chore(deps): bump aws-actions/configure-aws-credentials from 4.2.1 to 4.3.1

[dependabot]

Bumps aws-actions/configure-aws-credentials from 4.2.1 to 4.3.1.

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v4.3.1

4.3.1 (2025-08-04)

Bug Fixes

• update readme to 4.3.1 (#1424) (be2e7ad)

v4.3.0

4.3.0 (2025-08-04)

NOTE: This release tag originally pointed to 59b441846ad109fa4a1549b73ef4e149c4bfb53b, but a critical bug was discovered shortly after publishing. We updated this tag to d0834ad3a60a024346910e522a81b0002bd37fea to prevent anyone using the 4.3.0 tag from encountering the bug, and we published 4.3.1 to allow workflows to auto update correctly.

Features

• dependency update and feature cleanup (#1414) (59489ba), closes #1062 #1191
• Optional environment variable output (c3b3ce6)

Bug Fixes

• docs: readme samples versioning (5b3c895)
• the wrong example region for China partition in README (37fe9a7)
• properly set proxy environment variable (cbea708)

Miscellaneous Chores

• release 4.3.0 (3f7c218)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.3.1 (2025-08-04)

Bug Fixes

• update readme to 4.3.1 (#1424) (be2e7ad)

4.3.0 (2025-08-04)

Features

• depenency update and feature cleanup (#1414) (59489ba), closes #1062 #1191
• Optional environment variable output (c3b3ce6)

Bug Fixes

• docs: readme samples versioning (5b3c895)
• the wrong example region for China partition in README (37fe9a7)
• properly set proxy environment variable (cbea708)

Miscellaneous Chores

• release 4.3.0 (3f7c218)

4.2.1 (2025-05-14)

Bug Fixes

• ensure explicit inputs take precedence over environment variables (e56e6c4)
• prioritize explicit inputs over environment variables (df9c8fe)

4.2.0 (2025-05-06)

Features

• add Expiration field to Outputs (a4f3267)
• Document role-duration-seconds range (5a0cf01)
• support action inputs as environment variables (#1338) (2c168ad)

Bug Fixes

... (truncated)

Commits

• 7474bc4 chore(main): release 4.3.1
• be2e7ad fix: update readme to 4.3.1 (#1424)
• 4a9906b Merge pull request #1422 from aws-actions/lehmanmj-patch-2
• 83a7f06 Update README.md
• b8b4fdb Update CHANGELOG.md
• d0834ad chore(main): release 4.3.0
• 3f7c218 chore: release 4.3.0
• c7b3744 chore: Update dist
• cbea708 fix: properly set proxy environment variable
• 9581336 Revert "Merge pull request #1415 from aws-actions/lehmanmj-patch-1"
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Upgraded AWS credentials action to a newer version in deployment workflows, improving security and compatibility.
  • Set an explicit AWS region for deployment, ensuring consistent, region-scoped operations.
  • No changes to user-facing features or APIs.

[coderabbitai]

Walkthrough

GitHub Actions workflows updated: both workflows now use aws-actions/configure-aws-credentials v4.3.1; s3Deploy workflow additionally sets aws-region: eu-central-1. No other workflow steps or logic changed. No public API or exported entity changes.

Changes

Cohort / File(s)	Summary
AWS credentials action version bump .github/workflows/cowFi-tokens.yml, .github/workflows/s3Deploy.yml	Update aws-actions/configure-aws-credentials from v4.2.1 to v4.3.1.
Region configuration for S3 deploy .github/workflows/s3Deploy.yml	Add aws-region: eu-central-1 to Configure AWS credentials step.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Assessment against linked issues

Objective	Addressed	Explanation
Add token FPI to MAINNET with specified address and assets (#1062)	❌	Only workflow files changed; no token list or asset additions present.

Assessment against linked issues: Out-of-scope changes

Code Change	Explanation
Update aws-actions/configure-aws-credentials to v4.3.1 (.github/workflows/cowFi-tokens.yml)	Not related to adding the FPI token to MAINNET.
Update aws-actions/configure-aws-credentials to v4.3.1 and add aws-region eu-central-1 (.github/workflows/s3Deploy.yml)	Outside the scope of token addition; concerns CI/CD configuration.

