4d281fbc56
fix: enforce allowed-account-ids on all auth paths ( #1847 )
...
* fix: enforce allowed-account-ids on all auth paths
The allowed-account-ids list was only enforced in some auth flows. This
was due to the check being included in validateCredentials, which was
skipped if (GITHUB_ACTIONS && AccessKeyId && output-env-credentials) ->
false.
This unifies credential validation into a single path.
- validateCredentials(credentials?, ...) resolves credentials, proves
liveness via one GetCallerIdentity call, and returns the identity.
- validateAccountId(expectedAccountIds, account) is now a pure comparison
against the resolved account, enforced against the final (assumed)
account independent of auth method, GITHUB_ACTIONS, or
output-env-credentials.
- exportAccountId(identity, ...) consumes the resolved identity instead of
making its own GetCallerIdentity call, so credential resolution happens
exactly once per credential set.
Pre-assume account checks remain gated on !roleToAssume so cross-account
assume-role (source account differs from the role's target) is preserved.
Adds regression tests for the OIDC wrong-account case (the previously
missing negative test), OIDC with output-env-credentials: false, and the
assume-role wrong-account case.
* chore: move validateAccountId into helpers
2026-06-26 13:33:19 -07:00
d6f5dc331b
fix: assumeRole failing from session tag size too large ( #1808 )
...
* minor readme fixes and print tags when debugging
* redo changes from #1780
* reworked new tags/priority behavior, add drop tags and retry logic
* minor edits to documentation, README update for clarity
* linting fix
2026-06-01 13:55:23 -07:00
4ab3589ed2
chore: replay 6.2 devel changes onto main ( #1807 )
...
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748 )
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) from 3.2.4 to 4.1.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest )
---
updated-dependencies:
- dependency-name: vitest
dependency-version: 4.1.5
dependency-type: direct:development
update-type: version-update:semver-major
...
* chore(deps-dev): update @vitest/coverage-v8
Bump @vitest/coverage-v8 to ^4.1.5 to match peer dependency, and move
vi.mock('node:fs') calls to the top level of test files to reflect
actual hoisting semantics required by vitest 4.x.
---------
(cherry picked from commit 78f374f6d1#1746 )
* chore(deps): bump @actions/core from 2.0.3 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
* chore: update test mocks for @actions/core ESM
@actions/core v3 ships as an ESM module with non-configurable exports,
breaking vi.spyOn(). Switch to vi.mock('@actions/core') which
intercepts at the module loader level.
---------
(cherry picked from commit 64d8e82527#1754 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1043.0 to 3.1044.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1044.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1042.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit 4cfda40a13#1758 )
(cherry picked from commit 39d1702721#1565 )
* Update release-please.yml to auto-update version tag
* chore: configure release-please auto floating tag
---------
(cherry picked from commit c36525a567#1759 )
* Add possibility to input custom session tags
* Use json for input to custom-tags, add documentation for custom-tags
* Add more examples
* Simplify example to avoid parse error
* Add input validation for custom tags
* Fix unit tests for custom-tags
* Add debugging message
* Skip failing test for now
* Build package
* Remove some unused validation for custom tags
* feat: add validation for custom session tags
Harden the custom-tags feature against misuse and
misconfiguration:
- Validate input is a JSON object (reject arrays, primitives, null)
- Enforce STS tag constraints: key length (128), value length (256),
allowed characters
- Reject nested object/array values that would silently stringify to
'[object Object]'
- Block overriding default session tags (GitHub, Repository,
Workflow, etc.)
- Enforce 50-tag session limit
- Warn when custom-tags used with OIDC or web identity
- Fix missing await on helpers test assertion
- Remove unused CUSTOM_TAGS_JSON_INPUTS fixture
- Normalize test mocking to vi.mocked() pattern
---------
(cherry picked from commit 61f50f630f#1760 )
(cherry picked from commit dc2353e57a#1762 )
Closes #1067 . This is a advanced option
and is not needed for most deployments.
(cherry picked from commit 8d52d05d7a#1763 )
Closes #1420 .
(cherry picked from commit 07ada0fe07#1764 )
Wraps exportAccountId and validateCredentials calls in retryAndBackoff.
Closes #1681 . Adds a label parameter to retryAndBackoff for better
info-level log messages.
(cherry picked from commit 540d0c13ae#1765 )
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.
Closes #1656 . That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
(cherry picked from commit e35449909c#1766 )
Closes #1238 .
(cherry picked from commit 3f7e1b63d7#1767 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1044.0 to 3.1045.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1045.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit a388f23f7d#1768 )
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit 1fb495c4b2#1771 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.2.14 to 4.3.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.1/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit 1ab31502aa#1770 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.6.1 to 4.7.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.1/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit dbd503f368#1772 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.14 to 2.4.15.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.15
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit 7521c55910#1773 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.6.0 to 25.7.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit ef734cca81#1774 )
* feat: expose run id in STS client user-agent
Closes #483 .
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.
* feat: add github_action to ua string
(cherry picked from commit 29d1be3027#1775 )
Closes #390 .
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
(cherry picked from commit e0ba768507#1776 )
* chore: document forgejo compatibility
* chore: linting fixes
(cherry picked from commit f35a7d7d7e#1778 )
Closes #1554 .
(cherry picked from commit 58e7c47adf#1779 )
* chore: update README for additional claim support
* chore: lint fix (whitespace)
(cherry picked from commit 713aaabfec#1781 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.1 to 4.7.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.3/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
(cherry picked from commit a7c33ae483#1785 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.7.0 to 25.9.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
(cherry picked from commit ffde832a1d#1784 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.34 to 3.972.38.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.38
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit bc1093db1d#1783 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.3/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
(cherry picked from commit fe6ad3af19#1782 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1045.0 to 3.1049.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1049.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1049.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
(cherry picked from commit 4684f47f89support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
2026-05-28 14:44:54 -07:00
217d17914b
fix: allow kubelet token symlink ( #1805 )
...
* Revert "chore: Update dist"
This reverts commit 5548f3441b#1780 )"
This reverts commit 77cd089899#1800 )"
This reverts commit 87eb0cf693Closes #1804
2026-05-28 20:25:29 +00:00
77cd089899
chore: document container credentials provider support (and delete transitive tags in AssumeRoleWithWebIdentity) ( #1780 )
...
* chore: document container credentials provider support (and delete transitive tags in AssumeRoleWithWebIdentity)
Closes #1546
Closes #942
Documents that eks and codebuild work when using the role-chaining flag.
* revert force-skip-oidc changes
* README changes for Container Credentials and adding missing input options
* linting
---------
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
2026-05-27 13:42:45 -07:00
87eb0cf693
chore: replay 6.2 devel changes onto main ( #1800 )
...
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748 )
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5
Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest ) from 3.2.4 to 4.1.5.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest )
---
updated-dependencies:
- dependency-name: vitest
dependency-version: 4.1.5
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore(deps-dev): update @vitest/coverage-v8
Bump @vitest/coverage-v8 to ^4.1.5 to match peer dependency, and move
vi.mock('node:fs') calls to the top level of test files to reflect
actual hoisting semantics required by vitest 4.x.
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <kellertk@amazon.com >
(cherry picked from commit 78f374f6d1#1746 )
* chore(deps): bump @actions/core from 2.0.3 to 3.0.1
Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core ) from 2.0.3 to 3.0.1.
- [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md )
- [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core )
---
updated-dependencies:
- dependency-name: "@actions/core"
dependency-version: 3.0.1
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: update test mocks for @actions/core ESM
@actions/core v3 ships as an ESM module with non-configurable exports,
breaking vi.spyOn(). Switch to vi.mock('@actions/core') which
intercepts at the module loader level.
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <kellertk@amazon.com >
(cherry picked from commit 64d8e82527#1754 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1043.0 to 3.1044.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1044.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1042.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 4cfda40a13#1758 )
(cherry picked from commit 39d1702721#1565 )
* Update release-please.yml to auto-update version tag
* chore: configure release-please auto floating tag
---------
Co-authored-by: Tom Keller <kellertk@amazon.com >
(cherry picked from commit c36525a567#1759 )
* Add possibility to input custom session tags
* Use json for input to custom-tags, add documentation for custom-tags
* Add more examples
* Simplify example to avoid parse error
* Add input validation for custom tags
* Fix unit tests for custom-tags
* Add debugging message
* Skip failing test for now
* Build package
* Remove some unused validation for custom tags
* feat: add validation for custom session tags
Harden the custom-tags feature against misuse and
misconfiguration:
- Validate input is a JSON object (reject arrays, primitives, null)
- Enforce STS tag constraints: key length (128), value length (256),
allowed characters
- Reject nested object/array values that would silently stringify to
'[object Object]'
- Block overriding default session tags (GitHub, Repository,
Workflow, etc.)
- Enforce 50-tag session limit
- Warn when custom-tags used with OIDC or web identity
- Fix missing await on helpers test assertion
- Remove unused CUSTOM_TAGS_JSON_INPUTS fixture
- Normalize test mocking to vi.mocked() pattern
---------
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
(cherry picked from commit 61f50f630f#1760 )
(cherry picked from commit dc2353e57a#1762 )
Closes #1067 . This is a advanced option
and is not needed for most deployments.
(cherry picked from commit 8d52d05d7a#1763 )
Closes #1420 .
(cherry picked from commit 07ada0fe07#1764 )
Wraps exportAccountId and validateCredentials calls in retryAndBackoff.
Closes #1681 . Adds a label parameter to retryAndBackoff for better
info-level log messages.
(cherry picked from commit 540d0c13ae#1765 )
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.
Closes #1656 . That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
(cherry picked from commit e35449909c#1766 )
Closes #1238 .
(cherry picked from commit 3f7e1b63d7#1767 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1044.0 to 3.1045.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1045.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a388f23f7d#1768 )
Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8 ) from 4.1.5 to 4.1.6.
- [Release notes](https://github.com/vitest-dev/vitest/releases )
- [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8 )
---
updated-dependencies:
- dependency-name: "@vitest/coverage-v8"
dependency-version: 4.1.6
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 1fb495c4b2#1771 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.2.14 to 4.3.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.1/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.1
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 1ab31502aa#1770 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.6.1 to 4.7.1.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.1/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit dbd503f368#1772 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.14 to 2.4.15.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.15
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 7521c55910#1773 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.6.0 to 25.7.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.7.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit ef734cca81#1774 )
* feat: expose run id in STS client user-agent
Closes #483 .
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.
* feat: add github_action to ua string
(cherry picked from commit 29d1be3027#1775 )
Closes #390 .
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
(cherry picked from commit e0ba768507#1776 )
* chore: document forgejo compatibility
* chore: linting fixes
(cherry picked from commit f35a7d7d7e#1778 )
Closes #1554 .
(cherry picked from commit 58e7c47adf#1779 )
* chore: update README for additional claim support
* chore: lint fix (whitespace)
(cherry picked from commit 713aaabfec#1781 )
Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler ) from 4.7.1 to 4.7.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.3/packages/node-http-handler )
---
updated-dependencies:
- dependency-name: "@smithy/node-http-handler"
dependency-version: 4.7.3
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit a7c33ae483#1785 )
Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node ) from 25.7.0 to 25.9.0.
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases )
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node )
---
updated-dependencies:
- dependency-name: "@types/node"
dependency-version: 25.9.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit ffde832a1d#1784 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.34 to 3.972.38.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.38
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit bc1093db1d#1783 )
Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider ) from 4.3.1 to 4.3.3.
