chore(deps): bump the ci group with 4 updates

[dependabot]

Bumps the ci group with 4 updates: docker/login-action, docker/setup-qemu-action, docker/build-push-action and rojopolis/spellcheck-github-actions.

Updates docker/login-action from 4.2.0 to 4.3.0

Release notes

Sourced from docker/login-action's releases.

v4.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/login-action#1022
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.1076.0 docker/login-action#999 docker/login-action#1030
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/login-action#1004 docker/login-action#1027
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/login-action#1023
• Bump @​sigstore/verify from 3.1.0 to 3.1.1 in docker/login-action#1029
• Bump http-proxy-agent and https-proxy-agent to 9.1.0 in docker/login-action#1017
• Bump js-yaml from 4.1.1 to 5.2.0 in docker/login-action#1028
• Bump sigstore from 4.1.0 to 4.1.1 in docker/login-action#1031
• Bump tmp from 0.2.5 to 0.2.7 in docker/login-action#1002
• Bump undici from 6.24.1 to 6.27.0 in docker/login-action#1020
• Bump vite from 7.3.3 to 7.3.6 in docker/login-action#1019

Full Changelog: docker/login-action@v4.2.0...v4.3.0

Commits

• c99871d Merge pull request #1030 from docker/dependabot/npm_and_yarn/aws-sdk-dependen...
• b433555 [dependabot skip] chore: update generated content
• 678a46a build(deps): bump the aws-sdk-dependencies group across 1 directory with 2 up...
• f9a0aea Merge pull request #1031 from docker/dependabot/npm_and_yarn/sigstore-4.1.1
• cc1e4cb build(deps): bump sigstore from 4.1.0 to 4.1.1
• 02e1730 Merge pull request #1029 from docker/dependabot/npm_and_yarn/sigstore/verify-...
• b548518 build(deps): bump @​sigstore/verify from 3.1.0 to 3.1.1
• a244be3 Merge pull request #1027 from docker/dependabot/npm_and_yarn/docker/actions-t...
• ee0d698 [dependabot skip] chore: update generated content
• 127dc2c build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• Additional commits viewable in compare view

Updates docker/setup-qemu-action from 4.1.0 to 4.2.0

Release notes

Sourced from docker/setup-qemu-action's releases.

v4.2.0

• Preserve names in esbuild bundle by @​crazy-max in docker/setup-qemu-action#311
• Bump @​actions/core from 3.0.0 to 3.0.1 in docker/setup-qemu-action#295
• Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0 in docker/setup-qemu-action#315
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/setup-qemu-action#312
• Bump js-yaml from 4.1.1 to 4.2.0 in docker/setup-qemu-action#310
• Bump tmp from 0.2.6 to 0.2.7 in docker/setup-qemu-action#304
• Bump undici from 6.26.0 to 6.27.0 in docker/setup-qemu-action#308
• Bump vite from 7.3.2 to 7.3.6 in docker/setup-qemu-action#307

Full Changelog: docker/setup-qemu-action@v4.1.0...v4.2.0

Commits

• 96fe6ef Merge pull request #315 from docker/dependabot/npm_and_yarn/docker/actions-to...
• 31f08d3 [dependabot skip] chore: update generated content
• 4e7017a build(deps): bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 0eca235 Merge pull request #314 from crazy-max/fix-yarn-preapprove-actions-toolkit
• ea66a41 chore: allow actions-toolkit to bypass yarn age gate
• 451542b Merge pull request #308 from docker/dependabot/npm_and_yarn/undici-6.27.0
• 532ae00 [dependabot skip] chore: update generated content
• b6f5af6 build(deps): bump undici from 6.26.0 to 6.27.0
• cf96b86 Merge pull request #304 from docker/dependabot/npm_and_yarn/tmp-0.2.7
• f0ba643 [dependabot skip] chore: update generated content
• Additional commits viewable in compare view

Updates docker/build-push-action from 7.2.0 to 7.3.0

Release notes

Sourced from docker/build-push-action's releases.

v7.3.0

• Preserve names in esbuild bundle by @​crazy-max in docker/build-push-action#1567
• Bump @​docker/actions-toolkit from 0.90.0 to 0.92.0 in docker/build-push-action#1545 docker/build-push-action#1572
• Bump @​sigstore/core from 3.1.0 to 3.2.1 in docker/build-push-action#1568
• Bump js-yaml from 4.1.1 to 4.3.0 in docker/build-push-action#1566
• Bump tmp from 0.2.5 to 0.2.7 in docker/build-push-action#1547
• Bump undici from 6.24.1 to 6.27.0 in docker/build-push-action#1564
• Bump vite from 7.3.2 to 7.3.6 in docker/build-push-action#1563

