Upgrade: [dependabot] - Bump asdf-vm/actions from 3.0.2 to 4.0.0 (#13)

Bumps [asdf-vm/actions](https://github.com/asdf-vm/actions) from 3.0.2
to 4.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/asdf-vm/actions/releases">asdf-vm/actions's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<h2><a
href="https://github.com/asdf-vm/actions/compare/v3.0.2...v4.0.0">4.0.0</a>
(2025-03-16)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>support asdf &gt;= v0.16.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/590">#590</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>support asdf &gt;= v0.16.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/590">#590</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/1117842ea70e2711a0072e3a71265cbfe2c830be">1117842</a>)</li>
</ul>
<h3>Patches</h3>
<ul>
<li>remove origin argument from git checkout command (<a
href="https://redirect.github.com/asdf-vm/actions/issues/591">#591</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/179e9530fcd91100e4621bf7e563e7daa8398c52">179e953</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>correct some grammar (<a
href="https://redirect.github.com/asdf-vm/actions/issues/574">#574</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/6278efebb38ae025cc91dd008910f549e775a8c8">6278efe</a>)</li>
<li>list all options for each Action (<a
href="https://redirect.github.com/asdf-vm/actions/issues/588">#588</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/9cd779f40fe38688dd19505ccbc4eaaf018b44e7">9cd779f</a>)</li>
<li>update GH Action versions in docs (<a
href="https://redirect.github.com/asdf-vm/actions/issues/573">#573</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/212a976c0b59e3c97158f181fccd006f3c4388e7">212a976</a>)</li>
<li>use full SHA refs as short are not supported (<a
href="https://redirect.github.com/asdf-vm/actions/issues/575">#575</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/0460184eb9fc6ee669a293c1e5f3c4fb5f52d55c">0460184</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/asdf-vm/actions/blob/master/CHANGELOG.md">asdf-vm/actions's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this
file.</p>
<h2><a
href="https://github.com/asdf-vm/actions/compare/v3.0.2...v4.0.0">4.0.0</a>
(2025-03-16)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>support asdf &gt;= v0.16.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/590">#590</a>)</li>
</ul>
<h3>Features</h3>
<ul>
<li>support asdf &gt;= v0.16.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/590">#590</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/1117842ea70e2711a0072e3a71265cbfe2c830be">1117842</a>)</li>
</ul>
<h3>Patches</h3>
<ul>
<li>remove origin argument from git checkout command (<a
href="https://redirect.github.com/asdf-vm/actions/issues/591">#591</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/179e9530fcd91100e4621bf7e563e7daa8398c52">179e953</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>correct some grammar (<a
href="https://redirect.github.com/asdf-vm/actions/issues/574">#574</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/6278efebb38ae025cc91dd008910f549e775a8c8">6278efe</a>)</li>
<li>list all options for each Action (<a
href="https://redirect.github.com/asdf-vm/actions/issues/588">#588</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/9cd779f40fe38688dd19505ccbc4eaaf018b44e7">9cd779f</a>)</li>
<li>update GH Action versions in docs (<a
href="https://redirect.github.com/asdf-vm/actions/issues/573">#573</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/212a976c0b59e3c97158f181fccd006f3c4388e7">212a976</a>)</li>
<li>use full SHA refs as short are not supported (<a
href="https://redirect.github.com/asdf-vm/actions/issues/575">#575</a>)
(<a
href="https://github.com/asdf-vm/actions/commit/0460184eb9fc6ee669a293c1e5f3c4fb5f52d55c">0460184</a>)</li>
</ul>
<h2><a
href="https://github.com/asdf-vm/actions/compare/v3.0.1...v3.0.2">3.0.2</a>
(2023-10-12)</h2>
<h3>Patches</h3>
<ul>
<li>update lockfile (<a
href="https://github.com/asdf-vm/actions/commit/c01a9347ea98eeb94ee8901cc578bb8afc76b70e">c01a934</a>)</li>
</ul>
<h2><a
href="https://github.com/asdf-vm/actions/compare/v3.0.0...v3.0.1">3.0.1</a>
(2023-10-12)</h2>
<h3>Patches</h3>
<ul>
<li>set same pnpm &amp; node versions in pkg.json as in tool-versions
(<a
href="https://github.com/asdf-vm/actions/commit/e4a312a59f7c4c5ed731f96d3fa89e9d8608e55c">e4a312a</a>)</li>
</ul>
<h2><a
href="https://github.com/asdf-vm/actions/compare/v2.2.0...v3.0.0">3.0.0</a>
(2023-09-17)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>bump action to node20 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/563">#563</a>)</li>
</ul>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/asdf-vm/actions/commit/1902764435ca0dd2f3388eea723a4f92a4eb8302"><code>1902764</code></a>
chore(master): release 4.0.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/578">#578</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/9cd779f40fe38688dd19505ccbc4eaaf018b44e7"><code>9cd779f</code></a>
docs: list all options for each Action (<a
href="https://redirect.github.com/asdf-vm/actions/issues/588">#588</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/179e9530fcd91100e4621bf7e563e7daa8398c52"><code>179e953</code></a>
fix: remove origin argument from git checkout command (<a
href="https://redirect.github.com/asdf-vm/actions/issues/591">#591</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/1117842ea70e2711a0072e3a71265cbfe2c830be"><code>1117842</code></a>
feat!: support asdf &gt;= v0.16.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/590">#590</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/1bf052e01b498bba4f98e1bbb5c609bc212cf463"><code>1bf052e</code></a>
chore(deps): bump amannn/action-semantic-pull-request from 5.4.0 to
5.5.3 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/583">#583</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/2063833e05f7602a3da1a5b4ac006a5f8033dc18"><code>2063833</code></a>
chore(deps): bump actions/cache from 3 to 4 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/579">#579</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/6278efebb38ae025cc91dd008910f549e775a8c8"><code>6278efe</code></a>
docs: correct some grammar (<a
href="https://redirect.github.com/asdf-vm/actions/issues/574">#574</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/212a976c0b59e3c97158f181fccd006f3c4388e7"><code>212a976</code></a>
docs: update GH Action versions in docs (<a
href="https://redirect.github.com/asdf-vm/actions/issues/573">#573</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/0460184eb9fc6ee669a293c1e5f3c4fb5f52d55c"><code>0460184</code></a>
docs: use full SHA refs as short are not supported (<a
href="https://redirect.github.com/asdf-vm/actions/issues/575">#575</a>)</li>
<li><a
href="https://github.com/asdf-vm/actions/commit/e522a37ea4326fe42ae552e3d6662cc0f3890070"><code>e522a37</code></a>
chore(deps): bump amannn/action-semantic-pull-request from 5.3.0 to
5.4.0 (<a
href="https://redirect.github.com/asdf-vm/actions/issues/572">#572</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/asdf-vm/actions/compare/v3.0.2...1902764435ca0dd2f3388eea723a4f92a4eb8302">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=asdf-vm/actions&package-manager=github_actions&previous-version=3.0.2&new-version=4.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

> **Note**
> Automatic rebases have been disabled on this pull request as it has
been open for over 30 days.

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kris Szlapa <[email protected]>
Co-authored-by: Bence Gadanyi <[email protected]>

Author: 3 people

.github/workflows/ci.yml

@@ -37,7 +37,7 @@ jobs:
 
       # using git commit sha for version of action to ensure we have stable version
       - name: Install asdf
-        uses: asdf-vm/actions/setup@05e0d2ed97b598bfce82fd30daf324ae0c4570e6
+        uses: asdf-vm/actions/setup@1902764435ca0dd2f3388eea723a4f92a4eb8302
         with:
           asdf_branch: v0.14.1
 
@@ -51,7 +51,7 @@ jobs:
             ${{ runner.os }}-asdf-
 
       - name: Install asdf dependencies in .tool-versions
-        uses: asdf-vm/actions/install@05e0d2ed97b598bfce82fd30daf324ae0c4570e6
+        uses: asdf-vm/actions/install@1902764435ca0dd2f3388eea723a4f92a4eb8302
         with:
           asdf_branch: v0.14.1
         env:

.github/workflows/release.yml

@@ -36,7 +36,7 @@ jobs:
 
       # using git commit sha for version of action to ensure we have stable version
       - name: Install asdf
-        uses: asdf-vm/actions/setup@05e0d2ed97b598bfce82fd30daf324ae0c4570e6
+        uses: asdf-vm/actions/setup@1902764435ca0dd2f3388eea723a4f92a4eb8302
         with:
           asdf_branch: v0.14.1
 
@@ -50,7 +50,7 @@ jobs:
             ${{ runner.os }}-asdf-
 
       - name: Install asdf dependencies in .tool-versions
-        uses: asdf-vm/actions/install@05e0d2ed97b598bfce82fd30daf324ae0c4570e6
+        uses: asdf-vm/actions/install@1902764435ca0dd2f3388eea723a4f92a4eb8302
         with:
           asdf_branch: v0.14.1
         env:

packages/cdk/nagSuppressions.ts

@@ -1,4 +1,4 @@
-/* eslint-disable max-len, @typescript-eslint/no-unused-vars */
+/* eslint-disable @typescript-eslint/no-unused-vars */
 import {Stack} from "aws-cdk-lib"
 import {NagPackSuppression, NagSuppressions} from "cdk-nag"
 
@@ -109,15 +109,7 @@ export const nagSuppressions = (stack: Stack) => {
     [
       {
         id: "AwsSolutions-IAM5",
-        reason: "Bedrock Knowledge Base requires these permissions to access S3 documents and OpenSearch collection.",
-        appliesTo: [
-          "Resource::<StorageDocsBucketepsamDocsF25F63F1.Arn>/*",
-          "Resource::<StorageDocsBucketepsampr20Docs075F648F.Arn>/*",
-          "Action::bedrock:Delete*",
-          `Resource::arn:aws:bedrock:eu-west-2:${account}:knowledge-base/*`,
-          `Resource::arn:aws:aoss:eu-west-2:${account}:collection/*`,
-          "Resource::*"
-        ]
+        reason: "Bedrock Knowledge Base requires these permissions to access S3 documents and OpenSearch collection."
       }
     ]
   )