Update to go 1.22.4 and k8s versions 1.26-1.30 (#251)

Also configure dependabot for hashicorp actions, and set latest
trusted actions.

.github/dependabot.yaml

@@ -0,0 +1,24 @@
+# Copyright (c) HashiCorp, Inc.
+# SPDX-License-Identifier: MPL-2.0
+
+---
+version: 2
+
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    labels: ["dependencies"]
+    groups:
+      github-actions-breaking:
+        update-types:
+          - major
+      github-actions-backward-compatible:
+        update-types:
+          - minor
+          - patch
+    # only update internal github actions, external github actions are handled
+    # by https://github.com/hashicorp/security-tsccr/tree/main/automation
+    allow:
+      - dependency-name: "hashicorp/*"

.github/workflows/bulk-dep-upgrades.yaml

@@ -11,7 +11,6 @@ jobs:
     secrets:
       VAULT_ECO_GITHUB_TOKEN: ${{ secrets.VAULT_ECO_GITHUB_TOKEN }}
     with:
-      # either hashicorp/vault-ecosystem-applications or hashicorp/vault-ecosystem-foundations
-      reviewer-team: hashicorp/vault-ecosystem-foundations
+      reviewer-team: hashicorp/vault-ecosystem
       repository: ${{ github.repository }}
       run-id: ${{ github.run_id }}

.github/workflows/jira.yaml

@@ -14,4 +14,4 @@ jobs:
       JIRA_SYNC_USER_EMAIL: ${{ secrets.JIRA_SYNC_USER_EMAIL }}
       JIRA_SYNC_API_TOKEN: ${{ secrets.JIRA_SYNC_API_TOKEN }}
     with:
-      teams-array: '["ecosystem", "foundations-eco"]'
+      teams-array: '["vault-eco"]'

.github/workflows/tests.yaml

@@ -27,13 +27,13 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        kind-k8s-version: [1.24.15, 1.25.11, 1.26.6, 1.27.3, 1.28.0]
+        kind-k8s-version: [1.26.15, 1.27.13, 1.28.9, 1.29.4, 1.30.0]
     steps:
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Create K8s Kind Cluster
         uses: helm/kind-action@0025e74a8c7512023d06dc019c617aa3cf561fde # v1.10.0
         with:
-          version: v0.20.0
+          version: v0.23.0
           cluster_name: vault-plugin-auth-kubernetes
           node_image: kindest/node:v${{ matrix.kind-k8s-version }}
       - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1

.go-version

@@ -1 +1 @@
-1.22.2
+1.22.4

CHANGELOG.md

@@ -2,6 +2,8 @@
 
 ### Changes
 
+* Building with go 1.22.4
+* Testing with k8s 1.26-1.30
 * Updated dependencies
   * `github.com/hashicorp/go-hclog` v1.6.2 -> v1.6.3
   * `github.com/hashicorp/vault/api` v1.12.2 -> v1.14.0

go.mod

@@ -2,7 +2,7 @@ module github.com/hashicorp/vault-plugin-auth-kubernetes
 
 go 1.22.0
 
-toolchain go1.22.2
+toolchain go1.22.4
 
 require (
 	github.com/go-test/deep v1.1.0