Full Changelog: docker/build-push-action@v7.2.0...v7.3.0

Commits

• 53b7df9 Merge pull request #1572 from docker/dependabot/npm_and_yarn/docker/actions-t...
• 154298c [dependabot skip] chore: update generated content
• cb1238b chore(deps): Bump @​docker/actions-toolkit from 0.91.0 to 0.92.0
• 24f845d Merge pull request #1566 from docker/dependabot/npm_and_yarn/js-yaml-4.2.0
• 9c69730 [dependabot skip] chore: update generated content
• bc3a3a5 Merge pull request #1574 from docker/dependabot/github_actions/aws-actions/co...
• a82c504 chore(deps): Bump js-yaml from 4.1.1 to 4.3.0
• 0285a75 Merge pull request #1573 from docker/dependabot/github_actions/actions/cache-...
• c6ad2a3 Merge pull request #1575 from docker/dependabot/github_actions/actions/checko...
• d37484f Merge pull request #1564 from docker/dependabot/npm_and_yarn/undici-6.27.0
• Additional commits viewable in compare view

Updates rojopolis/spellcheck-github-actions from 0.62.0 to 0.63.0

Release notes

Sourced from rojopolis/spellcheck-github-actions's releases.

0.63.0

What's Changed

• Update CLAUDE.md with release workflow and gotchas by @​jonasbn in rojopolis/spellcheck-github-actions#363
• Bump rojopolis/spellcheck-github-actions from 0.61.0 to 0.62.0 by @​dependabot[bot] in rojopolis/spellcheck-github-actions#366
• Bump actions/checkout from 6.0.3 to 7.0.0 by @​dependabot[bot] in rojopolis/spellcheck-github-actions#365
• Bump python from 3.14.5-slim-trixie to 3.14.6-slim-trixie by @​dependabot[bot] in rojopolis/spellcheck-github-actions#364
• Release 0.63.0 by @​jonasbn in rojopolis/spellcheck-github-actions#367

Full Changelog: rojopolis/spellcheck-github-actions@0.62.0...0.63.0

Changelog

Sourced from rojopolis/spellcheck-github-actions's changelog.

Change Log for spellcheck-github-actions

0.63.0, 2026-07-01, maintenance release, update not required

• Docker based image updated for Python 3.14.6 slim trixie via PR #364 from Dependabot.

0.62.0, 2026-06-19, security release, update recommended

• Bumped lxml from 5.3.0 to 5.4.0 to address known CVEs via PR #357.

• Bumped pymdown-extensions to patched version 10.21.3 via PR #358.

• Bumped Markdown from 3.7 to 3.8.1 to patched version via PR #359.

• Cleaned up GitHub Actions workflows using zizmor and removed ratchet annotations via PR #355 and PR #356.

• Clarified examples in README.

0.61.0, 2026-06-14, minor feature release, update not required

• Docker based image updated for Python 3.14.5 slim trixie via PR #344 from Dependabot.

0.60, 2026-03-14, minor feature release, update not required

• Docker based image updated for Python 3.14.3 slim trixie via PR #325 from Dependabot.

• Cleaned up the error messaging, to address issue #328 from @​akohout-hai, the error message is now more correct, but not improved in general

0.59.0, 2026-03-02, feature release, update recommended

• Improvements have been added to the docker entrypoint, based on a PR from @​akohout-hai which fixes an issue with handling of spaces in files names and directories, see PR #322 for details. This is his first contribution to the project and I want to thank him for his contribution, which is highly appreciated.

• Docker based image updated to Python 3.14.3 slim trixie via PR #320 from Dependabot.

0.58.0, 2026-01-20, security release, update not required

• A minor security issue in the dependency: pymdown-extensions, which is used by the core component PySpelling
  • GHSA-r6h4-mm7h-8pmq
  • Original issue: facelessuser/pymdown-extensions#2716

0.57.0, 2026-01-14, maintenance release, update not required

• Docker based image updated to Python 3.14.2 slim trixie via PR #310 from Dependabot. The version is the same, the image has had updates.

0.56.0, 2025-12-27, feature and maintenance release, update not required

• Support for Portuguese (Portugal and Brazil) for both Hunspell and Aspell, requested by: @​mdiazgoncalves via issue #298
• Docker image updated to Python 3.14.2 trixie slim Release notes for Python 3.14.2

0.55.0, 2025-11-27, maintenance release, update not required

... (truncated)

Commits

• e619e00 Merge pull request #367 from rojopolis/release-0.63.0
• e9f0ea4 Prepare release 0.63.0
• 32854ed Bump python from 3.14.5-slim-trixie to 3.14.6-slim-trixie
• 0d74ebf Merge pull request #365 from rojopolis/dependabot/github_actions/actions/chec...
• 9016db1 Bump actions/checkout from 6.0.3 to 7.0.0
• 7f48afb Merge pull request #366 from rojopolis/dependabot/github_actions/rojopolis/sp...
• 7cb618c Bump rojopolis/spellcheck-github-actions from 0.61.0 to 0.62.0
• 7f79330 Bump python from 3.14.5-slim-trixie to 3.14.6-slim-trixie
• 02d2e14 Merge pull request #363 from rojopolis/update-claude-md
• 68b0f0b Update CLAUDE.md with release workflow, Dependabot, and README gotchas
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions