9ae780b171
fix: attach git credentials before Tag Major Version push ( #1877 )
...
The Tag Major Version step ran 'git push origin' after Checkout Again
re-cloned with persist-credentials: false, leaving the remote without
credentials. This caused 'fatal: could not read Username' (exit 128) on
the first release. Set the authenticated remote URL using OSDS_ACCESS_TOKEN
before pushing tags, mirroring the Update README step.
2026-07-09 13:46:15 -07:00
6686d5a051
chore(docs): fix automated readme version bumping ( #1850 )
2026-06-26 14:54:03 -07:00
4ab3589ed2
chore: replay 6.2 devel changes onto main ( #1807 )
...
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748 )
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) from 3.2.4 to 4.1.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest )
---
updated-dependencies:
- dependency-name: vitest
dependency-version: 4.1.5
dependency-type: direct:development
update-type: version-update:semver-major
...
* chore(deps-dev): update @vitest/coverage-v8
Bump @vitest/coverage-v8 to ^4.1.5 to match peer dependency, and move
vi.mock('node:fs') calls to the top level of test files to reflect
actual hoisting semantics required by vitest 4.x.
---------
(cherry picked from commit 78f374f6d1#1746 )
* chore(deps): bump @actions/core from 2.0.3 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
* chore: update test mocks for @actions/core ESM
@actions/core v3 ships as an ESM module with non-configurable exports,
breaking vi.spyOn(). Switch to vi.mock('@actions/core') which
intercepts at the module loader level.
---------
(cherry picked from commit 64d8e82527#1754 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1043.0 to 3.1044.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1044.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1042.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit 4cfda40a13#1758 )
(cherry picked from commit 39d1702721#1565 )
* Update release-please.yml to auto-update version tag
* chore: configure release-please auto floating tag
---------
(cherry picked from commit c36525a567#1759 )
* Add possibility to input custom session tags
* Use json for input to custom-tags, add documentation for custom-tags
* Add more examples
* Simplify example to avoid parse error
* Add input validation for custom tags
* Fix unit tests for custom-tags
* Add debugging message
* Skip failing test for now
* Build package
* Remove some unused validation for custom tags
* feat: add validation for custom session tags
Harden the custom-tags feature against misuse and
misconfiguration:
- Validate input is a JSON object (reject arrays, primitives, null)
- Enforce STS tag constraints: key length (128), value length (256),
allowed characters
- Reject nested object/array values that would silently stringify to
'[object Object]'
- Block overriding default session tags (GitHub, Repository,
Workflow, etc.)
- Enforce 50-tag session limit
- Warn when custom-tags used with OIDC or web identity
- Fix missing await on helpers test assertion
- Remove unused CUSTOM_TAGS_JSON_INPUTS fixture
- Normalize test mocking to vi.mocked() pattern
---------
(cherry picked from commit 61f50f630f#1760 )
(cherry picked from commit dc2353e57a#1762 )
Closes #1067 . This is a advanced option
and is not needed for most deployments.
(cherry picked from commit 8d52d05d7a#1763 )
Closes #1420 .
(cherry picked from commit 07ada0fe07#1764 )
Wraps exportAccountId and validateCredentials calls in retryAndBackoff.
Closes #1681 . Adds a label parameter to retryAndBackoff for better
info-level log messages.
(cherry picked from commit 540d0c13ae#1765 )
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.
Closes #1656 . That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
(cherry picked from commit e35449909c#1766 )
Closes #1238 .
(cherry picked from commit 3f7e1b63d7#1767 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1044.0 to 3.1045.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1045.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit a388f23f7d#1768 )
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit 1fb495c4b2#1771 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.2.14 to 4.3.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.1/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit 1ab31502aa#1770 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.6.1 to 4.7.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.1/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit dbd503f368#1772 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.14 to 2.4.15.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.15
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit 7521c55910#1773 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.6.0 to 25.7.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit ef734cca81#1774 )
* feat: expose run id in STS client user-agent
Closes #483 .
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.
* feat: add github_action to ua string
(cherry picked from commit 29d1be3027#1775 )
Closes #390 .
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
(cherry picked from commit e0ba768507#1776 )
* chore: document forgejo compatibility
* chore: linting fixes
(cherry picked from commit f35a7d7d7e#1778 )
Closes #1554 .
(cherry picked from commit 58e7c47adf#1779 )
* chore: update README for additional claim support
* chore: lint fix (whitespace)
(cherry picked from commit 713aaabfec#1781 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.1 to 4.7.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.3/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
(cherry picked from commit a7c33ae483#1785 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.7.0 to 25.9.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit ffde832a1d#1784 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.34 to 3.972.38.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.38
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit bc1093db1d#1783 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.3/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit fe6ad3af19#1782 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1045.0 to 3.1049.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1049.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1049.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit 4684f47f89support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
2026-05-28 14:44:54 -07:00
217d17914b
fix: allow kubelet token symlink ( #1805 )
...
* Revert "chore: Update dist"
This reverts commit 5548f3441b#1780 )"
This reverts commit 77cd089899#1800 )"
This reverts commit 87eb0cf693Closes #1804
2026-05-28 20:25:29 +00:00
87eb0cf693
chore: replay 6.2 devel changes onto main ( #1800 )
...
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748 )
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) from 3.2.4 to 4.1.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest )
---
updated-dependencies:
- dependency-name: vitest
dependency-version: 4.1.5
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore(deps-dev): update @vitest/coverage-v8
Bump @vitest/coverage-v8 to ^4.1.5 to match peer dependency, and move
vi.mock('node:fs') calls to the top level of test files to reflect
actual hoisting semantics required by vitest 4.x.
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <kellertk@amazon.com >
(cherry picked from commit 78f374f6d1#1746 )
* chore(deps): bump @actions/core from 2.0.3 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: update test mocks for @actions/core ESM
@actions/core v3 ships as an ESM module with non-configurable exports,
breaking vi.spyOn(). Switch to vi.mock('@actions/core') which
intercepts at the module loader level.
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <kellertk@amazon.com >
(cherry picked from commit 64d8e82527#1754 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1043.0 to 3.1044.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1044.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1042.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 4cfda40a13#1758 )
(cherry picked from commit 39d1702721#1565 )
* Update release-please.yml to auto-update version tag
* chore: configure release-please auto floating tag
---------
Co-authored-by: Tom Keller <kellertk@amazon.com >
(cherry picked from commit c36525a567#1759 )
* Add possibility to input custom session tags
* Use json for input to custom-tags, add documentation for custom-tags
* Add more examples
* Simplify example to avoid parse error
* Add input validation for custom tags
* Fix unit tests for custom-tags
* Add debugging message
* Skip failing test for now
* Build package
* Remove some unused validation for custom tags
* feat: add validation for custom session tags
Harden the custom-tags feature against misuse and
misconfiguration:
- Validate input is a JSON object (reject arrays, primitives, null)
- Enforce STS tag constraints: key length (128), value length (256),
allowed characters
- Reject nested object/array values that would silently stringify to
'[object Object]'
- Block overriding default session tags (GitHub, Repository,
Workflow, etc.)
- Enforce 50-tag session limit
- Warn when custom-tags used with OIDC or web identity
- Fix missing await on helpers test assertion
- Remove unused CUSTOM_TAGS_JSON_INPUTS fixture
- Normalize test mocking to vi.mocked() pattern
---------
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
(cherry picked from commit 61f50f630f#1760 )
(cherry picked from commit dc2353e57a#1762 )
Closes #1067 . This is a advanced option
and is not needed for most deployments.
(cherry picked from commit 8d52d05d7a#1763 )
Closes #1420 .
(cherry picked from commit 07ada0fe07#1764 )
Wraps exportAccountId and validateCredentials calls in retryAndBackoff.
Closes #1681 . Adds a label parameter to retryAndBackoff for better
info-level log messages.