Poem

I twitch my ears at YAML’s tune,
Credentials hop to v4.3 soon.
A region set, eu-central-1,
Our pipelines sprint, their chores well done.
No coins today—just clouds to tend—
A rabbit signs: deploy, my friend! 🌥️🐇

Tip

🔌 Remote MCP (Model Context Protocol) integration is now available!

Pro plan users can now connect to remote MCP servers from the Integrations page. Connect with popular remote MCPs such as Notion and Linear to add more context to your reviews and chats.

✨ Finishing Touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependabot/github_actions/aws-actions/configure-aws-credentials-4.3.1

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

🪧 Tips

Chat

There are 3 ways to chat with CodeRabbit:

• Review comments: Directly reply to a review comment made by CodeRabbit. Example:
  • I pushed a fix in commit <commit_id>, please review it.
  • Open a follow-up GitHub issue for this discussion.
• Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query.
• PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
  • @coderabbitai gather interesting stats about this repository and render them as a table. Additionally, render a pie chart showing the language distribution in the codebase.
  • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.

Support

Need help? Create a ticket on our support page for assistance with any issues or questions.

CodeRabbit Commands (Invoked using PR/Issue comments)

Type @coderabbitai help to get the list of available commands.

Other keywords and placeholders

• Add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.
• Add @coderabbitai summary to generate the high-level summary at a specific location in the PR description.
• Add @coderabbitai anywhere in the PR title to generate the title automatically.

CodeRabbit Configuration File (.coderabbit.yaml)

• You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
• Please see the configuration documentation for more information.
• If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Status, Documentation and Community

• Visit our Status Page to check the current availability of CodeRabbit.
• Visit our Documentation for detailed information on how to use CodeRabbit.
• Join our Discord Community to get help, request features, and share feedback.
• Follow us on X/Twitter for updates and announcements.

[alfetopito]

@coderabbitai review

[coderabbitai]

✅ Actions performed

Review triggered.

Note: CodeRabbit is an incremental review system and does not re-review already reviewed commits. This command is applicable only when automatic reviews are paused.

[coderabbitai]

Actionable comments posted: 0

🧹 Nitpick comments (2)

.github/workflows/s3Deploy.yml (1)

24-26: Explicit aws-region set to eu-central-1 — confirm bucket region alignment

Setting the region is good for avoiding 301 redirects and flaky behavior. Please confirm the S3 bucket region for s3://files.cow.fi is eu-central-1, otherwise writes may be slower or error if the bucket policy is region-bound.

If you want to reduce the AWS session lifetime for least privilege, you can set a shorter role duration (optional):

       with:
         role-to-assume: arn:aws:iam::693696263829:role/token-list-github-action-role
         role-session-name: githubactionsession
+        role-duration-seconds: 900
         aws-region: eu-central-1

.github/workflows/cowFi-tokens.yml (1)

44-46: Optional: Limit the AWS session duration for least-privilege

If this job is short-lived, you can restrict the assumed role session length.

       with:
         role-to-assume: arn:aws:iam::693696263829:role/token-list-github-action-role
         role-session-name: githubactionsession
+        role-duration-seconds: 900
         aws-region: eu-central-1

📜 Review details

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

💡 Knowledge Base configuration:

• MCP integration is disabled by default for public repositories
• Jira integration is disabled by default for public repositories
• Linear integration is disabled by default for public repositories

You can enable these sources in your CodeRabbit configuration.

📥 Commits

Reviewing files that changed from the base of the PR and between 537a4e1 and 5e9ef32.

📒 Files selected for processing (2)

• .github/workflows/cowFi-tokens.yml (1 hunks)
• .github/workflows/s3Deploy.yml (1 hunks)

🔇 Additional comments (2)

.github/workflows/s3Deploy.yml (1)

22-22: Bump to aws-actions/configure-aws-credentials v4.3.1 (pinned SHA) looks good

Pinned to the release commit, which is best practice for supply-chain security. No breaking changes expected from 4.2.1 → 4.3.1.

.github/workflows/cowFi-tokens.yml (1)

42-42: Bump to aws-actions/configure-aws-credentials v4.3.1 (pinned SHA) looks good

Pinned to a known commit; good security posture. No workflow logic changes otherwise.