update jsonata to 2.0.4

addresses CVE-2024-27307

.github/workflows/build.yml

@@ -10,7 +10,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.12.2'
+        node-version: '20.9.0'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -40,7 +40,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.12.2'
+        node-version: '20.9.0'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -76,7 +76,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.12.2'
+        node-version: '20.9.0'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -110,7 +110,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.12.2'
+        node-version: '20.9.0'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -133,7 +133,7 @@ jobs:
         VAULT_PORT: 8200
 
     - name: Test Vault Action (default KV V2)
-      uses: hashicorp/vault-action@main
+      uses: ./
       id: kv-secrets
       with:
         url: http://localhost:8200
@@ -144,7 +144,7 @@ jobs:
           secret/data/nested/test otherSecret ;
 
     - name: Test Vault Action (default KV V1)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: http://localhost:8200
         token: testtoken
@@ -154,7 +154,7 @@ jobs:
           my-secret/nested/test otherAltSecret ;
 
     - name: Test Vault Action (cubbyhole)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: http://localhost:8200
         token: testtoken
@@ -165,7 +165,7 @@ jobs:
     # The ordering of these two Test Vault Action Overwrites Env Vars In Subsequent Action steps matters
     # They should come before the Verify Vault Action Outputs step
     - name: Test Vault Action Overwrites Env Vars In Subsequent Action (part 1/2)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: http://localhost:8200/
         token: testtoken
@@ -173,7 +173,7 @@ jobs:
           secret/data/test secret | SUBSEQUENT_TEST_SECRET;
 
     - name: Test Vault Action Overwrites Env Vars In Subsequent Action (part 2/2)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: http://localhost:8200/
         token: testtoken
@@ -181,7 +181,7 @@ jobs:
           secret/data/subsequent-test secret | SUBSEQUENT_TEST_SECRET;
 
     - name: Test JSON Secrets
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: http://localhost:8200
         token: testtoken
@@ -207,7 +207,7 @@ jobs:
 
     - uses: actions/setup-node@64ed1c7eab4cce3362f8c340dee64e5eaeef8f7c # v3.6.0
       with:
-        node-version: '20.12.2'
+        node-version: '20.9.0'
 
     - name: Setup NPM Cache
       uses: actions/cache@88522ab9f39a2ea568f7027eddc7d8d8bc9d59c8 # v3.3.1
@@ -233,7 +233,7 @@ jobs:
         VAULT_CLIENT_KEY: ${{ secrets.VAULT_CLIENT_KEY }}
 
     - name: Test Vault Action (default KV V2)
-      uses: hashicorp/vault-action@main
+      uses: ./
       id: kv-secrets-tls
       with:
         url: https://localhost:8200
@@ -247,7 +247,7 @@ jobs:
           secret/data/nested/test otherSecret ;
 
     - name: Test Vault Action (tlsSkipVerify)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: https://localhost:8200
         token: ${{ env.VAULT_TOKEN }}
@@ -258,7 +258,7 @@ jobs:
           secret/data/tlsSkipVerify skip ;
 
     - name: Test Vault Action (default KV V1)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: https://localhost:8200
         token: ${{ env.VAULT_TOKEN }}
@@ -271,7 +271,7 @@ jobs:
           my-secret/nested/test otherAltSecret ;
 
     - name: Test Vault Action (cubbyhole)
-      uses: hashicorp/vault-action@main
+      uses: ./
       with:
         url: https://localhost:8200
         token: ${{ env.VAULT_TOKEN }}

CHANGELOG.md

@@ -1,11 +1,5 @@
 ## Unreleased
 
-Improvements:
-
-* chore(deps): bump jsonata from 2.0.3 to 2.0.4 [GH-531](https://github.com/hashicorp/vault-action/pull/531)
-* chore(deps): bump got from 11.8.6 to 14.2.1 [GH-533](https://github.com/hashicorp/vault-action/pull/533)
-* convert project from common js to an esm module [GH-533](https://github.com/hashicorp/vault-action/pull/533)
-
 Features:
 
 * `secretId` is no longer required for approle to support advanced use cases like machine login when `bind_secret_id` is false. [GH-522](https://github.com/hashicorp/vault-action/pull/522)

dist/index.js

@@ -14249,18 +14249,16 @@ async function getClientToken(client, method, path, payload) {
 
 
 
-;// CONCATENATED MODULE: external "node:module"
-const external_node_module_namespaceObject = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("node:module");
+;// CONCATENATED MODULE: external "module"
+const external_module_namespaceObject = __WEBPACK_EXTERNAL_createRequire(import.meta.url)("module");
 ;// CONCATENATED MODULE: ./src/cjs-require.js
 // This allows us to use `require` in our ECMAScript module
 // See: https://github.com/vercel/ncc/issues/791
+// https://nodejs.org/api/module.html#modulecreaterequirefilename
 
+const cjs_require_require = (0,external_module_namespaceObject.createRequire)(import.meta.url);
 
-
-const cjs_require_filename = external_node_url_namespaceObject.fileURLToPath(import.meta.url);
-globalThis.require = (0,external_node_module_namespaceObject.createRequire)(cjs_require_filename);
-
-/* harmony default export */ const cjs_require = (require);
+/* harmony default export */ const cjs_require = (cjs_require_require);
 
 ;// CONCATENATED MODULE: ./src/secrets.js
 

src/cjs-require.js

@@ -1,9 +1,7 @@
 // This allows us to use `require` in our ECMAScript module
 // See: https://github.com/vercel/ncc/issues/791
-import { createRequire } from 'node:module';
-import url from 'node:url';
-
-const __filename = url.fileURLToPath(import.meta.url);
-globalThis.require = createRequire(__filename);
+// https://nodejs.org/api/module.html#modulecreaterequirefilename
+import { createRequire } from "module";
+const require = createRequire(import.meta.url);
 
 export default require;