Skip to content

Commit 4ab3589

Browse files
kellertkdependabot[bot]lehmanmjsylvainv
authored
chore: replay 6.2 devel changes onto main (#1807)
* chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 (#1748) * chore(deps-dev): bump vitest from 3.2.4 to 4.1.5 Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.4 to 4.1.5. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.5/packages/vitest) --- updated-dependencies: - dependency-name: vitest dependency-version: 4.1.5 dependency-type: direct:development update-type: version-update:semver-major ... * chore(deps-dev): update @vitest/coverage-v8 Bump @vitest/coverage-v8 to ^4.1.5 to match peer dependency, and move vi.mock('node:fs') calls to the top level of test files to reflect actual hoisting semantics required by vitest 4.x. --------- (cherry picked from commit 78f374f) * chore(deps): bump @actions/core from 2.0.3 to 3.0.1 (#1746) * chore(deps): bump @actions/core from 2.0.3 to 3.0.1 Bumps [@actions/core](https://github.com/actions/toolkit/tree/HEAD/packages/core) from 2.0.3 to 3.0.1. - [Changelog](https://github.com/actions/toolkit/blob/main/packages/core/RELEASES.md) - [Commits](https://github.com/actions/toolkit/commits/HEAD/packages/core) --- updated-dependencies: - dependency-name: "@actions/core" dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-major ... * chore: update test mocks for @actions/core ESM @actions/core v3 ships as an ESM module with non-configurable exports, breaking vi.spyOn(). Switch to vi.mock('@actions/core') which intercepts at the module loader level. --------- (cherry picked from commit 64d8e82) * chore(deps): bump @aws-sdk/client-sts from 3.1043.0 to 3.1044.0 (#1754) Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) from 3.1043.0 to 3.1044.0. - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1044.0/clients/client-sts) --- updated-dependencies: - dependency-name: "@aws-sdk/client-sts" dependency-version: 3.1042.0 dependency-type: direct:production update-type: version-update:semver-minor ... (cherry picked from commit 4cfda40) * chore: bump unit test node version (#1758) (cherry picked from commit 39d1702) * chore: automatic major version tagging (#1565) * Update release-please.yml to auto-update version tag * chore: configure release-please auto floating tag --------- (cherry picked from commit c36525a) * feat: Allow custom session tags to be passed when assuming a role (#1759) * Add possibility to input custom session tags * Use json for input to custom-tags, add documentation for custom-tags * Add more examples * Simplify example to avoid parse error * Add input validation for custom tags * Fix unit tests for custom-tags * Add debugging message * Skip failing test for now * Build package * Remove some unused validation for custom tags * feat: add validation for custom session tags Harden the custom-tags feature against misuse and misconfiguration: - Validate input is a JSON object (reject arrays, primitives, null) - Enforce STS tag constraints: key length (128), value length (256), allowed characters - Reject nested object/array values that would silently stringify to '[object Object]' - Block overriding default session tags (GitHub, Repository, Workflow, etc.) - Enforce 50-tag session limit - Warn when custom-tags used with OIDC or web identity - Fix missing await on helpers test assertion - Remove unused CUSTOM_TAGS_JSON_INPUTS fixture - Normalize test mocking to vi.mocked() pattern --------- (cherry picked from commit 61f50f6) * chore: configure codeql to ignore generated code (#1760) (cherry picked from commit dc2353e) * feat: support custom STS endpoints (#1762) Closes #1067. This is a advanced option and is not needed for most deployments. (cherry picked from commit 8d52d05) * chore: automate README version bumping (#1763) Closes #1420. (cherry picked from commit 07ada0f) * feat: add more retry logic and better logging (#1764) Wraps exportAccountId and validateCredentials calls in retryAndBackoff. Closes #1681. Adds a label parameter to retryAndBackoff for better info-level log messages. (cherry picked from commit 540d0c1) * feat: add regex validation to role-session-name (#1765) Previously invalid role session names would get errors from the STS API instead of this action rejecting them, causing unnecessary retries. Now we check them and fail early. Closes #1656. That FR recommended that we sanitize the name before sending to STS, but instead we error to not silently change the user's selected session name (avoiding the potential security sharp edge) (cherry picked from commit e354499) * chore: update documentation for environment workflows (#1766) Closes #1238. (cherry picked from commit 3f7e1b6) * chore(deps): bump @aws-sdk/client-sts from 3.1044.0 to 3.1045.0 (#1767) Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) from 3.1044.0 to 3.1045.0. - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1045.0/clients/client-sts) --- updated-dependencies: - dependency-name: "@aws-sdk/client-sts" dependency-version: 3.1045.0 dependency-type: direct:production update-type: version-update:semver-minor ... (cherry picked from commit a388f23) * chore(deps-dev): bump @vitest/coverage-v8 from 4.1.5 to 4.1.6 (#1768) Bumps [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) from 4.1.5 to 4.1.6. - [Release notes](https://github.com/vitest-dev/vitest/releases) - [Commits](https://github.com/vitest-dev/vitest/commits/v4.1.6/packages/coverage-v8) --- updated-dependencies: - dependency-name: "@vitest/coverage-v8" dependency-version: 4.1.6 dependency-type: direct:development update-type: version-update:semver-patch ... (cherry picked from commit 1fb495c) * chore(deps-dev): bump @smithy/property-provider from 4.2.14 to 4.3.1 (#1771) Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider) from 4.2.14 to 4.3.1. - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.1/packages/property-provider) --- updated-dependencies: - dependency-name: "@smithy/property-provider" dependency-version: 