chore(deps): update docker/login-action action to v4.4.0

[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change
docker/login-action	action	minor	v4.2.0 → v4.4.0

---

Release Notes

docker/login-action (docker/login-action)

v4.4.0

Compare Source

• Skip empty registry-auth secret mask by @​crazy-max in #​1035
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1077.0 #​1034

Full Changelog: docker/login-action@v4.3.0...v4.4.0

v4.3.0

Compare Source

• Preserve names in esbuild bundle by @​crazy-max in #​1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 #​999 #​1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in #​1004 #​1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in #​1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in #​1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #​1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #​1028
• Bump sigstore from 4.1.0 to 4.1.1 in #​1031
• Bump tmp from 0.2.5 to 0.2.7 in #​1002
• Bump undici from 6.24.1 to 6.27.0 in #​1020
• Bump vite from 7.3.3 to 7.3.6 in #​1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[github-actions]

Dependency Bump Evaluation

Version change: docker/login-action v4.2.0 → v4.4.0 (minor)
Semver bump type: minor

Changes (v4.3.0):

• Preserve names in esbuild bundle (build improvement)
• Internal dependency bumps: AWS SDK, sigstore, undici, vite, js-yaml, http-proxy-agent

Changes (v4.4.0):

• Skip empty registry-auth secret mask (bug fix for log redaction)
• AWS SDK bump to 3.1077.0

Breaking changes: None

Security concerns: None — updates to sigstore and undici packages are routine maintenance. The secret mask fix improves log redaction behavior.

Impact on codebase: The action is used only in .github/workflows/build.yaml for GHCR login with standard inputs (registry, username, password). None of the changes affect this usage pattern.

CI status: Checks still in progress at time of evaluation.

Recommendation: SAFE TO MERGE (once CI is green)

Notes: Straightforward version pin bump of a GitHub Action. No API changes, no breaking changes, no impact on the build workflow.

— Claude Code