w9r.dev/action-setup-environment
w9r.dev/action-setup-environment
4
0
Fork 0
Code Issues 1 Pull requests 4 Projects Releases Packages Wiki Activity Actions

chore(deps): update https://github.com/hashicorp/vault-action action to v4 #16

Open
renovatebot wants to merge 1 commit from renovate/https-github.com-hashicorp-vault-action-4.x into main
pull from: renovate/https-github.com-hashicorp-vault-action-4.x
merge into: w9r.dev:main
Conversation 1 Commits 1 Files changed 1 +1 -1
renovatebot commented 2026-05-28 14:00:37 +02:00
Member
Copy link

This PR contains the following updates:

Package Type Update Change
https://github.com/hashicorp/vault-action action major v3 → v4

Release Notes

hashicorp/vault-action (https://github.com/hashicorp/vault-action)

v4.0.0

Compare Source

4.0.0 (May 12, 2026)

Improvements:

  • Bump node runtime from node20 to node24 GH-604
  • Fix leading slash in secret paths causing HTTP 400 errors (e.g. /cubbyhole/test → v1/cubbyhole/test instead of v1//cubbyhole/test)
  • bump jsrsasign from 11.1.0 to 11.1.3
  • bump body-parser from 1.20.3 to 1.20.5
  • bump qs from 6.13.0 to 6.15.1
  • bump http-errors from 2.0.0 to 2.0.1
  • bump minimatch from 3.1.2 to 3.1.5
  • bump underscore from 1.13.4 to 1.13.8

v4

Compare Source

v3.4.0

Compare Source

3.4.0 (June 13, 2025)

Bugs:

  • replace all dot chars during normalization (#​580)

Improvements:

  • Prevent possible DoS via polynomial regex (#​583)

v3.3.0

Compare Source

3.3.0 (March 3, 2025)

Features:

  • Wildcard secret imports can use ** to retain case of exported env keys GH-545

v3.2.0

Compare Source

3.2.0 (March 3, 2025)

Improvements:

  • Add retry for jwt auth login to fix intermittent login failures GH-574

v3.1.0

Compare Source

3.1.0 (January 9, 2025)

Improvements:

  • fix wildcard handling when field contains dot GH-542
  • bump body-parser from 1.20.0 to 1.20.3
  • bump braces from 3.0.2 to 3.0.3
  • bump cross-spawn from 7.0.3 to 7.0.6
  • bump micromatch from 4.0.5 to 4.0.8

Features:

  • secretId is no longer required for approle to support advanced use cases like machine login when bind_secret_id is false. GH-522
  • Use pki configuration to generate certificates from Vault GH-564

Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [https://github.com/hashicorp/vault-action](https://github.com/hashicorp/vault-action) | action | major | `v3` → `v4` | --- ### Release Notes <details> <summary>hashicorp/vault-action (https://github.com/hashicorp/vault-action)</summary> ### [`v4.0.0`](https://github.com/hashicorp/vault-action/releases/tag/v4.0.0) [Compare Source](https://github.com/hashicorp/vault-action/compare/v4.0.0...v4.0.0) #### 4.0.0 (May 12, 2026) Improvements: - Bump node runtime from node20 to node24 [GH-604](https://github.com/hashicorp/vault-action/pull/604) - Fix leading slash in secret paths causing HTTP 400 errors (e.g. `/cubbyhole/test` → `v1/cubbyhole/test` instead of `v1//cubbyhole/test`) - bump jsrsasign from 11.1.0 to 11.1.3 - bump body-parser from 1.20.3 to 1.20.5 - bump qs from 6.13.0 to 6.15.1 - bump http-errors from 2.0.0 to 2.0.1 - bump minimatch from 3.1.2 to 3.1.5 - bump underscore from 1.13.4 to 1.13.8 ### [`v4`](https://github.com/hashicorp/vault-action/compare/v3.4.0...v4.0.0) [Compare Source](https://github.com/hashicorp/vault-action/compare/v3.4.0...v4.0.0) ### [`v3.4.0`](https://github.com/hashicorp/vault-action/releases/tag/v3.4.0) [Compare Source](https://github.com/hashicorp/vault-action/compare/v3.3.0...v3.4.0) #### 3.4.0 (June 13, 2025) Bugs: - replace all dot chars during normalization ([#&#8203;580](https://github.com/hashicorp/vault-action/pull/580)) Improvements: - Prevent possible DoS via polynomial regex ([#&#8203;583](https://github.com/hashicorp/vault-action/pull/583)) ### [`v3.3.0`](https://github.com/hashicorp/vault-action/releases/tag/v3.3.0) [Compare Source](https://github.com/hashicorp/vault-action/compare/v3.2.0...v3.3.0) #### 3.3.0 (March 3, 2025) Features: - Wildcard secret imports can use `**` to retain case of exported env keys [GH-545](https://github.com/hashicorp/vault-action/pull/545) ### [`v3.2.0`](https://github.com/hashicorp/vault-action/releases/tag/v3.2.0) [Compare Source](https://github.com/hashicorp/vault-action/compare/v3.1.0...v3.2.0) #### 3.2.0 (March 3, 2025) Improvements: - Add retry for jwt auth login to fix intermittent login failures [GH-574](https://github.com/hashicorp/vault-action/pull/574) ### [`v3.1.0`](https://github.com/hashicorp/vault-action/releases/tag/v3.1.0) [Compare Source](https://github.com/hashicorp/vault-action/compare/v3...v3.1.0) #### 3.1.0 (January 9, 2025) Improvements: - fix wildcard handling when field contains dot [GH-542](https://github.com/hashicorp/vault-action/pull/542) - bump body-parser from 1.20.0 to 1.20.3 - bump braces from 3.0.2 to 3.0.3 - bump cross-spawn from 7.0.3 to 7.0.6 - bump micromatch from 4.0.5 to 4.0.8 Features: - `secretId` is no longer required for approle to support advanced use cases like machine login when `bind_secret_id` is false. [GH-522](https://github.com/hashicorp/vault-action/pull/522) - Use `pki` configuration to generate certificates from Vault [GH-564](https://github.com/hashicorp/vault-action/pull/564) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/Berlin) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xNzUuMSIsInVwZGF0ZWRJblZlciI6IjQzLjE3NS4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==--> 
Signed-off-by: RenovateBot <renovatebot@w9r.dev>
forgejo commented 2026-05-28 14:00:41 +02:00
Owner
Copy link

This PR contains the following updates:

Package Type Update Change https://github.com/hashicorp/vault-action action major v3 → v4

Release Notes

This PR contains the following updates: Package Type Update Change https://github.com/hashicorp/vault-action action major v3 → v4 Release Notes
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate/https-github.com-hashicorp-vault-action-4.x:renovate/https-github.com-hashicorp-vault-action-4.x
git switch renovate/https-github.com-hashicorp-vault-action-4.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate/https-github.com-hashicorp-vault-action-4.x
git switch renovate/https-github.com-hashicorp-vault-action-4.x
git rebase main
git switch main
git merge --ff-only renovate/https-github.com-hashicorp-vault-action-4.x
git switch renovate/https-github.com-hashicorp-vault-action-4.x
git rebase main
git switch main
git merge --no-ff renovate/https-github.com-hashicorp-vault-action-4.x
git switch main
git merge --squash renovate/https-github.com-hashicorp-vault-action-4.x
git switch main
git merge --ff-only renovate/https-github.com-hashicorp-vault-action-4.x
git switch main
git merge renovate/https-github.com-hashicorp-vault-action-4.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
oliver
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
oliver
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
w9r.dev/action-setup-environment!16
No description provided.