chore(deps): update hashicorp/vault-action action to v3

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
hashicorp/vault-action	action	major	v2.4.3 -> v3.4.0

---

Release Notes

hashicorp/vault-action (hashicorp/vault-action)

v3.4.0

Compare Source

3.4.0 (June 13, 2025)

Bugs:

• replace all dot chars during normalization (https://github.com/hashicorp/vault-action/pull/580)

Improvements:

• Prevent possible DoS via polynomial regex (https://github.com/hashicorp/vault-action/pull/583)

v3.3.0

Compare Source

3.3.0 (March 3, 2025)

Features:

• Wildcard secret imports can use ** to retain case of exported env keys GH-545

v3.2.0

Compare Source

3.2.0 (March 3, 2025)

Improvements:

• Add retry for jwt auth login to fix intermittent login failures GH-574

v3.1.0

Compare Source

3.1.0 (January 9, 2025)

Improvements:

• fix wildcard handling when field contains dot GH-542
• bump body-parser from 1.20.0 to 1.20.3
• bump braces from 3.0.2 to 3.0.3
• bump cross-spawn from 7.0.3 to 7.0.6
• bump micromatch from 4.0.5 to 4.0.8

Features:

• secretId is no longer required for approle to support advanced use cases like machine login when bind_secret_id is false. GH-522
• Use pki configuration to generate certificates from Vault GH-564

v3.0.0

Compare Source

3.0.0 (February 15, 2024)

Improvements:

• Bump node runtime from node16 to node20 GH-528

v2.8.1

Compare Source

2.8.1 (February 15, 2024)

Bugs:

• Revert GH-509 which made a backwards incompatible bump of the node runtime from node16 to node20 GH-527

v2.8.0

Compare Source

2.8.0 (February 1, 2024)

Features:

• Add ignoreNotFound input (default: false) to prevent the action from failing when a secret does not exist GH-518

Improvements:

• bump jsrsasign from 10.8.6 to 11.0.0 GH-513
• bump @​actions/core from 1.10.0 to 1.10.1 GH-489
• bump jest-when from 3.5.2 to 3.6.0 GH-484
• bump jest from 29.5.0 to 29.7.0 GH-490
• bump @​vercel/ncc from 0.36.1 to 0.38.1 GH-503

v2.7.5

Compare Source

2.7.5 (January 30, 2024)

Improvements:

• Bump node runtime from node16 to node20 GH-509
• Bump got from 11.8.5 to 11.8.6 GH-492

v2.7.4

Compare Source

2.7.4 (October 26, 2023)

Features:

• Add ability to specify a wildcard for the key name to get all keys in the path GH-488

v2.7.3

Compare Source

2.7.3 (July 13, 2023)

Bugs:

• Revert to the handling of secrets in JSON format since v2.1.2 GH-478

v2.7.2

Compare Source

2.7.2 (July 6, 2023)

Bugs:

• Fix a regression that broke support for secrets in JSON format GH-473

v2.7.1

Compare Source

2.7.1 (July 3, 2023)

Bugs:

• Revert GH-466 which caused a regression in secrets stored as JSON strings GH-471

v2.7.0

Compare Source

Bugs:

• Fix a regression that broke support for secrets in JSON format GH-466

Improvements:

• Fix a warning about outputToken being an unexpected input GH-461

v2.6.0

Compare Source

2.6.0 (June 7, 2023)

Features:

• Add ability to set the vault_token output to contain the Vault token after authentication GH-441
• Add support for userpass and ldap authentication methods GH-440
• Define an output, errorMessage, for vault-action's error messages so subsequent steps can read the errors GH-446

Bugs:

• Handle undefined response in getSecrets error handler GH-431

v2.5.0

Compare Source

Features:

• Adds ability to automatically decode secrets from base64, hex, and utf8 encodings. GH-408

Improvements:

• Improves error messages for Vault authentication failures GH-409
• bump jest from 28.1.1 to 29.3.1 GH-397
• bump @​types/jest from 28.1.3 to 29.2.6 GH-397, GH-413
• bump jsrsasign from 10.5.27 to 10.6.1 GH-401
• bump json5 from 2.2.1 to 2.2.3 GH-404
• bump minimatch from 3.0.4 to 3.1.2 GH-410

---

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.