v7.0.0

⚠ BREAKING CHANGES

• integrates external_accounts with GoogleAuth and ADC (#1052)
• workload identity federation support (#1131)

Features

• adds service account impersonation to ExternalAccountClient (#1041) (997f124)
• adds text/json credential_source support to IdentityPoolClients (#1059) (997f124)
• defines ExternalAccountClient used to instantiate external account clients (#1050) (997f124)
• defines IdentityPoolClient used for K8s and Azure workloads (#1042) (997f124)
• defines ExternalAccountClient abstract class for external_account credentials (#1030) (997f124)
• get AWS region from environment variable (#1067) (997f124)
• implements AWS signature version 4 for signing requests (#1047) (997f124)
• implements the OAuth token exchange spec based on rfc8693 (#1026) (997f124)
• integrates external_accounts with GoogleAuth and ADC (#1052) (997f124)
• workload identity federation support (#1131) (997f124)

Bug Fixes

• deps: update dependency puppeteer to v6 (#1129) (5240fb0)
• deps: update dependency puppeteer to v7 (#1134) (02d0d73)

v6.1.6

Bug Fixes

• call addSharedMetadataHeaders even when token has not expired (#1116) (aad043d)

v6.1.5

Bug Fixes

• support PEM and p12 when using factory (#1120) (c2ead4c)

v6.1.4

Bug Fixes

• move accessToken to headers instead of parameter (#1108) (67b0cc3)

v6.1.3

Bug Fixes

• deps: update dependency gaxios to v4 (#1086) (f2678ff)

v6.1.2

Bug Fixes

• update gcp-metadata to catch a json-bigint security fix (#1078) (125fe09)

v6.1.1

Bug Fixes

• deps: upgrade gtoken (#1064) (9116f24)

v6.1.0

Features

• default self-signed JWTs (#1054) (b4d139d)

v6.0.8

Bug Fixes

• deps: roll back dependency google-auth-library to ^6.0.6 (#1033) (eb54ee9)

v6.0.7

Bug Fixes

• migrate token info API to not pass token in query string (#991) (a7e5701)