Releases: guardian/actions-riff-raff
v4.0.7
What's Changed
- chore(deps): bump esbuild from 0.23.0 to 0.23.1 by @dependabot in #167
- chore(deps): bump the aws-sdk group with 2 updates by @dependabot in #165
Full Changelog: v4.0.6...v4.0.7
v4.0.6
What's Changed
- chore(deps): bump esbuild from 0.22.0 to 0.23.0 by @dependabot in #157
- chore: Configure Dependabot by @akash1810 in #159
- chore(deps): bump actions/stale from 5 to 9 by @dependabot in #162
- chore(deps): bump actions/checkout from 2 to 4 by @dependabot in #161
- chore(deps): bump actions/setup-node from 3 to 4 by @dependabot in #160
- chore(deps): bump the aws-sdk group with 2 updates by @dependabot in #163
Full Changelog: v4.0.5...v4.0.6
v4.0.5
What's Changed
- fix(esbuild): Include packages in bundle by @akash1810 in #153
Full Changelog: v4.0.4...v4.0.5
v4.0.4
Caution
This version is broken, and should not be used!
A fix is released in v4.0.5.
What's Changed
- chore(deps): bump @aws-sdk/client-s3 from 3.596.0 to 3.606.0 by @dependabot in #149
- chore(deps-dev): bump @types/node from 20.14.2 to 20.14.9 by @dependabot in #150
- chore(deps): bump @aws-sdk/credential-providers from 3.596.0 to 3.606.0 by @dependabot in #151
- chore(deps): bump esbuild from 0.21.5 to 0.22.0 by @dependabot in #152
Full Changelog: v4.0.3...v4.0.4
v4.0.3
What's Changed
- chore(deps): bump @aws-sdk/credential-providers from 3.540.0 to 3.565.0 by @dependabot in #131
- chore(deps-dev): bump @types/node from 20.12.2 to 20.12.8 by @dependabot in #132
- chore(deps): bump @aws-sdk/client-s3 from 3.540.0 to 3.568.0 by @dependabot in #133
- chore(deps-dev): bump @guardian/tsconfig from 0.2.0 to 0.3.0 by @dependabot in #128
- chore(deps): bump esbuild from 0.20.2 to 0.21.4 by @dependabot in #139
- chore(deps-dev): bump @guardian/prettier from 8.0.0 to 8.0.1 by @dependabot in #138
- chore(deps-dev): bump @types/node from 20.12.8 to 20.14.1 by @dependabot in #140
- chore(deps): bump esbuild from 0.21.4 to 0.21.5 by @dependabot in #145
- chore(deps-dev): bump @types/node from 20.14.1 to 20.14.2 by @dependabot in #143
- chore(deps-dev): bump braces from 3.0.2 to 3.0.3 by @dependabot in #146
- chore(deps): bump @aws-sdk/client-s3 from 3.568.0 to 3.596.0 by @dependabot in #141
- chore(deps): bump @aws-sdk/credential-providers from 3.565.0 to 3.596.0 by @dependabot in #144
- chore(deps-dev): bump ws from 7.5.9 to 7.5.10 by @dependabot in #148
Full Changelog: v4.0.2...v4.0.3
v4.0.2
What's Changed
- feat: Handle Riff-Raff upload error, and PR commenting error separately by @akash1810 in #127
Full Changelog: v4.0.1...v4.0.2
v4.0.1
What's Changed
- fix: Improve feedback on S3 upload failure by @akash1810 in #126
Full Changelog: v4.0.0...v4.0.1
v4.0.0
Breaking changes
- A
roleArn
input now needs to be passed into the action, so that it can assume the role to upload to Riff-Raff #108. This removes the need to use the aws-configure-credentials action in previous steps of the workflow.
Migrating from v3 to v4
Prior to v4, workflows that used this action were required to assume the role necessary to upload artifacts to Riff-Raff, via configure-aws-credentials
. This is no longer required, as this action does it for you. This has the benefit of hardening your workflows, as intermediate steps no longer have access to AWS credentials.
To migrate:
-
Bump
guardian/actions-riff-raff@v3
toguardian/actions-riff-raff@v4
in your workflow file. -
Add the required
roleArn
property under thewith
section of theguardian/actions-riff-raff@v4
action. This is typically stored as a secret that can be accessed via${{ secrets.GU_RIFF_RAFF_ROLE_ARN }}
. -
Remove the
configure-aws-credentials
step from your workflow, as it's no longer required.
Note
For the action to successfully assume the Riff-Raff role, you still need to include the following permission:
permissions:
id-token: write
# ...
What's Changed
- chore(deps): bump @aws-sdk/client-s3 from 3.462.0 to 3.484.0 by @dependabot in #96
- chore(deps-dev): bump @types/node from 20.10.1 to 20.10.6 by @dependabot in #97
- chore(deps): bump esbuild from 0.19.8 to 0.19.11 by @dependabot in #98
- chore(deps-dev): bump @guardian/prettier from 5.0.0 to 7.0.0 by @dependabot in #99
- chore(deps): bump @aws-sdk/client-s3 from 3.484.0 to 3.504.0 by @dependabot in #102
- chore(deps-dev): bump @types/node from 20.10.6 to 20.11.14 by @dependabot in #104
- chore(deps): bump esbuild from 0.19.11 to 0.20.0 by @dependabot in #105
- chore(deps-dev): bump @guardian/prettier from 7.0.0 to 8.0.0 by @dependabot in #103
- chore(deps): bump @aws-sdk/client-s3 from 3.504.0 to 3.509.0 by @dependabot in #106
- chore(deps-dev): bump @types/node from 20.11.14 to 20.11.17 by @dependabot in #107
- Assume Riff-Raff role within the action itself by @AshCorr @chrislomaxjones in #108
New Contributors
- @chrislomaxjones made their first contribution in #108
Full Changelog: v3...v4
v3.3.2
What's Changed
- fix(commenting): Update all comments created by actions-riff-raff by @akash1810 in #95
Full Changelog: v3.3.1...v3.3.2
v3.3.1
What's Changed
- fix: Use commit sha to identify PR number by @akash1810 in #94
Full Changelog: v3.3.0...v3.3.1