• Harden buildx scoped config path handling by @crazy-max in #1059
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1095.0 in #1051
• Bump js-yaml from 5.2.1 to 5.2.2 in #1057
• Bump postcss from 8.5.10 to 8.5.22 in #1056

Full Changelog: v4.5.2...v4.6.0

• Surface Docker Hub OIDC error responses by @crazy-max in #1058

Full Changelog: v4.5.1...v4.5.2

• Support dhi.io as Docker Hub OIDC registry by @crazy-max in #1054

Full Changelog: v4.5.0...v4.5.1

• Docker Hub OIDC login support by @crazy-max in #1048
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1091.0 in #1037
• Bump @docker/actions-toolkit from 0.92.0 to 0.94.0 in #1044 #1050
• Bump brace-expansion from 1.1.13 to 1.1.16 in #1046
• Bump js-yaml from 5.2.0 to 5.2.1 in #1038

Full Changelog: v4.4.0...v4.5.0

• Skip empty registry-auth secret mask by @crazy-max in #1035
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1077.0 #1034

Full Changelog: v4.3.0...v4.4.0

• Preserve names in esbuild bundle by @crazy-max in #1022
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1076.0 #999 #1030
• Bump @docker/actions-toolkit from 0.90.0 to 0.92.0 in #1004 #1027
• Bump @sigstore/core from 3.1.0 to 3.2.1 in #1023
• Bump @sigstore/verify from 3.1.0 to 3.1.1 in #1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in #1017
• Bump js-yaml from 4.1.1 to 5.2.0 in #1028
• Bump sigstore from 4.1.0 to 4.1.1 in #1031
• Bump tmp from 0.2.5 to 0.2.7 in #1002
• Bump undici from 6.24.1 to 6.27.0 in #1020
• Bump vite from 7.3.3 to 7.3.6 in #1019

Full Changelog: v4.2.0...v4.3.0

• Bump @actions/core from 3.0.0 to 3.0.1 in #976
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1050.0 in #960
• Bump @docker/actions-toolkit from 0.86.0 to 0.90.0 in #970
• Bump brace-expansion from 2.0.1 to 5.0.6 in #993
• Bump fast-xml-builder from 1.1.4 to 1.2.0 in #985
• Bump fast-xml-parser from 5.3.6 to 5.8.0 in #963
• Bump http-proxy-agent and https-proxy-agent to 9.0.0 in #961
• Bump postcss from 8.5.6 to 8.5.10 in #979
• Bump tar from 6.2.1 to 7.5.15 in #991
• Bump vite from 7.3.1 to 7.3.3 in #986

Full Changelog: v4.1.0...v4.2.0

• Fix scoped Docker Hub cleanup path when registry is omitted by @crazy-max in #945
• Bump @aws-sdk/client-ecr and @aws-sdk/client-ecr-public to 3.1020.0 in #930
• Bump @docker/actions-toolkit from 0.77.0 to 0.86.0 in #932 #936
• Bump brace-expansion from 1.1.12 to 1.1.13 in #952
• Bump fast-xml-parser from 5.3.4 to 5.3.6 in #942
• Bump flatted from 3.3.3 to 3.4.2 in #944
• Bump glob from 10.3.12 to 10.5.0 in #940
• Bump handlebars from 4.7.8 to 4.7.9 in #949
• Bump http-proxy-agent and https-proxy-agent to 8.0.0 in #937
• Bump lodash from 4.17.23 to 4.18.1 in #958
• Bump minimatch from 3.1.2 to 3.1.5 in #941
• Bump picomatch from 4.0.3 to 4.0.4 in #948
• Bump undici from 6.23.0 to 6.24.1 in #938

Full Changelog: v4.0.0...v4.1.0

• Node 24 as default runtime (requires Actions Runner v2.327.1 or later) by @crazy-max in #929
• Switch to ESM and update config/test wiring by @crazy-max in #927
• Bump @actions/core from 1.11.1 to 3.0.0 in #919
• Bump @aws-sdk/client-ecr from 3.890.0 to 3.1000.0 in #909 #920
• Bump @aws-sdk/client-ecr-public from 3.890.0 to 3.1000.0 in #909 #920
• Bump @docker/actions-toolkit from 0.63.0 to 0.77.0 in #910 #928
• Bump @isaacs/brace-expansion from 5.0.0 to 5.0.1 in #921
• Bump js-yaml from 4.1.0 to 4.1.1 in #901

Full Changelog: v3.7.0...v4.0.0

• Add scope input to set scopes for the authentication token by @crazy-max in #912
• Add support for AWS European Sovereign Cloud ECR by @dphi in #914
• Ensure passwords are redacted with registry-auth input by @crazy-max in #911
• build(deps): bump lodash from 4.17.21 to 4.17.23 in #915

Full Changelog: v3.6.0...v3.7.0