(cherry picked from commit 540d0c13ae#1765 )
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.
Closes #1656 . That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
(cherry picked from commit e35449909c#1766 )
Closes #1238 .
(cherry picked from commit 3f7e1b63d7#1767 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1044.0 to 3.1045.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1045.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a388f23f7d#1768 )
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 1fb495c4b2#1771 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.2.14 to 4.3.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.1/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 1ab31502aa#1770 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.6.1 to 4.7.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.1/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit dbd503f368#1772 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.14 to 2.4.15.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.15
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 7521c55910#1773 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.6.0 to 25.7.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit ef734cca81#1774 )
* feat: expose run id in STS client user-agent
Closes #483 .
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.
* feat: add github_action to ua string
(cherry picked from commit 29d1be3027#1775 )
Closes #390 .
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
(cherry picked from commit e0ba768507#1776 )
* chore: document forgejo compatibility
* chore: linting fixes
(cherry picked from commit f35a7d7d7e#1778 )
Closes #1554 .
(cherry picked from commit 58e7c47adf#1779 )
* chore: update README for additional claim support
* chore: lint fix (whitespace)
(cherry picked from commit 713aaabfec#1781 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.1 to 4.7.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.3/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a7c33ae483#1785 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.7.0 to 25.9.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit ffde832a1d#1784 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.34 to 3.972.38.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.38
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit bc1093db1d#1783 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.3/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit fe6ad3af19#1782 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1045.0 to 3.1049.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1049.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1049.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 4684f47f89support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
2026-05-26 10:06:35 -07:00
3cc0e19239
chore: unstage devel changes ( #1786 )
...
* Revert "chore: Update dist"
This reverts commit e8614cfbf0#1782 )"
This reverts commit 4684f47f8948b8685c96#1783 )"
This reverts commit fe6ad3af192520c5e921#1784 )"
This reverts commit bc1093db1d#1785 )"
This reverts commit ffde832a1d707acd96f6#1781 )"
This reverts commit a7c33ae483#1779 )"
This reverts commit 713aaabfece6e8eba750#1778 )"
This reverts commit 58e7c47adf#1776 )"
This reverts commit f35a7d7d7e3884f59ecd#1775 )"
This reverts commit e0ba7685076795889618#1774 )"
This reverts commit 29d1be3027#1773 )"
This reverts commit ef734cca81#1772 )"
This reverts commit 7521c55910c0e2737f14#1770 )"
This reverts commit dbd503f36818a236fbd1#1771 )"
This reverts commit 1ab31502aa#1768 )"
This reverts commit 1fb495c4b21e8fec8ea1#1767 )"
This reverts commit a388f23f7d#1766 )"
This reverts commit 3f7e1b63d7#1765 )"
This reverts commit e35449909c958a80fc34#1764 )"
This reverts commit 540d0c13ae#1763 )"
This reverts commit 07ada0fe07f8d4eb68a9#1762 )"
This reverts commit 8d52d05d7a681892c11b#1760 )"
This reverts commit dc2353e57a#1759 )"
This reverts commit 61f50f630f#1565 )"
This reverts commit c36525a567#1758 )"
This reverts commit 39d1702721#1754 )"
This reverts commit 4cfda40a13#1756 )"
This reverts commit 8856e12f3a#1746 )"
This reverts commit 64d8e82527#1748 )"
This reverts commit 78f374f6d1
2026-05-25 12:19:31 -07:00
07ada0fe07
chore: automate README version bumping ( #1763 )
...
Closes #1420 .
2026-05-08 10:36:29 -07:00
dc2353e57a
chore: configure codeql to ignore generated code ( #1760 )
2026-05-06 15:29:32 -07:00
c36525a567
chore: automatic major version tagging ( #1565 )
...
* Update release-please.yml to auto-update version tag
* chore: configure release-please auto floating tag
---------
Co-authored-by: Tom Keller <kellertk@amazon.com >
2026-05-06 14:04:09 -07:00
39d1702721
chore: bump unit test node version ( #1758 )
2026-05-06 20:44:44 +00:00
a7f0c828ac
feat: Support usage of AWS Profiles ( #1696 )
...