4.3.1 dependency-type: direct:development update-type: version-update:semver-minor ... (cherry picked from commit 1ab3150) * chore(deps): bump @smithy/node-http-handler from 4.6.1 to 4.7.1 (#1770) Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler) from 4.6.1 to 4.7.1. - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.1/packages/node-http-handler) --- updated-dependencies: - dependency-name: "@smithy/node-http-handler" dependency-version: 4.7.1 dependency-type: direct:production update-type: version-update:semver-minor ... (cherry picked from commit dbd503f) * chore(deps-dev): bump @biomejs/biome from 2.4.14 to 2.4.15 (#1772) Bumps [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) from 2.4.14 to 2.4.15. - [Release notes](https://github.com/biomejs/biome/releases) - [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md) - [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.4.15/packages/@biomejs/biome) --- updated-dependencies: - dependency-name: "@biomejs/biome" dependency-version: 2.4.15 dependency-type: direct:development update-type: version-update:semver-patch ... (cherry picked from commit 7521c55) * chore(deps-dev): bump @types/node from 25.6.0 to 25.7.0 (#1773) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.6.0 to 25.7.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.7.0 dependency-type: direct:development update-type: version-update:semver-minor ... (cherry picked from commit ef734cc) * feat: expose run id in STS client user-agent (#1774) * feat: expose run id in STS client user-agent Closes #483. This commit modifies the user-agent string so that it includes the GITHUB_RUN_ID and the GITHUB_RUN_ATTEMPT, in the format typically used by the SDK. User agent strings are logged to CloudTrail, allowing users to correlate CloudTrail events with GHA runs. We took this approach instead of logging the ACCESS_KEY_ID as suggested in the issue to avoid logging sensitive information. * feat: add github_action to ua string (cherry picked from commit 29d1be3) * feat: add additional session tags by default (#1775) Closes #390. Note that 50 session tags are the AWS default, and this commit changes our default set from 7 tags to 15 tags. This commit includes logic to split the tags into "required" vs "overridable". Required tags are this action's previous defaults and could never be overridden. Overridable tags are the new set and can be overridden by custom-tags. The action will not add tags if the addition plus the required plus the user's custom tags exceed the AWS limit of 50 total tags. This ensures backwards compat for the tag additions. (cherry picked from commit e0ba768) * chore: document forgejo compatibility (#1776) * chore: document forgejo compatibility * chore: linting fixes (cherry picked from commit f35a7d7) * fix: skip credential check on output-env-credentials: false (#1778) Closes #1554. (cherry picked from commit 58e7c47) * chore: update README for additional claim support (#1779) * chore: update README for additional claim support * chore: lint fix (whitespace) (cherry picked from commit 713aaab) * chore(deps): bump @smithy/node-http-handler from 4.7.1 to 4.7.3 (#1781) Bumps [@smithy/node-http-handler](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/node-http-handler) from 4.7.1 to 4.7.3. - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/node-http-handler/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/node-http-handler@4.7.3/packages/node-http-handler) --- updated-dependencies: - dependency-name: "@smithy/node-http-handler" dependency-version: 4.7.3 dependency-type: direct:production update-type: version-update:semver-patch ... (cherry picked from commit a7c33ae) * chore(deps-dev): bump @types/node from 25.7.0 to 25.9.0 (#1785) Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.7.0 to 25.9.0. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.9.0 dependency-type: direct:development update-type: version-update:semver-minor ... (cherry picked from commit ffde832) * chore(deps-dev): bump @aws-sdk/credential-provider-env (#1784) Bumps [@aws-sdk/credential-provider-env](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-env) from 3.972.34 to 3.972.38. - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-env/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-env) --- updated-dependencies: - dependency-name: "@aws-sdk/credential-provider-env" dependency-version: 3.972.38 dependency-type: direct:development update-type: version-update:semver-patch ... (cherry picked from commit bc1093d) * chore(deps-dev): bump @smithy/property-provider from 4.3.1 to 4.3.3 (#1783) Bumps [@smithy/property-provider](https://github.com/smithy-lang/smithy-typescript/tree/HEAD/packages/property-provider) from 4.3.1 to 4.3.3. - [Release notes](https://github.com/smithy-lang/smithy-typescript/releases) - [Changelog](https://github.com/smithy-lang/smithy-typescript/blob/main/packages/property-provider/CHANGELOG.md) - [Commits](https://github.com/smithy-lang/smithy-typescript/commits/@smithy/property-provider@4.3.3/packages/property-provider) --- updated-dependencies: - dependency-name: "@smithy/property-provider" dependency-version: 4.3.3 dependency-type: direct:development update-type: version-update:semver-patch ... (cherry picked from commit fe6ad3a) * chore(deps): bump @aws-sdk/client-sts from 3.1045.0 to 3.1049.0 (#1782) Bumps [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) from 3.1045.0 to 3.1049.0. - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1049.0/clients/client-sts) --- updated-dependencies: - dependency-name: "@aws-sdk/client-sts" dependency-version: 3.1049.0 dependency-type: direct:production update-type: version-update:semver-minor ... (cherry picked from commit 4684f47) * chore: reconcile lockfile and test formatting * chore: Update dist --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michael Lehmann <lehmanmj@amazon.com> Co-authored-by: Sylvain Verly <sylvain.verly@gmail.com>
1 parent 99214aa commit 4ab3589

21 files changed

Lines changed: 11250 additions & 15333 deletions

.github/codeql/codeql-config.yml

Lines changed: 5 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,5 @@
1+
name: "CodeQL config"
2+
3+
paths-ignore:
4+
- dist
5+
- node_modules

.github/workflows/release-please.yml

Lines changed: 32 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -36,10 +36,41 @@
3636
${{ secrets.OSDS_PACKAGING_ROLE }}
3737
3838
- name: Run release-please
39+
id: release
3940
uses: googleapis/release-please-action@v4
4041
with:
4142
release-type: node
4243
token: ${{ env.OSDS_ACCESS_TOKEN }}
4344
config-file: release-please-config.json
4445
manifest-file: .release-please-manifest.json
45-
46+
47+
- name: Checkout Again
48+
uses: actions/checkout@v5
49+
with:
50+
fetch-depth: 0
51+
52+
- name: Tag Major Version
53+
if: ${{ steps.release.outputs.release_created }}
54+
run: |
55+
git config user.name "GitHub Actions"
56+
git config user.email "github-aws-sdk-osds-automation@amazon.com"
57+
if git rev-parse "v${{ steps.release.outputs.major }}" >/dev/null 2>&1; then
58+
git tag -d "v${{ steps.release.outputs.major }}"
59+
git push origin ":v${{ steps.release.outputs.major }}"
60+
fi
61+
git tag -a "v${{ steps.release.outputs.major }}" -m "Release v${{ steps.release.outputs.major }}"
62+
git push origin "v${{ steps.release.outputs.major }}"
63+
64+
- name: Update README version references
65+
if: ${{ steps.release.outputs.release_created }}
66+
run: |
67+
sed -i 's|configure-aws-credentials@v[0-9]*\.[0-9]*\.[0-9]*|configure-aws-credentials@${{ steps.release.outputs.tag_name }}|g' README.md
68+
if git diff --quiet README.md; then
69+
echo "README already up to date"
70+
else
71+
echo "::add-mask::${{ env.OSDS_ACCESS_TOKEN }}"
72+
git remote set-url origin https://${{ env.OSDS_ACCESS_TOKEN }}@github.com/aws-actions/configure-aws-credentials.git
73+
git add README.md
74+
git commit -m "docs: update README version references to ${{ steps.release.outputs.tag_name }}"
75+
git push --force origin
76+
fi

