deps: update docker/login-action action to v4 (#11)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [docker/login-action](https://github.com/docker/login-action) | action | major | `v3` → `v4` |

---

### Release Notes

<details>
<summary>docker/login-action</summary>

### [`v4.6.0`](https://github.com/docker/login-action/releases/tag/v4.6.0)

[Compare Source](https://github.com/docker/login-action/compare/v4.5.2...v4.6.0)

- Harden buildx scoped config path handling by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;1059](https://github.com/docker/login-action/pull/1059)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1095.0 in [#&#8203;1051](https://github.com/docker/login-action/pull/1051)
- Bump js-yaml from 5.2.1 to 5.2.2 in [#&#8203;1057](https://github.com/docker/login-action/pull/1057)
- Bump postcss from 8.5.10 to 8.5.22 in [#&#8203;1056](https://github.com/docker/login-action/pull/1056)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.5.2...v4.6.0>

### [`v4.5.2`](https://github.com/docker/login-action/releases/tag/v4.5.2)

[Compare Source](https://github.com/docker/login-action/compare/v4.5.1...v4.5.2)

- Surface Docker Hub OIDC error responses by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;1058](https://github.com/docker/login-action/pull/1058)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.5.1...v4.5.2>

### [`v4.5.1`](https://github.com/docker/login-action/releases/tag/v4.5.1)

[Compare Source](https://github.com/docker/login-action/compare/v4.5.0...v4.5.1)

- Support `dhi.io` as Docker Hub OIDC registry by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;1054](https://github.com/docker/login-action/pull/1054)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.5.0...v4.5.1>

### [`v4.5.0`](https://github.com/docker/login-action/releases/tag/v4.5.0)

[Compare Source](https://github.com/docker/login-action/compare/v4.4.0...v4.5.0)

- [Docker Hub OIDC](https://github.com/docker/login-action#docker-hub) login support by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;1048](https://github.com/docker/login-action/pull/1048)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1091.0 in [#&#8203;1037](https://github.com/docker/login-action/pull/1037)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.92.0 to 0.94.0 in [#&#8203;1044](https://github.com/docker/login-action/pull/1044) [#&#8203;1050](https://github.com/docker/login-action/pull/1050)
- Bump brace-expansion from 1.1.13 to 1.1.16 in [#&#8203;1046](https://github.com/docker/login-action/pull/1046)
- Bump js-yaml from 5.2.0 to 5.2.1 in [#&#8203;1038](https://github.com/docker/login-action/pull/1038)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.4.0...v4.5.0>

### [`v4.4.0`](https://github.com/docker/login-action/releases/tag/v4.4.0)

[Compare Source](https://github.com/docker/login-action/compare/v4.3.0...v4.4.0)

- Skip empty `registry-auth` secret mask by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;1035](https://github.com/docker/login-action/pull/1035)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1077.0 [#&#8203;1034](https://github.com/docker/login-action/pull/1034)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.3.0...v4.4.0>

### [`v4.3.0`](https://github.com/docker/login-action/releases/tag/v4.3.0)

[Compare Source](https://github.com/docker/login-action/compare/v4.2.0...v4.3.0)

- Preserve names in esbuild bundle by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;1022](https://github.com/docker/login-action/pull/1022)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1076.0 [#&#8203;999](https://github.com/docker/login-action/pull/999) [#&#8203;1030](https://github.com/docker/login-action/pull/1030)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.90.0 to 0.92.0 in [#&#8203;1004](https://github.com/docker/login-action/pull/1004) [#&#8203;1027](https://github.com/docker/login-action/pull/1027)
- Bump [@&#8203;sigstore/core](https://github.com/sigstore/core) from 3.1.0 to 3.2.1 in [#&#8203;1023](https://github.com/docker/login-action/pull/1023)
- Bump [@&#8203;sigstore/verify](https://github.com/sigstore/verify) from 3.1.0 to 3.1.1 in [#&#8203;1029](https://github.com/docker/login-action/pull/1029)
- Bump http-proxy-agent and https-proxy-agent to 9.1.0 in [#&#8203;1017](https://github.com/docker/login-action/pull/1017)
- Bump js-yaml from 4.1.1 to 5.2.0 in [#&#8203;1028](https://github.com/docker/login-action/pull/1028)
- Bump sigstore from 4.1.0 to 4.1.1 in [#&#8203;1031](https://github.com/docker/login-action/pull/1031)
- Bump tmp from 0.2.5 to 0.2.7 in [#&#8203;1002](https://github.com/docker/login-action/pull/1002)
- Bump undici from 6.24.1 to 6.27.0 in [#&#8203;1020](https://github.com/docker/login-action/pull/1020)
- Bump vite from 7.3.3 to 7.3.6 in [#&#8203;1019](https://github.com/docker/login-action/pull/1019)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.2.0...v4.3.0>

