chore(deps): bump docker/login-action from 4.2.0 to 4.4.0

[dependabot]

Bumps docker/login-action from 4.2.0 to 4.4.0.

Release notes

Sourced from docker/login-action's releases.

v4.4.0

• Skip empty registry-auth secret mask by @​crazy-max in docker/login-action#1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 docker/login-action#1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/login-action#1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028
• Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031
• Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002
• Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020
• Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits

• af1e73f Merge pull request #1034 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• da722bd [dependabot skip] chore: update generated content
• 2916ad6 build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• ca0a662 Merge pull request #1035 from crazy-max/fix-registry-auth-empty-mask
• c455755 chore: update generated content
• 4835190 skip empty registry-auth secret mask
• 992421c Merge pull request #1033 from docker/dependabot/github_actions/docker/bake-ac...
• b249b43 Merge pull request #1032 from docker/dependabot/github_actions/docker/bake-ac...
• 1b67977 build(deps): bump docker/bake-action from 7.2.0 to 7.3.0
• 9d49d6a build(deps): bump docker/bake-action/subaction/matrix
• Additional commits viewable in compare view

[operon-ensemble-reviewer]

Ensemble Code Review

Verdict: approve

Summary: This is a clean Dependabot bump of the SHA-pinned docker/login-action from v4.2.0 to v4.3.0 in a single workflow file. The commit SHA and trailing tag comment are updated consistently, the action remains commit-pinned (the recommended security posture), and no usage, inputs, or logic changed. All three reviewers approved.

Findings (none — all reviewers approved)

The Verifier confirmed the old SHA (650006c6…) was replaced with the v4.3.0 SHA (c99871de…), the tag comment was updated to match, and no other references to the old SHA exist in the repo. No correctness, security, or contract concerns.

---

Generated by Operon Ensemble Code Review.

[operon-ensemble-reviewer]

Ensemble Code Review

Verdict: approve

Summary: This is a clean Dependabot bump of the SHA-pinned docker/login-action from v4.2.0 to v4.4.0 in .github/workflows/demo-image.yml. The commit SHA (af1e73f9…) and trailing # v4.4.0 tag comment are updated consistently, the action remains commit-pinned (the recommended supply-chain posture), and no workflow inputs or logic changed. The branch-name/PR-title version skew (4.3.0 vs 4.4.0) is just Dependabot rebasing onto a newer release — the diff content is correct.

Findings (none — all reviewers approved)

The Verifier confirmed the old SHA (650006c6…) has no remaining references in the repo and the new pin resolves consistently with its # v4.4.0 tag comment. No correctness, security, or contract concerns from any reviewer.

---

Suggestions (1)

• Before merging, confirm the pinned SHA af1e73f918a031802d376d3c8bbc3fe56130a9b0 corresponds to the official signed v4.4.0 release of docker/login-action — this preserves the security benefit of commit pinning. (Flagged by Pattern Matcher.)

---

Generated by Operon Ensemble Code Review.