chore: bump hashicorp/vault-action from 2 to 3

[dependabot]

Bumps hashicorp/vault-action from 2 to 3.

Release notes

Sourced from hashicorp/vault-action's releases.

v3.0.0

3.0.0 (February 15, 2024)

Improvements:

• Bump node runtime from node16 to node20 GH-528

v2.8.1

2.8.1 (February 15, 2024)

Bugs:

• Revert GH-509 which made a backwards incompatible bump of the node runtime from node16 to node20 GH-527

v2.8.0

2.8.0 (February 1, 2024)

Features:

• Add ignoreNotFound input (default: false) to prevent the action from failing when a secret does not exist GH-518

Improvements:

• bump jsrsasign from 10.8.6 to 11.0.0 GH-513
• bump @​actions/core from 1.10.0 to 1.10.1 GH-489
• bump jest-when from 3.5.2 to 3.6.0 GH-484
• bump jest from 29.5.0 to 29.7.0 GH-490
• bump @​vercel/ncc from 0.36.1 to 0.38.1 GH-503

v2.7.5

2.7.5 (January 30, 2024)

Improvements:

• Bump node runtime from node16 to node20 GH-509
• Bump got from 11.8.5 to 11.8.6 GH-492

v2.7.4

2.7.4 (October 26, 2023)

Features:

• Add ability to specify a wildcard for the key name to get all keys in the path GH-488

v2.7.3

2.7.3 (July 13, 2023)

Bugs:

... (truncated)

Changelog

Sourced from hashicorp/vault-action's changelog.

3.4.0 (June 13, 2025)

Bugs:

• replace all dot chars during normalization (hashicorp/vault-action#580)

Improvements:

• Prevent possible DoS via polynomial regex (hashicorp/vault-action#583)

3.3.0 (March 3, 2025)

Features:

• Wildcard secret imports can use ** to retain case of exported env keys GH-545

3.2.0 (March 3, 2025)

Improvements:

• Add retry for jwt auth login to fix intermittent login failures GH-574

3.1.0 (January 9, 2025)

Improvements:

• fix wildcard handling when field contains dot GH-542
• bump body-parser from 1.20.0 to 1.20.3
• bump braces from 3.0.2 to 3.0.3
• bump cross-spawn from 7.0.3 to 7.0.6
• bump micromatch from 4.0.5 to 4.0.8

Features:

• secretId is no longer required for approle to support advanced use cases like machine login when bind_secret_id is false. GH-522
• Use pki configuration to generate certificates from Vault GH-564

3.0.0 (February 15, 2024)

Improvements:

• Bump node runtime from node16 to node20 GH-529

2.8.1 (February 15, 2024)

Bugs:

• Revert GH-509 which made a backwards incompatible bump of the node runtime from node16 to node20 GH-527

2.8.0 (February 1, 2024)

... (truncated)

Commits

• 4c06c5c Prepare for v3.4.0 release (#584)
• d07b4dc chore(deps): bump jsrsasign from 11.0.0 to 11.1.0 (#521)
• 8ab17d8 Prevent possible DoS via polynomial regex (#583)
• b022ecd fix: replace all dot chars during normalization (#580)
• 4d5899d Adding codeowners file (#578)
• 7709c60 feat: added double asterisk wildcard selector to prevent uppercasing of keys ...
• 4b1f32b Prepare for v3.2.0 release (#575)
• 5d06ce8 Retry core.getIDToken for JWT Auth Method (#574)
• a1b77a0 Prepare for v3.1.0 release (#571)
• 3b999ae chore: Update dist/index for latest code (#568)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[addetz]

@dependabot rebase