6686d5a051
chore(docs): fix automated readme version bumping ( #1850 )
2026-06-26 14:54:03 -07:00
254c19bd24
chore(main): release 6.2.1 ( #1849 )
2026-06-26 14:23:45 -07:00
a20cf827fe
chore: Update dist
2026-06-26 20:42:54 +00:00
4d281fbc56
fix: enforce allowed-account-ids on all auth paths ( #1847 )
...
* fix: enforce allowed-account-ids on all auth paths
The allowed-account-ids list was only enforced in some auth flows. This
was due to the check being included in validateCredentials, which was
skipped if (GITHUB_ACTIONS && AccessKeyId && output-env-credentials) ->
false.
This unifies credential validation into a single path.
- validateCredentials(credentials?, ...) resolves credentials, proves
liveness via one GetCallerIdentity call, and returns the identity.
- validateAccountId(expectedAccountIds, account) is now a pure comparison
against the resolved account, enforced against the final (assumed)
account independent of auth method, GITHUB_ACTIONS, or
output-env-credentials.
- exportAccountId(identity, ...) consumes the resolved identity instead of
making its own GetCallerIdentity call, so credential resolution happens
exactly once per credential set.
Pre-assume account checks remain gated on !roleToAssume so cross-account
assume-role (source account differs from the role's target) is preserved.
Adds regression tests for the OIDC wrong-account case (the previously
missing negative test), OIDC with output-env-credentials: false, and the
assume-role wrong-account case.
* chore: move validateAccountId into helpers
2026-06-26 13:33:19 -07:00
e004cdcd28
chore(deps-dev): bump @smithy/property-provider from 4.4.0 to 4.4.2 ( #1845 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.4.0 to 4.4.2.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.2/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 04:00:00 +00:00
88aa3695d3
chore: Update dist
2026-06-23 03:56:47 +00:00
687331b272
chore(deps): bump @aws-sdk/client-sts from 3.1069.0 to 3.1075.0 ( #1841 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1069.0 to 3.1075.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1075.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1075.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 03:56:17 +00:00
ea607be060
chore: Update dist
2026-06-23 03:53:50 +00:00
6d136066d8
chore(deps): bump @smithy/node-http-handler from 4.8.0 to 4.8.2 ( #1842 )
...
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.8.0 to 4.8.2.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.8.2/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.8.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 03:53:19 +00:00
71a32ae408
chore: Update dist
2026-06-23 03:51:40 +00:00
b290f2ca79
chore(deps-dev): bump @aws-sdk/credential-provider-env ( #1844 )
...
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.47 to 3.972.49.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.49
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 03:51:04 +00:00
0cd4b34a9b
chore(deps-dev): bump markdownlint-cli from 0.48.0 to 0.49.0 ( #1843 )
...
Bumps [markdownlint-cli](https://github.com/igorshubovych/markdownlint-cli ) from 0.48.0 to 0.49.0.
- [Release notes](https://github.com/igorshubovych/markdownlint-cli/releases )
- [Commits](https://github.com/igorshubovych/markdownlint-cli/compare/v0.48.0...v0.49.0 )
---
updated-dependencies:
- dependency-name: markdownlint-cli
dependency-version: 0.49.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 03:48:40 +00:00
e6e5af76de
chore(deps-dev): bump @types/node from 25.9.3 to 26.0.0 ( #1839 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.9.3 to 26.0.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 26.0.0
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 03:46:10 +00:00
7089b3a41f
chore(deps-dev): bump memfs from 4.57.7 to 4.57.8 ( #1840 )
...
Bumps [memfs](https://github.com/streamich/memfs ) from 4.57.7 to 4.57.8.
- [Release notes](https://github.com/streamich/memfs/releases )
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/streamich/memfs/compare/v4.57.7...v4.57.8 )
---
updated-dependencies:
- dependency-name: memfs
dependency-version: 4.57.8
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-23 03:43:28 +00:00
1a6323c7ef
chore: Update dist
2026-06-22 21:25:17 +00:00
8136aa1bcb
chore(deps): bump undici from 6.25.0 to 6.27.0 ( #1838 )
...
Bumps [undici](https://github.com/nodejs/undici ) from 6.25.0 to 6.27.0.
