A roleArn input now needs to be passed into the action, so that it can assume the role to upload to Riff-Raff guardian/actions-riff-raff#108. This removes the need to use the aws-configure-credentials action in previous steps of the workflow.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @akash1810.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
All deployment options
- [Deploy build 3278 of `tools::riffraff` to CODE](https://riffraff.gutools.co.uk/deployment/deployAgain?project=tools%3A%3Ariffraff&build=3278&stage=CODE&updateStrategy=MostlyHarmless&action=deploy)
- [Deploy parts of build 3278 to CODE by previewing it first](https://riffraff.gutools.co.uk/preview/yaml?project=tools%3A%3Ariffraff&build=3278&stage=CODE&updateStrategy=MostlyHarmless)
- [What's on CODE right now?](https://riffraff.gutools.co.uk/deployment/history?projectName=tools%3A%3Ariffraff&stage=CODE)
Bumps the all group with 1 update: guardian/actions-riff-raff.
Updates
guardian/actions-riff-raff
from 3 to 4Release notes
Sourced from guardian/actions-riff-raff's releases.
... (truncated)
Commits
32f6dd8
Merge pull request #108 from guardian/mob/AssumeRoleWithWebIdentitye9c90bd
Throw error if roleArn is missing5bca0d4
Actually fix tests2879309
Fix testsbfd092d
Get ID token and roleArn early in the action to fail fast6d0d135
Update the README to reflect v4 changes69fb70e
Use AssumeRoleWithWebIdentity to get AWS S3 credentials instead of a seperate...8d7305b
chore(deps-dev): bump@types/node
from 20.11.14 to 20.11.17ee69fe0
chore(deps): bump@aws-sdk/client-s3
from 3.504.0 to 3.509.06ee359f
chore(deps-dev): bump@guardian/prettier
from 7.0.0 to 8.0.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot will merge this PR once it's up-to-date and CI passes on it, as requested by @akash1810.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show