UNPKG

cdk-sops-secrets

Version:

CDK Constructs that syncs your sops secrets into AWS SecretsManager secrets.

constructs.dev/packages/cdk-sops-secrets

dbsystel/cdk-sops-secrets

210 lines (135 loc) • 20.6 kB
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
# Changelog All notable changes to this project will be documented in this file. See [commit-and-tag-version](https://github.com/absolute-version/commit-and-tag-version) for commit guidelines. ## [2.8.1](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.8.0...v2.8.1) (2026-06-29) ### Bug Fixes * **deps:** update all minor and patch ([#1361](https://github.com/dbsystel/cdk-sops-secrets/issues/1361)) ([4d4e273](https://github.com/dbsystel/cdk-sops-secrets/commit/4d4e27368dcad5f256c211080574e9dfb2a0d944)) * **deps:** update all minor and patch ([#1370](https://github.com/dbsystel/cdk-sops-secrets/issues/1370)) ([a6eec11](https://github.com/dbsystel/cdk-sops-secrets/commit/a6eec11d9902c46cb84aa3d052aaef9ddeb020cf)) * **deps:** update module github.com/aws/aws-sdk-go-v2/service/secretsmanager to v1.41.9 ([#1362](https://github.com/dbsystel/cdk-sops-secrets/issues/1362)) ([f2d8710](https://github.com/dbsystel/cdk-sops-secrets/commit/f2d87102443e4281842b391716f5ba4d31b516c3)) * **renovate:** fix invalid config and add CI validation ([#1352](https://github.com/dbsystel/cdk-sops-secrets/issues/1352)) ([b880691](https://github.com/dbsystel/cdk-sops-secrets/commit/b880691cb7ee7560d2d1c400c73bcb560d250c75)) ### Miscellaneous Chores * **deps:** update actions/checkout digest to df4cb1c ([#1365](https://github.com/dbsystel/cdk-sops-secrets/issues/1365)) ([707aaab](https://github.com/dbsystel/cdk-sops-secrets/commit/707aaabb965c0db2e75db9a3ca9ec070327d3694)) * **deps:** update all minor and patch ([#1354](https://github.com/dbsystel/cdk-sops-secrets/issues/1354)) ([aae9888](https://github.com/dbsystel/cdk-sops-secrets/commit/aae98882c80b489f0648c1e8f878eff3e077c044)) * **deps:** update all minor and patch ([#1360](https://github.com/dbsystel/cdk-sops-secrets/issues/1360)) ([19fab31](https://github.com/dbsystel/cdk-sops-secrets/commit/19fab31b49262938e0af3ff68538c8e4ec205771)) * **deps:** update all minor and patch ([#1369](https://github.com/dbsystel/cdk-sops-secrets/issues/1369)) ([89bf3c2](https://github.com/dbsystel/cdk-sops-secrets/commit/89bf3c24980d732f7ca45b0c2760d804ce784356)) * **deps:** update all minor and patch ([#1374](https://github.com/dbsystel/cdk-sops-secrets/issues/1374)) ([e30057e](https://github.com/dbsystel/cdk-sops-secrets/commit/e30057ef134ba2585e783bf8d9aa4e1fc38b1564)) * **deps:** update all minor and patch ([#1376](https://github.com/dbsystel/cdk-sops-secrets/issues/1376)) ([509dc6d](https://github.com/dbsystel/cdk-sops-secrets/commit/509dc6dc6be7eb5e9fff7920e6b5b2f489c406a6)) * **deps:** update all minor and patch ([#1378](https://github.com/dbsystel/cdk-sops-secrets/issues/1378)) ([a3ba4bc](https://github.com/dbsystel/cdk-sops-secrets/commit/a3ba4bc9dc1c5804eb43ea647c1596eff19b9e6f)) * **deps:** update all minor and patch ([#1382](https://github.com/dbsystel/cdk-sops-secrets/issues/1382)) ([7c14b23](https://github.com/dbsystel/cdk-sops-secrets/commit/7c14b2396feb5144b773aeab947589e42bb8b220)) * **deps:** update all minor and patch ([#1384](https://github.com/dbsystel/cdk-sops-secrets/issues/1384)) ([1e68b31](https://github.com/dbsystel/cdk-sops-secrets/commit/1e68b31e113bbec0b59bc263ed4f4f4883de09e5)) * **deps:** update all minor and patch ([#1385](https://github.com/dbsystel/cdk-sops-secrets/issues/1385)) ([a6c1ae5](https://github.com/dbsystel/cdk-sops-secrets/commit/a6c1ae5801fbb48b752ec5cb0f742f95a3ddfd9d)) * **deps:** update all minor and patch to v24.17.0 ([#1381](https://github.com/dbsystel/cdk-sops-secrets/issues/1381)) ([d4dce82](https://github.com/dbsystel/cdk-sops-secrets/commit/d4dce823b2bc91d3cd97107f47cef7ecc7dd9f7a)) * **deps:** update all minor and patch to v43.208.0 ([#1364](https://github.com/dbsystel/cdk-sops-secrets/issues/1364)) ([c2b50a9](https://github.com/dbsystel/cdk-sops-secrets/commit/c2b50a952700392ca6dc56106253e56c30ae8178)) * **deps:** update all minor and patch to v43.209.2 ([#1366](https://github.com/dbsystel/cdk-sops-secrets/issues/1366)) ([4300b10](https://github.com/dbsystel/cdk-sops-secrets/commit/4300b1049d041a4f0c844ed47973fe622040ef87)) * **deps:** update all minor and patch to v43.212.0 ([#1371](https://github.com/dbsystel/cdk-sops-secrets/issues/1371)) ([3912812](https://github.com/dbsystel/cdk-sops-secrets/commit/39128129eacf46718bd43c5a049d7ad2f1f7260f)) * **deps:** update all minor and patch to v43.214.4 ([#1372](https://github.com/dbsystel/cdk-sops-secrets/issues/1372)) ([1df1847](https://github.com/dbsystel/cdk-sops-secrets/commit/1df1847bed91e70e8425d33b4f509b9695d8b86a)) * **deps:** update all minor and patch to v43.214.6 ([#1373](https://github.com/dbsystel/cdk-sops-secrets/issues/1373)) ([20ed7d3](https://github.com/dbsystel/cdk-sops-secrets/commit/20ed7d3457d4e6d7b7478e8e894703e72c83e817)) * **deps:** update all minor and patch to v43.217.0 ([#1375](https://github.com/dbsystel/cdk-sops-secrets/issues/1375)) ([064c975](https://github.com/dbsystel/cdk-sops-secrets/commit/064c9751f809253a618ee56579c431e98dfb7575)) * **deps:** update all minor and patch to v43.222.1 ([#1377](https://github.com/dbsystel/cdk-sops-secrets/issues/1377)) ([5bdb06d](https://github.com/dbsystel/cdk-sops-secrets/commit/5bdb06d81e45ef69470fc4b4110f1461dcd0840e)) * **deps:** update all minor and patch to v43.225.0 ([#1379](https://github.com/dbsystel/cdk-sops-secrets/issues/1379)) ([0d3f9df](https://github.com/dbsystel/cdk-sops-secrets/commit/0d3f9df0caf2e1f6da7133863f050ad9e40ba7e1)) * **deps:** update dependency aws-cdk to v2.1124.0 ([#1356](https://github.com/dbsystel/cdk-sops-secrets/issues/1356)) ([aa2abf8](https://github.com/dbsystel/cdk-sops-secrets/commit/aa2abf87841bdfd2b50fe4bd78fec72f89799d94)) * **deps:** update dependency renovate to v43.243.0 ([#1386](https://github.com/dbsystel/cdk-sops-secrets/issues/1386)) ([7264f3e](https://github.com/dbsystel/cdk-sops-secrets/commit/7264f3e2d823a0d94124d22df929a680c8a6fa2a)) * **deps:** update dependency ts-jest to v29.4.11 ([#1359](https://github.com/dbsystel/cdk-sops-secrets/issues/1359)) ([10b18e7](https://github.com/dbsystel/cdk-sops-secrets/commit/10b18e79968e5279e92bb18451f70e67dbe51ba7)) * **deps:** update github/codeql-action digest to 7211b7c ([#1358](https://github.com/dbsystel/cdk-sops-secrets/issues/1358)) ([7330af8](https://github.com/dbsystel/cdk-sops-secrets/commit/7330af87e8942dd54817e2f13f6533d7f96fc76b)) * **deps:** update github/codeql-action digest to 87557b9 ([#1363](https://github.com/dbsystel/cdk-sops-secrets/issues/1363)) ([d9deae9](https://github.com/dbsystel/cdk-sops-secrets/commit/d9deae94442598453d80b288fa09a51232c7e6b5)) * **deps:** update github/codeql-action digest to 8aad20d ([#1367](https://github.com/dbsystel/cdk-sops-secrets/issues/1367)) ([20de284](https://github.com/dbsystel/cdk-sops-secrets/commit/20de2840d6b6b69105397a4ad0f9576137ae3825)) * **deps:** update jdx/mise-action digest to dba1968 ([#1368](https://github.com/dbsystel/cdk-sops-secrets/issues/1368)) ([f8402c2](https://github.com/dbsystel/cdk-sops-secrets/commit/f8402c2f628fb28a6252b5e81b18b62d649e5b3d)) ## [2.8.0](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.7.3...v2.8.0) (2026-05-21) ### Features * allow multiple expiration days for multiple reminders ([da1cd65](https://github.com/dbsystel/cdk-sops-secrets/commit/da1cd65176c87ab66a3e61bcc57d114778df427a)) * allow multiple expiration days for multiple reminders ([2333fd5](https://github.com/dbsystel/cdk-sops-secrets/commit/2333fd56949f664ac53637ec3f1e16a70491f048)) ### Bug Fixes * **ci:** address zizmor security findings ([d2fa814](https://github.com/dbsystel/cdk-sops-secrets/commit/d2fa8144439cecb8ced1648811f61e949b023647)) * **ci:** address zizmor security findings in GitHub Actions workflows ([0bb6b41](https://github.com/dbsystel/cdk-sops-secrets/commit/0bb6b41127e83b1c8f7d6085fd38ebd1d74c9f00)) * **ci:** refactor update-jsii-artifacts to avoid credential persistence ([743931f](https://github.com/dbsystel/cdk-sops-secrets/commit/743931f341cde383da561b6ca3358947732521d8)) * **ci:** resolve artipacked finding in update-jsii-artifacts ([54800f6](https://github.com/dbsystel/cdk-sops-secrets/commit/54800f65564c45023c7c6293608cfd16a8b8dc3e)) * replace first-occurrence-only string replace with global regex ([c2d04f6](https://github.com/dbsystel/cdk-sops-secrets/commit/c2d04f64d9d7ff4c7e47dea0c0aebe001332850f)) * resolve CodeQL incomplete string escaping alerts ([1286a55](https://github.com/dbsystel/cdk-sops-secrets/commit/1286a55f16f43e9ba32e4613799a53083911d277)) ### Documentation * add OpenSSF Best Practices badge to README ([f47dfbf](https://github.com/dbsystel/cdk-sops-secrets/commit/f47dfbffe7e06a065f21c86c8ce74eb8db037f61)) ### Miscellaneous Chores * configure squash merge and group deps by update type ([#1350](https://github.com/dbsystel/cdk-sops-secrets/issues/1350)) ([7bbf3d4](https://github.com/dbsystel/cdk-sops-secrets/commit/7bbf3d4b9f42c99eacbcfaac2ea9d182e134e3ce)) * **deps:** update github-actions (major) ([#1347](https://github.com/dbsystel/cdk-sops-secrets/issues/1347)) ([f7fb38f](https://github.com/dbsystel/cdk-sops-secrets/commit/f7fb38f3bd4c91247be3146170da3df39a8b812e)) * **deps:** update go-deps ([#1346](https://github.com/dbsystel/cdk-sops-secrets/issues/1346)) ([f09ae6b](https://github.com/dbsystel/cdk-sops-secrets/commit/f09ae6b16315b62a72fc11c8f22ebe74ca9a450b)) * **deps:** update npm-deps ([#1334](https://github.com/dbsystel/cdk-sops-secrets/issues/1334)) ([68ca156](https://github.com/dbsystel/cdk-sops-secrets/commit/68ca1569f9b2f381968eeb23a5c5116117b07b71)) ## [2.7.3](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.7.2...v2.7.3) (2026-05-19) ### Bug Fixes * build badge shows main branch only ([7647a31](https://github.com/dbsystel/cdk-sops-secrets/commit/7647a31512cbea711ed5691066ea02a4a9cb6bcd)) * correct gh attestation download usage ([870573b](https://github.com/dbsystel/cdk-sops-secrets/commit/870573bd53047aeac7f5ee56c354342e9808a47c)) ### Miscellaneous Chores * add top-level permissions to update-jsii-artifacts workflow ([74a2a89](https://github.com/dbsystel/cdk-sops-secrets/commit/74a2a89ff718c7a2fe999c6e85d6ec3c5866743d)) * add