Add resilience for ECONNRESET

[v1v]

I've just seen ECONNRESET when using google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093:

Tue, 25 Aug 2026 00:11:38 GMT
Run google-github-actions/auth@7c6bc770dae815cd3e89ee6cdf493a5fab2cc093
Tue, 25 Aug 2026 00:11:39 GMT
      Created credentials file at "/home/runner/work/observability-github-settings/observability-github-settings/gha-creds-f38d1bc1b68fa459.json"
Tue, 25 Aug 2026 00:11:39 GMT
      Error: google-github-actions/auth failed with: failed to generate Google Cloud federated token for //iam.googleapis.com/projects/**************/locations/global/workloadIdentityPools/github/providers/repo-45c19c0a60baaa5b281cf5c7690: read ECONNRESET

Wonder if it's possible to add some retry+backoff if ECONNRESET

[github-actions]

Hi there @v1v 👋!

Thank you for opening an issue. Our team will triage this as soon as we can. Please take a moment to review the troubleshooting steps which lists common error messages and their resolution steps.

[v1v]

I've just found

auth/src/client/workload_identity_federation.ts

Lines 19 to 22 in 1206044

	const STS_MAX_ATTEMPTS = 4;
	const STS_RETRY_BACKOFF_MILLISECONDS = 500;
	const RETRYABLE_STS_STATUS_CODES = new Set([408, 429, 500, 502, 503, 504]);
	const RETRYABLE_CONNECTION_ERROR_CODES = new Set(['EAI_AGAIN', 'ECONNRESET', 'ETIMEDOUT']);

so I bet the current retry+backoff was not enough here

[marcodicro-dp]

Same here:

Mon, 24 Aug 2026 17:46:42 GMT
/usr/bin/docker exec 1234 sh -c "cat /etc/*release | grep ^ID"
Mon, 24 Aug 2026 17:46:42 GMT
Created credentials file at "/__w/repo/repo/gha-creds-xyz.json"
Mon, 24 Aug 2026 17:46:42 GMT
Error: google-github-actions/auth failed with: failed to generate Google Cloud federated token for //iam.googleapis.com/projects/1234/locations/global/workloadIdentityPools/github-actions-pool/providers/org: read ECONNRESET