chore(deps): bump docker/login-action from 4.5.2 to 4.6.0

[dependabot]

Bumps docker/login-action from 4.5.2 to 4.6.0.

Release notes

Sourced from docker/login-action's releases.

v4.6.0

• Harden buildx scoped config path handling by @​crazy-max in docker/login-action#1059
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1095.0 in docker/login-action#1051
• Bump js-yaml from 5.2.1 to 5.2.2 in docker/login-action#1057
• Bump postcss from 8.5.10 to 8.5.22 in docker/login-action#1056

Full Changelog: docker/login-action@v4.5.2...v4.6.0

Commits

• dbcb813 Merge pull request #1051 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• 5bcb015 [dependabot skip] chore: update generated content
• b30b2f2 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• 9087f1e Merge pull request #1057 from docker/dependabot/npm_and_yarn/js-yaml-5.2.2
• 0009830 [dependabot skip] chore: update generated content
• 2325523 build(deps): bump js-yaml from 5.2.1 to 5.2.2
• 4ec1d4a Merge pull request #1056 from docker/dependabot/npm_and_yarn/postcss-8.5.22
• 5fc99ba Merge pull request #1053 from docker/dependabot/github_actions/aws-actions/co...
• e512bd5 Merge pull request #1052 from docker/dependabot/github_actions/codeql-actions...
• a146c91 Merge pull request #1059 from crazy-max/harden-buildx-scope-paths
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🤖 Claude Code Review

PR Review: Bump docker/login-action from 4.5.2 to 4.6.0

This is a single-line dependency bump in .github/workflows/pytest-linux.yaml (line 52), updating the pinned version of docker/login-action from v4.5.2 to v4.6.0. This is a minor version bump of a GitHub Action, consistent with the recent commit history (there are several other docker/login-action bumps in the log, likely automated via Dependabot).

Code Quality

• ✅ Follows existing style convention — version is pinned to a specific tag (@v4.6.0), consistent with how the action was already referenced.
• ✅ No commented-out code.
• ✅ N/A — no variable names involved.
• ✅ N/A — no duplication introduced.
• ✅ No defects identified. This is a well-contained, single-purpose version bump with no logic changes. Minor version bumps of docker/login-action are low-risk (no breaking changes expected between 4.5.x → 4.6.x per semver).
• ✅ No .claude/CLAUDE.md changes in this diff.

Testing

• ✅ N/A — CI workflow version bump, no new functions/endpoints introduced.
• ⚠️ No direct test validates the workflow itself beyond CI running successfully on this PR (standard for workflow file changes — the CI run itself is the test).

Documentation

• ✅ N/A — no README/API/CHANGELOG updates needed for a CI Action version bump.

Security

• ✅ No hardcoded credentials — secrets.DOCKERHUB_USERNAME / secrets.DOCKERHUB_ACCESS_TOKEN are referenced via GitHub Secrets, not modified in this diff.
• ✅ No input validation concerns.
• ✅ No error handling changes.
• ✅ No sensitive data in logs.
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff.

Overall

No issues found. This is a safe, routine dependency bump. One minor note: since this is a third-party GitHub Action, it's worth confirming the tag v4.6.0 is pinned to an immutable commit SHA if the project's supply-chain security policy requires SHA-pinning for actions (some orgs require uses: docker/login-action@<full-sha> # v4.6.0 instead of a mutable tag) — but since the existing code already used tag-based pinning (@v4.5.2), this change is consistent with prior practice and not a regression.

Verdict: ✅ Approve

Automated code review analyzing defects and coding standards

[github-actions]

Super-linter summary

Language	Validation result
CHECKOV	Pass ✅
GITHUB_ACTIONS	Pass ✅
GITHUB_ACTIONS_ZIZMOR	Pass ✅
GITLEAKS	Pass ✅
GIT_MERGE_CONFLICT_MARKERS	Pass ✅
JSCPD	Pass ✅
PRE_COMMIT	Pass ✅
SPELL_CODESPELL	Pass ✅
TRIVY	Pass ✅
YAML	Pass ✅
YAML_PRETTIER	Pass ✅

All files and directories linted successfully

For more information, see the GitHub Actions workflow run

Powered by Super-linter

[github-actions]

Coverage report

Click to see where and how coverage changed

File	Statements	Missing	Coverage	Coverage (new stmts)	Lines missing
src/senzing
szengineflags.py
szerror.py
Project Total

This report was generated by python-coverage-comment-action

[github-actions]

🤖 Claude Code Review

Code Review

Scope: Single-line dependency bump — docker/login-action from v4.5.2 → v4.6.0 in .github/workflows/pytest-linux.yaml:52. This is an automated Dependabot-style CI dependency update.

Code Quality

• ✅ Style conventions — Follows existing workflow syntax and pinning convention (explicit version tag).
• ✅ No commented-out code — N/A, none present.
• ✅ Meaningful variable names — N/A, no variables involved.
• ✅ DRY principle — N/A.
• ✅ Defects — No logic errors possible in a version string bump. docker/login-action v4.6.0 is a maintenance release; no breaking changes affect the surrounding with: block (username/password inputs unchanged at .github/workflows/pytest-linux.yaml:53-54).
• ✅ CLAUDE.md consideration — Not touched by this diff; no local-environment-specific content introduced.

Testing

• ✅ N/A — Infrastructure/CI version bump; no new functions, endpoints, or logic requiring unit/integration tests.
• ✅ Edge cases — N/A.
• ✅ Coverage — N/A, no source code changed.

Documentation

• ✅ README — Not applicable to this change.
• ✅ API docs — Not applicable.
• ✅ Inline comments — Not applicable, no complex logic.
• ⚠️ CHANGELOG.md — Not updated, but consistent with prior practice in this repo (e.g. f05074f, 1c3cb46, 2196334 — recent dependency bumps also did not touch CHANGELOG.md). Not a blocker.
• ✅ Markdown/CommonMark — No markdown files changed.

Security

• ✅ No hardcoded credentials — Secrets referenced via ${{ secrets.DOCKERHUB_USERNAME }} / ${{ secrets.DOCKERHUB_ACCESS_TOKEN }}, unchanged.
• ✅ Input validation — N/A.
• ✅ Error handling — N/A.
• ✅ No sensitive data in logs — N/A.
• ✅ License files (.lic) — None present in this diff; no AQAAAD-prefixed strings found.

Summary

This is a clean, low-risk dependency bump with no functional impact. No blocking issues found.

Automated code review analyzing defects and coding standards

[github-actions]

🤖 Claude Code Review

This is a trivial dependency version bump — reviewing against the checklist.

Review Summary

PR Diff: Bumps docker/login-action from v4.5.2 to v4.6.0 in .github/workflows/pytest-linux.yaml:52.

Code Quality

• ✅ Style conventions — YAML formatting unchanged, consistent with rest of file
• ✅ No commented-out code
• ✅ Meaningful variable names — N/A (version pin only)
• ✅ DRY principle — N/A
• ✅ Defects — no logic changes; version bump only. GitHub Action version pins are typically bumped via Dependabot and this appears to be exactly that (matches the recent commit history showing dependabot bumps for the same action)
• ✅ CLAUDE.md consideration — no changes to .claude/CLAUDE.md in this diff; existing file is general-purpose and not local-environment-specific

Testing

• N/A — this is a CI workflow version bump, not application code. No unit/integration tests apply.

Documentation

• ✅ README — not applicable
• ✅ API docs — not applicable
• ✅ Inline comments — not applicable, no complex logic introduced
• ❌ CHANGELOG.md not updated — minor; most repos exclude CI-only/dependency-bump changes from CHANGELOG, and existing dependabot-driven bumps in the commit log (e.g. 2196334, a77562d) don't appear to touch CHANGELOG.md either. Flagging per checklist, but likely consistent with existing project convention (not a blocker)
• N/A — Markdown formatting — no .md files changed

Security

• ✅ No hardcoded credentials — secrets.DOCKERHUB_USERNAME/DOCKERHUB_ACCESS_TOKEN still referenced via GitHub Actions secrets, unchanged
• ✅ No input validation concerns
• ✅ No error handling concerns
• ✅ No sensitive data in logs
• ✅ No .lic files or AQAAAD-prefixed strings present in this diff

Verdict

Approve. This is a routine, low-risk dependency version bump for docker/login-action (v4.5.2 → v4.6.0). No code, test, or security concerns. The only checklist gap (CHANGELOG.md) appears consistent with how this repo already handles automated dependency bumps.

Automated code review analyzing defects and coding standards