- [Release notes](https://github.com/smithy-lang/smithy-typescript/releases )
- [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md )
- [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.3/packages/property-provider )
---
updated-dependencies:
- dependency-name: "@smithy/property-provider"
dependency-version: 4.3.3
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit fe6ad3af19#1782 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1045.0 to 3.1049.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1049.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1049.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit 4684f47f89support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
2026-05-26 10:06:35 -07:00
c39f282697
fix: additional filesystem checks ( #1799 )
...
Release-As: 6.1.2
2026-05-26 09:44:48 -07:00
3cc0e19239
chore: unstage devel changes ( #1786 )
...
* Revert "chore: Update dist"
This reverts commit e8614cfbf0#1782 )"
This reverts commit 4684f47f8948b8685c96#1783 )"
This reverts commit fe6ad3af192520c5e921#1784 )"
This reverts commit bc1093db1d#1785 )"
This reverts commit ffde832a1d707acd96f6#1781 )"
This reverts commit a7c33ae483#1779 )"
This reverts commit 713aaabfece6e8eba750#1778 )"
This reverts commit 58e7c47adf#1776 )"
This reverts commit f35a7d7d7e3884f59ecd#1775 )"
This reverts commit e0ba7685076795889618#1774 )"
This reverts commit 29d1be3027#1773 )"
This reverts commit ef734cca81#1772 )"
This reverts commit 7521c55910c0e2737f14#1770 )"
This reverts commit dbd503f36818a236fbd1#1771 )"
This reverts commit 1ab31502aa#1768 )"
This reverts commit 1fb495c4b21e8fec8ea1#1767 )"
This reverts commit a388f23f7d#1766 )"
This reverts commit 3f7e1b63d7#1765 )"
This reverts commit e35449909c958a80fc34#1764 )"
This reverts commit 540d0c13ae#1763 )"
This reverts commit 07ada0fe07f8d4eb68a9#1762 )"
This reverts commit 8d52d05d7a681892c11b#1760 )"
This reverts commit dc2353e57a#1759 )"
This reverts commit 61f50f630f#1565 )"
This reverts commit c36525a567#1758 )"
This reverts commit 39d1702721#1754 )"
This reverts commit 4cfda40a13#1756 )"
This reverts commit 8856e12f3a#1746 )"
This reverts commit 64d8e82527#1748 )"
This reverts commit 78f374f6d1
2026-05-25 12:19:31 -07:00
58e7c47adf
fix: skip credential check on output-env-credentials: false ( #1778 )
...
Closes #1554 .
2026-05-14 13:39:34 -07:00
e0ba768507
feat: add additional session tags by default ( #1775 )
...
Closes #390 .
Note that 50 session tags are the AWS default, and this commit changes
our default set from 7 tags to 15 tags. This commit includes logic to
split the tags into "required" vs "overridable". Required tags are this
action's previous defaults and could never be overridden. Overridable
tags are the new set and can be overridden by custom-tags. The action
will not add tags if the addition plus the required plus the user's
custom tags exceed the AWS limit of 50 total tags. This ensures
backwards compat for the tag additions.
2026-05-13 14:43:50 -07:00
29d1be3027
feat: expose run id in STS client user-agent ( #1774 )
...
* feat: expose run id in STS client user-agent
Closes #483 .
This commit modifies the user-agent string so that it includes the
GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used
by the SDK. User agent strings are logged to CloudTrail, allowing users
to correlate CloudTrail events with GHA runs. We took this approach
instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid
logging sensitive information.
* feat: add github_action to ua string
2026-05-12 16:18:34 -07:00
e35449909c
feat: add regex validation to role-session-name ( #1765 )
...
Previously invalid role session names would get errors from the STS
API instead of this action rejecting them, causing unnecessary retries.
Now we check them and fail early.
Closes #1656 . That FR recommended that we sanitize the name before
sending to STS, but instead we error to not silently change the user's
selected session name (avoiding the potential security sharp edge)
2026-05-11 21:32:33 +00:00
540d0c13ae
feat: add more retry logic and better logging ( #1764 )
...
Wraps exportAccountId and validateCredentials calls in retryAndBackoff.
Closes #1681 . Adds a label parameter to retryAndBackoff for better
info-level log messages.
2026-05-11 10:00:14 -07:00
8d52d05d7a
feat: support custom STS endpoints ( #1762 )
...
Closes #1067 . This is a advanced option
and is not needed for most deployments.
2026-05-07 14:50:17 -07:00
61f50f630f
feat: Allow custom session tags to be passed when assuming a role ( #1759 )
...
* Add possibility to input custom session tags
* Use json for input to custom-tags, add documentation for custom-tags
* Add more examples
* Simplify example to avoid parse error
* Add input validation for custom tags
* Fix unit tests for custom-tags
* Add debugging message
* Skip failing test for now
* Build package
* Remove some unused validation for custom tags
* feat: add validation for custom session tags
Harden the custom-tags feature against misuse and
misconfiguration:
- Validate input is a JSON object (reject arrays, primitives, null)
- Enforce STS tag constraints: key length (128), value length (256),
allowed characters
- Reject nested object/array values that would silently stringify to
'[object Object]'
- Block overriding default session tags (GitHub, Repository,
Workflow, etc.)
- Enforce 50-tag session limit
- Warn when custom-tags used with OIDC or web identity
- Fix missing await on helpers test assertion
- Remove unused CUSTOM_TAGS_JSON_INPUTS fixture
- Normalize test mocking to vi.mocked() pattern
---------
Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com >
2026-05-06 15:22:56 -07:00
a7f0c828ac
feat: Support usage of AWS Profiles ( #1696 )
...
* Support usage of AWS Profiles
* squash merge main updates w feature branch
Squashed commit of the following:
commit ef2df4679f908ff30d5a711258ace2fa906c4bf3
Author: Michael Lehmann <lehmanmj@amazon.com >
Date: Tue Mar 17 11:24:04 2026 -0700
dist update
commit db3779a0e9jf@novatec-gmbh.de >
Date: Sun Dec 21 11:28:36 2025 +0100
Support usage of AWS Profiles
* chore: Update dist
* consistent outputEnvCredentials
* take out tests temporarily
* chore: Update dist
* debug changes for static creds
* remove debug and only cleanup profile if it was set
* formatting fixes + remove profile from cleanup test
* feat: Support usage of AWS Profiles
Adds a config option to support writing to profile files instead of
exporting environment variables.
Closes #1594 . Closes #1586 . Closes #112 .
* chore: fix failing test case and windows path
* chore: lint project markdown files
* chore: update scripts in package.json and tsconfig update
* make env vars consistent, readme linting
* debug for profile path env vars
* remove debug
* remove profile backups
* error if we try to overwrite
* add option to overwrite existing profiles
* tests for overwrite option
* default to no env vars
* remove default from action file
* add static credential env var support
* validation fix for static creds multi profile
* debug sleep for static creds validation
* wait syntax
* undo sleep for creds validate
* test coverage, readme/action yml updates, validate creds later on self-hosted runner
* security dependency updates
* chore(deps-dev): bump @biomejs/biome from 2.4.8 to 2.4.10 (#1709 )
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.4.8 to 2.4.10.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.10/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.4.10
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore(deps-dev): bump @aws-sdk/credential-provider-env (#1713 )
Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env ) from 3.972.22 to 3.972.24.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env )
---
updated-dependencies:
- dependency-name: "@aws-sdk/credential-provider-env"
dependency-version: 3.972.24
dependency-type: direct:development
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: Update dist
* chore(deps): bump @aws-sdk/client-sts from 3.1015.0 to 3.1020.0 (#1710 )
Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts ) from 3.1015.0 to 3.1020.0.
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases )
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md )
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1020.0/clients/client-sts )
---
updated-dependencies:
- dependency-name: "@aws-sdk/client-sts"
dependency-version: 3.1020.0
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* chore: Update dist
* fix: do not write empty profile files
Also cleanup fix, additional test, README typo cleanup
* linting fix
* chore: linting fix
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Jan Feddern <jf@novatec-gmbh.de >
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
Co-authored-by: GitHub Actions <github-aws-sdk-osds-automation@amazon.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-03 16:27:00 -07:00
7ceaf96edc
fix: correct outputs for role chaining ( #1633 )
...
re-instantiate stsClient when roleChaining
technically a breaking change
2026-01-29 10:47:17 -08:00
db43b8b90a
chore: re-run linter
2026-01-27 16:01:14 -08:00
4f2ba7fe9c
feat: updates for transitive tagging
2026-01-27 15:56:05 -08:00
a87e741eba
feat: Add global timeout support ( #1487 )
2026-01-27 15:45:43 -08:00
569add8750
fix: properly expose getProxyForUrl (introduced in #1482 ) ( #1486 )
...
* chore: use stricter typescript config
* fix: properly expose getProxyForUrl (in #1482 )
2026-01-27 15:45:43 -08:00
9aa437c71f
feat: Improve debug logging in retry logic ( #1485 )
2026-01-27 15:45:43 -08:00
c8eae42842
feat: add no-proxy support ( #1482 )
2026-01-27 15:45:43 -08:00
9fb1716ceb
feat: support account id allowlist ( #1456 )
...
* feat: support account id allowlist
* chore: update readme
---------
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
2026-01-27 15:45:43 -08:00
4f0bc4ee1c
feat: add skip OIDC option ( #1458 )
2026-01-27 15:45:43 -08:00
0a2792614c
chore: cleanup input handling ( #1445 )
...
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
2026-01-27 15:45:40 -08:00
1dfb9b5b42
chore(deps-dev): bump @biomejs/biome from 2.1.4 to 2.2.0 ( #1440 )
...
* chore(deps-dev): bump @biomejs/biome from 2.1.4 to 2.2.0
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 2.1.4 to 2.2.0.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.2.0/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.2.0
dependency-type: direct:development
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: apply updated linting rules
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kellertk <kellertk@amazon.com >
2026-01-27 15:44:32 -08:00
e19fa45bbe
fix: properly set proxy environment variable
2026-01-27 15:44:32 -08:00
87ec0e2f9a
feat: depenency update and feature cleanup ( #1414 )
...
* chore: add clean script
* chore: run npm audit fix
* chore: unblock update to vitest 3.x
* chore(deps-dev): update vitest dependencies
Closes #1275
Closes #1276
* chore(deps): update https-proxy-agent and types to match
Closes #1407 .
* chore: add lint:fix script
* feat: support HTTPS_PROXY environment variable
Closes #1061
Closes #861
* feat: output ARN of authenticated prinicpal
Closes #1062
Closes #1191
2026-01-27 15:44:30 -08:00
9f25b942f3
chore(deps-dev): bump @biomejs/biome from 1.9.4 to 2.1.2 ( #1410 )
...
* chore(deps-dev): bump @biomejs/biome from 1.9.4 to 2.1.2
Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome ) from 1.9.4 to 2.1.2.
- [Release notes](https://github.com/biomejs/biome/releases )
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md )
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.1.2/packages/@biomejs/biome )
---
updated-dependencies:
- dependency-name: "@biomejs/biome"
dependency-version: 2.1.2
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: bump biome and fix linting errors
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: kellertk <kellertk@amazon.com >
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2026-01-27 15:44:09 -08:00
3b040fe7c1
tests for disabled output-env-credentials
2026-01-27 15:43:50 -08:00
3e1cb2c6fa
decouple env creds output from log masking
2026-01-27 15:43:50 -08:00
e378c2d267
fix to make action still run
2026-01-27 15:43:50 -08:00
a26a7d8191
more debug
2026-01-27 15:43:50 -08:00
623eede63e
debug messages
2026-01-27 15:43:50 -08:00
12acc19c37
add output-env-credentials flag (defaults to true)
2026-01-27 15:43:46 -08:00
3cb16d3813
fix: prioritize explicit inputs over environment variables
2026-01-27 15:42:54 -08:00
7fab3c1652
fix: role chaning on mulitple runs ( #1340 )
2026-01-27 15:42:54 -08:00
7b4c4016d3
feat: support action inputs as environment variables ( #1338 )
...
