Upgrade: [dependabot] - bump NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml from 5.1.19 to 5.1.23 (#173)

dependabot[bot] · anthony-nhs · web-flow · commit af7c38c0ea41 · 2025-11-22T13:32:46.000Z
Bumps [NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml](https://github.com/nhsdigital/eps-common-workflows) from 5.1.19 to 5.1.23. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nhsdigital/eps-common-workflows/releases">NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml's releases</a>.</em></p> <blockquote> <h2>v5.1.23</h2> <h2><a href="https://github.com/NHSDigital/eps-common-workflows/compare/v5.1.22...v5.1.23">5.1.23</a> (2025-11-21)</h2> <h3>chore</h3> <ul> <li>[AEA-0000] - parallelise cloudformation (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/16">#16</a>) (<a href="https://github.com/NHSDigital/eps-common-workflows/commit/7476c9cf69ee260324503ca95d8243e2922a5df4">7476c9c</a>)</li> </ul> <h3>Fix</h3> <ul> <li>[AEA-0000] - fail job on bad pr format (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/20">#20</a>) (<a href="https://github.com/NHSDigital/eps-common-workflows/commit/4fb41faab9c92d8a1444719bc1ab45a989caf756">4fb41fa</a>)</li> </ul> <h2>Info</h2> <p><a href="https://github.com/NHSDigital/eps-common-workflows/compare/7476c9cf69ee...4fb41faab9c9">See code diff</a> <a href="https://github.com/NHSDigital/eps-common-workflows/actions/runs/19570892477">Release workflow run</a></p> <p>It was initialized by <a href="https://github.com/anthony-nhs">anthony-nhs</a></p> <h2>v5.1.22</h2> <h2><a href="https://github.com/NHSDigital/eps-common-workflows/compare/v5.1.21...v5.1.22">5.1.22</a> (2025-11-20)</h2> <h3>Fix</h3> <ul> <li>[AEA-0000] - use artifact id for download (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/19">#19</a>) (<a href="https://github.com/NHSDigital/eps-common-workflows/commit/ba86b0c6a2a3d4b87398e538e410cec90f57133d">ba86b0c</a>)</li> </ul> <h2>Info</h2> <p><a href="https://github.com/NHSDigital/eps-common-workflows/compare/9677dad340d2...ba86b0c6a2a3">See code diff</a> <a href="https://github.com/NHSDigital/eps-common-workflows/actions/runs/19542883749">Release workflow run</a></p> <p>It was initialized by <a href="https://github.com/anthony-nhs">anthony-nhs</a></p> <h2>v5.1.21</h2> <h2><a href="https://github.com/NHSDigital/eps-common-workflows/compare/v5.1.20...v5.1.21">5.1.21</a> (2025-11-20)</h2> <h3>Fix</h3> <ul> <li>[AEA-0000] - allow adding artifact to release (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/18">#18</a>) (<a href="https://github.com/NHSDigital/eps-common-workflows/commit/9677dad340d2d30570ddd45d8014e4aa9409825f">9677dad</a>)</li> </ul> <h2>Info</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/NHSDigital/eps-common-workflows/commit/4fb41faab9c92d8a1444719bc1ab45a989caf756"><code>4fb41fa</code></a> Fix: [AEA-0000] - fail job on bad pr format (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/20">#20</a>)</li> <li><a href="https://github.com/NHSDigital/eps-common-workflows/commit/7476c9cf69ee260324503ca95d8243e2922a5df4"><code>7476c9c</code></a> chore: [AEA-0000] - parallelise cloudformation (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/16">#16</a>)</li> <li><a href="https://github.com/NHSDigital/eps-common-workflows/commit/ba86b0c6a2a3d4b87398e538e410cec90f57133d"><code>ba86b0c</code></a> Fix: [AEA-0000] - use artifact id for download (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/19">#19</a>)</li> <li><a href="https://github.com/NHSDigital/eps-common-workflows/commit/9677dad340d2d30570ddd45d8014e4aa9409825f"><code>9677dad</code></a> Fix: [AEA-0000] - allow adding artifact to release (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/18">#18</a>)</li> <li><a href="https://github.com/NHSDigital/eps-common-workflows/commit/3932c174e457b9d91b2e36fde68b9ae6fff32b9a"><code>3932c17</code></a> Fix: [AEA-0000] - Fix asdfVersion bug (<a href="https://redirect.github.com/nhsdigital/eps-common-workflows/issues/17">#17</a>)</li> <li>See full diff in <a href="https://github.com/nhsdigital/eps-common-workflows/compare/a7daff06de7b695f601d9b1723ca184daca7d898...4fb41faab9c92d8a1444719bc1ab45a989caf756">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml&package-manager=github_actions&previous-version=5.1.19&new-version=5.1.23)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: anthony-nhs <121869075+anthony-nhs@users.noreply.github.com> Co-authored-by: Anthony Brown <anthony.brown8@nhs.net>
diff --git a/.github/workflows/pull_request.yml b/.github/workflows/pull_request.yml
@@ -10,7 +10,7 @@ env:
 jobs:
   dependabot-auto-approve-and-merge:
     needs: quality_checks
-    uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@a7daff06de7b695f601d9b1723ca184daca7d898
+    uses: NHSDigital/eps-common-workflows/.github/workflows/dependabot-auto-approve-and-merge.yml@4fb41faab9c92d8a1444719bc1ab45a989caf756
     secrets:
       AUTOMERGE_APP_ID: ${{ secrets.AUTOMERGE_APP_ID }}
       AUTOMERGE_PEM: ${{ secrets.AUTOMERGE_PEM }}
diff --git a/packages/cdk/resources/OpenSearchResources.ts b/packages/cdk/resources/OpenSearchResources.ts
@@ -17,6 +17,7 @@ export interface OpenSearchResourcesProps {
 
 export class OpenSearchResources extends Construct {
   public readonly collection: VectorCollection
+  public readonly deploymentPolicy: CfnAccessPolicy
 
   constructor(scope: Construct, id: string, props: OpenSearchResourcesProps) {
     super(scope, id)
@@ -56,7 +57,7 @@ export class OpenSearchResources extends Construct {
       ],
       Description: ""
     }]
-    new CfnAccessPolicy(this, "DataAccessPolicy", {
+    this.deploymentPolicy = new CfnAccessPolicy(this, "DataAccessPolicy", {
       name: dataAccessPolicyName,
       type: "data",
       policy: JSON.stringify(dataAccessPolicyDocument)
diff --git a/packages/cdk/stacks/EpsAssistMeStack.ts b/packages/cdk/stacks/EpsAssistMeStack.ts
@@ -93,7 +93,7 @@ export class EpsAssistMeStack extends Stack {
       stackName: props.stackName,
       collection: openSearchResources.collection
     })
-
+    vectorIndex.node.addDependency(openSearchResources.deploymentPolicy)
     // Create VectorKnowledgeBase construct with Bedrock execution role
     const vectorKB = new VectorKnowledgeBaseResources(this, "VectorKB", {
       stackName: props.stackName,
