From 211aeddba62628522a85f91eea8a2a7019a2b1de Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 14:35:49 +0000 Subject: [PATCH] chore(ci): bump aws-actions/configure-aws-credentials Bumps [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) from 6.2.1 to 6.2.2. - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/254c19bd240aabef8777f48595e9d2d7b972184b...517a711dbcd0e402f90c77e7e2f81e849156e31d) --- updated-dependencies: - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/iac-tests.yml | 2 +- .github/workflows/integration-live.yml | 2 +- .github/workflows/integration.yml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/iac-tests.yml b/.github/workflows/iac-tests.yml index 14b5a454..862b7864 100644 --- a/.github/workflows/iac-tests.yml +++ b/.github/workflows/iac-tests.yml @@ -219,7 +219,7 @@ jobs: # AWS STS exchanges for credentials via an IAM role's trust # policy. No long-lived secrets in the repo. - name: Assume AWS role via OIDC - uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1 + uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 with: role-to-assume: ${{ vars.AWS_OIDC_ROLE_ARN }} aws-region: eu-west-1 diff --git a/.github/workflows/integration-live.yml b/.github/workflows/integration-live.yml index 4a84919a..b6240cb7 100644 --- a/.github/workflows/integration-live.yml +++ b/.github/workflows/integration-live.yml @@ -104,7 +104,7 @@ jobs: # ── AWS — OIDC role assumption, no static keys ────────────────── - name: Configure AWS credentials via OIDC if: steps.gate.outputs.aws == 'true' - uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1 + uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 with: role-to-assume: ${{ secrets.AWS_INTEGRATION_ROLE }} role-session-name: forge-live-${{ github.run_id }} diff --git a/.github/workflows/integration.yml b/.github/workflows/integration.yml index 0951c89b..06d9c6e5 100644 --- a/.github/workflows/integration.yml +++ b/.github/workflows/integration.yml @@ -258,7 +258,7 @@ jobs: # repo+ref combination. Returns short-lived temporary credentials. - name: Configure AWS credentials via OIDC if: steps.gate.outputs.enabled == 'true' - uses: aws-actions/configure-aws-credentials@254c19bd240aabef8777f48595e9d2d7b972184b # v6.2.1 + uses: aws-actions/configure-aws-credentials@517a711dbcd0e402f90c77e7e2f81e849156e31d # v6.2.2 with: role-to-assume: ${{ secrets.AWS_INTEGRATION_ROLE }} role-session-name: forge-ci-${{ github.run_id }}