Skip to content

Bump redhat-actions/oc-login from 1 to 2 - #2332

Open
dependabot[bot] wants to merge 1 commit into
prodfrom
dependabot/github_actions/redhat-actions/oc-login-2
Open

Bump redhat-actions/oc-login from 1 to 2#2332
dependabot[bot] wants to merge 1 commit into
prodfrom
dependabot/github_actions/redhat-actions/oc-login-2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 26, 2026

Copy link
Copy Markdown

Bumps redhat-actions/oc-login from 1 to 2.

Release notes

Sourced from redhat-actions/oc-login's releases.

v2.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
  • KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
  • Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

  • OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
  • Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
  • Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
  • Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

  • Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
  • Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
  • Upgraded @vercel/ncc to 0.44.x
  • Bundle size reduced from 539kB to 86kB

CI & Infrastructure

  • Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
  • Added permissions: contents: read and concurrency groups to all workflows
  • Added path filters to avoid unnecessary CI runs
  • Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
  • Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
  • Added Dependabot configuration for npm and GitHub Actions dependencies
  • Added .github/CODEOWNERS
  • Enabled secret scanning and push protection

Tests

  • Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
  • Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

See CHANGELOG.md for full details.

Update action to run on Node20

Update action to run on Node16

v1.2

v1.1

No release notes provided.

Changelog

Sourced from redhat-actions/oc-login's changelog.

oc-login Changelog

v2.0

Breaking Changes

  • Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
  • KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
  • Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

  • OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
  • Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
  • Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
  • Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

  • Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
  • Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
  • Upgraded @vercel/ncc to 0.44.x
  • Bundle size reduced from 539kB to 86kB

CI & Infrastructure

  • Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
  • Added permissions: contents: read and concurrency groups to all workflows
  • Added path filters to avoid unnecessary CI runs
  • Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
  • Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
  • Added Dependabot configuration for npm and GitHub Actions dependencies
  • Added .github/CODEOWNERS
  • Enabled secret scanning and push protection

Tests

  • Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
  • Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

v1.3

v1.2

v1.1

  • Fix outputting cluster name even if cluster URL is a secret 44a205b 693904d
  • (Internal) Add ESLint 68f49e4b
  • (Internal) Fix pull_request triggers 9d7ac97b

v1.0

Initial marketplace release

... (truncated)

Commits
  • f19c5f4 Merge pull request #65 from redhat-actions/chore/changelog-v2
  • 20060b1 chore: update changelog and bump version to 2.0.0
  • 217904c Merge pull request #64 from redhat-actions/test/auth-kubeconfig-unit-tests
  • 5aacaf1 test: add unit tests for auth and kubeconfig modules
  • c2f14a3 Merge pull request #63 from redhat-actions/feat/race-condition-oidc-optional-...
  • 4b3ccf3 fix: race condition, optional server URL, and OIDC support
  • 003762b Merge pull request #62 from redhat-actions/chore/cleanup-workflows-readme
  • 37dbe2b chore: remove dead workflows, disable broken crons, fix README badges
  • 232fca5 Merge pull request #61 from redhat-actions/chore/remove-crda-workflow
  • c3987b7 chore: remove CRDA vulnerability scan workflow
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [redhat-actions/oc-login](https://github.com/redhat-actions/oc-login) from 1 to 2.
- [Release notes](https://github.com/redhat-actions/oc-login/releases)
- [Changelog](https://github.com/redhat-actions/oc-login/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/oc-login@v1...v2)

---
updated-dependencies:
- dependency-name: redhat-actions/oc-login
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants