Skip to content

chore(deps): update grafana/shared-workflows/get-vault-secrets action to v1.3.0 #2224

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Oct 31, 2025
Merged

chore(deps): update grafana/shared-workflows/get-vault-secrets action to v1.3.0 #2224

merged 2 commits into from
Oct 31, 2025

Conversation

@renovate-sh-app
Copy link
Contributor

@renovate-sh-app renovate-sh-app bot commented Oct 15, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
grafana/shared-workflows action minor get-vault-secrets/v1.2.1 -> get-vault-secrets/v1.3.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

grafana/shared-workflows (grafana/shared-workflows)

vget-vault-secrets/v1.3.0: get-vault-secrets: v1.3.0

Compare Source

🎉 Features
  • add helpful error handling for OIDC token failures (#​1171) (6272233)
  • add support for ignoring missing secrets to get-vault-secrets action (#​1236) (49ec8e2)
🤖 Continuous Integration
🔧 Miscellaneous Chores
  • deps: update hashicorp/vault-action action to v3.4.0 (#​1072) (b1c5ce9)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app renovate-sh-app bot requested review from a team as code owners October 15, 2025 15:13
@renovate-sh-app renovate-sh-app bot added ci dependencies Update one or more dependencies version labels Oct 15, 2025
@renovate-sh-app renovate-sh-app bot requested a review from briangann October 15, 2025 15:13
@renovate-sh-app renovate-sh-app bot added github_actions Pull requests that update GitHub Actions code no-changelog Don't include in changelog and version calculations labels Oct 15, 2025
@renovate-sh-app renovate-sh-app bot requested review from academo and s4kh October 15, 2025 15:13
@renovate-sh-app renovate-sh-app bot enabled auto-merge (squash) October 15, 2025 15:13
@github-actions
Copy link
Contributor

github-actions bot commented Oct 15, 2025 •
edited
Loading

Hello! 👋 This repository uses Auto for releasing packages using PR labels.

✨ This PR can be merged. It will not be considered when calculating future versions of the npm packages and will not appear in the changelogs.

@grafana-plugins-platform-bot grafana-plugins-platform-bot bot moved this from 📬 Triage to 🔬 In review in Plugins Platform / Grafana Community Oct 15, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/get-vault-secrets-auto-merged-github-actions branch 10 times, most recently from 644135e to 9780bef Compare October 23, 2025 15:17
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/get-vault-secrets-auto-merged-github-actions branch 5 times, most recently from ca626be to a43532a Compare October 28, 2025 12:18
@renovate-sh-app
chore(deps): update grafana/shared-workflows/get-vault-secrets action…
cce5e0e 
… to v1.3.0

| datasource  | package                  | from                     | to                       |
| ----------- | ------------------------ | ------------------------ | ------------------------ |
| github-tags | grafana/shared-workflows | get-vault-secrets/v1.2.1 | get-vault-secrets/v1.3.0 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/get-vault-secrets-auto-merged-github-actions branch from a43532a to cce5e0e Compare October 28, 2025 15:59
github-advanced-security[bot]
github-advanced-security bot found potential problems Oct 31, 2025
View reviewed changes
.github/workflows/ci.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Node CI' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/ci.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Node CI' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/ci.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Node CI' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/ci.yml

- name: Get secrets for DockerHub login
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Node CI' step
Uses Step
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/ci.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Node CI' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/deploy-to-developer-portal-dev.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Deploy to Developer Portal DEV Bucket' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/deploy-to-developer-portal-prod.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Deploy to Developer Portal PROD Bucket' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/lapo-create-pr.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Lapo Docs Create docs PR for merged PR' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
.github/workflows/lapo-generate-embeddings.yml
steps:
- id: get-secrets
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.2.1
uses: grafana/shared-workflows/actions/get-vault-secrets@get-vault-secrets/v1.3.0

Check warning

Code scanning / CodeQL

Unpinned tag for a non-immutable Action in workflow Medium

Unpinned 3rd party Action 'Lapo Docs Generate Embeddings' step
Uses Step: get-secrets
Loading
uses 'grafana/shared-workflows/actions/get-vault-secrets' with ref 'get-vault-secrets/v1.3.0', not a pinned commit hash
@renovate-sh-app renovate-sh-app bot merged commit ab92f25 into main Oct 31, 2025
22 checks passed
@renovate-sh-app renovate-sh-app bot deleted the renovate/get-vault-secrets-auto-merged-github-actions branch October 31, 2025 12:13
@github-project-automation github-project-automation bot moved this from 🔬 In review to 🚀 Shipped in Plugins Platform / Grafana Community Oct 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tolzhabayev tolzhabayev tolzhabayev approved these changes

@briangann briangann Awaiting requested review from briangann briangann is a code owner automatically assigned from grafana/plugins-platform-frontend

@academo academo Awaiting requested review from academo academo is a code owner automatically assigned from grafana/plugins-platform-backend

@s4kh s4kh Awaiting requested review from s4kh s4kh is a code owner automatically assigned from grafana/plugins-platform-backend

Assignees

No one assigned

Labels

ci dependencies Update one or more dependencies version github_actions Pull requests that update GitHub Actions code no-changelog Don't include in changelog and version calculations

Projects

Plugins Platform / Grafana Community
Archived in project

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@tolzhabayev