Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 11, 2024

Bumps hashi-vault-js from 0.4.14 to 0.4.15.

Release notes

Sourced from hashi-vault-js's releases.

Release v0.4.15

  • 0.4.15(latest)
    • Upgraded development env to Vault server 1.16.3
    • Improved AD secret management documentation
    • Upgraded all dependencies to the latest
    • Added TOTP secret engine functions:
      • createTOTPKey and readTOTPKey
Changelog

Sourced from hashi-vault-js's changelog.

Hashi Vault JS

Change Log

  • 0.4.15(latest)

    • Upgraded development env to Vault server 1.16.3
    • Improved AD secret management documentation
    • Upgraded all dependencies to the latest
    • Added TOTP secret engine functions:
      • createTOTPKey and readTOTPKey
  • 0.4.14

    • Updated HashiCorp Vault license
    • Upgraded all dependencies to the latest
    • Upgraded development env to Vault server 1.14.2
    • Refactored TypeScript types to generate .d.ts files using JSDoc syntax - issue [build(deps-dev): bump ts-jest from 26.5.4 to 26.5.5 #40,#38]
    • Added KV secret engine - metadata functions - issue #42:
      • createKVSecretMeta, updateKVSecretMeta, and readKVSecretMeta
  • 0.4.13

    • Added SBOM generator script
    • Upgraded all dependencies to the latest
    • Refactored TypeScript types to get them linted and verified - issue #35
    • Fixed package.json to accept node engine v14 - issue #32
    • Fixed TypeScript types to match main code and allow contructor without certificates - issue #31
    • Upgraded development env to Vault server 1.13.0 and podman
  • 0.4.12

    • Turned CA certificate optional (contribution from @​josedev-union)
    • Upgraded all dependencies (Axios, Jest, random-words, and @type/node)
    • Upgraded development env to Vault server 1.12.2
    • Changed licence from EPL-2.0 to MIT
    • Added workflow for releasing and publishing
    • Fixed bug on deleteLatestVerKVSecret
  • 0.4.11

    • Added support to TypeScript (contribution from @​phr3nzy)
    • Improved AD secret engine config functions interfaces
    • Added AD secret engine - Role functions:
      • listADRoles, createADRole, updateADRole, readADRole, deleteADRole, getADRoleCred, and rotateADRoleCred
    • Added AD secret engine - Library functions:
      • listADLibraries, createADLibrary, updateADLibrary, readADLibrary, deleteADLibrary, checkADCredOut, checkADCredIn, and getADCredSatus
  • 0.4.10

    • Upgraded development env to Vault server 1.11.0
    • Upgraded all dependencies (Axios and Jest)
    • Improved KV secret engine assertions
    • Added AD secret engine functions: * setADConfig
      • readADConfig

... (truncated)

Commits
  • af59c15 updated readme links to hashicorp docs
  • 72b4d74 reorganized certificate files
  • 01ffa6e replaced random-words per math.random
  • 4b6d193 added vault server setup
  • 2bcf70d added totp functions documentation
  • a485d51 fixed package.json, added totp test
  • fd2340a added createTOTPKey, improved @​types
  • 04306d1 improved approle smoke test doc
  • d91c53f added totp links, updated changelog
  • 108554c improved ad secret management documentation
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot requested a review from a team June 11, 2024 13:36
@dependabot dependabot bot requested a review from a team as a code owner June 11, 2024 13:36
@boring-cyborg boring-cyborg bot added the dependencies Changes that touch dependencies, e.g. Dependabot, etc. label Jun 11, 2024
@pull-request-size pull-request-size bot added the size/XS PR between 0-9 LOC label Jun 11, 2024
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/hashi-vault-js-0.4.15 branch 9 times, most recently from c73851b to f9f84cf Compare June 14, 2024 10:05
Bumps [hashi-vault-js](https://github.com/rod4n4m1/hashi-vault-js) from 0.4.14 to 0.4.15.
- [Release notes](https://github.com/rod4n4m1/hashi-vault-js/releases)
- [Changelog](https://github.com/rod4n4m1/hashi-vault-js/blob/master/CHANGELOG.md)
- [Commits](rod-anami-kyndryl/hashi-vault-js@v0.4.14...v0.4.15)

---
updated-dependencies:
- dependency-name: hashi-vault-js
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/hashi-vault-js-0.4.15 branch from f9f84cf to bdbe5d6 Compare June 14, 2024 10:13
Copy link

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

@dreamorosi dreamorosi merged commit 8955ee0 into main Jun 14, 2024
@dreamorosi dreamorosi deleted the dependabot/npm_and_yarn/hashi-vault-js-0.4.15 branch June 14, 2024 10:18
am29d pushed a commit that referenced this pull request Jun 21, 2024
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes that touch dependencies, e.g. Dependabot, etc. size/XS PR between 0-9 LOC

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant