Improvements:
- fix wildcard handling when field contains dot GH-542
Features:
secretId
is no longer required for approle to support advanced use cases like machine login whenbind_secret_id
is false. GH-522
Improvements:
- Bump node runtime from node16 to node20 GH-529
Bugs:
- Revert GH-509 which made a backwards incompatible bump of the node runtime from node16 to node20 GH-527
Features:
- Add
ignoreNotFound
input (default: false) to prevent the action from failing when a secret does not exist GH-518
Improvements:
- bump jsrsasign from 10.8.6 to 11.0.0 GH-513
- bump @actions/core from 1.10.0 to 1.10.1 GH-489
- bump jest-when from 3.5.2 to 3.6.0 GH-484
- bump jest from 29.5.0 to 29.7.0 GH-490
- bump @vercel/ncc from 0.36.1 to 0.38.1 GH-503
Improvements:
Features:
- Add ability to specify a wildcard for the key name to get all keys in the path GH-488
Bugs:
- Revert to the handling of secrets in JSON format since v2.1.2 GH-478
Bugs:
- Fix a regression that broke support for secrets in JSON format GH-473
Bugs:
Bugs:
- Fix a regression that broke support for secrets in JSON format GH-466
Improvements:
- Fix a warning about outputToken being an unexpected input GH-461
Features:
- Add ability to set the
vault_token
output to contain the Vault token after authentication GH-441 - Add support for userpass and ldap authentication methods GH-440
- Define an output,
errorMessage
, for vault-action's error messages so subsequent steps can read the errors GH-446
Bugs:
- Handle undefined response in getSecrets error handler GH-431
Features:
- Adds ability to automatically decode secrets from base64, hex, and utf8 encodings. GH-408
Improvements:
- Improves error messages for Vault authentication failures GH-409
- bump jest from 28.1.1 to 29.3.1 GH-397
- bump @types/jest from 28.1.3 to 29.2.6 GH-397, GH-413
- bump jsrsasign from 10.5.27 to 10.6.1 GH-401
- bump json5 from 2.2.1 to 2.2.3 GH-404
- bump minimatch from 3.0.4 to 3.1.2 GH-410
Improvements:
- bump jest-when from 3.5.1 to 3.5.2 GH-388
- bump semantic-release from 19.0.3 to 19.0.5 GH-360
- bump jsrsasign from 10.5.25 to 10.5.27 GH-358
- bump @actions/core from 1.9.0 to 1.10.0 GH-371
- update runtime to node16 for action GH-375
Bugs:
- Errors due to replication delay for tokens will now be retried GH-333
Improvements:
- bump got from 11.5.1 to 11.8.5 GH-344
Improvements:
- Make secrets parameter optional GH-299
- auth/jwt: make "role" input optional GH-291
- Write a better error message when secret not found GH-306
- bump jest-when from 2.7.2 to 3.5.1 GH-294
- bump node-fetch from 2.6.1 to 2.6.7 GH-308
- bump @types/jest from 26.0.23 to 27.4.1 GH-297
- bump trim-off-newlines from 1.0.1 to 1.0.3 GH-309
- bump moment from 2.28.0 to 2.29.2 GH-304
- bump @types/got from 9.6.11 to 9.6.12 GH-266
Features:
- GitHub provided JWT auth is now supported GH-257
Improvements:
Features:
Security:
- multi-line secrets are now properly masked in logs GH-208 CVE-2021-32074
Features:
- JWT auth method is now supported GH-188
Bugs:
- fixed bug where newlines were being rendered for multi-line secrets GH-173
Improvements:
- bump jest from 26.5.0 to 26.6.3 GH-150
- bump semantic-release from 17.1.2 to 17.3.0 GH-158
- bump got from 11.7.0 to 11.8.1 GH-163
- bump @types/jest from 26.0.14 to 26.0.19 GH-164
- bump ini from 1.3.5 to 1.3.8 GH-167
Features:
- Added
exportToken
to share the Vault token as an environment variable GH-127
Security:
action/core
updated to 1.2.6 to address minor CVE GH-130
Improvements:
- bump node-fetch from 2.6.0 to 2.6.1 GH-110
- bump lodash from 4.17.15 to 4.17.20 GH-111
- bump npm from 6.14.4 to 6.14.8 GH-112
- bump @types/jest from 25.1.5 to 26.0.13 GH-114
- bump @actions/core from 1.2.3 to 1.2.5 GH-115
- bump jest from 25.2.7 to 26.4.2 GH-116
- bump got from 11.5.1 to 11.6.2 GH-117
- update jsonata to version 1.8.3 GH-118
- update dev dependencies GH-119
- update kind-of to version 6.0.3 GH-120
Features:
- Added TLS and mTLS support GH-97
Improvements:
- Breaking change: removed KV specific parameters and generalized secret UX GH-102
Bugs: