e5247cb6a7
fix: PackedPolicyTooLarge detection in STS tags
...
Closes #1898 .
Due to a bundling, checking for `error instanceof
PackedPolicyTooLargeException` fails. Instead we need to explicitly
check for `error.name`.
2026-07-22 11:22:35 -07:00
42e118a656
chore(deps-dev): bump markdownlint-cli from 0.49.0 to 0.49.1 ( #1896 )
...
Bumps [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli ) from 0.49.0 to 0.49.1.
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases )
- [Commits](https://github.com/igorshubovych/markdownlint-cli/compare/v0.49.0...v0.49.1 )
---
updated-dependencies:
- dependency-name: markdownlint-cli
dependency-version: 0.49.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:59:29 +00:00
d86ddfcecc
chore: Update dist
2026-07-21 03:57:04 +00:00
874aaac21e
chore(deps): bump @aws-sdk/client-sts from 3.1086.0 to 3.1091.0 ( #1892 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1086.0 to 3.1091.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1091.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1091.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:56:34 +00:00
d4341b65ac
chore: Update dist
2026-07-21 03:53:41 +00:00
fe51823c97
chore(deps-dev): bump @aws-sdk/credential-provider-env ( #1894 )
...
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.57 to 3.972.59.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.59
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:53:14 +00:00
a8be382115
chore(deps-dev): bump @biomejs/biome from 2.5.3 to 2.5.4 ( #1893 )
...
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.5.3 to 2.5.4.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.4/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.5.4
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:50:42 +00:00
e000376c2c
chore: Update dist
2026-07-21 03:49:08 +00:00
c2828f8b08
chore(deps): bump @smithy/node-http-handler from 4.9.5 to 4.9.8 ( #1895 )
...
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.9.5 to 4.9.8.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.9.8/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.9.8
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:48:36 +00:00
20e62f617c
chore(deps-dev): bump tar from 7.5.16 to 7.5.20 ( #1897 )
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 7.5.16 to 7.5.20.
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.16...v7.5.20 )
---
updated-dependencies:
- dependency-name: tar
dependency-version: 7.5.20
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:45:41 +00:00
66f02a3e6c
chore: Update dist
2026-07-21 03:44:09 +00:00
82a0ed2cab
chore(deps-dev): bump @smithy/property-provider from 4.4.8 to 4.4.11 ( #1891 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.4.8 to 4.4.11.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.11/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.11
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-21 03:43:35 +00:00
9d2a1c17c0
chore(docs): document immutable OIDC subject claim ( #1889 )
...
GitHub made the OIDC `sub` claim immutable for repositories created on
github.com on or after 2026-04-23 (and older repos that opt in). The claim
now appends the numeric org and repository IDs after each name, separated by
`@`, e.g. `repo:org@123456/repo@789012:ref:refs/heads/main`.
Closes #1888 .
2026-07-15 11:06:00 -07:00
e977f476bf
chore: Update dist
2026-07-14 03:59:59 +00:00
ab0d61f6a0
chore(deps): bump @aws-sdk/client-sts from 3.1080.0 to 3.1086.0 ( #1880 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1080.0 to 3.1086.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1086.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1086.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:59:28 +00:00
ccf493e3b1
chore: Update dist
2026-07-14 03:56:32 +00:00
05ed620dc8
chore(deps-dev): bump @aws-sdk/credential-provider-env ( #1886 )
...
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.54 to 3.972.57.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.57
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:56:05 +00:00
62f98f6930
chore(deps-dev): bump typescript from 6.0.3 to 7.0.2 ( #1882 )
...
Bumps [typescript](https://github.com/microsoft/TypeScript ) from 6.0.3 to 7.0.2.
- [Release notes](https://github.com/microsoft/TypeScript/releases )
- [Commits](https://github.com/microsoft/TypeScript/commits )
---
updated-dependencies:
- dependency-name: typescript
dependency-version: 7.0.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:54:45 +00:00
5a780d06ff
chore(deps-dev): bump @smithy/property-provider from 4.4.6 to 4.4.8 ( #1884 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.4.6 to 4.4.8.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.8/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.8
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:53:16 +00:00
d3cb30b08b
chore(deps-dev): bump @biomejs/biome from 2.5.2 to 2.5.3 ( #1885 )
...