- [Release notes](https://github.com/nodejs/undici/releases )
- [Commits](https://github.com/nodejs/undici/compare/v6.25.0...v6.27.0 )
---
updated-dependencies:
- dependency-name: undici
dependency-version: 6.27.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-22 21:24:42 +00:00
ffffc0fe9d
chore(deps-dev): switch prototype syntax in test, update vitest and biome ( #1837 )
2026-06-16 11:42:04 -07:00
93823cfbdc
chore: Update dist
2026-06-16 03:58:44 +00:00
7397aaead8
chore(deps): bump @aws-sdk/client-sts from 3.1064.0 to 3.1069.0 ( #1832 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1064.0 to 3.1069.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1069.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1069.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:58:08 +00:00
fc8f6a6abe
chore: Update dist
2026-06-16 03:56:29 +00:00
3c7bb1cb09
chore(deps-dev): bump @aws-sdk/credential-provider-env ( #1830 )
...
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.45 to 3.972.47.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.47
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:55:58 +00:00
024bb07a82
chore(deps-dev): bump @types/node from 25.9.2 to 25.9.3 ( #1829 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.9.2 to 25.9.3.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:53:23 +00:00
86c1acf81a
chore: Update dist
2026-06-16 03:51:28 +00:00
50c2567845
chore(deps): bump @smithy/node-http-handler from 4.7.7 to 4.8.0 ( #1834 )
...
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.7 to 4.8.0.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.8.0/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.8.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:50:50 +00:00
270cb5b1d9
chore(deps-dev): bump memfs from 4.57.6 to 4.57.7 ( #1828 )
...
Bumps [memfs](https://github.com/streamich/memfs ) from 4.57.6 to 4.57.7.
- [Release notes](https://github.com/streamich/memfs/releases )
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/streamich/memfs/compare/v4.57.6...v4.57.7 )
---
updated-dependencies:
- dependency-name: memfs
dependency-version: 4.57.7
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:48:47 +00:00
51e8115730
chore(deps-dev): bump tar from 7.5.14 to 7.5.16 ( #1836 )
...
Bumps [tar](https://github.com/isaacs/node-tar ) from 7.5.14 to 7.5.16.
- [Release notes](https://github.com/isaacs/node-tar/releases )
- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHANGELOG.md )
- [Commits](https://github.com/isaacs/node-tar/compare/v7.5.14...v7.5.16 )
---
updated-dependencies:
- dependency-name: tar
dependency-version: 7.5.16
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:45:57 +00:00
7f56bcdc8b
chore: Update dist
2026-06-16 03:44:17 +00:00
357812ba85
chore(deps-dev): bump @smithy/property-provider from 4.3.6 to 4.4.0 ( #1827 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.6 to 4.4.0.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.4.0/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.4.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-16 03:43:40 +00:00
6a57fcec9b
chore: Update dist
2026-06-13 01:07:33 +00:00
11b91e35b6
chore(deps-dev): bump esbuild from 0.28.0 to 0.28.1 ( #1826 )
...
Bumps [esbuild](https://github.com/evanw/esbuild ) from 0.28.0 to 0.28.1.
- [Release notes](https://github.com/evanw/esbuild/releases )
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md )
- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1 )
---
updated-dependencies:
- dependency-name: esbuild
dependency-version: 0.28.1
dependency-type: direct:development
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-13 01:06:55 +00:00
eeef317384
chore: Update dist
2026-06-09 03:52:09 +00:00
586cfded7b
chore(deps): bump @aws-sdk/client-sts from 3.1061.0 to 3.1064.0 ( #1822 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1061.0 to 3.1064.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1064.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1064.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 03:51:35 +00:00
ff89a791a6
chore: Update dist
2026-06-09 03:49:39 +00:00
c2036624d0
chore(deps): bump @smithy/node-http-handler from 4.7.6 to 4.7.7 ( #1823 )
...
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.6 to 4.7.7.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.7/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.7
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 03:49:05 +00:00
68fa256f0b
chore: Update dist
2026-06-09 03:47:18 +00:00
97363c92bb
chore(deps): bump proxy-agent from 8.0.1 to 8.0.2 ( #1824 )
...
Bumps [proxy-agent](https://github.com/TooTallNate/proxy-agents/tree/HEAD/packages/proxy-agent ) from 8.0.1 to 8.0.2.