* Support usage of AWS Profiles
* squash merge main updates w feature branch
Squashed commit of the following:
commit ef2df4679f908ff30d5a711258ace2fa906c4bf3
Author: Michael Lehmann <lehmanmj@amazon.com >
Date: Tue Mar 17 11:24:04 2026 -0700
dist update
commit db3779a0e9jf@novatec-gmbh.de >
Date: Sun Dec 21 11:28:36 2025 +0100
Support usage of AWS Profiles
* chore: Update dist
* consistent outputEnvCredentials
* take out tests temporarily
* chore: Update dist
* debug changes for static creds
* remove debug and only cleanup profile if it was set
* formatting fixes + remove profile from cleanup test
* feat: Support usage of AWS Profiles
Adds a config option to support writing to profile files instead of
exporting environment variables.
Closes #1594 . Closes #1586 . Closes #112 .
* chore: fix failing test case and windows path
* chore: lint project markdown files
* chore: update scripts in package.json and tsconfig update
* make env vars consistent, readme linting
* debug for profile path env vars
* remove debug
* remove profile backups
* error if we try to overwrite
* add option to overwrite existing profiles
* tests for overwrite option
* default to no env vars
* remove default from action file
* add static credential env var support
* validation fix for static creds multi profile
* debug sleep for static creds validation
* wait syntax
* undo sleep for creds validate
* test coverage, readme/action yml updates, validate creds later on self-hosted runner
* security dependency updates
* chore(deps-dev): bump @biomejs/biome from 2.4.8 to 2.4.10 (#1709 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.8 to 2.4.10.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.10/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.10
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps-dev): bump @aws-sdk/credential-provider-env (#1713 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.22 to 3.972.24.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.24
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: Update dist
* chore(deps): bump @aws-sdk/client-sts from 3.1015.0 to 3.1020.0 (#1710 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1015.0 to 3.1020.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1020.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1020.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: Update dist
* fix: do not write empty profile files
Also cleanup fix, additional test, README typo cleanup
* linting fix
* chore: linting fix
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Jan Feddern <jf@novatec-gmbh.de >
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: GitHub Actions <github-aws-sdk-osds-automation@amazon.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 16:27:00 -07:00
f8de47bf3e
chore: CI fixes ( #1679 )
...
* clean dist
* switch to esbuild
* chore: Update dist
* update script version for token file test
* fix license workflow
* chore: Update dist
* re-add release-please
* newlines
---------
Co-authored-by: GitHub Actions <github-aws-sdk-osds-automation@amazon.com >
2026-03-12 15:20:50 -07:00
0820d92983
re-add static integ test rewrite ( #1680 )
2026-03-12 15:09:44 -07:00
9d1c42024f
chore: revert "chore: static integ test refactor ( #1655 )"
...
This reverts commit b6772acfeb
2026-03-11 17:21:42 -07:00
b6772acfeb
chore: static integ test refactor ( #1655 )
...
* static integ test rewrite
2026-03-11 16:09:56 -07:00
4ce2bbcf5d
chore: update version in actions to v6 ( #1643 )
2026-02-05 17:58:27 +00:00
c367a6acb0
chore: integ tests manual option ( #1639 )
...
* temp integ test fix
temp fix so that integ tests will still run while release-please is disabled
* add workflow-dispatch trigger
let us manually run integ tests
2026-02-03 13:58:34 -08:00
6e3375df07
chore: remove release-please release automation ( #1631 )
2026-01-28 13:13:04 -08:00
98abed7841
chore: add workflow_dispatch trigger to release workflow ( #1630 )
2026-01-28 11:40:15 -08:00
8e2d02296b
ci: update configure-aws-credentials to v5 ( #1470 )
...
BEGIN_COMMIT_OVERRIDE
chore: update configure-aws-credentials to v5 (#1470 )
END_COMMIT_OVERRIDE
2025-09-04 16:58:13 -07:00
0994a359d5
chore: update actions/checkout to v5 ( #1471 )
...
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2025-09-04 23:53:56 +00:00
1ec058b7a1
chore: revert 163b496 ( #1473 )
2025-09-04 23:52:28 +00:00
163b496f8b
chore: update AWS role references to use variables ( #1472 )
2025-09-04 16:46:38 -07:00
a5c87b6a6b
chore: update OS matrix in inline-policy for tests-integ-release.yml ( #1461 )
...
Removed Windows from the OS matrix in the workflow.
2025-08-29 17:18:16 -07:00
45a41642bb
chore: make script inline ( #1460 )
...
* add pre-release integ tests
* chore: remove unnecessary sudo and reorganize test files
* chore: inline write token file
2025-08-30 00:11:06 +00:00
cb3b499674
chore: redact s3 contents
2025-08-29 16:48:11 -07:00
ec8e002276
chore: add pre-release integ tests ( #1457 )
...
* add pre-release integ tests
* chore: remove unnecessary sudo and reorganize test files
2025-08-29 16:34:59 -07:00
df886f22da
chore: tests-unit update
2025-08-20 09:48:34 -07:00
3821430d17
chore: update post-release integ test
2025-08-15 15:42:07 -07:00
3df3b9e987
use correct ref
2025-08-15 15:29:45 -07:00
a91a6303b8
chore: create tests-integ.yml
2025-08-15 15:29:45 -07:00
6b8bbaed05
chore: switch to pull_request_target for dependabot-autoapprove
2025-07-31 13:06:19 -07:00
8128bbdaac
Update assume role arn
2025-07-31 12:44:18 -07:00
a31e903eec
Merge branch 'main' into remove-integ
2025-07-25 21:23:12 -07:00
b88116ba3b
chore: remove unneeded integ test
2025-07-25 21:22:44 -07:00
fd13a40502
update workflow file ARNs ( #1403 )
2025-07-25 22:08:17 +00:00
27e906a655
make sure action builds, also fix dependabot autoapprove
2025-04-22 16:20:34 -07:00
f021516513
chore: remove role session name
2025-02-04 17:18:15 -08:00
ce290d67fe
chore: change dependabot role session name
2025-02-04 17:12:00 -08:00
1780ebd97b
chore: create one-off test for CAWSC
2025-02-04 17:06:10 -08:00
f0af89b102
fix: Dependabot autoapprove id-token write permission ( #1285 )
...
* Fix automerge action syntax
* Fix typo
* Fix typo
* Add brackets
* add ID token permission
---------
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2025-02-05 00:27:51 +00:00
b9ee51dc60
fix: Dependabot autoapprove ( #1284 )
...
* Fix automerge action syntax
* Fix typo
* Fix typo
* Add brackets
2025-02-05 00:23:12 +00:00
39fd91c08e
fix: typo ( #1281 )
...
* Fix automerge action syntax
* Fix typo
---------
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2025-02-04 22:10:35 +00:00
cf624fbdad
Fix automerge action syntax
2025-02-04 12:02:34 -08:00
0f88004d9c
feat: added release-please action config
2025-01-24 14:37:49 -08:00
97834a484a
fix: add id-token permission to automerge
2024-11-06 15:30:39 -08:00
16ffc4e9d9
chore: remove mergify ( #1196 )
...
* feat: autoapprove dependabot PRs without mergify
* chore: remove mergify
* fix: approve dependabot PRs as OSDS bot
2024-11-05 15:55:23 -08:00
bfd218503e
fix: force push packaged files to main
2024-11-04 11:33:37 -08:00
bd1354327e
chore: Modified bug issue template to add checkbox to report potential regression.
2024-09-12 11:12:07 -07:00
39228ca2bf
chore(deps): update github actions versions ( #1128 )
...
Co-authored-by: Melle <melle@git.com >
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2024-08-09 18:43:54 -07:00
Tom Keller