chore(deps): update docker/login-action action to v3.7.0 (core22-8)

Metadata

Project: snapcraft-rocks
Number: #107
Type: pull request
State: open
Author: renovate
Labels: —
Created: 2025-09-29 11:50 AM UTC
Updated: 2026-07-21 01:30 AM UTC
Closed: —

Current evaluation

Renovate bump of docker/login-action v3.5.0 to v3.7.0 on the core22-8 branch (1-line workflow change). Open 336 days, last activity 42 days ago, no comments; CI pending on lint and self-hosted build-rock jobs, CLA passing, automerge disabled.

Suggested action: needs review

Reason: This is a trivial, still-relevant one-line action version bump: the core22-8 branch remains in the workflow trigger pattern (core2[24]-[78]), the prior v3.5.0 bump on the same branch (#90) was merged, and identical v3.7.0 updates are still open on sibling branches (#106, #108). It simply needs a maintainer to review and merge once the pending lint/build-rock CI jobs complete, since automerge is disabled.

Impact: 15 Quick Win: 14.25 Staleness: 50 Complexity: 5 Confidence: 70

Issue body

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [docker/login-action](https://redirect.github.com/docker/login-action) | action | minor | `v3.5.0` → `v3.7.0` | --- ### Release Notes <details> <summary>docker/login-action (docker/login-action)</summary> ### [`v3.7.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.7.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.6.0...v3.7.0) - Add `scope` input to set scopes for the authentication token by [@crazy-max](https://redirect.github.com/crazy-max) in [#912](https://redirect.github.com/docker/login-action/pull/912) - Add support for AWS European Sovereign Cloud ECR by [@dphi](https://redirect.github.com/dphi) in [#914](https://redirect.github.com/docker/login-action/pull/914) - Ensure passwords are redacted with `registry-auth` input by [@crazy-max](https://redirect.github.com/crazy-max) in [#911](https://redirect.github.com/docker/login-action/pull/911) - build(deps): bump lodash from 4.17.21 to 4.17.23 in [#915](https://redirect.github.com/docker/login-action/pull/915) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.6.0...v3.7.0> ### [`v3.6.0`](https://redirect.github.com/docker/login-action/releases/tag/v3.6.0) [Compare Source](https://redirect.github.com/docker/login-action/compare/v3.5.0...v3.6.0) - Add `registry-auth` input for raw authentication to registries by [@crazy-max](https://redirect.github.com/crazy-max) in [#887](https://redirect.github.com/docker/login-action/pull/887) - Bump [@aws-sdk/client-ecr](https://redirect.github.com/aws-sdk/client-ecr) to 3.890.0 in [#882](https://redirect.github.com/docker/login-action/pull/882) [#890](https://redirect.github.com/docker/login-action/pull/890) - Bump [@aws-sdk/client-ecr-public](https://redirect.github.com/aws-sdk/client-ecr-public) to 3.890.0 in [#882](https://redirect.github.com/docker/login-action/pull/882) [#890](https://redirect.github.com/docker/login-action/pull/890) - Bump [@docker/actions-toolkit](https://redirect.github.com/docker/actions-toolkit) from 0.62.1 to 0.63.0 in [#883](https://redirect.github.com/docker/login-action/pull/883) - Bump brace-expansion from 1.1.11 to 1.1.12 in [#880](https://redirect.github.com/docker/login-action/pull/880) - Bump undici from 5.28.4 to 5.29.0 in [#879](https://redirect.github.com/docker/login-action/pull/879) - Bump tmp from 0.2.3 to 0.2.4 in [#881](https://redirect.github.com/docker/login-action/pull/881) **Full Changelog**: <https://github.com/docker/login-action/compare/v3.5.0...v3.6.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/canonical/snapcraft-rocks).