.github/workflows/tests-unit.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,9 +18,9 @@ jobs:
1818
- name: "Checkout repository"
1919
uses: actions/checkout@v5
2020
- name: "Setup node"
21-
uses: actions/setup-node@v4.4.0
21+
uses: actions/setup-node@v6.4.0
2222
with:
23-
node-version: 20
23+
node-version: 24
2424
- name: "Install dependencies"
2525
run: npm ci
2626
- name: "Run tests"

.gitignore

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,3 +1,4 @@
1+
.history
12
node_modules
23
coverage
34
.DS_Store

README.md

Lines changed: 225 additions & 140 deletions
Large diffs are not rendered by default.

THIRD-PARTY

Lines changed: 56 additions & 27 deletions
Original file line numberDiff line numberDiff line change
@@ -644,7 +644,7 @@ Apache License
644644

645645
The following npm package may be included in this product:
646646

647-
- @aws-sdk/client-sts@3.1053.0
647+
- @aws-sdk/client-sts@3.1049.0
648648

649649
This package contains the following license:
650650

@@ -854,8 +854,8 @@ Apache License
854854

855855
The following npm packages may be included in this product:
856856

857-
- @aws-sdk/signature-v4-multi-region@3.996.28
858-
- @smithy/core@3.24.4
857+
- @aws-sdk/signature-v4-multi-region@3.996.27
858+
- @smithy/core@3.24.5
859859
- @smithy/types@4.14.2
860860

861861
These packages each contain the following license:
@@ -1224,7 +1224,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
12241224

12251225
The following npm package may be included in this product:
12261226

1227-
- @actions/http-client@3.0.2
1227+
- @actions/http-client@4.0.1
12281228

12291229
This package contains the following license:
12301230

@@ -1254,7 +1254,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
12541254

12551255
The following npm package may be included in this product:
12561256

1257-
- @aws-sdk/core@3.974.13
1257+
- @aws-sdk/core@3.974.15
12581258

12591259
This package contains the following license:
12601260

@@ -1674,18 +1674,18 @@ Apache License
16741674

16751675
The following npm packages may be included in this product:
16761676

1677-
- @aws-sdk/credential-provider-env@3.972.39
1678-
- @aws-sdk/credential-provider-ini@3.972.43
1679-
- @aws-sdk/credential-provider-node@3.972.44
1680-
- @aws-sdk/token-providers@3.1052.0
1677+
- @aws-sdk/credential-provider-env@3.972.41
1678+
- @aws-sdk/credential-provider-ini@3.972.42
1679+
- @aws-sdk/credential-provider-node@3.972.43
1680+
- @aws-sdk/token-providers@3.1049.0
16811681
- @aws-sdk/types@3.973.9
16821682
- @aws-sdk/util-locate-window@3.965.5
1683-
- @aws-sdk/xml-builder@3.972.25
1684-
- @smithy/credential-provider-imds@4.3.4
1685-
- @smithy/fetch-http-handler@5.4.4
1683+
- @aws-sdk/xml-builder@3.972.26
1684+
- @smithy/credential-provider-imds@4.3.3
1685+
- @smithy/fetch-http-handler@5.4.3
16861686
- @smithy/is-array-buffer@2.2.0
1687-
- @smithy/node-http-handler@4.7.4
1688-
- @smithy/signature-v4@5.4.4
1687+
- @smithy/node-http-handler@4.7.3
1688+
- @smithy/signature-v4@5.4.5
16891689
- @smithy/util-buffer-from@2.2.0
16901690
- @smithy/util-utf8@2.3.0
16911691

