Commit Graph

372 Commits

Author SHA1 Message Date
GitHub Actions 254d42c4b6 chore: Update dist 2026-05-25 19:28:10 +00:00
GitHub Actions 48a00774d0 chore: Update dist 2026-05-25 19:25:01 +00:00
Tom Keller 3cc0e19239 chore: unstage devel changes (#1786)
* Revert "chore: Update dist"

This reverts commit e8614cfbf0.

* Revert "chore(deps): bump @aws-sdk/client-sts from 3.1045.0 to 3.1049.0 (#1782)"

This reverts commit 4684f47f89.

* Revert "chore: Update dist"

This reverts commit 48b8685c96.

* Revert "chore(deps-dev): bump @smithy/property-provider from 4.3.1 to 4.3.3 (#1783)"

This reverts commit fe6ad3af19.

* Revert "chore: Update dist"

This reverts commit 2520c5e921.

* Revert "chore(deps-dev): bump @aws-sdk/credential-provider-env (#1784)"

This reverts commit bc1093db1d.

* Revert "chore(deps-dev): bump @types/node from 25.7.0 to 25.9.0 (#1785)"

This reverts commit ffde832a1d.

* Revert "chore: Update dist"

This reverts commit 707acd96f6.

* Revert "chore(deps): bump @smithy/node-http-handler from 4.7.1 to 4.7.3 (#1781)"

This reverts commit a7c33ae483.

* Revert "chore: update README for additional claim support (#1779)"

This reverts commit 713aaabfec.

* Revert "chore: Update dist"

This reverts commit e6e8eba750.

* Revert "fix: skip credential check on output-env-credentials: false (#1778)"

This reverts commit 58e7c47adf.

* Revert "chore: document forgejo compatibility (#1776)"

This reverts commit f35a7d7d7e.

* Revert "chore: Update dist"

This reverts commit 3884f59ecd.

* Revert "feat: add additional session tags by default (#1775)"

This reverts commit e0ba768507.

* Revert "chore: Update dist"

This reverts commit 6795889618.

* Revert "feat: expose run id in STS client user-agent (#1774)"

This reverts commit 29d1be3027.

* Revert "chore(deps-dev): bump @types/node from 25.6.0 to 25.7.0 (#1773)"

This reverts commit ef734cca81.

* Revert "chore(deps-dev): bump @biomejs/biome from 2.4.14 to 2.4.15 (#1772)"

This reverts commit 7521c55910.

* Revert "chore: Update dist"

This reverts commit c0e2737f14.

* Revert "chore(deps): bump @smithy/node-http-handler from 4.6.1 to 4.7.1 (#1770)"

This reverts commit dbd503f368.

* Revert "chore: Update dist"

This reverts commit 18a236fbd1.

* Revert "chore(deps-dev): bump @smithy/property-provider from 4.2.14 to 4.3.1 (#1771)"

This reverts commit 1ab31502aa.

* Revert "chore(deps-dev): bump @vitest/coverage-v8 from 4.1.5 to 4.1.6 (#1768)"

This reverts commit 1fb495c4b2.

* Revert "chore: Update dist"

This reverts commit 1e8fec8ea1.

* Revert "chore(deps): bump @aws-sdk/client-sts from 3.1044.0 to 3.1045.0 (#1767)"

This reverts commit a388f23f7d.

* Revert "chore: update documentation for environment workflows (#1766)"

This reverts commit 3f7e1b63d7.

* Revert "feat: add regex validation to role-session-name (#1765)"

This reverts commit e35449909c.

* Revert "chore: Update dist"

This reverts commit 958a80fc34.

* Revert "feat: add more retry logic and better logging (#1764)"

This reverts commit 540d0c13ae.

* Revert "chore: automate README version bumping (#1763)"

This reverts commit 07ada0fe07.

* Revert "chore: Update dist"

This reverts commit f8d4eb68a9.

* Revert "feat: support custom STS endpoints (#1762)"

This reverts commit 8d52d05d7a.

* Revert "chore: Update dist"

This reverts commit 681892c11b.

* Revert "chore: configure codeql to ignore generated code (#1760)"

This reverts commit dc2353e57a.

* Revert "feat: Allow custom session tags to be passed when assuming a role (#1759)"

This reverts commit 61f50f630f.

* Revert "chore: automatic major version tagging (#1565)"

This reverts commit c36525a567.

