From 83fd2a5c79727b0ffcb039bcfd4b569c60c118b9 Mon Sep 17 00:00:00 2001 From: Gabor Demeter Date: Thu, 6 Aug 2026 19:11:28 +0200 Subject: [PATCH] Fix: migrate off sf-jwt-login, which no longer exists upstream MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit shared-github-actions merged sf-jwt-login into sf-org-login behind an `auth-method` input and released the result as v2. This workflow called sf-jwt-login@main, so it broke the moment that merge landed on main — the action directory is simply gone. Switched to sf-org-login with `auth-method: jwt`. The other inputs are unchanged and all six are declared on sf-org-login@v2; the job already grants the `id-token: write` + `contents: read` the JWT path needs. Pinned @v2 rather than @main. Tracking a moving default branch is what turned an upstream refactor into a broken workflow here, and the upstream README calls out @main as development-only. Note the merged action defaults differ from the old one — org-alias `target` not `devhub`, set-default-dev-hub false not true. Both were already explicit here, so behaviour is unchanged. --- .github/workflows/test-aws-secrets.yml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/.github/workflows/test-aws-secrets.yml b/.github/workflows/test-aws-secrets.yml index 1bb343c..b62fde0 100644 --- a/.github/workflows/test-aws-secrets.yml +++ b/.github/workflows/test-aws-secrets.yml @@ -43,9 +43,13 @@ jobs: - name: Install Salesforce CLI run: npm install -g @salesforce/cli + # sf-jwt-login was merged into sf-org-login behind `auth-method` and no + # longer exists upstream. Pinned @v2 rather than @main: @main moves under + # us, which is how this call broke in the first place. - name: Salesforce JWT Login - uses: Gforce-Innovation-Kft/shared-github-actions/.github/actions/sf-jwt-login@main + uses: Gforce-Innovation-Kft/shared-github-actions/.github/actions/sf-org-login@v2 with: + auth-method: jwt aws-region: ${{ github.event.inputs.aws-region || vars.AWS_REGION || 'eu-central-1' }} secret-name: ${{ github.event.inputs.secret-name || 'salesforce/gabor-devhub' }} aws-role-arn: ${{ vars.AWS_ROLE_ARN }}