top-level permissions to update-jsii-artifacts workflow ([69bdb3c](https://github.com/dbsystel/cdk-sops-secrets/commit/69bdb3cc66e6ac37ad1801aca5b903e6aa1b0769)) ## [2.7.2](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.7.1...v2.7.2) (2026-05-19) ### Documentation * add OpenSSF Scorecard badge to README ([f2651ef](https://github.com/dbsystel/cdk-sops-secrets/commit/f2651ef72f3a6976be778f99aea58b27deafd170)) ### Miscellaneous Chores * add build provenance attestation to release workflow ([ea5cb78](https://github.com/dbsystel/cdk-sops-secrets/commit/ea5cb7841d8cb0c47118cf23e3d2a648b281aa20)) * add OpenSSF Scorecard badge to README ([98fd265](https://github.com/dbsystel/cdk-sops-secrets/commit/98fd265e17c5bd550a4befa27e462bc3dc2d25f1)) * attach SLSA provenance to GitHub Release assets ([e7f527c](https://github.com/dbsystel/cdk-sops-secrets/commit/e7f527c1c047f39c692fa5598fa79453367fe6ed)) * **ci:** switch release process to release-please with GitHub App ([aae40e2](https://github.com/dbsystel/cdk-sops-secrets/commit/aae40e2a40565545f210db0777fef3bf57016e88)) * **deps:** update actions/attest-build-provenance digest to e8998f9 ([#1336](https://github.com/dbsystel/cdk-sops-secrets/issues/1336)) ([cc119d4](https://github.com/dbsystel/cdk-sops-secrets/commit/cc119d4019fce4a81afec77dff273567fa68e783)) * **deps:** update github-actions ([#1328](https://github.com/dbsystel/cdk-sops-secrets/issues/1328)) ([aed7c7c](https://github.com/dbsystel/cdk-sops-secrets/commit/aed7c7cb39a10995745675a48f0076dd0cbabf8a)) * **deps:** update npm-deps ([#1320](https://github.com/dbsystel/cdk-sops-secrets/issues/1320)) ([e3f518a](https://github.com/dbsystel/cdk-sops-secrets/commit/e3f518af8677889e1be623070d75a9e54cb9b5b9)) * **deps:** update npm-deps ([#1321](https://github.com/dbsystel/cdk-sops-secrets/issues/1321)) ([d2f0b51](https://github.com/dbsystel/cdk-sops-secrets/commit/d2f0b51dc9e1aa2ea6555c74476941fb5f805f66)) * **deps:** upgrade go depdendencies ([6a64b3b](https://github.com/dbsystel/cdk-sops-secrets/commit/6a64b3b07e79d651c53467423f23170334138895)) * **deps:** upgrade go dependencies ([1828b7c](https://github.com/dbsystel/cdk-sops-secrets/commit/1828b7c57d751f97264071ea63a8e23458ce8be7)) * enable rebase-behind-base-branch in renovate config ([ef36f79](https://github.com/dbsystel/cdk-sops-secrets/commit/ef36f797f97ff670f0edc3bc9b426b46f15c1746)) * enable rebase-behind-base-branch in renovate config ([911af85](https://github.com/dbsystel/cdk-sops-secrets/commit/911af85a5ee3ad315ec4a3cd9c4d7fd6ffa7db6e)) * make chore commits visible in release-please ([8ff8aa7](https://github.com/dbsystel/cdk-sops-secrets/commit/8ff8aa7ccb5f31f955ede86fee4b2009b2854011)) * make chore commits visible in release-please ([1f59e23](https://github.com/dbsystel/cdk-sops-secrets/commit/1f59e23b6029a941241afd50e7a4f53fc7d95f5d)) * pin golang to 1.26.2 in mise.toml ([0f5bff4](https://github.com/dbsystel/cdk-sops-secrets/commit/0f5bff49f1539cebb4bb193bb67cc7a1cdddf96c)) * pin golang to 1.26.3 in mise.toml ([c1bba89](https://github.com/dbsystel/cdk-sops-secrets/commit/c1bba89f61f1d283f4cfa1b317ddefc961333197)) * scope release-please permissions to job level ([b43ce11](https://github.com/dbsystel/cdk-sops-secrets/commit/b43ce1198b4bae4a53630329a0e1544af14fd324)) * scope release-please permissions to job level ([f5df6a7](https://github.com/dbsystel/cdk-sops-secrets/commit/f5df6a715af69ca46ceb7dd7698bcdec53978617)) * set