* Revert "chore: bump unit test node version (#1758)"

This reverts commit 39d1702721.

* Revert "chore(deps): bump @aws-sdk/client-sts from 3.1043.0 to 3.1044.0 (#1754)"

This reverts commit 4cfda40a13.

* Revert "chore(deps-dev): bump @biomejs/biome from 2.4.13 to 2.4.14 (#1756)"

This reverts commit 8856e12f3a.

* Revert "chore(deps): bump @actions/core from 2.0.3 to 3.0.1 (#1746)"

This reverts commit 64d8e82527.

* Revert "chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748)"

This reverts commit 78f374f6d1.
2026-05-25 12:19:31 -07:00
GitHub Actions e8614cfbf0 chore: Update dist 2026-05-19 15:21:00 +00:00
GitHub Actions 2520c5e921 chore: Update dist 2026-05-19 15:13:37 +00:00
GitHub Actions 707acd96f6 chore: Update dist 2026-05-19 15:07:03 +00:00
GitHub Actions e6e8eba750 chore: Update dist 2026-05-14 20:40:12 +00:00
GitHub Actions 3884f59ecd chore: Update dist 2026-05-13 21:44:24 +00:00
Tom Keller e0ba768507 feat: add additional session tags by default (#1775)
Closes #390.
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
2026-05-13 14:43:50 -07:00
GitHub Actions 6795889618 chore: Update dist 2026-05-12 23:19:14 +00:00
Tom Keller 29d1be3027 feat: expose run id in STS client user-agent (#1774)
* feat: expose run id in STS client user-agent

Closes #483.
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.

* feat: add github_action to ua string
2026-05-12 16:18:34 -07:00
GitHub Actions c0e2737f14 chore: Update dist 2026-05-12 08:31:17 +00:00
GitHub Actions 18a236fbd1 chore: Update dist 2026-05-12 08:28:50 +00:00
GitHub Actions 1e8fec8ea1 chore: Update dist 2026-05-12 08:24:27 +00:00
Tom Keller e35449909c feat: add regex validation to role-session-name (#1765)
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.

Closes #1656. That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
2026-05-11 21:32:33 +00:00
GitHub Actions 958a80fc34 chore: Update dist 2026-05-11 17:00:57 +00:00
GitHub Actions f8d4eb68a9 chore: Update dist 2026-05-07 21:50:48 +00:00
GitHub Actions 681892c11b chore: Update dist 2026-05-06 22:39:12 +00:00
GitHub Actions d4a9acd8d3 chore: Update dist 2026-04-28 04:32:16 +00:00
GitHub Actions 0b8336f1ba chore: Update dist 2026-04-28 04:29:51 +00:00
GitHub Actions 53df0c1c32 chore: Update dist 2026-04-28 04:27:42 +00:00
GitHub Actions 934ca25ed2 chore: Update dist 2026-04-21 03:52:49 +00:00
GitHub Actions bee39e8d77 chore: Update dist 2026-04-21 03:50:20 +00:00
GitHub Actions c36c0e55fd chore: Update dist 2026-04-16 23:38:52 +00:00
GitHub Actions aa48afa741 chore: Update dist 2026-04-14 03:48:54 +00:00
GitHub Actions 795d57b736 chore: Update dist 2026-04-14 03:46:23 +00:00
GitHub Actions 3c894dabff chore: Update dist 2026-04-10 21:57:51 +00:00
GitHub Actions 80269b713c chore: Update dist 2026-04-08 20:42:11 +00:00
GitHub Actions 930440c681 chore: Update dist 2026-04-07 03:56:24 +00:00
GitHub Actions 30a5c4561c chore: Update dist 2026-04-07 03:51:35 +00:00
GitHub Actions bc0a50afbe chore: Update dist 2026-04-03 23:29:28 +00:00
GitHub Actions 0a8759496b chore: Update dist 2026-04-03 23:27:30 +00:00
Tom Keller a7f0c828ac feat: Support usage of AWS Profiles (#1696)
* Support usage of AWS Profiles

* squash merge main updates w feature branch
Squashed commit of the following:

commit ef2df4679f908ff30d5a711258ace2fa906c4bf3
Author: Michael Lehmann <lehmanmj@amazon.com>
Date:   Tue Mar 17 11:24:04 2026 -0700

    dist update

commit db3779a0e9
Author: Jan Feddern <jf@novatec-gmbh.de>
Date:   Sun Dec 21 11:28:36 2025 +0100

    Support usage of AWS Profiles

* chore: Update dist

* consistent outputEnvCredentials

* take out tests temporarily

* chore: Update dist

* debug changes for static creds

* remove debug and only cleanup profile if it was set

* formatting fixes + remove profile from cleanup test

* feat: Support usage of AWS Profiles

Adds a config option to support writing to profile files instead of
exporting environment variables.

Closes #1594. Closes #1586. Closes #112.

* chore: fix failing test case and windows path

* chore: lint project markdown files

* chore: update scripts in package.json and tsconfig update

* make env vars consistent, readme linting

* debug for profile path env vars

* remove debug

* remove profile backups

* error if we try to overwrite

* add option to overwrite existing profiles

* tests for overwrite option

* default to no env vars

* remove default from action file

* add static credential env var support

* validation fix for static creds multi profile

* debug sleep for static creds validation

* wait syntax

* undo sleep for creds validate

* test coverage, readme/action yml updates, validate creds later on self-hosted runner

* security dependency updates

* chore(deps-dev): bump @biomejs/biome from 2.4.8 to 2.4.10 (#1709)

Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.8 to 2.4.10.
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.10/packages/@biomejs/biome)

---
updated-dependencies:
- dependency-name: "@biomejs/biome"
  dependency-version: 2.4.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps-dev): bump @aws-sdk/credential-provider-env (#1713)

Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env) from 3.972.22 to 3.972.24.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env)

---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
  dependency-version: 3.972.24
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: Update dist

* chore(deps): bump @aws-sdk/client-sts from 3.1015.0 to 3.1020.0 (#1710)

Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) from 3.1015.0 to 3.1020.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1020.0/clients/client-sts)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
  dependency-version: 3.1020.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: Update dist

* fix: do not write empty profile files

Also cleanup fix, additional test, README typo cleanup

* linting fix

* chore: linting fix

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Jan Feddern <jf@novatec-gmbh.de>
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com>
Co-authored-by: GitHub Actions <github-aws-sdk-osds-automation@amazon.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 16:27:00 -07:00
GitHub Actions 51635dbf41 chore: Update dist 2026-03-31 03:49:14 +00:00
GitHub Actions 563c6001b1 chore: Update dist 2026-03-31 03:46:44 +00:00
GitHub Actions f86e2d2212 chore: Update dist 2026-03-24 03:52:37 +00:00
GitHub Actions 21cbb61e80 chore: Update dist 2026-03-24 03:48:37 +00:00
GitHub Actions ed95fff515 chore: Update dist 2026-03-24 02:37:04 +00:00
GitHub Actions e08afaa6ae chore: Update dist 2026-03-17 03:49:54 +00:00
GitHub Actions 24d6c03371 chore: Update dist 2026-03-17 03:48:13 +00:00
GitHub Actions 2bb9df827e chore: Update dist 2026-03-16 21:02:01 +00:00
Michael Lehmann f8de47bf3e chore: CI fixes (#1679)
* clean dist

* switch to esbuild

* chore: Update dist

* update script version for token file test

* fix license workflow

* chore: Update dist

* re-add release-please

* newlines

---------

Co-authored-by: GitHub Actions <github-aws-sdk-osds-automation@amazon.com>
2026-03-12 15:20:50 -07:00
GitHub Actions ac7d2f7df3 chore: Update dist 2026-02-10 03:46:00 +00:00
GitHub Actions bb84b6db01 chore: Update dist 2026-02-04 22:09:34 +00:00
GitHub Actions 028c01e898 chore: Update dist 2026-02-04 22:07:16 +00:00
Michael Lehmann 7ceaf96edc fix: correct outputs for role chaining (#1633)
re-instantiate stsClient when roleChaining

technically a breaking change
2026-01-29 10:47:17 -08:00
GitHub Actions bf3adbbb94 chore: Update dist 2026-01-28 00:02:48 +00:00
GitHub Actions 858051bf2c chore: Update dist 2026-01-27 03:46:31 +00:00
GitHub Actions e0972b3bd3 chore: Update dist 2026-01-20 03:51:23 +00:00
GitHub Actions b94e285a37 chore: Update dist 2026-01-20 03:47:06 +00:00