### [`v4.2.0`](https://github.com/docker/login-action/releases/tag/v4.2.0)

[Compare Source](https://github.com/docker/login-action/compare/v4.1.0...v4.2.0)

- Bump [@&#8203;actions/core](https://github.com/actions/core) from 3.0.0 to 3.0.1 in [#&#8203;976](https://github.com/docker/login-action/pull/976)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1050.0 in [#&#8203;960](https://github.com/docker/login-action/pull/960)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.86.0 to 0.90.0 in [#&#8203;970](https://github.com/docker/login-action/pull/970)
- Bump brace-expansion from 2.0.1 to 5.0.6 in [#&#8203;993](https://github.com/docker/login-action/pull/993)
- Bump fast-xml-builder from 1.1.4 to 1.2.0 in [#&#8203;985](https://github.com/docker/login-action/pull/985)
- Bump fast-xml-parser from 5.3.6 to 5.8.0 in [#&#8203;963](https://github.com/docker/login-action/pull/963)
- Bump http-proxy-agent and https-proxy-agent to 9.0.0 in [#&#8203;961](https://github.com/docker/login-action/pull/961)
- Bump postcss from 8.5.6 to 8.5.10 in [#&#8203;979](https://github.com/docker/login-action/pull/979)
- Bump tar from 6.2.1 to 7.5.15 in [#&#8203;991](https://github.com/docker/login-action/pull/991)
- Bump vite from 7.3.1 to 7.3.3 in [#&#8203;986](https://github.com/docker/login-action/pull/986)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.1.0...v4.2.0>

### [`v4.1.0`](https://github.com/docker/login-action/releases/tag/v4.1.0)

[Compare Source](https://github.com/docker/login-action/compare/v4.0.0...v4.1.0)

- Fix scoped Docker Hub cleanup path when registry is omitted by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;945](https://github.com/docker/login-action/pull/945)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) and [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) to 3.1020.0 in [#&#8203;930](https://github.com/docker/login-action/pull/930)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.77.0 to 0.86.0 in [#&#8203;932](https://github.com/docker/login-action/pull/932) [#&#8203;936](https://github.com/docker/login-action/pull/936)
- Bump brace-expansion from 1.1.12 to 1.1.13 in [#&#8203;952](https://github.com/docker/login-action/pull/952)
- Bump fast-xml-parser from 5.3.4 to 5.3.6 in [#&#8203;942](https://github.com/docker/login-action/pull/942)
- Bump flatted from 3.3.3 to 3.4.2 in [#&#8203;944](https://github.com/docker/login-action/pull/944)
- Bump glob from 10.3.12 to 10.5.0 in [#&#8203;940](https://github.com/docker/login-action/pull/940)
- Bump handlebars from 4.7.8 to 4.7.9 in [#&#8203;949](https://github.com/docker/login-action/pull/949)
- Bump http-proxy-agent and https-proxy-agent to 8.0.0 in [#&#8203;937](https://github.com/docker/login-action/pull/937)
- Bump lodash from 4.17.23 to 4.18.1 in [#&#8203;958](https://github.com/docker/login-action/pull/958)
- Bump minimatch from 3.1.2 to 3.1.5 in [#&#8203;941](https://github.com/docker/login-action/pull/941)
- Bump picomatch from 4.0.3 to 4.0.4 in [#&#8203;948](https://github.com/docker/login-action/pull/948)
- Bump undici from 6.23.0 to 6.24.1 in [#&#8203;938](https://github.com/docker/login-action/pull/938)

