From 20b27e2e043638f6e4a8e245f4375a41f0ab1341 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 8 Jun 2026 00:34:51 +0000
Subject: [PATCH] build(deps): bump the version-all group across 1 directory
 with 4 updates

Bumps the version-all group with 4 updates in the / directory: [docker/login-action](https://github.com/docker/login-action), [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/github-script](https://github.com/actions/github-script) and [snok/container-retention-policy](https://github.com/snok/container-retention-policy).


Updates `docker/login-action` from 3 to 4
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](https://github.com/docker/login-action/compare/v3...v4)

Updates `actions/upload-artifact` from 6 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v6...v7)

Updates `actions/github-script` from 8 to 9
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/v8...v9)

Updates `snok/container-retention-policy` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/snok/container-retention-policy/releases)
- [Commits](https://github.com/snok/container-retention-policy/compare/4f22ef80902ad409ed55a99dc5133cc1250a0d03...d3bdcf5ce9b05f685154e4a16c39233b245e3d53)

---
updated-dependencies:
- dependency-name: actions/github-script
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: docker/login-action
  dependency-version: '4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: version-all
- dependency-name: snok/container-retention-policy
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: version-all
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .github/workflows/build-swebenchmultimodal-images.yml | 2 +-
 .github/workflows/build-swebenchpro-images.yml        | 4 ++--
 .github/workflows/ghcr-retention.yml                  | 2 +-
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/build-swebenchmultimodal-images.yml b/.github/workflows/build-swebenchmultimodal-images.yml
index 3c73c5255..482d527d0 100644
--- a/.github/workflows/build-swebenchmultimodal-images.yml
+++ b/.github/workflows/build-swebenchmultimodal-images.yml
@@ -316,7 +316,7 @@ jobs:
 
       - name: Comment on PR with build results
         if: github.event_name == 'pull_request_target'
-        uses: actions/github-script@v8
+        uses: actions/github-script@v9
         with:
           script: |
             const fs = require('fs');
diff --git a/.github/workflows/build-swebenchpro-images.yml b/.github/workflows/build-swebenchpro-images.yml
index 133dec95d..16e6487fa 100644
--- a/.github/workflows/build-swebenchpro-images.yml
+++ b/.github/workflows/build-swebenchpro-images.yml
@@ -185,7 +185,7 @@ jobs:
         uses: docker/setup-buildx-action@v4
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -238,7 +238,7 @@ jobs:
 
       - name: Upload build logs
         if: always()
-        uses: actions/upload-artifact@v6
+        uses: actions/upload-artifact@v7
         with:
           name: build-logs-${{ github.run_id }}
           path: build-logs.tar.gz
diff --git a/.github/workflows/ghcr-retention.yml b/.github/workflows/ghcr-retention.yml
index bac4423bb..92bf79f22 100644
--- a/.github/workflows/ghcr-retention.yml
+++ b/.github/workflows/ghcr-retention.yml
@@ -38,7 +38,7 @@ jobs:
     timeout-minutes: 720  # 12h — first real run may delete tens of thousands of versions
     steps:
       - name: Delete old eval-agent-server versions
-        uses: snok/container-retention-policy@4f22ef80902ad409ed55a99dc5133cc1250a0d03  # v3.0.0
+        uses: snok/container-retention-policy@d3bdcf5ce9b05f685154e4a16c39233b245e3d53  # v3.1.0
         with:
           account: OpenHands
           token: ${{ secrets.GHCR_CLEANUP_PAT }}