[dependabot]

Bumps pulumi/auth-actions from 2.1.0 to 2.1.1.

Release notes

Sourced from pulumi/auth-actions's releases.

v2.1.1

What's Changed

• fix: Update @pulumi/actions-helpers to 0.2.0 (#84)
• fix: Respect export-environment-variables: false (#65)
• chore: Remove the immutable-action publish workflow in favor of GitHub's GA Immutable Releases setting (#61)

Full Changelog: pulumi/auth-actions@v2.1.0...v2.1.1

Changelog

Sourced from pulumi/auth-actions's changelog.

CHANGELOG

HEAD (Unreleased)

(none)

---

2.1.1 (2026-10-22)

• fix: Update @pulumi/actions-helpers to 0.2.0 (#84)
• fix: Respect export-environment-variables: false (#65)
• chore: Remove the immutable-action publish workflow in favor of GitHub's GA Immutable Releases setting (#61)

---

2.1.0 (2026-05-29)

• fix: Build with rollup instead of ncc to fix a load crash (require is not defined in ES module scope) that broke v2.0.0 for all consumers (#63)

---

2.0.0 (2026-05-29)

• feat: Update action runtime to Node 24 (breaking change) (#59)
• chore: Use @pulumi/actions-helpers (#54)
• docs: Remove mention of old admin scope for org tokens on OIDC (#56)
• fix: oauth url on windows (#53)

---

1.0.0 (2024-05-13)

• feat: Add support for OIDC token exchange for authentication (#1155)

Commits

• 159c3e4 Prepare the v2.1.1 release (#87)
• 859cf32 chore(deps-dev): bump rollup from 4.64.9 to 4.64.10 in the npm group (#86)
• 4060244 chore(deps-dev): bump rollup from 4.64.7 to 4.64.9 in the npm group (#85)
• 708557c Update @​pulumi/actions-helpers to 0.2.0 (#84)
• 2ac5777 chore(deps): bump micromatch from 4.0.5 to 4.0.8 (#82)
• 45ea3ad chore(deps-dev): bump minimatch from 3.1.2 to 3.1.5 (#80)
• f991ec5 chore(deps-dev): bump brace-expansion from 1.1.11 to 1.1.21 (#79)
• 4aa096e chore(deps): bump follow-redirects from 1.15.6 to 1.16.1 (#76)
• a4bdc9c chore(deps): bump cross-spawn from 7.0.3 to 7.0.6 (#75)
• e15415b chore(deps): bump axios from 1.8.4 to 1.20.0 (#73)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: d8c7d16f-d950-49f0-9779-938c3b9ab2cb

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}