Skip to content

chore: bump azure/login from 2.2.0 to 2.3.0#992

Merged
Fei-Guo merged 1 commit intomainfrom
dependabot/github_actions/azure/login-2.3.0
Apr 7, 2025
Merged

chore: bump azure/login from 2.2.0 to 2.3.0#992
Fei-Guo merged 1 commit intomainfrom
dependabot/github_actions/azure/login-2.3.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 7, 2025 •
edited
Loading

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps azure/login from 2.2.0 to 2.3.0.

Release notes

Sourced from azure/login's releases.

Azure Login Action v2.3.0

What's Changed

Full Changelog: Azure/login@v2.2.0...v2.3.0

Commits
  • a457da9 prepare release v2.3.0
  • bbcc074 Use --client-id for user-assigned managed identity authentication in Azure ...
  • 877e2b4 Log more claims for OIDC login (#520)
  • 888619b mention allow-no-subscriptions in missing subscriptionId error (#512)
  • 3fcf81c Bump braces from 3.0.2 to 3.0.3 (#511)
  • 6047d58 replace the invalid link for github action doc (#510)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore: bump azure/login from 2.2.0 to 2.3.0
f4903af 
Bumps [azure/login](https://github.com/azure/login) from 2.2.0 to 2.3.0.
- [Release notes](https://github.com/azure/login/releases)
- [Commits](Azure/login@v2.2.0...v2.3.0)

---
updated-dependencies:
- dependency-name: azure/login
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Apr 7, 2025
@kaito-pr-agent
Copy link

kaito-pr-agent bot commented Apr 7, 2025

Title

chore: bump azure/login from 2.2.0 to 2.3.0

User description

Bumps azure/login from 2.2.0 to 2.3.0.

Release notes

Sourced from azure/login's releases.

Azure Login Action v2.3.0

What's Changed

Full Changelog: Azure/login@v2.2.0...v2.3.0

Commits
  • a457da9 prepare release v2.3.0
  • bbcc074 Use --client-id for user-assigned managed identity authentication in Azure ...
  • 877e2b4 Log more claims for OIDC login (#520)
  • 888619b mention allow-no-subscriptions in missing subscriptionId error (#512)
  • 3fcf81c Bump braces from 3.0.2 to 3.0.3 (#511)
  • 6047d58 replace the invalid link for github action doc (#510)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

PR Type

bug_fix, documentation

Description

  • Updated azure/login action from version 2.2.0 to 2.3.0 across multiple workflows.

  • Replaced multiarch/qemu-user-static with mcr.microsoft.com/mirror/docker/multiarch/qemu-user-static:7.2.0-1.

  • Added unit tests and E2E tests as required.

  • Updated release notes and commit messages accordingly.

Changes walkthrough 📝

Relevant files
Bug_fix
e2e-preset-test.yml
Update azure/login action version                                               

.github/workflows/e2e-preset-test.yml

  • Updated azure/login action from v2.2.0 to v2.3.0.
 +1/-1     
e2e-preset-tuning-test.yml
Update azure/login action version                                               

.github/workflows/e2e-preset-tuning-test.yml

  • Updated azure/login action from v2.2.0 to v2.3.0.
 +1/-1     
preset-image-build.yml
Update azure/login action version                                               

.github/workflows/preset-image-build.yml

  • Updated azure/login action from v2.2.0 to v2.3.0.
 +1/-1     
Need help?
  • Type /help how to ... in the comments thread for any questions about PR-Agent usage.
  • Check out the documentation for more information.
    		•

    @kaito-pr-agent
    Copy link

    kaito-pr-agent bot commented Apr 7, 2025

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    🎫 Ticket compliance analysis 🔶

    520 - Partially compliant

    Compliant requirements:

    Non-compliant requirements:

    • None

    Requires further human verification:

    • None

    512 - Partially compliant

    Compliant requirements:

    • None

    Non-compliant requirements:

    • None

    Requires further human verification:

    • None
     Estimated effort to review: 1 🔵⚪⚪⚪⚪
    🧪 No relevant tests
    🔒 Security concerns

    Sensitive information exposure:
    The update to azure/login@v2.3.0 includes a change to log more claims for OIDC login. This could potentially expose sensitive information if not handled properly.

    ⚡ Recommended focus areas for review

    @kaito-pr-agent
    Copy link

    kaito-pr-agent bot commented Apr 7, 2025

    PR Code Suggestions ✨

    No code suggestions found for the PR.

    @Fei-Guo Fei-Guo merged commit 3c847a0 into main Apr 7, 2025
    6 of 10 checks passed
    @Fei-Guo Fei-Guo deleted the dependabot/github_actions/azure/login-2.3.0 branch April 7, 2025 23:36
    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

    Reviewers

    @Fei-Guo Fei-Guo Fei-Guo approved these changes

    @helayoty helayoty Awaiting requested review from helayoty

    @ishaansehgal99 ishaansehgal99 Awaiting requested review from ishaansehgal99

    @zhuangqh zhuangqh Awaiting requested review from zhuangqh zhuangqh is a code owner

    Assignees

    No one assigned

    Labels

    dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

    Projects

    None yet

    Milestone

    No milestone

    Development

    Successfully merging this pull request may close these issues.

    1 participant

    @Fei-Guo