v3.0.0

3.0.0 (2026-04-15)

⚠ BREAKING CHANGES

• Rename GitHub subject inputs (#110)
• Remove noisy custom policies (#106)
• Only allow the default branch to use OIDC (#100)

New features

• Only allow the default branch to use OIDC (#100) (fa9daef)

Bug fixes

• Resolve issues in broken unit tests (#103) (e62ca0d)
• Resolve issues with Enterprise installations (#107) (aee4f3b)

Miscellaneous

• Add unit tests for the OIDC sub claims (#102) (ed88711)
• Bump actions/checkout from 5 to 6 (#98) (939f8b3)
• Bump actions/github-script from 7 to 8 (#94) (0ce5f99)
• Bump actions/labeler from 5 to 6 (#92) (faed9f6)
• Bump aws-actions/configure-aws-credentials from 4 to 5 (#93) (1028c84)
• Bump aws-actions/configure-aws-credentials from 5 to 6 (#104) (d64b242)
• Bump github/codeql-action from 3 to 4 (#96) (cde96b6)
• Bump hashicorp/setup-terraform from 3 to 4 (#105) (c80ee45)
• Document the new more secure default config (#101) (9391a3d)
• Pin GitHub Actions (#108) (01e7875)
• Pin GitHub Actions to specific SHAs (9102a7a)
• Pin more GitHub Actions (aa8be7f)
• Prefer format over interpolation (589901b)
• Remove comment used for version updates (#99) (5f5e67d)
• Remove noisy custom policies (#106) (9176aac)
• Rename GitHub subject inputs (#110) (bd6f267)
• Update enteprise slug documentation (#109) (a0764c8)
• Update GitHub Actions versions in README (aad8029)
• Update the license badge in the README (#97) (cebbb0f)

v2.0.2

2.0.2 (2025-09-06)

Bug fixes

• Reduce the minimum Terraform version required (#90) (0bccdca)

v2.0.1

2.0.1 (2025-08-21)

Bug fixes

• Fix custom policies (#87) (35daa17)

v2.0.0

2.0.0 (2025-08-16)

⚠ BREAKING CHANGES

• Rename the enabled variable to create (#80)
• Rename default IAM role to GitHubActions (#77)
• Remove the enabled variable (#76)
• Replace Apache-2.0 with the MIT license (#74)
• Increase the minimum required versions (#73)
• Rename the attach_admin_policy variable (#72)
• Change the attach_read_only_policy default (#71)

New features

• Add a flag to enable/disable role creation (#68) (6c252cf)
• Add AWS IAM OpenID connect provider URL to outputs (#79) (208ca71)
• Allow more managed policies to be attached (#82) (06b4849)
• Support non-default AWS partitions (#65) (801d242)

Bug fixes

• Do not skip the release job (#84) (3b2f620)
• Fix broken unit test (#86) (6ecfd59)

Miscellaneous

• Automatically bump README.md version number (#83) (b39d995)
• Change the attach_read_only_policy default (#71) (c997cb9)
• Increase max_line_length to 120 characters (#70) (e6edce5)
• Increase the minimum required versions (#73) (395b8b1)
• Remove the cron workflow (#69) (10f3f5a)
• Remove the enabled variable (#76) (03185e5)
• Rename default IAM role to GitHubActions (#77) (29a447d)
• Rename the attach_admin_policy variable (#72) (f0aaed4)
• Rename the enabled variable to create (#80) (2eb9470)
• Replace Apache-2.0 with the MIT license (#74) (54470d2)
• Split workflows and simplify testing (#67) (7cbbdbd)
• Update the examples (#85) (77ea7bc)

v1.8.1

1.8.1 (2024-12-29)

Bug fixes

• Allow wildcards in the repository variable (#62) (4c6db5b)
• Swap deprecated inline_policy block for aws_iam_role_policy (#63) (a7b30ee)

Miscellaneous

• Bump slackapi/slack-github-action from 1.26.0 to 1.27.0 (#59) (568aedf)
• Bump slackapi/slack-github-action from 1.27.0 to 2.0.0 (#61) (7451536)
• Update release-please-action organisation (#55) (6a67a48)

v1.8.0

1.8.0 (2024-04-22)

New features

• Begin automating the release process (#42) (c9493af)

Miscellaneous

• Automatically upgrade workflow dependencies (#48) (be2be58)
• Bump aws-actions/configure-aws-credentials from 2 to 4 (#50) (0f5075d)
• bump github/codeql-action from 2 to 3 (#49) (6cbdace)
• Bump slackapi/slack-github-action from 1.18.0 to 1.25.0 (#51) (5093c20)
• Bump slackapi/slack-github-action from 1.25.0 to 1.26.0 (#53) (5962e07)
• Remove known thumbprints (#52) (c0b2178)
• Set the first automated release version (#44) (cc3ded5)
• Set the previous version in the manifest (#46) (cb4b7c9)

v1.7.1

What's changed?

• fix: only use OIDC provider ARN when OIDC provider is created by @morremeyer in #40

New contributors

• @morremeyer made their first contribution in #40

Full changelog: v1.7.0...v1.7.1

v1.7.0

What's changed?

• Add the ARN of the OIDC provider as output by @mads-hartmann in #38

New contributors

• @mads-hartmann made their first contribution in #38

Full changelog: v1.6.0...v1.7.0

v1.6.0

What has changed?

• Allow additional audiences by @MichaelChovanakDatavant in #35
• Add IAM role name to the outputs by @AlexanderStout in #37

New contributors

• @MichaelChovanakDatavant made their first contribution in #35
• @AlexanderStout made their first contribution in #37

Full changelog: v1.5.2...v1.6.0

v1.5.2

What's changed?

• Bug fix: Discard the order of thumbprints (5fae63a) by @unfunco

Full changelog: v1.5.1...v1.5.2