minimun release age ([6292af2](https://github.com/dbsystel/cdk-sops-secrets/commit/6292af28ea022a03362f1dcfbdbf99e0a1f20fd0)) * set minimun release age ([8d7b716](https://github.com/dbsystel/cdk-sops-secrets/commit/8d7b7161f050dd6801459ea4f6c2cff8edb156f7)) * sync min-release-age to 1 day (renovate + npmrc) ([73dc285](https://github.com/dbsystel/cdk-sops-secrets/commit/73dc285cdf8841790111c38fbf8d6da472d08578)) * sync min-release-age to 1 days (renovate + npmrc) ([4e9976b](https://github.com/dbsystel/cdk-sops-secrets/commit/4e9976b17709b9126589e2b4297a9260d954d230)) * update node to 24.14.0, pin npm to 11.12.1 ([1d071da](https://github.com/dbsystel/cdk-sops-secrets/commit/1d071dadf3b459bac3ecf412df9a10b5ab0501a5)) * update node to 24.14.0, pin npm to 11.14.1 ([22b7407](https://github.com/dbsystel/cdk-sops-secrets/commit/22b7407bfe3f83a1114dcaf9cd042a832f2001ea)) ## [2.7.1](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.7.0...v2.7.1) (2026-05-08) ### Bug Fixes * assertion name ([ca35532](https://github.com/dbsystel/cdk-sops-secrets/commit/ca35532c1279fb4704e65c7745e7afeb4899e3a6)) * dont let the schedule name start with a slash ([1778a28](https://github.com/dbsystel/cdk-sops-secrets/commit/1778a28151c35a1089dd7fee1281cb9d3e22d48f)) ## [2.7.0](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.7...v2.7.0) (2026-05-07) ### Features * add secret expiration tracking ([eb6c9b7](https://github.com/dbsystel/cdk-sops-secrets/commit/eb6c9b76875b0bfbe3e0b95d92f41a6b697fd0c0)) ## [2.6.7](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.6...v2.6.7) (2026-05-05) ### Bug Fixes * introduce SOPS key as ssm parameter ([#1291](https://github.com/dbsystel/cdk-sops-secrets/issues/1291)) ([d18e6e2](https://github.com/dbsystel/cdk-sops-secrets/commit/d18e6e222c5b1fedece04be42d334fa420da4510)) ## [2.6.6](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.5...v2.6.6) (2026-04-16) ### Bug Fixes * bump Go indirect deps for CVE fixes and enable Renovate indirect updates ([c058243](https://github.com/dbsystel/cdk-sops-secrets/commit/c0582437b7f3d6f81eec0f2fcc8c9ca465aca646)), closes [#1305](https://github.com/dbsystel/cdk-sops-secrets/issues/1305) * **renovate:** disable major updates for indirect Go deps ([c2ab489](https://github.com/dbsystel/cdk-sops-secrets/commit/c2ab4893d0b0d25afef55a7979eb7aa8bf0181ba)) ## [2.6.5](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.4...v2.6.5) (2026-04-09) ### Bug Fixes * move workflow permissions to job level ([1ea64e0](https://github.com/dbsystel/cdk-sops-secrets/commit/1ea64e00827ff1887f432cd89809c99fde9a66d3)) * prevent script injection in tag-on-merge workflow ([85fb85d](https://github.com/dbsystel/cdk-sops-secrets/commit/85fb85de35b99f54e2fc8a95d3d4e6a178574345)) * reduce pull-request-lint permissions to read-only ([8d53c56](https://github.com/dbsystel/cdk-sops-secrets/commit/8d53c5695257fdf7a3776ca8e40c4a44f8ecdd4f)) * remove dangerous workflow patterns ([1f20363](https://github.com/dbsystel/cdk-sops-secrets/commit/1f20363020d66e0a2d5e534ffcbf960559a682d3)) * remove unnecessary actions:write permission from create-release ([fd3401a](https://github.com/dbsystel/cdk-sops-secrets/commit/fd3401ae0ed1c36d925044fbabae3f69d94e47cf)) ## [2.6.4](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.3...v2.6.4) (2026-03-01) ## [2.6.3](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.2...v2.6.3) (2026-02-20) ## [2.6.2](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.1...v2.6.2) (2026-02-16) ## [2.6.1](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.6.0...v2.6.1) (2026-02-07) ## [2.6.0](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.5.0...v2.6.0) (2026-02-07) ### Features * make create-release workflow rerunnable ([#1225](https://github.com/dbsystel/cdk-sops-secrets/issues/1225)) ([cdf59b4](https://github.com/dbsystel/cdk-sops-secrets/commit/cdf59b43013520aa7b8c6cd45ba4f5a564fbbf37)), closes [#1215](https://github.com/dbsystel/cdk-sops-secrets/issues/1215) ## [2.5.0](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.4.7...v2.5.0) (2026-01-12) ### Features * Lambda runtime upgrade to AL2023 ([#1223](https://github.com/dbsystel/cdk-sops-secrets/issues/1223)) ([9d61d95](https://github.com/dbsystel/cdk-sops-secrets/commit/9d61d95554078578951419fda5296dbd00e9c76a)), closes [#1215](https://github.com/dbsystel/cdk-sops-secrets/issues/1215) * **renovate:** enable github-actions manager for workflow updates ([68e9211](https://github.com/dbsystel/cdk-sops-secrets/commit/68e9211d3f65af4494b585c4f89d73c74017148a)) ### Bug Fixes * correct renovate.json configuration - replace invalid gitHubActions with pinDigests ([#1198](https://github.com/dbsystel/cdk-sops-secrets/issues/1198)) ([538080b](https://github.com/dbsystel/cdk-sops-secrets/commit/538080bc0a28de55ea94effcebf02f20b1239b07)) * **deps:** update go-deps ([#1184](https://github.com/dbsystel/cdk-sops-secrets/issues/1184)) ([00bbb76](https://github.com/dbsystel/cdk-sops-secrets/commit/00bbb76ebd8ff1577b93a29574e5b0d4adffb0b3)) * remove premature GitHub release creation from create-release workflow ([#1220](https://github.com/dbsystel/cdk-sops-secrets/issues/1220)) ([cd9d6c6](https://github.com/dbsystel/cdk-sops-secrets/commit/cd9d6c6c24022942497ada1109b5f0bddb1efa74)) * **renovate:** migrate to config:recommended and move allowedPostUpgradeCommands to workflow ([ec10e40](https://github.com/dbsystel/cdk-sops-secrets/commit/ec10e40a9a4624c4c83297ab46ad7a9031ceca94)) * **renovate:** scope postUpgradeTasks to npm manager only ([9ee43b9](https://github.com/dbsystel/cdk-sops-secrets/commit/9ee43b9fddd9679dd9cb806afb6a3ba8b719966d)) * **renovate:** unknown option error ([4e5c9ae](https://github.com/dbsystel/cdk-sops-secrets/commit/4e5c9ae3ff8c4441578764dd6105e6957fbf35f0)) * **renovate:** use renovate without docker ([697c90e](https://github.com/dbsystel/cdk-sops-secrets/commit/697c90ea6df0da720e0b7a69222dc3bd23a9b486)) * **test:** fix breaking changes introduces by jest upgrade ([#1193](https://github.com/dbsystel/cdk-sops-secrets/issues/1193)) ([e168ed5](https://github.com/dbsystel/cdk-sops-secrets/commit/e168ed5705f0939ba14dcf01ea02dac841fc6711)) * update release workflow to respect branch protection ([#1218](https://github.com/dbsystel/cdk-sops-secrets/issues/1218)) ([1b956ad](https://github.com/dbsystel/cdk-sops-secrets/commit/1b956ad588df03d79f76b8ca8bde6536baa1c1bc)) ## [2.4.7](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.4.6...v2.4.7) (2025-11-26) ## [2.4.6](https://github.com/dbsystel/cdk-sops-secrets/compare/v2.4.5...v2.4.6) (2025-11-26) ### Bug Fixes * **package-lock.json:** update packages ([f93b485](https://github.com/dbsystel/cdk-sops-secrets/commit/f93b485123f4ae6814a6ac6aadb0e3c4a4cc1957)) * **SopsStringParameter:** add parameterRef to match IStringParameter ([ea04275](https://github.com/dbsystel/cdk-sops-secrets/commit/ea04275a6ef082b7548fc484a213e85641d6c8e5))