Evaluation history

Date	Model	Scores	Action	Summary
2026-09-01 05:03 AM UTC	qwen/qwen3.8-27b	Impact: 15 Quick Win: 14.25 Staleness: 50 Complexity: 5 Confidence: 70	needs review	Renovate bump of docker/login-action v3.5.0 to v3.7.0 on the core22-8 branch (1-line workflow change). Open 336 days, last activity 42 days ago, no comments; CI pending on lint and self-hosted build-rock jobs, CLA passing, automerge disabled.
2026-07-22 01:22 PM UTC	qwen/qwen3.6-35b-a3b	Staleness: 10 Complexity: 5 Confidence: 90	needs review	Updates docker/login-action from v3.5.0 to v3.7.0. Currently pending CI checks and awaiting manual merge as automerge is disabled.
2026-07-09 04:31 AM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 50 Complexity: 10 Confidence: 85	needs review	Updates docker/login-action from v3.5.0 to v3.7.0. Minor dependency bump adding features and security patches. Inactive for approximately three months with no comments or maintainer feedback.
2026-06-17 03:07 PM UTC	qwen3.6-35b-a3b-mtp-q6	Staleness: 75 Complexity: 10 Confidence: 85	close stale	Updates docker/login-action from v3.5.0 to v3.7.0, adding scope input, AWS ECR sovereign cloud support, and password redaction. Submitted by Renovate bot with automerge disabled. Stale for 69 days with no comments; awaiting manual review and merge.

Update history

Date	Change
2026-07-21 01:30 AM UTC	updated

Related work

Related To: snapcraft-rocks#106 (confidence 85%)
Same docker/login-action v3.7.0 update on the sibling core22-7 branch, also open.
Related To: snapcraft-rocks#108 (confidence 85%)
Same docker/login-action v3.7.0 update on the sibling core24-8 branch, also open.
Related To: snapcraft-rocks#90 (confidence 80%)
Prior docker/login-action v3.5.0 bump on the same core22-8 branch; merged, confirming this branch is actively maintained.

Related issues

Issue	Project	State	Summary	Similarity
#108 chore(deps): update docker/login-action action to v3.7.0 (core24-8)	snapcraft-rocks	open	Renovate bot PR bumping docker/login-action from v3.5.0 to v3.7.0 on the core24-8 branch. 1-line change, 0 comments, no maintainer review. CI: CLA+lint pass, self-hosted build-rock (arm64/amd64) still pending.	95%
#106 chore(deps): update docker/login-action action to v3.7.0 (core22-7)	snapcraft-rocks	open	Renovate bot PR bumping docker/login-action v3.5.0 to v3.7.0 on core22-7 branch. 336 days old, no maintainer engagement, CI partially failing. Current workflow no longer uses docker/login-action or targets core22 branches.	92%
#89 chore(deps): update docker/login-action action to v3.5.0 (core22-7)	snapcraft-rocks	merged	Merged automated dependency update upgrading docker/login-action to v3.5.0. The PR was temporarily held pending verification of a successful publish, which succeeded, allowing the merge after passing all CI checks.	88%
#91 chore(deps): update docker/login-action action to v3.5.0 (core24-8)	snapcraft-rocks	merged	Merged automated dependency update for docker/login-action from v3.4.0 to v3.5.0 on the core24-8 branch. Approved by one reviewer and passed all CI checks.	88%
#90 chore(deps): update docker/login-action action to v3.5.0 (core22-8)	snapcraft-rocks	merged	Merged docker/login-action v3.5.0 update on core22-8. Approved, passed CI, and merged after verifying successful publish operations. Adds dual-stack AWS ECR support and bumps AWS SDK dependencies.	86%
#549 chore(deps): update github actions (major)	craft-parts	merged	Merged automated update upgrading actions/checkout to v4 and Ubuntu runner to 22.04. Approved by three reviewers and passed CI. An initial linter failure due to PEP 668 changes was resolved via a workaround.	70%
#961 chore(deps): update actions/checkout action to v3	charmcraft	merged	Merged automated dependency update upgrading actions/checkout from v2 to v3. Approved by one reviewer, passed CI checks, and modified four files with minimal line changes.	70%