ci(deps): Bump aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4 in the actions group

[dependabot]

Bumps the actions group with 1 update: aws-actions/configure-aws-credentials.

Updates aws-actions/configure-aws-credentials from 6.2.3 to 6.2.4

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.4

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

6.2.4 (2026-08-31)

Bug Fixes

• account-ids handling, mask proxy as secret in logs (#1943) (aa65264)
• skip backoff sleep after the final retryAndBackoff attempt (#1937) (3852440)

6.2.3 (2026-07-22)

Bug Fixes

• attach git credentials before Tag Major Version push (#1877) (9ae780b)
• PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

• release 6.2.2 (d01d678)

6.2.1 (2026-06-26)

Bug Fixes

• enforce allowed-account-ids on all auth paths (#1847) (4d281fb)

6.2.0 (2026-06-01)

Features

• add additional session tags by default (#1775) (e0ba768)
• add more retry logic and better logging (#1764) (540d0c1)
• add regex validation to role-session-name (#1765) (e354499)
• Allow custom session tags to be passed when assuming a role (#1759) (61f50f6)
• expose run id in STS client user-agent (#1774) (29d1be3)
• support custom STS endpoints (#1762) (8d52d05)

Bug Fixes

• skip credential check on output-env-credentials: false (#1778) (58e7c47)
• assumeRole failing from session tag size too large (#1808) (d6f5dc3)

... (truncated)

Commits

• cbe3b39 chore(main): release 6.2.4 (#1942)
• 58065db chore(deps): bump js-yaml (#1944)
• 609df23 chore: Update dist
• aa65264 fix: account-ids handling, mask proxy as secret in logs (#1943)
• 7fdbbb8 chore: Update dist
• 3852440 fix: skip backoff sleep after the final retryAndBackoff attempt (#1937)
• c16f89b mention renamed repos use the new immutable identifiers (#1941)
• 9c362ee chore: Update dist
• d5f8da8 chore(deps): bump @​aws-sdk/client-sts from 3.1111.0 to 3.1116.0 (#1935)
• 2db2497 chore: Update dist
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

🟢 Approval recommended

The pinned SHA was verified to match the upstream v6.2.4 tag, all three references are updated consistently, and the change is a low-risk automated version bump.

Pull request overview

This PR is an automated Dependabot update that bumps the aws-actions/configure-aws-credentials GitHub Action from v6.2.3 to v6.2.4 across the repository's CI/CD workflows. The action is used to authenticate to AWS (via an OIDC-assumed deploy role) before deployment, E2E, and release jobs run. The bump pulls in upstream bug fixes, including masking the proxy as a secret in logs and improved account-ids handling.

Changes:

• Update the pinned commit SHA from e6de054... (v6.2.3) to cbe3b39... (v6.2.4) in three workflows.
• The immutable-SHA-with-version-comment pinning convention is preserved.

File summaries

File	Description
.github/workflows/release.yml	Bumps configure-aws-credentials to v6.2.4 for the release deploy step.
.github/workflows/e2e.yml	Bumps configure-aws-credentials to v6.2.4 for the E2E AWS auth step.
.github/workflows/deploy-dev.yml	Bumps configure-aws-credentials to v6.2.4 for the dev deploy step.

I verified that the new SHA cbe3b392738ccf3f987d68400dafcf4b0624a56c matches the upstream v6.2.4 tag exactly, and that no other workflow files still reference the old SHA/version. The pinning convention (immutable SHA plus trailing version comment) is followed correctly and consistently.

Review details

• Files reviewed: 3/3 changed files
• Comments generated: 0
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.