Skip to content

Fix Node deprecations and dynamic secret key extraction - #28

Merged
baraka-akeyless merged 2 commits into
mainfrom
fix/node-deprecations-and-dynamic-secret-key
Jul 21, 2026
Merged

Fix Node deprecations and dynamic secret key extraction#28
baraka-akeyless merged 2 commits into
mainfrom
fix/node-deprecations-and-dynamic-secret-key

Conversation

@baraka-akeyless

@baraka-akeyless baraka-akeyless commented Jul 20, 2026

Copy link
Copy Markdown
Member

Summary

  • Replace akeyless-cloud-id / AWS SDK v2 with a local cloud-id helper using AWS SDK v3 credential providers + aws4, and move CI/workflows to Node 24 / actions/checkout@v5 / setup-node@v5.
  • Fix dynamic secret key extraction for object-shaped API responses (e.g. GitHub DS { "token": "..." }) so output-name + key: token works instead of failing with Failed to export dynamic secret.
  • Bump release version to v1.1.7.

Dynamic secrets usage (after this fix)

dynamic-secrets: |
  - name: "/cloud/github/github-ds"
    output-name: "TOKEN"
    key: "token"

That exports just the token string under TOKEN.

Note: with parse-json-secrets: true and no key, fields are still expanded with a path/prefix-json-secrets prefix (same as static secrets); output-name applies when exporting a single value (with or without key).

Test plan

  • npm test (32 tests, including new dynamic-secret object/key cases)
  • npm run package rebuilt dist/
  • CI: akeyless action code tests
  • CI: Akeyless Github Action Tests (integration)
  • Manual: fetch GitHub dynamic secret with key: token and output-name: TOKEN, confirm Authorization: Bearer $TOKEN works

Made with Cursor

Replace aws-sdk v2 (via akeyless-cloud-id) with AWS SDK v3 credential providers, move CI to Node 24, and allow key extraction from object-shaped dynamic secret responses so output-name works for GitHub tokens.

Co-authored-by: Cursor <cursoragent@cursor.com>
Override akeyless' superagent to v10 (WHATWG URL) and replace aws4 with Smithy SignatureV4 so Node DEP0169 is no longer emitted on auth/API calls.

Co-authored-by: Cursor <cursoragent@cursor.com>
@baraka-akeyless
baraka-akeyless merged commit b375106 into main Jul 21, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants