chore(deps): bump redhat-actions/oc-login from 1.3 to 2.0

[dependabot]

Bumps redhat-actions/oc-login from 1.3 to 2.0.

Release notes

Sourced from redhat-actions/oc-login's releases.

v2.0

Breaking Changes

• Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
• KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
• Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

• OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
• Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
• Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
• Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

• Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
• Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
• Upgraded @vercel/ncc to 0.44.x
• Bundle size reduced from 539kB to 86kB

CI & Infrastructure

• Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
• Added permissions: contents: read and concurrency groups to all workflows
• Added path filters to avoid unnecessary CI runs
• Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
• Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
• Added Dependabot configuration for npm and GitHub Actions dependencies
• Added .github/CODEOWNERS
• Enabled secret scanning and push protection

Tests

• Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
• Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

See CHANGELOG.md for full details.

Changelog

Sourced from redhat-actions/oc-login's changelog.

oc-login Changelog

v2.0.1

Fixes

• Replaced @vercel/ncc with esbuild: ncc cannot bundle ESM-only @actions/core v3 and @actions/exec v3 dependencies, producing a broken bundle that crashes at runtime with Cannot find module '@actions/core'. esbuild handles ESM-to-CJS bundling natively.

Dependencies

• Bumped js-yaml from ^5.2.1 to ^5.2.2 (resolves high severity Dependabot alert)

Tests

• Added bundle integrity test to catch unresolved module stubs in the distribution
• Added bundle loadability integration test to verify the bundle loads without MODULE_NOT_FOUND errors
• Enabled the test suite in CI (ci-checks.yml)

v2.0

Breaking Changes

• Node.js 24 runtime: The action now runs on Node.js 24. GitHub runners must support node24 actions.
• KUBECONFIG set before login: The action now sets KUBECONFIG to $GITHUB_WORKSPACE/kubeconfig.yaml before running oc login, so oc writes directly to an isolated file instead of ~/.kube/config. This fixes race conditions on self-hosted runners but may affect workflows that depend on the previous behavior of writing to ~/.kube/config first.
• Post-step logout: The action now logs out of OpenShift and removes the kubeconfig file at the end of the job by default. Set logout: false to preserve the previous behavior.

Features

• OIDC authentication (#42): New use_oidc and oidc_audience inputs enable authentication using GitHub's OIDC tokens for workload identity federation. Requires the cluster's API server to be configured with GitHub as an OIDC provider.
• Optional server URL (#24): openshift_server_url is no longer required. When omitted, oc login uses the existing kubeconfig context on the runner.
• Post-step logout (#2): New logout input (default: true) controls whether the action logs out and cleans up the kubeconfig at the end of the job. Recommended for self-hosted runners.
• Race condition fix (#41): Concurrent jobs on self-hosted runners no longer clobber each other's kubeconfig by writing to a shared ~/.kube/config.

Dependencies

• Upgraded @actions/core to v3.0.1, @actions/exec to v3.0.0, js-yaml to v5.2.1
• Upgraded TypeScript to 6.x, ESLint to 10.x with flat config
• Replaced @vercel/ncc with esbuild (see v2.0.1)

CI & Infrastructure

• Migrated all workflows to ubuntu-24.04 with actions/checkout@v7 and actions/setup-node@v7
• Added permissions: contents: read and concurrency groups to all workflows
• Added path filters to avoid unnecessary CI runs
• Replaced archived gaurav-nelson/github-action-markdown-link-check with lycheeverse/lychee-action@v2
• Removed dead workflows: CRDA vulnerability scan, OpenShift 3 tests, broken multiplatform and OpenShift cron jobs
• Added Dependabot configuration for npm and GitHub Actions dependencies
• Added .github/CODEOWNERS
• Enabled secret scanning and push protection

Tests

• Added unit tests for auth and kubeconfig modules (29 -> 52 tests)
• Added inputs-outputs.test.ts to verify action.yml and TypeScript enum consistency

v1.3

• Update action to run on Node20. https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20

... (truncated)

Commits

• f19c5f4 Merge pull request #65 from redhat-actions/chore/changelog-v2
• 20060b1 chore: update changelog and bump version to 2.0.0
• 217904c Merge pull request #64 from redhat-actions/test/auth-kubeconfig-unit-tests
• 5aacaf1 test: add unit tests for auth and kubeconfig modules
• c2f14a3 Merge pull request #63 from redhat-actions/feat/race-condition-oidc-optional-...
• 4b3ccf3 fix: race condition, optional server URL, and OIDC support
• 003762b Merge pull request #62 from redhat-actions/chore/cleanup-workflows-readme
• 37dbe2b chore: remove dead workflows, disable broken crons, fix README badges
• 232fca5 Merge pull request #61 from redhat-actions/chore/remove-crda-workflow
• c3987b7 chore: remove CRDA vulnerability scan workflow
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud