Skip to content

chore(deps): update redhat-actions/podman-login action to v2 - #987

Open
renovate[bot] wants to merge 1 commit into
devfrom
renovate/redhat-actions-podman-login-2.x
Open

renovate[bot] wants to merge 1 commit into
devfrom
renovate/redhat-actions-podman-login-2.x

Conversation

@renovate

@renovate renovate Bot commented Oct 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
redhat-actions/podman-login action major v1 → v2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

redhat-actions/podman-login (redhat-actions/podman-login)

v2.0

Compare Source

Breaking Changes
  • Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
  • Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
  • Registry input is now automatically lowercased to comply with OCI spec
Bug Fixes
  • Fix registryLogout() not cleaning up Docker config credentials in the post step (#​36)
  • Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#​47)
  • Fix ENOENT error when ~/.docker directory does not exist (#​42)
Features
  • Add tls_verify input to skip TLS certificate verification for self-signed registries
  • Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#​37)
  • Automatically lowercase registry input to prevent OCI naming errors (#​44)
Dependency Upgrades
  • TypeScript 5.x to 6.0.3
  • ESLint 8 (EOL) to 10 with flat config
  • @aws-sdk/client-ecr 3.535 to 3.1094
  • @vercel/ncc 0.38 to 0.44
  • Remove unused @aws-sdk/util-base64
  • Resolve all npm audit vulnerabilities
CI & Infrastructure
  • Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
  • Add workflow-level permissions: contents: read
  • Add concurrency groups to cancel redundant CI runs
  • Pin runs-on to ubuntu-24.04
  • Add Dependabot for npm and GitHub Actions updates
  • Add SECURITY.md
  • Enable secret scanning and push protection
  • Remove deprecated CRDA vulnerability scan workflow

v1.7

Compare Source

v1.6

Compare Source

  • Update action/core dependency to 1.10.0

v1.5

Compare Source

v1.4

Compare Source

  • Add ability to login to AWS ECR repositories. More details at #​23

v1.3

Compare Source

  • Add support to provide custom auth file path instead of using default ones set by podman. More details here.
  • Add --verbose flag in the login command that will give more detailed output.

v1.2

Compare Source

  • Add ability to pull image from docker after login. #​15

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies Issues related to dependency updates or management label Oct 3, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Issues related to dependency updates or management

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants