Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 24, 2023

Bumps aws-actions/configure-aws-credentials from 2.2.0 to 3.0.0.

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v3.0.0

See the changelog for details about the changes included in this release.

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

3.0.0 (2023-08-21)

Features

  • Can configure max-retries and disable-retry to modify retry functionality when the assume role call fails
  • Set returned credentials as step outputs with output-credentials
  • Clear AWS related environment variables at the start of the action with unset-current-credentials
  • Unique role identifier is now printed in the workflow logs

Bug Fixes

  • Can't use credentials if they contain a special character
  • Retry functionality added when generating the JWT fails
  • Can now use webIdentityTokenFile option
  • Branch name validation too strict
  • JS SDK v2 deprecation warning in workflow logs

Changes to existing functionality

  • Default session duration is now 1 hour in all cases (from 6 hours in some cases)
  • Account ID will not be masked by default in logs

2.2.0 (2023-05-31)

Features

  • inline-session-policy prop enables assuming a role with inline session policies (d00f6c6)
  • managed-session-policies prop enables assuming a role with managed policy arns (d00f6c6)

2.1.0 (2023-05-31)

Features

  • role-chaining prop enables role chaining use case (6fbd316)

2.0.0 (2023-03-06)

Features

  • Version bump to use Node 16 by default.

1.7.0 (2022-08-03)

Features

  • Allow audience to be explicitly specified (2f8dfd0)

1.6.1 (2022-01-18)

Bug Fixes

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team August 24, 2023 20:36
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 24, 2023
@pull-request-size pull-request-size bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Aug 24, 2023
@boring-cyborg boring-cyborg bot added the github-actions Pull requests that update Github_actions code label Aug 24, 2023
@github-actions github-actions bot added the internal Maintenance changes label Aug 24, 2023
@leandrodamascena
Copy link
Contributor

Hei @rubenfonseca! This is a major version update. I didn't see any problem, but can you double-check please?

Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 2.2.0 to 3.0.0.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@5fd3084...ef93a73)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.0 branch from ec9cf1e to f6cd4ad Compare August 24, 2023 21:41
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@rubenfonseca
Copy link
Contributor

Looks good, should not cause any problems!

@leandrodamascena leandrodamascena merged commit f0088bd into develop Aug 25, 2023
@leandrodamascena leandrodamascena deleted the dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.0 branch August 25, 2023 08:07
rubenfonseca added a commit that referenced this pull request Aug 25, 2023
rubenfonseca added a commit that referenced this pull request Aug 25, 2023
* Revert "fix(ci): change SAR assume role options (#3005)"

This reverts commit d437bf5.

* Revert "chore(deps): bump aws-actions/configure-aws-credentials from 2.2.0 to 3.0.0 (#3000)"

This reverts commit f0088bd.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code github-actions Pull requests that update Github_actions code internal Maintenance changes size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants