From 96b37ea53833490a8749a60ac89e16e52e550b67 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 14 Sep 2026 10:07:16 -0700
Subject: [PATCH] Build(deps): Bump azure/login from 3.0.2 to 3.1.0 (#820)

Validated the unchanged OIDC inputs, Node 24 action runtime, default client-ID masking, workflow signing boundaries, core tests, distribution build, and exact-head required GitHub checks. The tag-only Azure signing workflow was not executed locally.

AI-assisted dependency review and merge by Codex for the maintainer-authorized sweep.
---
 .github/workflows/release-engine.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release-engine.yml b/.github/workflows/release-engine.yml
index d86ead621..350b8b7f7 100644
--- a/.github/workflows/release-engine.yml
+++ b/.github/workflows/release-engine.yml
@@ -75,7 +75,7 @@ jobs:
           name: unsigned-windows-x64
           path: unsigned
       - name: Azure login (OIDC)
-        uses: azure/login@7ddb5af1ef8758cf1353cf3b42f940aee27ba21c # v3
+        uses: azure/login@a641126d1b8aa4d1fa005f4f92df94a3a4c4c906 # v3
         with:
           client-id: ${{ vars.AZURE_CLIENT_ID }}
           tenant-id: ${{ vars.AZURE_TENANT_ID }}