- [Release notes](https://github.com/TooTallNate/proxy-agents/releases )
- [Changelog](https://github.com/TooTallNate/proxy-agents/blob/main/packages/proxy-agent/CHANGELOG.md )
- [Commits](https://github.com/TooTallNate/proxy-agents/commits/proxy-agent@8.0.2/packages/proxy-agent )
---
updated-dependencies:
- dependency-name: proxy-agent
dependency-version: 8.0.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 03:46:49 +00:00
05c3e92d7e
chore(deps-dev): bump @types/node from 25.9.1 to 25.9.2 ( #1821 )
...
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.9.1 to 25.9.2.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.2
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-09 03:43:53 +00:00
037dd16322
chore(deps-dev): bump @vitest/coverage-v8 from 4.1.5 to 4.1.8 ( #1817 )
...
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.5 to 4.1.8.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.8
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2026-06-03 22:06:07 +00:00
89a34d9b83
chore(deps-dev): bump vitest from 4.1.5 to 4.1.8 ( #1815 )
...
* chore(deps-dev): bump vitest from 4.1.5 to 4.1.8
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) from 4.1.5 to 4.1.8.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.8/packages/vitest )
---
updated-dependencies:
- dependency-name: vitest
dependency-version: 4.1.8
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore(deps-dev): bump vitest and coverage-v8 to 4.1.8
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <kellertk@amazon.com >
2026-06-03 22:04:30 +00:00
d63f12fba5
chore(deps-dev): bump memfs from 4.57.2 to 4.57.6 ( #1813 )
...
Bumps [memfs](https://github.com/streamich/memfs ) from 4.57.2 to 4.57.6.
- [Release notes](https://github.com/streamich/memfs/releases )
- [Changelog](https://github.com/streamich/memfs/blob/master/CHANGELOG.md )
- [Commits](https://github.com/streamich/memfs/compare/v4.57.2...v4.57.6 )
---
updated-dependencies:
- dependency-name: memfs
dependency-version: 4.57.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 21:58:21 +00:00
aefb6ea018
chore(deps-dev): bump @smithy/property-provider from 4.3.5 to 4.3.6 ( #1816 )
...
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.5 to 4.3.6.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/util-retry@4.3.6/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 21:56:02 +00:00
bf27562715
chore: Update dist
2026-06-03 21:53:30 +00:00
4f3ef32554
chore(deps): bump @aws-sdk/client-sts from 3.1049.0 to 3.1061.0 ( #1814 )
...
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1049.0 to 3.1061.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1061.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1061.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 21:52:58 +00:00
26b365ff2f
chore(deps-dev): bump @biomejs/biome from 2.4.15 to 2.4.16 ( #1811 )
...
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.15 to 2.4.16.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.16/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.16
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 21:50:30 +00:00
262ce4cfb5
chore(deps-dev): bump generate-license-file from 4.1.1 to 4.2.1 ( #1812 )
...
Bumps [generate-license-file](https://github.com/TobyAndToby/generate-license-file/tree/HEAD/src/packages/generate-license-file ) from 4.1.1 to 4.2.1.
- [Release notes](https://github.com/TobyAndToby/generate-license-file/releases )
- [Commits](https://github.com/TobyAndToby/generate-license-file/commits/v4.2.1/src/packages/generate-license-file )
---
updated-dependencies:
- dependency-name: generate-license-file
dependency-version: 4.2.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-06-03 21:47:33 +00:00
e7f100cf4c
chore(main): release 6.2.0 ( #1806 )
...
* chore(main): release 6.1.4
* chore: fix broken stuff from release-please improperly handling revert commits
---------
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
2026-06-01 16:39:01 -07:00
bbbffeab00
chore: Update dist
2026-06-01 21:59:55 +00:00
d6f5dc331b
fix: assumeRole failing from session tag size too large ( #1808 )
...
* minor readme fixes and print tags when debugging
* redo changes from #1780
* reworked new tags/priority behavior, add drop tags and retry logic
* minor edits to documentation, README update for clarity
* linting fix
2026-06-01 13:55:23 -07:00
12014c0798
docs: fix typo in README.md ( #1809 )
2026-05-29 12:53:13 -07:00
4ab3589ed2
chore: replay 6.2 devel changes onto main ( #1807 )
...
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748 )
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) from 3.2.4 to 4.1.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest )
---
updated-dependencies:
- dependency-name: vitest
dependency-version: 4.1.5
dependency-type: direct:development
update-type: version-update:semver-major
...
* chore(deps-dev): update @vitest/coverage-v8
Bump @vitest/coverage-v8 to ^4.1.5 to match peer dependency, and move
vi.mock('node:fs') calls to the top level of test files to reflect
actual hoisting semantics required by vitest 4.x.
---------
(cherry picked from commit 78f374f6d1#1746 )
* chore(deps): bump @actions/core from 2.0.3 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
* chore: update test mocks for @actions/core ESM
@actions/core v3 ships as an ESM module with non-configurable exports,
breaking vi.spyOn(). Switch to vi.mock('@actions/core') which
intercepts at the module loader level.
---------
(cherry picked from commit 64d8e82527#1754 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1043.0 to 3.1044.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1044.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1042.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit 4cfda40a13#1758 )
(cherry picked from commit 39d1702721#1565 )
* Update release-please.yml to auto-update version tag
* chore: configure release-please auto floating tag
---------
(cherry picked from commit c36525a567#1759 )
* Add possibility to input custom session tags
* Use json for input to custom-tags, add documentation for custom-tags
* Add more examples
* Simplify example to avoid parse error
* Add input validation for custom tags
* Fix unit tests for custom-tags
* Add debugging message
* Skip failing test for now
* Build package
* Remove some unused validation for custom tags
* feat: add validation for custom session tags
Harden the custom-tags feature against misuse and
misconfiguration:
- Validate input is a JSON object (reject arrays, primitives, null)
- Enforce STS tag constraints: key length (128), value length (256),
allowed characters
- Reject nested object/array values that would silently stringify to
'[object Object]'
- Block overriding default session tags (GitHub, Repository,
Workflow, etc.)
- Enforce 50-tag session limit
- Warn when custom-tags used with OIDC or web identity
- Fix missing await on helpers test assertion
- Remove unused CUSTOM_TAGS_JSON_INPUTS fixture
- Normalize test mocking to vi.mocked() pattern
---------
(cherry picked from commit 61f50f630f#1760 )
(cherry picked from commit dc2353e57a#1762 )
Closes #1067 . This is a advanced option
and is not needed for most deployments.
(cherry picked from commit 8d52d05d7a#1763 )
Closes #1420 .
(cherry picked from commit 07ada0fe07#1764 )
Wraps exportAccountId and validateCredentials calls in retryAndBackoff.
Closes #1681 . Adds a label parameter to retryAndBackoff for better
info-level log messages.
(cherry picked from commit 540d0c13ae#1765 )
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.
Closes #1656 . That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
(cherry picked from commit e35449909c#1766 )
Closes #1238 .
(cherry picked from commit 3f7e1b63d7#1767 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1044.0 to 3.1045.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1045.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit a388f23f7d#1768 )
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit 1fb495c4b2#1771 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.2.14 to 4.3.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.1/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit 1ab31502aa#1770 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.6.1 to 4.7.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.1/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit dbd503f368#1772 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.14 to 2.4.15.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.15
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit 7521c55910#1773 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.6.0 to 25.7.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit ef734cca81#1774 )
* feat: expose run id in STS client user-agent
Closes #483 .
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.
* feat: add github_action to ua string
(cherry picked from commit 29d1be3027#1775 )
Closes #390 .
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
(cherry picked from commit e0ba768507#1776 )
* chore: document forgejo compatibility
* chore: linting fixes
(cherry picked from commit f35a7d7d7e#1778 )
Closes #1554 .
(cherry picked from commit 58e7c47adf#1779 )
* chore: update README for additional claim support
* chore: lint fix (whitespace)
(cherry picked from commit 713aaabfec#1781 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.1 to 4.7.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.3/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
(cherry picked from commit a7c33ae483#1785 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.7.0 to 25.9.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit ffde832a1d#1784 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.34 to 3.972.38.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.38
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit bc1093db1d#1783 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.3/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit fe6ad3af19#1782 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1045.0 to 3.1049.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1049.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1049.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit 4684f47f89support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
2026-05-28 14:44:54 -07:00
Michael Lehmann