Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.0.1 (2023-10-03)

Documentation

Throw a warning when customers use long-term credentials.

4.0.0 (2023-09-11)

Upgraded runtime to node20 from node16

3.0.2 (2023-09-07)

Bug Fixes

fixes #817 #819: validation logic throwing unwanted errors d78f55b

3.0.1 (2023-08-24)

Features

Can configure special-characters-workaround to keep retrying credentials if the returned credentials have special characters (Fixes #599)

Bug Fixes

Fixes #792: Action fails when intending to use existing credentials
Minor typo fix from @ubaid-ansari21

Changes to existing functionality

Special characters are now allowed in returned credential variables unless you configure the special-characters-workaround option

3.0.0 (2023-08-21)

Features

Can configure max-retries and disable-retry to modify retry functionality when the assume role call fails
Set returned credentials as step outputs with output-credentials
Clear AWS related environment variables at the start of the action with unset-current-credentials
Unique role identifier is now printed in the workflow logs

Bug Fixes

Can't use credentials if they contain a special character
Retry functionality added when generating the JWT fails
Can now use webIdentityTokenFile option
Branch name validation too strict
JS SDK v2 deprecation warning in workflow logs

Changes to existing functionality

Default session duration is now 1 hour in all cases (from 6 hours in some cases)
Account ID will not be masked by default in logs

2.2.0 (2023-05-31)

Features

inline-session-policy prop enables assuming a role with inline session policies (d00f6c6)
managed-session-policies prop enables assuming a role with managed policy arns (d00f6c6)

2.1.0 (2023-05-31)

Features

role-chaining prop enables role chaining use case (6fbd316)

2.0.0 (2023-03-06)

Features

Version bump to use Node 16 by default.

1.7.0 (2022-08-03)

Features

Allow audience to be explicitly specified (2f8dfd0)

1.6.1 (2022-01-18)

Bug Fixes

OIDC Parallel Requests error (133757e)
Strict Mode Deprecation (4c5e1c6)

1.6.0 (2021-11-23)

Features

Add the ability to use a web identity token file (#240) (8053174)
added OIDC (#262) (b8c74de), closes #267
upgraded to new GH OIDC API (#284) (036a4a1)

Bug Fixes

reverting update to use new API (#274) (a78fcb0), closes #270
typo "charcters" in README.md (#241) (c48e1b5)
Updated token retrieval to use new API (#270) (20ce4e5)

1.5.11 (2021-07-19)

1.5.10 (2021-06-01)

Bug Fixes

skips session tagging (#209) (4900858)

1.5.9 (2021-05-10)

1.5.8 (2021-03-02)

1.5.7 (2021-02-08)

1.5.6 (2021-01-26)

1.5.5 (2020-11-24)

1.5.4 (2020-10-29)

1.5.3 (2020-10-05)

1.5.2 (2020-08-25)

1.5.1 (2020-08-11)

Bug Fixes

make GITHUB_REF env var optional (#82) (ba5041f), closes #92

1.5.0 (2020-07-29)

Features

Add post-job action cleanup of credentials and region env vars (#101) (d19cafc)

Bug Fixes

Mask assume role response in debug output (#102) (df7d846)

1.4.4 (2020-07-17)

1.4.3 (2020-07-14)

Bug Fixes

Make tagging optional (#92) (baf85d8)

1.4.2 (2020-06-30)

Bug Fixes

add comma to set of special characters (#78) (f04843b)

1.4.1 (2020-06-09)

1.4.0 (2020-06-03)

Features

Refresh and validate credentials after setting env var creds (#71) (472e549)

1.3.5 (2020-05-27)

Bug Fixes

clear session token env var if present for non-session credentials (#65) (0c2c1f7)

1.3.4 (2020-05-18)

1.3.3 (2020-04-02)

1.3.2 (2020-03-18)

Bug Fixes

let the AWS SDK determine the STS regional endpoint (#48) (fc72bd3)

1.3.1 (2020-03-06)

Bug Fixes

validate region input string (#44) (3d568d2)

1.3.0 (2020-03-06)

Features

don't require access key credentials for self-hosted runners (#42) (a20ed60)

1.2.0 (2020-03-06)

Features

Add option to provide external ID (#32) (1c435bb), closes #28
Have an ability to configure session name (#29) (4d0082a)
infer role ARN if given role name (#35) (96c6f7e)

Bug Fixes

mask both source and role credentials (#40) (816f5cc)

1.1.2 (2020-02-12)

Bug Fixes

change sanitization character from '*' to '_' (55f6a14)

1.1.1 (2020-02-07)

1.1.0 (2020-02-06)

Features

add support for assuming a role (#17) (25960ab)
Build and integ test scripts for pipeline (52bc82a)

Bug Fixes

create workflows dir in integ-tests (3de962e)
remove buildspecs (260c6cc)
remove release script (1436a16)
resolve commit ID in integ test script (77f2df7)
sanitize AWS session tags (#20) (4faf8cd)
set role credentials as secrets to mask them in logs (#19) (e2fd53a)