Bump redhat-actions/podman-login from 1.7 to 2.0

[dependabot]

Bumps redhat-actions/podman-login from 1.7 to 2.0.

Release notes

Sourced from redhat-actions/podman-login's releases.

v2.0

Breaking Changes

• Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
• Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
• Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

• Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
• Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
• Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

• Add tls_verify input to skip TLS certificate verification for self-signed registries
• Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
• Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

• TypeScript 5.x to 6.0.3
• ESLint 8 (EOL) to 10 with flat config
• @aws-sdk/client-ecr 3.535 to 3.1094
• @vercel/ncc 0.38 to 0.44
• Remove unused @aws-sdk/util-base64
• Resolve all npm audit vulnerabilities

CI & Infrastructure

• Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
• Add workflow-level permissions: contents: read
• Add concurrency groups to cancel redundant CI runs
• Pin runs-on to ubuntu-24.04
• Add Dependabot for npm and GitHub Actions updates
• Add SECURITY.md
• Enable secret scanning and push protection
• Remove deprecated CRDA vulnerability scan workflow

Full Changelog: redhat-actions/podman-login@v1.7...v2.0

Changelog

Sourced from redhat-actions/podman-login's changelog.

podman-login Changelog

v2.0

Breaking Changes

• Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
• Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
• Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

• Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
• Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
• Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

• Add tls_verify input to skip TLS certificate verification for self-signed registries
• Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
• Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

• TypeScript 5.x to 6.0.3
• ESLint 8 (EOL) to 10 with flat config
• @aws-sdk/client-ecr 3.535 to 3.1094
• @vercel/ncc 0.38 to 0.44
• Remove unused @aws-sdk/util-base64
• Resolve all npm audit vulnerabilities

CI & Infrastructure

• Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
• Add workflow-level permissions: contents: read
• Add concurrency groups to cancel redundant CI runs
• Pin runs-on to ubuntu-24.04
• Add Dependabot for npm and GitHub Actions updates
• Add SECURITY.md
• Enable secret scanning and push protection
• Remove deprecated CRDA vulnerability scan workflow

v1.8

• Update action to run on Node24. https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

v1.7

• Update action to run on Node20.https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v1.6

• Update action/core dependency to 1.10.0

v1.5

• Update action to run on Node16. https://github.blog/changelog/2022-05-20-actions-can-now-run-in-a-node-js-16-runtime/

v1.4

... (truncated)

Commits

• 50c2d9a Update CHANGELOG.md for v2.0 release
• 8b1d074 Merge pull request #64 from redhat-actions/fix/remaining-issues
• 6be3c81 Fix auth file path detection, lowercase registry, and ECR OIDC support
• b1530e7 Merge pull request #63 from redhat-actions/feature/tls-verify
• b0eba47 Add tls_verify input to skip TLS certificate verification
• dff696f Remove CRDA vulnerability scan workflow
• 20eef96 Merge pull request #62 from redhat-actions/update/types-node-and-dependabot-c...
• b9e7b01 Update @​types/node to 26.1.1 and exclude TypeScript 7 from Dependabot
• 07532ea Fix ENOENT error when ~/.docker directory does not exist
• 36756be Merge pull request #59 from redhat-actions/dependabot/github_actions/redhat-a...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)