Repository navigation
build(deps): update Google authentication and add adoption dry runs - #248
Merged
jdevalk merged 4 commits intoOct 15, 2026
Merged
Conversation
Bumps [google-github-actions/auth](https://github.com/google-github-actions/auth) from 2 to 3. - [Release notes](https://github.com/google-github-actions/auth/releases) - [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md) - [Commits](google-github-actions/auth@v2...v3) --- updated-dependencies: - dependency-name: google-github-actions/auth dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
Deploying specification-website with
|
| Latest commit: |
b221598
|
| Status: | ✅ Deploy successful! |
| Preview URL: | https://4c23ccb7.specification-website.pages.dev |
| Branch Preview URL: | https://dependabot-github-actions-go.specification-website.pages.dev |
dependabot
Bot
added
dependencies
jdevalk
changed the title
jdevalk
deleted the
dependabot/github_actions/google-github-actions/auth-3
branch
October 15, 2026 11:37
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Updates google-github-actions/auth from v2 to v3 for the monthly adoption workflow. Adds an optional
dry_runworkflow-dispatch input that uses the existing BigQuery dry-run path and skips formatting, change detection and PR publication. Scheduled runs and ordinary manual refreshes retain their existing behaviour.Includes the shared lockfile security refresh used by the other open PRs; both dependency audits now report zero vulnerabilities.
Validation: clean installs, lint, formatting, discovery checks, adoption tests, type-checks, MCP assertions and production builds passed locally, including a combined checkout of all nine PRs. All fresh PR checks pass; the scheduled-only external-link check is skipped.
A read-only combined test of this upgrade with setup-node v7 and BigQuery 9.2.0 reached Google authentication, but the configured identity provider rejected the temporary branch with
unauthorized_client: The given credential is rejected by the attribute condition. No aggregation or publication ran. Local gcloud authentication also requires reauthentication, so the exact provider condition could not be inspected. The test must be repeated from an authorised identity context; no identity policy was changed.Validation run: https://github.com/jdevalk/specification.website/actions/runs/38727259583
Upstream release: https://github.com/google-github-actions/auth/releases/tag/v3.0.0