From 4a3c4d73685aba2b85d7a9c5531a0a5a016125c6 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 26 Aug 2024 20:45:17 -0700
Subject: [PATCH] Bump google-github-actions/auth from 2.1.4 to 2.1.5 (#222)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps
[google-github-actions/auth](https://github.com/google-github-actions/auth)
from 2.1.4 to 2.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google-github-actions/auth/releases">google-github-actions/auth's
releases</a>.</em></p>
<blockquote>
<h2>v2.1.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Document ID Token lifetimes by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/433">google-github-actions/auth#433</a></li>
<li>fix !project_id error message typo by <a
href="https://github.com/seth-acuitymd"><code>@​seth-acuitymd</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/435">google-github-actions/auth#435</a></li>
<li>Update deps by <a
href="https://github.com/sethvargo"><code>@​sethvargo</code></a> in <a
href="https://redirect.github.com/google-github-actions/auth/pull/436">google-github-actions/auth#436</a></li>
<li>Release: v2.1.5 by <a
href="https://github.com/google-github-actions-bot"><code>@​google-github-actions-bot</code></a>
in <a
href="https://redirect.github.com/google-github-actions/auth/pull/437">google-github-actions/auth#437</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/seth-acuitymd"><code>@​seth-acuitymd</code></a>
made their first contribution in <a
href="https://redirect.github.com/google-github-actions/auth/pull/435">google-github-actions/auth#435</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google-github-actions/auth/compare/v2.1.4...v2.1.5">https://github.com/google-github-actions/auth/compare/v2.1.4...v2.1.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/google-github-actions/auth/commit/62cf5bd3e4211a0a0b51f2c6d6a37129d828611d"><code>62cf5bd</code></a>
Release: v2.1.5 (<a
href="https://redirect.github.com/google-github-actions/auth/issues/437">#437</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/0a94a84ba5475d3020c3df611c610b909d57bbb9"><code>0a94a84</code></a>
Update deps (<a
href="https://redirect.github.com/google-github-actions/auth/issues/436">#436</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/699582eeaf276a35ba5a1373d7d2e28253011e88"><code>699582e</code></a>
fix !project_id error message typo (<a
href="https://redirect.github.com/google-github-actions/auth/issues/435">#435</a>)</li>
<li><a
href="https://github.com/google-github-actions/auth/commit/6384b341b739135f1aacc53ef6c51631cb8da911"><code>6384b34</code></a>
Document ID Token lifetimes (<a
href="https://redirect.github.com/google-github-actions/auth/issues/433">#433</a>)</li>
<li>See full diff in <a
href="https://github.com/google-github-actions/auth/compare/f112390a2df9932162083945e46d439060d66ec2...62cf5bd3e4211a0a0b51f2c6d6a37129d828611d">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google-github-actions/auth&package-manager=github_actions&previous-version=2.1.4&new-version=2.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/release.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 1290abc2..bbdc7c9d 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
           cache: false
 
       # This is provisioned here: https://github.com/chainguard-dev/secrets/blob/main/terraform-provider-cosign.tf
-      - uses: google-github-actions/auth@f112390a2df9932162083945e46d439060d66ec2 # v2.1.4
+      - uses: google-github-actions/auth@62cf5bd3e4211a0a0b51f2c6d6a37129d828611d # v2.1.5
         id: auth
         with:
           workload_identity_provider: "projects/12758742386/locations/global/workloadIdentityPools/github-pool/providers/github-provider"