[CHORE](gha-deps)(deps): Bump aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2

[dependabot]

Bumps aws-actions/configure-aws-credentials from 6.1.1 to 6.1.2.

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.1.2

6.1.2 (2026-05-26)

Bug Fixes

• additional filesystem checks (#1799) (c39f282)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)
• support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#1778) (58e7c47)
• assumeRole failing from session tag size too large (#1808) (d6f5dc3)

6.1.3 (2026-05-28)

Bug Fixes

• fix: allow kubelet token symlink in #1805

6.1.2 (2026-05-26)

Bug Fixes

• additional filesystem checks (#1799) (c39f282)

6.1.1 (2026-05-05)

Miscellaneous Chores

• various dependency updates

6.1.0 (2026-04-06)

Features

• add skip cleanup option (#1716) (11b1c58), closes #1545
• Support usage of AWS Profiles (#1696) (a7f0c82)

6.0.0 (2026-02-04)

... (truncated)

Commits

• acca2b1 chore(main): release 6.1.2 (#1761)
• c329d24 chore: Update dist
• c39f282 fix: additional filesystem checks (#1799)
• 8188bee chore(deps-dev): bump @​types/node from 25.6.0 to 25.9.1 (#1795)
• 477988d chore(deps-dev): bump @​smithy/property-provider from 4.2.14 to 4.3.4 (#1798)
• 9a5ab5b chore: Update dist
• baa1fdf chore(deps): bump @​aws-sdk/client-sts from 3.1038.0 to 3.1053.0 (#1793)
• 4be0a3c chore(deps-dev): bump generate-license-file from 4.1.1 to 4.2.1 (#1794)
• f85f964 chore: Update dist
• 6fddd0c chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1791)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🗺️ OMF STAC preview is live!

📦 Catalog	https://staging.overturemaps.org/stac/pr/68/catalog.json
🕐 Updated	Jun 03, 2026 22:13 UTC
📝 Commit	2542d01

Note

♻️ This preview updates automatically with each push to this PR.

[John McCall (lowlydba)]

Copilot Resolve the zizmor error by removing caching from the astral-sh GHA:

error[cache-poisoning]: runtime artifacts potentially vulnerable to a cache poisoning attack
  --> ./.github/workflows/publish-pypi.yml:33:9
   |
 9 | / on:
10 | |   release:
11 | |     types: [published]
12 | |   workflow_dispatch:
   | |____________________- generally used when publishing artifacts generated at runtime
...
33 |           uses: astral-sh/setup-uv@08807647e7069bb48b6ef5acd8ec9567f424441b # v8.1.0
   |           ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ this step
34 | /         with:
35 | |           enable-cache: true
36 | |           python-version-file: "pyproject.toml"
   | |_______________________________________________- enables caching explicitly here
   |
   = note: audit confidence → Low
   = note: this finding has an auto-fix
   = help: audit documentation → https://docs.zizmor.sh/audits/#cache-poisoning

[Copilot]

Copilot Resolve the zizmor error by removing caching from the astral-sh GHA:

...

Removed enable-cache: true from the astral-sh/setup-uv step in commit fix: remove enable-cache from setup-uv to prevent cache-poisoning.