* support action inputs as environment variables
* update dist
* fix: update tsconfig for package step
* fix: update environment variable setting method
* fix: make biome happy
---------
Co-authored-by: Michael Lehmann <lehmanmj@amazon.com >
2026-01-27 15:42:54 -08:00
431bb0e5e3
Add Expiration field to output
2026-01-27 15:42:53 -08:00
232435c0c0
feat: add support to define transitive tag keys
2025-03-28 14:37:26 +01:00
eb70354fb4
feat: idempotent fetch ( #1289 )
...
* Add functionality to re-use existing credentials
* Finish adding use-existing-credentials logic
* Add testing for use-existing-credentials
* Update README
* feat: finalize use-exisiting-credentials feature
---------
Co-authored-by: Tom Keller <kellertk@amazon.com >
2025-02-07 16:24:45 -08:00
ccbdafa425
chore: migrate to biomejs ( #1167 )
...
* chore: migrate to biomejs
* chore: migrate to biomejs
* chore: migrate from jest to vitest
* chore: error on lint warnings
* chore: remove obsolete depedencies
2024-11-04 10:19:12 -08:00
6129f329e6
chore: remove warning ( #926 )
...
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2023-12-06 00:23:55 +00:00
e5170cf58c
fix eslint issue ( #928 )
2023-11-22 19:30:19 +00:00
0a640cb1ea
replace shortened URL with full URL ( #905 )
...
Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
2023-11-09 23:56:58 +00:00
f31c158843
feat: Recommending using OIDC ( #871 )
...
* Recommending using OIDC
* Added tests
* fix test and package
* update readme
---------
Co-authored-by: peterwoodworth <woodwoop@amazon.com >
2023-09-29 21:05:32 +00:00
2014030530
chore: Bump @typescript-eslint/eslint-plugin from 5.62.0 to 6.6.0 ( #825 )
...
* chore: Bump @typescript-eslint/eslint-plugin from 5.62.0 to 6.6.0
Bumps [@typescript-eslint/eslint-plugin](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/eslint-plugin ) from 5.62.0 to 6.6.0.
- [Release notes](https://github.com/typescript-eslint/typescript-eslint/releases )
- [Changelog](https://github.com/typescript-eslint/typescript-eslint/blob/main/packages/eslint-plugin/CHANGELOG.md )
- [Commits](https://github.com/typescript-eslint/typescript-eslint/commits/v6.6.0/packages/eslint-plugin )
---
updated-dependencies:
- dependency-name: "@typescript-eslint/eslint-plugin"
dependency-type: direct:development
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com >
* chore: fix dependency tree updates
* fix: prevent eslint major version upgrade for node 14 compat
---------
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
Co-authored-by: Tom Keller <kellertk@amazon.com >
2023-09-06 00:08:11 +00:00
d78f55b1db
fix: validation logic throwing unwanted errors ( #818 )
...
* fix: throws error even when valid credentials are present
* fix: throws error when invalid credentials are present despite not wanting to use them
2023-09-05 14:19:05 -07:00
76997ececd
fix: action fails when intending to use existing credentials ( #796 )
...
* fix: action fails when intending to use existing credentials
* fix: action fails when intending to use existing credentials
* fix: action fails when intending to use existing credentials
* fix: action fails when intending to use existing credentials
* fix: action fails when intending to use existing credentials
* fix: action fails when intending to use existing credentials
---------
Co-authored-by: Tom Keller <1083460+kellertk@users.noreply.github.com >
2023-08-24 14:38:12 -07:00
Tom Keller