Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump aws-actions/configure-aws-credentials from 2.2.0 to 3.0.1 #3015

Closed
wants to merge 1 commit into from
Closed

chore(deps): bump aws-actions/configure-aws-credentials from 2.2.0 to 3.0.1 #3015

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 25, 2023 •
edited
Loading

Bumps aws-actions/configure-aws-credentials from 2.2.0 to 3.0.1.

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v3.0.1

See the changelog for details about the changes included in this release.

v3.0.0

See the changelog for details about the changes included in this release.

v3

This tag tracks the latest v3.x.x release

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

3.0.1 (2023-08-24)

Features

  • Can configure special-characters-workaround to keep retrying credentials if the returned credentials have special characters (Fixes #599)

Bug Fixes

Changes to existing functionality

  • Special characters are now allowed in returned credential variables unless you configure the special-characters-workaround option

3.0.0 (2023-08-21)

Features

  • Can configure max-retries and disable-retry to modify retry functionality when the assume role call fails
  • Set returned credentials as step outputs with output-credentials
  • Clear AWS related environment variables at the start of the action with unset-current-credentials
  • Unique role identifier is now printed in the workflow logs

Bug Fixes

  • Can't use credentials if they contain a special character
  • Retry functionality added when generating the JWT fails
  • Can now use webIdentityTokenFile option
  • Branch name validation too strict
  • JS SDK v2 deprecation warning in workflow logs

Changes to existing functionality

  • Default session duration is now 1 hour in all cases (from 6 hours in some cases)
  • Account ID will not be masked by default in logs

2.2.0 (2023-05-31)

Features

  • inline-session-policy prop enables assuming a role with inline session policies (d00f6c6)
  • managed-session-policies prop enables assuming a role with managed policy arns (d00f6c6)

2.1.0 (2023-05-31)

Features

  • role-chaining prop enables role chaining use case (6fbd316)

2.0.0 (2023-03-06)

... (truncated)

Commits
  • 04b98b3 Merge pull request #798 from aws-actions/kellertk-patch-1
  • a2b0094 change bugfix description
  • 3464309 chore: update CHANGELOG.md for v3.0.1
  • 3a12f31 CHANGELOG.md for 3.0.1
  • 6478abc Merge pull request #794 from ubaid-ansari21/contri
  • 91d9dfc Merge branch 'main' into contri
  • 76997ec fix: action fails when intending to use existing credentials (#796)
  • a962633 feat: special character check (#797)
  • fbbf385 feat: add config option for special character handling (#795)
  • f5f46df fix typo
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team as a code owner August 25, 2023 20:52
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Aug 25, 2023
@boring-cyborg boring-cyborg bot added the github-actions Pull requests that update Github_actions code label Aug 25, 2023
@pull-request-size pull-request-size bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Aug 25, 2023
@github-actions github-actions bot added the internal Maintenance changes label Aug 25, 2023
@leandrodamascena
Copy link
Contributor

Added do-not-merge and breaking-change labels because this major update release causes issues in our pipeline.

@dependabot dependabot bot force-pushed the dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.1 branch from 94e5842 to 09e834a Compare August 28, 2023 21:38
@leandrodamascena
Copy link
Contributor

@dependabot show aws-actions/configure-aws-credentials ignore conditions

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Aug 29, 2023

No ignore conditions found for the dependency aws-actions/configure-aws-credentials

@sthulb
Copy link
Contributor

sthulb commented Aug 29, 2023 •
edited
Loading

@leandrodamascena: @dreamorosi has mentioned to me that the new version of the action doesn't mask the account ID by default, you should look at: https://github.com/aws-actions/configure-aws-credentials#mask-account-id

@leandrodamascena
Copy link
Contributor

@leandrodamascena: @dreamorosi has mentioned to me that the new version of the action doesn't mask the account ID by default, you should look at: https://github.com/aws-actions/configure-aws-credentials#mask-account-id

I created an issue with all problems we've found in this update.
#3025

@dependabot dependabot bot force-pushed the dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.1 branch from 09e834a to 529bce0 Compare September 5, 2023 09:25
@dependabot
chore(deps): bump aws-actions/configure-aws-credentials
ad32768 
Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 2.2.0 to 3.0.1.
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@5fd3084...04b98b3)

---
updated-dependencies:
- dependency-name: aws-actions/configure-aws-credentials
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.1 branch from 529bce0 to ad32768 Compare September 7, 2023 08:22
@sonarcloud
Copy link

sonarcloud bot commented Sep 7, 2023

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 7, 2023

Superseded by #3058.

@dependabot dependabot bot closed this Sep 7, 2023
@dependabot dependabot bot deleted the dependabot/github_actions/aws-actions/configure-aws-credentials-3.0.1 branch September 7, 2023 20:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
breaking-change Breaking change dependencies Pull requests that update a dependency file do-not-merge github_actions Pull requests that update GitHub Actions code github-actions Pull requests that update Github_actions code internal Maintenance changes size/S Denotes a PR that changes 10-29 lines, ignoring generated files.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@leandrodamascena @sthulb