@@ -1897,9 +1897,9 @@ Apache License
18971897

18981898
The following npm packages may be included in this product:
18991899

1900-
- @aws-sdk/credential-provider-process@3.972.39
1901-
- @aws-sdk/credential-provider-sso@3.972.43
1902-
- @aws-sdk/credential-provider-web-identity@3.972.43
1900+
- @aws-sdk/credential-provider-process@3.972.38
1901+
- @aws-sdk/credential-provider-sso@3.972.42
1902+
- @aws-sdk/credential-provider-web-identity@3.972.42
19031903

19041904
These packages each contain the following license:
19051905

@@ -2109,9 +2109,9 @@ Apache License
21092109

21102110
The following npm packages may be included in this product:
21112111

2112-
- @aws-sdk/credential-provider-http@3.972.41
2113-
- @aws-sdk/credential-provider-login@3.972.43
2114-
- @aws-sdk/nested-clients@3.997.11
2112+
- @aws-sdk/credential-provider-http@3.972.40
2113+
- @aws-sdk/credential-provider-login@3.972.42
2114+
- @aws-sdk/nested-clients@3.997.10
21152115

21162116
These packages each contain the following license:
21172117

@@ -2335,8 +2335,7 @@ THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
23352335

23362336
The following npm packages may be included in this product:
23372337

2338-
- @nodable/entities@2.1.0
2339-
- netmask@2.1.0
2338+
- @nodable/entities@2.1.1
23402339
- quickjs-wasi@2.2.0
23412340
- xml-naming@0.1.0
23422341

@@ -2346,6 +2345,36 @@ MIT
23462345

23472346
-----------
23482347

2348+
The following npm package may be included in this product:
2349+
2350+
- netmask@2.1.1
2351+
2352+
This package contains the following license:
2353+
2354+
MIT License
2355+
2356+
Copyright (c) 2011 Olivier Poitrey rs@rhapsodyk.net
2357+
2358+
Permission is hereby granted, free of charge, to any person obtaining a copy
2359+
of this software and associated documentation files (the "Software"), to deal
2360+
in the Software without restriction, including without limitation the rights
2361+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
2362+
copies of the Software, and to permit persons to whom the Software is
2363+
furnished to do so, subject to the following conditions:
2364+
2365+
The above copyright notice and this permission notice shall be included in all
2366+
copies or substantial portions of the Software.
2367+
2368+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
2369+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
2370+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
2371+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
2372+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
2373+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
2374+
SOFTWARE.
2375+
2376+
-----------
2377+
23492378
The following npm package may be included in this product:
23502379

23512380
- fast-xml-parser@5.7.3
@@ -2468,7 +2497,7 @@ SOFTWARE.
24682497

24692498
The following npm package may be included in this product:
24702499

2471-
- undici@6.24.0
2500+
- undici@6.25.0
24722501

24732502
This package contains the following license:
24742503

@@ -2610,7 +2639,7 @@ THE SOFTWARE.
26102639

26112640
The following npm package may be included in this product:
26122641

2613-
- socks@2.8.7
2642+
- socks@2.8.8
26142643

26152644
This package contains the following license:
26162645

@@ -2698,9 +2727,9 @@ SOFTWARE.
26982727

26992728
The following npm packages may be included in this product:
27002729

2701-
- @actions/core@2.0.2
2702-
- @actions/exec@2.0.0
2703-
- @actions/io@2.0.0
2730+
- @actions/core@3.0.1
2731+
- @actions/exec@3.0.0
2732+
- @actions/io@3.0.2
27042733

27052734
These packages each contain the following license:
27062735

action.yml

Lines changed: 6 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,3 @@
1-
21
name: '"Configure AWS Credentials" Action for GitHub Actions'
32
description: Configures AWS credentials for use in subsequent steps in a GitHub Action workflow
43
runs:
@@ -101,6 +100,12 @@ inputs:
101100
action-timeout-s:
102101
required: false
103102
description: A global timeout in seconds for the action. When the timeout is reached, the action immediately exits. The default is to run without a timeout.
103+
custom-tags:
104+
description: Additional tags to apply to the assumed role session. Must be a JSON object provided as a string.
105+
required: false
106+
sts-endpoint:
107+
description: Custom STS endpoint URL. Use this to point to an STS-compatible API (e.g. MinIO, LocalStack) instead of the default AWS STS endpoint for the region.
108+
required: false
104109

105110
outputs:
106111
aws-account-id:

0 commit comments

Comments
 (0)