chore(deps): Bump google-github-actions/auth from 2.1.1 to 2.1.8 (#342)

dependabot[bot] · web-flow · commit cda5a2266034 · 2025-03-21T14:00:11.000-04:00
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 2.1.1 to 2.1.8. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/google-github-actions/auth/releases">google-github-actions/auth's releases</a>.</em></p> <blockquote> <h2>v2.1.8</h2> <h2>What's Changed</h2> <ul> <li>Update TROUBLESHOOTING.md by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/457">google-github-actions/auth#457</a></li> <li>fix: add runs-on to README.md example by <a href="https://github.com/lbarthon"><code>@​lbarthon</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/460">google-github-actions/auth#460</a></li> <li>security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/463">google-github-actions/auth#463</a></li> <li>Update deps by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/466">google-github-actions/auth#466</a></li> <li>Release: v2.1.8 by <a href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/467">google-github-actions/auth#467</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lbarthon"><code>@​lbarthon</code></a> made their first contribution in <a href="https://redirect.github.com/google-github-actions/auth/pull/460">google-github-actions/auth#460</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google-github-actions/auth/compare/v2...v2.1.8">https://github.com/google-github-actions/auth/compare/v2...v2.1.8</a></p> <h2>v2.1.7</h2> <h2>What's Changed</h2> <ul> <li>fix: update relase workflows by <a href="https://github.com/verbanicm"><code>@​verbanicm</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/452">google-github-actions/auth#452</a></li> <li>Release: v2.1.7 by <a href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/453">google-github-actions/auth#453</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google-github-actions/auth/compare/v2.1.6...v2.1.7">https://github.com/google-github-actions/auth/compare/v2.1.6...v2.1.7</a></p> <h2>v2.1.6</h2> <h2>What's Changed</h2> <ul> <li>Recommend <code>gcloud storage</code> over <code>gsutil</code> by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/438">google-github-actions/auth#438</a></li> <li>Add missing log line by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/448">google-github-actions/auth#448</a></li> <li>Release: v2.1.6 by <a href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/449">google-github-actions/auth#449</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google-github-actions/auth/compare/v2.1.5...v2.1.6">https://github.com/google-github-actions/auth/compare/v2.1.5...v2.1.6</a></p> <h2>v2.1.5</h2> <h2>What's Changed</h2> <ul> <li>Document ID Token lifetimes by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/433">google-github-actions/auth#433</a></li> <li>fix !project_id error message typo by <a href="https://github.com/seth-acuitymd"><code>@​seth-acuitymd</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/435">google-github-actions/auth#435</a></li> <li>Update deps by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/436">google-github-actions/auth#436</a></li> <li>Release: v2.1.5 by <a href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/437">google-github-actions/auth#437</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/seth-acuitymd"><code>@​seth-acuitymd</code></a> made their first contribution in <a href="https://redirect.github.com/google-github-actions/auth/pull/435">google-github-actions/auth#435</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/google-github-actions/auth/compare/v2.1.4...v2.1.5">https://github.com/google-github-actions/auth/compare/v2.1.4...v2.1.5</a></p> <h2>v2.1.4</h2> <h2>What's Changed</h2> <ul> <li>security: bump braces from 3.0.2 to 3.0.3 in the npm_and_yarn group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/420">google-github-actions/auth#420</a></li> <li>Update spelling and workflow versions by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/422">google-github-actions/auth#422</a></li> <li>Update deps by <a href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/430">google-github-actions/auth#430</a></li> <li>Release: v2.1.4 by <a href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a> in <a href="https://redirect.github.com/google-github-actions/auth/pull/431">google-github-actions/auth#431</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google-github-actions/auth/commit/71f986410dfbc7added4569d411d040a91dc6935"><code>71f9864</code></a> Release: v2.1.8 (<a href="https://redirect.github.com/google-github-actions/auth/issues/467">#467</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/0cd8f2e4e26e94673a192056e2a7f0af77f84889"><code>0cd8f2e</code></a> Update deps (<a href="https://redirect.github.com/google-github-actions/auth/issues/466">#466</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/332e0ba72f0d93d01c6f79eff1bd404dc3abddd3"><code>332e0ba</code></a> security: bump undici from 5.28.4 to 5.28.5 in the npm_and_yarn group (<a href="https://redirect.github.com/google-github-actions/auth/issues/463">#463</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/28d44ba25933bc5bc7f2d69931f8001632c46611"><code>28d44ba</code></a> fix: add runs-on to README.md example (<a href="https://redirect.github.com/google-github-actions/auth/issues/460">#460</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/83354cacbb08bb6ced8aa3959623167f377b302e"><code>83354ca</code></a> Update TROUBLESHOOTING.md (<a href="https://redirect.github.com/google-github-actions/auth/issues/457">#457</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/6fc4af4b145ae7821d527454aa9bd537d1f2dc5f"><code>6fc4af4</code></a> Release: v2.1.7 (<a href="https://redirect.github.com/google-github-actions/auth/issues/453">#453</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/212f83afe868cc88aa354e1efbf778eff05d970a"><code>212f83a</code></a> fix: update relase workflows (<a href="https://redirect.github.com/google-github-actions/auth/issues/452">#452</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/8254fb75a33b976a221574d287e93919e6a36f70"><code>8254fb7</code></a> Release: v2.1.6 (<a href="https://redirect.github.com/google-github-actions/auth/issues/449">#449</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/d1b27fe5c4d3d1e3dc8a68e8fc94cc4b24009c24"><code>d1b27fe</code></a> Add missing log line (<a href="https://redirect.github.com/google-github-actions/auth/issues/448">#448</a>)</li> <li><a href="https://github.com/google-github-actions/auth/commit/c8788cc4c52eba6566baf085281fec298f1a1146"><code>c8788cc</code></a> Recommend <code>gcloud storage</code> over <code>gsutil</code> (<a href="https://redirect.github.com/google-github-actions/auth/issues/438">#438</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google-github-actions/auth/compare/a6e2e39c0a0331da29f7fd2c2a20a427e8d3ad1f...71f986410dfbc7added4569d411d040a91dc6935">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google-github-actions/auth&package-manager=github_actions&previous-version=2.1.1&new-version=2.1.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -27,7 +27,7 @@ jobs:
           echo "entrypoint_ref=${ref}" >> $GITHUB_OUTPUT
 
       # This is provisioned here: https://github.com/chainguard-dev/secrets/blob/main/terraform-provider-imagetest.tf
-      - uses: google-github-actions/auth@a6e2e39c0a0331da29f7fd2c2a20a427e8d3ad1f # v2.1.1
+      - uses: google-github-actions/auth@71f986410dfbc7added4569d411d040a91dc6935 # v2.1.8
         id: auth
         with:
           workload_identity_provider: "projects/12758742386/locations/global/workloadIdentityPools/github-pool/providers/github-provider"
