Skip to content

Bump redhat-actions/oc-login from 1 to 2 - #738

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/redhat-actions/oc-login-2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/redhat-actions/oc-login-2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps redhat-actions/oc-login from 1 to 2.

Release notes

Sourced from redhat-actions/oc-login's releases.

v2.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
  • KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
  • Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

  • OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
  • Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
  • Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
  • Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

  • Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
  • Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
  • Upgraded @vercel/ncc to 0.44.x
  • Bundle size reduced from 539kB to 86kB

CI & Infrastructure

  • Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
  • Added permissions: contents: read and concurrency groups to all workflows
  • Added path filters to avoid unnecessary CI runs
  • Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
  • Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
  • Added Dependabot configuration for npm and GitHub Actions dependencies
  • Added .github/CODEOWNERS
  • Enabled secret scanning and push protection

Tests

  • Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
  • Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

See CHANGELOG.md for full details.

Update action to run on Node20

Update action to run on Node16

v1.2

v1.1

No release notes provided.

Changelog

Sourced from redhat-actions/oc-login's changelog.

oc-login Changelog

v2.0.1

Fixes

  • Replaced @vercel/ncc with esbuild: ncc cannot bundle ESM-only @actions/core v3 and @actions/exec v3 dependencies, producing a broken bundle that crashes at runtime with Cannot find module '@actions/core'. esbuild handles ESM-to-CJS bundling natively.

Dependencies

  • Bumped js-yaml from ^5.2.1 to ^5.2.2 (resolves high severity Dependabot alert)

Tests

  • Added bundle integrity test to catch unresolved module stubs in the distribution
  • Added bundle loadability integration test to verify the bundle loads without MODULE_NOT_FOUND errors
  • Enabled the test suite in CI (ci-checks.yml)

v2.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
  • KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
  • Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

  • OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
  • Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
  • Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
  • Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

  • Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
  • Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
  • Replaced @vercel/ncc with esbuild (see v2.0.1)

CI & Infrastructure

  • Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
  • Added permissions: contents: read and concurrency groups to all workflows
  • Added path filters to avoid unnecessary CI runs
  • Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
  • Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
  • Added Dependabot configuration for npm and GitHub Actions dependencies
  • Added .github/CODEOWNERS
  • Enabled secret scanning and push protection

Tests

  • Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
  • Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

v1.3

... (truncated)

Commits
  • 2a1614b chore: update changelog for v2.0.1
  • 70278f4 chore: bump js-yaml to ^5.2.2
  • 5427b64 chore: bump version to 2.0.1
  • 989d1b0 Merge pull request #67 from redhat-actions/fix/esbuild-esm-bundling
  • 538e7bb fix: replace ncc with esbuild to support ESM-only @actions/* v3
  • e247f89 Merge pull request #66 from redhat-actions/feat/race-condition-oidc-optional-...
  • f19c5f4 Merge pull request #65 from redhat-actions/chore/changelog-v2
  • 20060b1 chore: update changelog and bump version to 2.0.0
  • 217904c Merge pull request #64 from redhat-actions/test/auth-kubeconfig-unit-tests
  • 5aacaf1 test: add unit tests for auth and kubeconfig modules
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [redhat-actions/oc-login](https://github.com/redhat-actions/oc-login) from 1 to 2.
- [Release notes](https://github.com/redhat-actions/oc-login/releases)
- [Changelog](https://github.com/redhat-actions/oc-login/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/oc-login@v1...v2)

---
updated-dependencies:
- dependency-name: redhat-actions/oc-login
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 27, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants