From 9a6458aafad03a87491bdb5ae690547658a8b1f7 Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Thu, 5 Oct 2023 09:36:07 +0200
Subject: [PATCH] chore(deps): update all dependencies (#1002)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit
[](https://renovatebot.com)
This PR contains the following updates:
| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| actions/github-script | action | digest | `6f00a0b` -> `1f16022` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [boto3](https://togithub.com/boto/boto3) | | patch | `==1.28.57` ->
`==1.28.60` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| [botocore](https://togithub.com/boto/botocore) | | patch | `==1.31.57`
-> `==1.31.60` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| checkmarx/kics | container | patch | `v1.7.8-debian` ->
`v1.7.9-debian` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
|
[github.com/gruntwork-io/terratest](https://togithub.com/gruntwork-io/terratest)
| require | minor | `v0.44.0` -> `v0.45.0` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| google-github-actions/release-please-action | action | digest |
`4c5670f` -> `2921787` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
| peter-evans/slash-command-dispatch | action | digest | `60f9e79` ->
`c5d899d` |
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
[](https://docs.renovatebot.com/merge-confidence/)
|
---
### Release Notes
boto/boto3 (boto3)
###
[`v1.28.60`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12860)
[Compare
Source](https://togithub.com/boto/boto3/compare/1.28.59...1.28.60)
\=======
- api-change:`appconfig`: \[`botocore`] AWS AppConfig introduces KMS
customer-managed key (CMK) encryption support for data saved to
AppConfig's hosted configuration store.
- api-change:`datazone`: \[`botocore`] Initial release of Amazon
DataZone
- api-change:`mediatailor`: \[`botocore`] Updates DescribeVodSource to
include a list of ad break opportunities in the response
- api-change:`mgn`: \[`botocore`] This release includes the following
new APIs: ListConnectors, CreateConnector, UpdateConnector,
DeleteConnector and UpdateSourceServer to support the source action
framework feature.
- api-change:`sagemaker`: \[`botocore`] Adding support for
AdditionalS3DataSource, a data source used for training or inference
that is in addition to the input dataset or model data.
###
[`v1.28.59`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12859)
[Compare
Source](https://togithub.com/boto/boto3/compare/1.28.58...1.28.59)
\=======
- api-change:`connect`: \[`botocore`] GetMetricDataV2 API: Update to
include new metrics CONTACTS_RESOLVED_IN_X , AVG_HOLD_TIME_ALL_CONTACTS
, AVG_RESOLUTION_TIME , ABANDONMENT_RATE ,
AGENT_NON_RESPONSE_WITHOUT_CUSTOMER_ABANDONS with added features:
Interval Period, TimeZone, Negate MetricFilters, Extended date time
range.
- api-change:`location`: \[`botocore`] Amazon Location Service adds
support for bounding polygon queries. Additionally, the GeofenceCount
field has been added to the DescribeGeofenceCollection API response.
- api-change:`mediaconvert`: \[`botocore`] This release adds the ability
to replace video frames without modifying the audio essence.
- api-change:`oam`: \[`botocore`] This release adds support for sharing
AWS::ApplicationInsights::Application resources.
- api-change:`sagemaker`: \[`botocore`] This release allows users to run
Selective Execution in SageMaker Pipelines without
SourcePipelineExecutionArn if selected steps do not have any dependent
steps.
- api-change:`wellarchitected`: \[`botocore`] AWS Well-Architected now
supports Review Templates that allows you to create templates with
pre-filled answers for Well-Architected and Custom Lens best practices.
###
[`v1.28.58`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12858)
[Compare
Source](https://togithub.com/boto/boto3/compare/1.28.57...1.28.58)
\=======
- api-change:`bedrock-runtime`: \[`botocore`] Add model timeout
exception for InvokeModelWithResponseStream API and update validator for
invoke model identifier.
- api-change:`bedrock`: \[`botocore`] Provisioned throughput feature
with Amazon and third-party base models, and update validators for model
identifier and taggable resource ARNs.
- api-change:`ec2`: \[`botocore`] Introducing Amazon EC2 R7iz instances
with 3.9 GHz sustained all-core turbo frequency and deliver up to 20%
better performance than previous generation z1d instances.
- api-change:`managedblockchain`: \[`botocore`] Remove Rinkeby as option
from Ethereum APIs
- api-change:`rds`: \[`botocore`] Adds DefaultCertificateForNewLaunches
field in the DescribeCertificates API response.
- api-change:`sso`: \[`botocore`] Fix FIPS Endpoints in aws-us-gov.
- api-change:`sts`: \[`botocore`] STS API updates for assumeRole
- api-change:`transfer`: \[`botocore`] Documentation updates for AWS
Transfer Family
boto/botocore (botocore)
###
[`v1.31.60`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13160)
[Compare
Source](https://togithub.com/boto/botocore/compare/1.31.59...1.31.60)
\=======
- api-change:`appconfig`: AWS AppConfig introduces KMS customer-managed
key (CMK) encryption support for data saved to AppConfig's hosted
configuration store.
- api-change:`datazone`: Initial release of Amazon DataZone
- api-change:`mediatailor`: Updates DescribeVodSource to include a list
of ad break opportunities in the response
- api-change:`mgn`: This release includes the following new APIs:
ListConnectors, CreateConnector, UpdateConnector, DeleteConnector and
UpdateSourceServer to support the source action framework feature.
- api-change:`sagemaker`: Adding support for AdditionalS3DataSource, a
data source used for training or inference that is in addition to the
input dataset or model data.
###
[`v1.31.59`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13159)
[Compare
Source](https://togithub.com/boto/botocore/compare/1.31.58...1.31.59)
\=======
- api-change:`connect`: GetMetricDataV2 API: Update to include new
metrics CONTACTS_RESOLVED_IN_X , AVG_HOLD_TIME_ALL_CONTACTS ,
AVG_RESOLUTION_TIME , ABANDONMENT_RATE ,
AGENT_NON_RESPONSE_WITHOUT_CUSTOMER_ABANDONS with added features:
Interval Period, TimeZone, Negate MetricFilters, Extended date time
range.
- api-change:`location`: Amazon Location Service adds support for
bounding polygon queries. Additionally, the GeofenceCount field has been
added to the DescribeGeofenceCollection API response.
- api-change:`mediaconvert`: This release adds the ability to replace
video frames without modifying the audio essence.
- api-change:`oam`: This release adds support for sharing
AWS::ApplicationInsights::Application resources.
- api-change:`sagemaker`: This release allows users to run Selective
Execution in SageMaker Pipelines without SourcePipelineExecutionArn if
selected steps do not have any dependent steps.
- api-change:`wellarchitected`: AWS Well-Architected now supports Review
Templates that allows you to create templates with pre-filled answers
for Well-Architected and Custom Lens best practices.
###
[`v1.31.58`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13158)
[Compare
Source](https://togithub.com/boto/botocore/compare/1.31.57...1.31.58)
\=======
- api-change:`bedrock`: Provisioned throughput feature with Amazon and
third-party base models, and update validators for model identifier and
taggable resource ARNs.
- api-change:`bedrock-runtime`: Add model timeout exception for
InvokeModelWithResponseStream API and update validator for invoke model
identifier.
- api-change:`ec2`: Introducing Amazon EC2 R7iz instances with 3.9 GHz
sustained all-core turbo frequency and deliver up to 20% better
performance than previous generation z1d instances.
- api-change:`managedblockchain`: Remove Rinkeby as option from Ethereum
APIs
- api-change:`rds`: Adds DefaultCertificateForNewLaunches field in the
DescribeCertificates API response.
- api-change:`sso`: Fix FIPS Endpoints in aws-us-gov.
- api-change:`sts`: STS API updates for assumeRole
- api-change:`transfer`: Documentation updates for AWS Transfer Family
gruntwork-io/terratest
(github.com/gruntwork-io/terratest)
###
[`v0.45.0`](https://togithub.com/gruntwork-io/terratest/releases/tag/v0.45.0)
[Compare
Source](https://togithub.com/gruntwork-io/terratest/compare/v0.44.1...v0.45.0)
#### Description
- Removed Go patch version from `go.mod`
#### Related links
-
[https://github.com/gruntwork-io/terratest/pull/1351](https://togithub.com/gruntwork-io/terratest/pull/1351)
###
[`v0.44.1`](https://togithub.com/gruntwork-io/terratest/releases/tag/v0.44.1)
[Compare
Source](https://togithub.com/gruntwork-io/terratest/compare/v0.44.0...v0.44.1)
#### Description
- Updated AMI module to support Ubuntu 20.04 and 22.04.
#### Related links
-
[https://github.com/gruntwork-io/terratest/pull/1350](https://togithub.com/gruntwork-io/terratest/pull/1350)
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
â™» **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
---
.github/workflows/ci.yml | 2 +-
.github/workflows/pr-opened.yml | 2 +-
.github/workflows/release.yml | 2 +-
.github/workflows/slash_ops_commands.yml | 2 +-
.github/workflows/slash_ops_comment_dispatch.yml | 2 +-
modules/terminate-agent-hook/lambda/requirements.txt | 4 ++--
test/go.mod | 2 +-
test/go.sum | 2 ++
8 files changed, 10 insertions(+), 8 deletions(-)
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index b8d5b9fe8..eef4c996b 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -104,7 +104,7 @@ jobs:
kics:
runs-on: ubuntu-latest
container:
- image: checkmarx/kics:v1.7.8-debian@sha256:646c4e9439dd3c5f8a9081cdc11f003ad988e180f51c1e4280c6c9c164fb9423
+ image: checkmarx/kics:v1.7.9-debian@sha256:fe93d547d4fe1236b81128ef762ff36b0069b6033472df885f902cf0bf720f67
steps:
- uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
# ignore: "tags not used", "access analyzer not used", "shield advanced not used"
diff --git a/.github/workflows/pr-opened.yml b/.github/workflows/pr-opened.yml
index 658d32f5b..af3f75129 100644
--- a/.github/workflows/pr-opened.yml
+++ b/.github/workflows/pr-opened.yml
@@ -17,7 +17,7 @@ jobs:
permissions:
pull-requests: write
steps:
- - uses: actions/github-script@6f00a0b667f9463337970371ccda9072ee86fb27 # ratchet:actions/github-script@v6
+ - uses: actions/github-script@1f16022c7518aad314c43abcd029895291be0f52 # ratchet:actions/github-script@v6
with:
# yamllint disable rule:line-length
script: |
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index b2212883b..480869d8c 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -25,7 +25,7 @@ jobs:
appInstallationValue: ${{ github.repository }}
# bootstrap-sha and release-as needs to be removed after first release
- name: Release
- uses: google-github-actions/release-please-action@4c5670f886fe259db4d11222f7dff41c1382304d # ratchet:google-github-actions/release-please-action@v3
+ uses: google-github-actions/release-please-action@2921787898ea2925c9eec03a32aa7404a75399e5 # ratchet:google-github-actions/release-please-action@v3
with:
release-type: terraform-module
token: ${{ steps.token.outputs.token }}
diff --git a/.github/workflows/slash_ops_commands.yml b/.github/workflows/slash_ops_commands.yml
index f06c69617..b59ce9876 100644
--- a/.github/workflows/slash_ops_commands.yml
+++ b/.github/workflows/slash_ops_commands.yml
@@ -21,7 +21,7 @@ jobs:
maintainer=$(grep -oE "@[a-zA-Z0-9_-]+" CODEOWNERS | shuf -n 1)
echo "maintainer=$maintainer" >> "$GITHUB_OUTPUT"
- name: Create comment
- uses: actions/github-script@6f00a0b667f9463337970371ccda9072ee86fb27 # ratchet:actions/github-script@v6
+ uses: actions/github-script@1f16022c7518aad314c43abcd029895291be0f52 # ratchet:actions/github-script@v6
with:
script: |
// adds a comment to the PR (there is the issue API, which works work PRs too)
diff --git a/.github/workflows/slash_ops_comment_dispatch.yml b/.github/workflows/slash_ops_comment_dispatch.yml
index 35e868f2b..4e39776c3 100644
--- a/.github/workflows/slash_ops_comment_dispatch.yml
+++ b/.github/workflows/slash_ops_comment_dispatch.yml
@@ -18,7 +18,7 @@ jobs:
pull-requests: write
steps:
- name: Slash Command Dispatch
- uses: peter-evans/slash-command-dispatch@60f9e79c7fd43378cf0653f00b0556663cc3044c # ratchet:peter-evans/slash-command-dispatch@v3
+ uses: peter-evans/slash-command-dispatch@c5d899d61979ab022c66e48443e5920dba8ee6c6 # ratchet:peter-evans/slash-command-dispatch@v3
with:
token: ${{ secrets.GITHUB_TOKEN }}
issue-type: pull-request
diff --git a/modules/terminate-agent-hook/lambda/requirements.txt b/modules/terminate-agent-hook/lambda/requirements.txt
index d857737f0..fdfbbd362 100644
--- a/modules/terminate-agent-hook/lambda/requirements.txt
+++ b/modules/terminate-agent-hook/lambda/requirements.txt
@@ -1,2 +1,2 @@
-boto3 ==1.28.57
-botocore ==1.31.57
+boto3 ==1.28.60
+botocore ==1.31.60
diff --git a/test/go.mod b/test/go.mod
index 855113842..87ab21be7 100644
--- a/test/go.mod
+++ b/test/go.mod
@@ -3,7 +3,7 @@ module github.com/cattle-ops/terraform-aws-gitlab-runner/test
go 1.21.1
require (
- github.com/gruntwork-io/terratest v0.44.0
+ github.com/gruntwork-io/terratest v0.45.0
github.com/joho/godotenv v1.5.1
github.com/stretchr/testify v1.8.4
github.com/xanzy/go-gitlab v0.92.3
diff --git a/test/go.sum b/test/go.sum
index 5c8c4e3b1..edbf48962 100644
--- a/test/go.sum
+++ b/test/go.sum
@@ -338,6 +338,8 @@ github.com/googleapis/go-type-adapters v1.0.0/go.mod h1:zHW75FOG2aur7gAO2B+MLby+
github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
github.com/gruntwork-io/terratest v0.44.0 h1:3k7lglJFAtw77p2HnR5vaZBCBnlHmu3DuLjVyuCZXJ0=
github.com/gruntwork-io/terratest v0.44.0/go.mod h1:EAEuzSjvxAzQoJCEQ06bJPTmdC9HikzgvhmxnAYuExM=
+github.com/gruntwork-io/terratest v0.45.0 h1:02VuyLRmqOO45TaTH4P4mc44S18er5Rn4CooTUY0uek=
+github.com/gruntwork-io/terratest v0.45.0/go.mod h1:4TWB5SYgATxJFfg+RNpE0gwiUWxtfMLGOXo5gwcGgMs=
github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=