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.5.2 to 2.5.3.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.3/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.5.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:51:27 +00:00
eb48debd38
chore(deps-dev): bump @types/node from 26.1.0 to 26.1.1 ( #1881 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.1.0 to 26.1.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.1.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:48:33 +00:00
e69af16b6c
chore(deps-dev): bump memfs from 4.58.0 to 4.64.0 ( #1883 )
...
Bumps [memfs](https://github.com/streamich/memfs ) from 4.58.0 to 4.64.0.
- [Release notes](https://github.com/streamich/memfs/releases )
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/streamich/memfs/compare/v4.58.0...v4.64.0 )
---
updated-dependencies:
- dependency-name: memfs
dependency-version: 4.64.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:46:28 +00:00
7fb20f0656
chore: Update dist
2026-07-14 03:44:06 +00:00
4e7ae70130
chore(deps): bump @smithy/node-http-handler from 4.9.3 to 4.9.5 ( #1879 )
...
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.9.3 to 4.9.5.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.9.5/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.9.5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-14 03:43:32 +00:00
9ae780b171
fix: attach git credentials before Tag Major Version push ( #1877 )
...
The Tag Major Version step ran 'git push origin' after Checkout Again
re-cloned with persist-credentials: false, leaving the remote without
credentials. This caused 'fatal: could not read Username' (exit 128) on
the first release. Set the authenticated remote URL using OSDS_ACCESS_TOKEN
before pushing tags, mirroring the Update README step.
2026-07-09 13:46:15 -07:00
517a711dbc
chore(main): release 6.2.2 ( #1876 )
2026-07-07 09:59:05 -07:00
d01d678e65
chore: release 6.2.2
...
Release-As: 6.2.2
2026-07-07 09:56:53 -07:00
8efa52b284
chore(deps-dev): bump vitest dependencies ( #1874 )
...
Combines dependabot PRs #1866 and #1865 . Both packages must move
together because @vitest/coverage-v8 declares an exact peer dependency.
2026-07-07 09:46:57 -07:00
8e1eed5c14
chore(deps-dev): bump @smithy/property-provider from 4.4.4 to 4.4.6 ( #1869 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.4.4 to 4.4.6.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.6/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 03:54:34 +00:00
112421a93a
chore(deps-dev): bump @biomejs/biome from 2.5.1 to 2.5.2 ( #1868 )
...
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.5.1 to 2.5.2.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.2/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.5.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 03:52:21 +00:00
fbc01c6585
chore(deps-dev): bump @types/node from 26.0.1 to 26.1.0 ( #1871 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.0.1 to 26.1.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.1.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 03:49:34 +00:00
b12ca875eb
chore(deps-dev): bump memfs from 4.57.8 to 4.58.0 ( #1873 )
...
Bumps [memfs](https://github.com/streamich/memfs ) from 4.57.8 to 4.58.0.
- [Release notes](https://github.com/streamich/memfs/releases )
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/streamich/memfs/compare/v4.57.8...v4.58.0 )
---
updated-dependencies:
- dependency-name: memfs
dependency-version: 4.58.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 03:47:23 +00:00
d314f7f43d
chore: Update dist
2026-07-07 03:44:54 +00:00
a53b65b84a
chore(deps): bump @aws-sdk/client-sts from 3.1076.0 to 3.1080.0 ( #1867 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1076.0 to 3.1080.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1080.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1080.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-07 03:44:23 +00:00
338d2c1839
chore(deps-dev): bump sigstore from 4.1.0 to 4.1.1 ( #1864 )
...
Bumps [sigstore](https://github.com/sigstore/sigstore-js ) from 4.1.0 to 4.1.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases )
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@4.1.0...sigstore@4.1.1 )
---
updated-dependencies:
- dependency-name: sigstore
dependency-version: 4.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 02:43:47 +00:00
b94086889d
chore(deps-dev): bump @sigstore/verify from 3.1.0 to 3.1.1 ( #1863 )
...
