From 2fa5cb39d5e30e5ffcd6536350578a941b0b7b94 Mon Sep 17 00:00:00 2001
From: Headgent Development <rolf@headgent.com>
Date: Wed, 1 Jul 2026 19:13:01 +0200
Subject: [PATCH] fix(ci): Docker-Login bei Dependabot-Runs ueberspringen,
 checkout v4->v7

Dependabot-Runs erhalten keine Repo-Secrets; docker login schlug fehl und liess alle Dependabot-PRs rot laufen. Login-Step wird nun bei actor=dependabot[bot] uebersprungen (Image headgent/phpcli ist public + anonym ziehbar). Zusaetzlich actions/checkout v4->v7.
---
 .github/workflows/ci.yml | 9 ++++++---
 1 file changed, 6 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index f8856bf..a231c68 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -34,12 +34,13 @@ jobs:
     name: phpcs
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup environment
         run: cp .env.example .env
 
       - name: Login to Docker Hub
+        if: ${{ github.actor != 'dependabot[bot]' }}
         env:
           DOCKER_CONFIG: /tmp/.docker
         run: |
@@ -66,12 +67,13 @@ jobs:
     name: phpstan
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup environment
         run: cp .env.example .env
 
       - name: Login to Docker Hub
+        if: ${{ github.actor != 'dependabot[bot]' }}
         env:
           DOCKER_CONFIG: /tmp/.docker
         run: |
@@ -98,12 +100,13 @@ jobs:
     name: tests
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
       - name: Setup environment
         run: cp .env.example .env
 
       - name: Login to Docker Hub
+        if: ${{ github.actor != 'dependabot[bot]' }}
         env:
           DOCKER_CONFIG: /tmp/.docker
         run: |