged | Merged automated dependency update upgrading docker/login-action to v3.5.0. The PR was temporarily held pending verification of a successful publish, which succeeded, allowing the merge after passing all CI checks. | |
| #108 chore(deps): update docker/login-action action to v3.7.0 (core24-8) | snapcraft-rocks | open | Renovate bot PR bumping docker/login-action from v3.5.0 to v3.7.0 on the core24-8 branch. 1-line change, 0 comments, no maintainer review. CI: CLA+lint pass, self-hosted build-rock (arm64/amd64) still pending. | |
| #91 chore(deps): update docker/login-action action to v3.5.0 (core24-8) | snapcraft-rocks | merged | Merged automated dependency update for docker/login-action from v3.4.0 to v3.5.0 on the core24-8 branch. Approved by one reviewer and passed all CI checks. | |
| #90 chore(deps): update docker/login-action action to v3.5.0 (core22-8) | snapcraft-rocks | merged | Merged docker/login-action v3.5.0 update on core22-8. Approved, passed CI, and merged after verifying successful publish operations. Adds dual-stack AWS ECR support and bumps AWS SDK dependencies. | |
| #549 chore(deps): update github actions (major) | craft-parts | merged | Merged automated update upgrading actions/checkout to v4 and Ubuntu runner to 22.04. Approved by three reviewers and passed CI. An initial linter failure due to PEP 668 changes was resolved via a workaround. | |
| #1222 chore(deps): update dependency ubuntu to v22 | charmcraft | merged | Merged automated update upgrading the GitHub Actions runner image from Ubuntu 20.04 to 22.04. Approved by two reviewers, passed CI checks, and modified four files. |