**Full Changelog**: <https://github.com/docker/login-action/compare/v4.0.0...v4.1.0>

### [`v4.0.0`](https://github.com/docker/login-action/releases/tag/v4.0.0)

[Compare Source](https://github.com/docker/login-action/compare/v3.7.0...v4.0.0)

- Node 24 as default runtime (requires [Actions Runner v2.327.1](https://github.com/actions/runner/releases/tag/v2.327.1) or later) by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;929](https://github.com/docker/login-action/pull/929)
- Switch to ESM and update config/test wiring by [@&#8203;crazy-max](https://github.com/crazy-max) in [#&#8203;927](https://github.com/docker/login-action/pull/927)
- Bump [@&#8203;actions/core](https://github.com/actions/core) from 1.11.1 to 3.0.0 in [#&#8203;919](https://github.com/docker/login-action/pull/919)
- Bump [@&#8203;aws-sdk/client-ecr](https://github.com/aws-sdk/client-ecr) from 3.890.0 to 3.1000.0 in [#&#8203;909](https://github.com/docker/login-action/pull/909) [#&#8203;920](https://github.com/docker/login-action/pull/920)
- Bump [@&#8203;aws-sdk/client-ecr-public](https://github.com/aws-sdk/client-ecr-public) from 3.890.0 to 3.1000.0 in [#&#8203;909](https://github.com/docker/login-action/pull/909) [#&#8203;920](https://github.com/docker/login-action/pull/920)
- Bump [@&#8203;docker/actions-toolkit](https://github.com/docker/actions-toolkit) from 0.63.0 to 0.77.0 in [#&#8203;910](https://github.com/docker/login-action/pull/910) [#&#8203;928](https://github.com/docker/login-action/pull/928)
- Bump [@&#8203;isaacs/brace-expansion](https://github.com/isaacs/brace-expansion) from 5.0.0 to 5.0.1 in [#&#8203;921](https://github.com/docker/login-action/pull/921)
- Bump js-yaml from 4.1.0 to 4.1.1 in [#&#8203;901](https://github.com/docker/login-action/pull/901)

**Full Changelog**: <https://github.com/docker/login-action/compare/v3.7.0...v4.0.0>

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNjQuMTAiLCJ1cGRhdGVkSW5WZXIiOiI0NC4xNjQuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbInJlbm92YXRlIl19-->

Reviewed-on: #11
Co-authored-by: Renovate Bot <[email protected]>

.gitea/workflows/build.yml

@@ -18,12 +18,12 @@ jobs:
         - /var/run/docker.sock:/var/run/docker.sock
     steps:
       - uses: actions/checkout@v7
-      - uses: docker/login-action@v3
+      - uses: docker/login-action@v4
         with:
           registry: git.studiovita.li
           username: ${{ secrets.REGISTRY_USERNAME }}
           password: ${{ secrets.REGISTRY_TOKEN }}
-      - uses: docker/build-push-action@v6
+      - uses: docker/build-push-action@v7
         with:
           context: images/act
           push: true

README.md

@@ -0,0 +1,31 @@
+# studiovitali/actions
+
+Shared Gitea Actions for studio CI workflows.
+
+## Composite actions
+
+- **[`sops`](sops/)** — install checksum-verified SOPS and decrypt `*.sops.*` files with an age key
+- **[`ssh-copy`](ssh-copy/)** — `rsync` a local directory to a remote host over SSH
+- **[`ssh-run`](ssh-run/)** — run a script on a remote host over SSH
+
+Reference a local action from a workflow:
+
+```yaml
+- uses: studio/actions/ssh-run@main
+  with:
+    host: ${{ secrets.HOST }}
+    user: deploy
+    key: ${{ secrets.SSH_KEY }}
+    script: ./deploy.sh
+```
+
+## Runner image
+
+`images/act` builds `git.studiovita.li/studio/actions:ubuntu-latest` from the Gitea
+runner image, adding `rsync` and SOPS. Built weekly and on `images/**` changes via
+[`.gitea/workflows/build.yml`](.gitea/workflows/build.yml).
+
+## Maintenance
+
+Dependencies pinned in `action.yml` / `Dockerfile` are updated by [Renovate](renovate.json)
+using `## renovate:` annotations.