Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps-dev): bump hashi-vault-js from 0.4.14 to 0.4.15 #2634

Merged
merged 1 commit into from
Jun 14, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 11, 2024

Bumps hashi-vault-js from 0.4.14 to 0.4.15.

Release notes

Sourced from hashi-vault-js's releases.

Release v0.4.15

  • 0.4.15(latest)
    • Upgraded development env to Vault server 1.16.3
    • Improved AD secret management documentation
    • Upgraded all dependencies to the latest
    • Added TOTP secret engine functions:
      • createTOTPKey and readTOTPKey
Changelog

Sourced from hashi-vault-js's changelog.

Hashi Vault JS

Change Log

  • 0.4.15(latest)

    • Upgraded development env to Vault server 1.16.3
    • Improved AD secret management documentation
    • Upgraded all dependencies to the latest
    • Added TOTP secret engine functions:
      • createTOTPKey and readTOTPKey
  • 0.4.14

    • Updated HashiCorp Vault license
    • Upgraded all dependencies to the latest
    • Upgraded development env to Vault server 1.14.2
    • Refactored TypeScript types to generate .d.ts files using JSDoc syntax - issue [build(deps-dev): bump ts-jest from 26.5.4 to 26.5.5 #40,#38]
    • Added KV secret engine - metadata functions - issue #42:
      • createKVSecretMeta, updateKVSecretMeta, and readKVSecretMeta
  • 0.4.13

    • Added SBOM generator script
    • Upgraded all dependencies to the latest
    • Refactored TypeScript types to get them linted and verified - issue #35
    • Fixed package.json to accept node engine v14 - issue #32
    • Fixed TypeScript types to match main code and allow contructor without certificates - issue #31
    • Upgraded development env to Vault server 1.13.0 and podman
  • 0.4.12

    • Turned CA certificate optional (contribution from @​josedev-union)
    • Upgraded all dependencies (Axios, Jest, random-words, and @type/node)
    • Upgraded development env to Vault server 1.12.2
    • Changed licence from EPL-2.0 to MIT
    • Added workflow for releasing and publishing
    • Fixed bug on deleteLatestVerKVSecret
  • 0.4.11

    • Added support to TypeScript (contribution from @​phr3nzy)
    • Improved AD secret engine config functions interfaces
    • Added AD secret engine - Role functions:
      • listADRoles, createADRole, updateADRole, readADRole, deleteADRole, getADRoleCred, and rotateADRoleCred
    • Added AD secret engine - Library functions:
      • listADLibraries, createADLibrary, updateADLibrary, readADLibrary, deleteADLibrary, checkADCredOut, checkADCredIn, and getADCredSatus
  • 0.4.10

    • Upgraded development env to Vault server 1.11.0
    • Upgraded all dependencies (Axios and Jest)
    • Improved KV secret engine assertions
    • Added AD secret engine functions: * setADConfig
      • readADConfig

... (truncated)

Commits
  • af59c15 updated readme links to hashicorp docs
  • 72b4d74 reorganized certificate files
  • 01ffa6e replaced random-words per math.random
  • 4b6d193 added vault server setup
  • 2bcf70d added totp functions documentation
  • a485d51 fixed package.json, added totp test
  • fd2340a added createTOTPKey, improved @​types
  • 04306d1 improved approle smoke test doc
  • d91c53f added totp links, updated changelog
  • 108554c improved ad secret management documentation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested review from a team as code owners June 11, 2024 13:36
@boring-cyborg boring-cyborg bot added the dependencies Changes that touch dependencies, e.g. Dependabot, etc. label Jun 11, 2024
@pull-request-size pull-request-size bot added the size/XS PR between 0-9 LOC label Jun 11, 2024
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/hashi-vault-js-0.4.15 branch 9 times, most recently from c73851b to f9f84cf Compare June 14, 2024 10:05
Bumps [hashi-vault-js](https://github.com/rod4n4m1/hashi-vault-js) from 0.4.14 to 0.4.15.
- [Release notes](https://github.com/rod4n4m1/hashi-vault-js/releases)
- [Changelog](https://github.com/rod4n4m1/hashi-vault-js/blob/master/CHANGELOG.md)
- [Commits](kyndryl-open-source/hashi-vault-js@v0.4.14...v0.4.15)

---
updated-dependencies:
- dependency-name: hashi-vault-js
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/hashi-vault-js-0.4.15 branch from f9f84cf to bdbe5d6 Compare June 14, 2024 10:13
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@dreamorosi dreamorosi merged commit 8955ee0 into main Jun 14, 2024
11 checks passed
@dreamorosi dreamorosi deleted the dependabot/npm_and_yarn/hashi-vault-js-0.4.15 branch June 14, 2024 10:18
am29d pushed a commit that referenced this pull request Jun 21, 2024
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Changes that touch dependencies, e.g. Dependabot, etc. size/XS PR between 0-9 LOC
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant