From 88dfc991b9620e81e70adfd51534d9c78d26102a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 4 Dec 2023 12:20:17 -0800
Subject: [PATCH] Bump google-github-actions/auth from 1 to 2 (#1698)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[google-github-actions/auth](https://github.com/google-github-actions/auth)
from 1 to 2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google-github-actions/auth/releases">google-github-actions/auth's
releases</a>.</em></p>
<blockquote>
<h2>v2</h2>
<p>Floating v2 alias</p>
<h2>v2.0.0</h2>
<p><strong>⚠️ This version requires Node 20 or later on the
runner!</strong> If you are using GitHub-managed runners, no action is
needed. If you are using self-hosted runners, make sure the system
version of Node is version 20 or higher.</p>
<h2>What's Changed</h2>
<ul>
<li>Add support for Direct Workload Identity auth by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/348">google-github-actions/auth#348</a></li>
<li>Add protection for release branches by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/351">google-github-actions/auth#351</a></li>
<li>Make auth universe-aware by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/352">google-github-actions/auth#352</a></li>
<li>Fix some examples to include project_id by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/353">google-github-actions/auth#353</a></li>
<li>Release: v2.0.0 by <a
href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/355">google-github-actions/auth#355</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google-github-actions/auth/compare/v1...v2.0.0">https://github.com/google-github-actions/auth/compare/v1...v2.0.0</a></p>
<h2>v1.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert back to Node 16 for v1 series by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/356">google-github-actions/auth#356</a></li>
<li>Release: v1.3.0 by <a
href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/357">google-github-actions/auth#357</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google-github-actions/auth/compare/v1...v1.3.0">https://github.com/google-github-actions/auth/compare/v1...v1.3.0</a></p>
<h2>v1.2.0</h2>
<p><del><strong>⚠️ This version requires Node 20 or later on the
runner!</strong> If you are using GitHub-managed runners, no action is
needed. If you are using self-hosted runners, make sure the system
version of Node is version 20 or higher.</del> Reverted based on
community feedback.</p>
<h2>What's Changed</h2>
<ul>
<li>Update deps by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/312">google-github-actions/auth#312</a></li>
<li>dependabot: only do security updates by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/320">google-github-actions/auth#320</a></li>
<li>update all deps by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/321">google-github-actions/auth#321</a></li>
<li>Update README.md by <a
href="https://github.com/mattseymour"><code>@​mattseymour</code></a> in
<a
href="https://redirect.github.com/google-github-actions/auth/pull/332">google-github-actions/auth#332</a></li>
<li><del>Update deps to Node 20 by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/339">google-github-actions/auth#339</a></del>
Reverted based on community feedback.</li>
<li>Drop chai and mocha deps by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/342">google-github-actions/auth#342</a></li>
<li>Switch to more resilient testing by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/343">google-github-actions/auth#343</a></li>
<li>Build latest versions by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/345">google-github-actions/auth#345</a></li>
<li>Release: v1.2.0 by <a
href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/346">google-github-actions/auth#346</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/mattseymour"><code>@​mattseymour</code></a>
made their first contribution in <a
href="https://redirect.github.com/google-github-actions/auth/pull/332">google-github-actions/auth#332</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google-github-actions/auth/compare/v1...v1.2.0">https://github.com/google-github-actions/auth/compare/v1...v1.2.0</a></p>
<h2>v1.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add support info by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/303">google-github-actions/auth#303</a></li>
<li>chore: update dependencies (automated) by <a
href="https://github.com/verbanicm"><code>@​verbanicm</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/305">google-github-actions/auth#305</a></li>
<li>Release: v1.1.1 by <a
href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/306">google-github-actions/auth#306</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google-github-actions/auth/commit/67e9c72af6e0492df856527b474995862b7b6591"><code>67e9c72</code></a>
Release: v2.0.0 (<a
href="https://redirect.github.com/google-github-actions/auth/issues/355">#355</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/0a2edc185b2c194b4f6bcebc7a8f52ebce97cd91"><code>0a2edc1</code></a>
Fix some examples to include project_id (<a
href="https://redirect.github.com/google-github-actions/auth/issues/353">#353</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/7c4e01fd00c7c375f15da17994e763cacccb5455"><code>7c4e01f</code></a>
Make auth universe-aware (<a
href="https://redirect.github.com/google-github-actions/auth/issues/352">#352</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/097d292c0489acc46bc647faf5e577f74499385a"><code>097d292</code></a>
Add protection for release branches (<a
href="https://redirect.github.com/google-github-actions/auth/issues/351">#351</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/fe9207673e64b5a2732f0016b5bbc56de30d1d69"><code>fe92076</code></a>
Add support for Direct Workload Identity auth (<a
href="https://redirect.github.com/google-github-actions/auth/issues/348">#348</a>)</li>
<li>See full diff in <a
href="https://github.com/google-github-actions/auth/compare/v1...v2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google-github-actions/auth&package-manager=github_actions&previous-version=1&new-version=2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/python-package.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/python-package.yml b/.github/workflows/python-package.yml
index 15c4e5f53b..67575e7445 100644
--- a/.github/workflows/python-package.yml
+++ b/.github/workflows/python-package.yml
@@ -378,7 +378,7 @@ jobs:
         role-to-assume: ${{ secrets.ACTIONS_AWS_ROLE_ARN }}
         role-session-name: DaftPythonPackageGitHubWorkflow
     - name: Assume GitHub Actions GCloud Credentials
-      uses: google-github-actions/auth@v1
+      uses: google-github-actions/auth@v2
       with:
         credentials_json: ${{ secrets.ACTIONS_GCP_SERVICE_ACCOUNT_JSON }}
         # NOTE: Workload Identity seems to be having problems with our Rust crate, so we use JSON instead