Bumps [@sigstore/verify](https://github.com/sigstore/sigstore-js ) from 3.1.0 to 3.1.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases )
- [Commits](https://github.com/sigstore/sigstore-js/compare/sigstore@3.1.0...@sigstore/verify@3.1.1 )
---
updated-dependencies:
- dependency-name: "@sigstore/verify"
dependency-version: 3.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-02 02:41:56 +00:00
9df7c63a2f
chore(deps-dev): bump @smithy/property-provider from 4.4.2 to 4.4.4 ( #1862 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.4.2 to 4.4.4.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.4/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.4
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 03:53:53 +00:00
c35a5960bf
chore: Update dist
2026-06-30 03:51:16 +00:00
187c14ee87
chore(deps): bump @aws-sdk/client-sts from 3.1075.0 to 3.1076.0 ( #1858 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1075.0 to 3.1076.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1076.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1076.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 03:50:42 +00:00
c403f3cb69
chore: Update dist
2026-06-30 03:48:55 +00:00
08319dee24
chore(deps): bump @smithy/node-http-handler from 4.8.2 to 4.9.1 ( #1860 )
...
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.8.2 to 4.9.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.9.1/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.9.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 03:48:25 +00:00
d2e2926774
chore(deps-dev): bump @biomejs/biome from 2.5.0 to 2.5.1 ( #1859 )
...
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.5.0 to 2.5.1.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.1/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.5.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 03:46:20 +00:00
90f23cf274
chore(deps-dev): bump @types/node from 26.0.0 to 26.0.1 ( #1857 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 26.0.0 to 26.0.1.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.0.1
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-30 03:43:37 +00:00
26d9fee367
chore(deps-dev): bump @sigstore/core from 3.2.0 to 3.2.1 ( #1856 )
...
Bumps [@sigstore/core](https://github.com/sigstore/sigstore-js ) from 3.2.0 to 3.2.1.
- [Release notes](https://github.com/sigstore/sigstore-js/releases )
- [Commits](https://github.com/sigstore/sigstore-js/compare/@sigstore/core@3.2.0...@sigstore/core@3.2.1 )
---
updated-dependencies:
- dependency-name: "@sigstore/core"
dependency-version: 3.2.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-29 17:05:38 +00:00
6686d5a051
chore(docs): fix automated readme version bumping ( #1850 )
2026-06-26 14:54:03 -07:00
254c19bd24
chore(main): release 6.2.1 ( #1849 )
2026-06-26 14:23:45 -07:00
a20cf827fe
chore: Update dist
2026-06-26 20:42:54 +00:00
4d281fbc56
fix: enforce allowed-account-ids on all auth paths ( #1847 )
...
* fix: enforce allowed-account-ids on all auth paths
The allowed-account-ids list was only enforced in some auth flows. This
was due to the check being included in validateCredentials, which was
skipped if (GITHUB_ACTIONS && AccessKeyId && output-env-credentials) ->
false.
This unifies credential validation into a single path.
- validateCredentials(credentials?, ...) resolves credentials, proves
liveness via one GetCallerIdentity call, and returns the identity.
- validateAccountId(expectedAccountIds, account) is now a pure comparison
against the resolved account, enforced against the final (assumed)
account independent of auth method, GITHUB_ACTIONS, or
output-env-credentials.
- exportAccountId(identity, ...) consumes the resolved identity instead of
making its own GetCallerIdentity call, so credential resolution happens
exactly once per credential set.
Pre-assume account checks remain gated on !roleToAssume so cross-account
assume-role (source account differs from the role's target) is preserved.
Adds regression tests for the OIDC wrong-account case (the previously
missing negative test), OIDC with output-env-credentials: false, and the
assume-role wrong-account case.
* chore: move validateAccountId into helpers
2026-06-26 13:33:19 -07:00
e004cdcd28
chore(deps-dev): bump @smithy/property-provider from 4.4.0 to 4.4.2 ( #1845 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.4.0 to 4.4.2.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.2/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 04:00:00 +00:00
88aa3695d3
chore: Update dist
2026-06-23 03:56:47 +00:00
Tom Keller