Skip to content

Commit 59be483

Browse files
chore(deps): update all dependencies (#1358)
This PR contains the following updates: | Package | Type | Update | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---|---|---| | [actions/checkout](https://redirect.github.com/actions/checkout) | action | patch | `v6.0.1` → `v6.0.2` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fcheckout/v6.0.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fcheckout/v6.0.1/v6.0.2?slim=true) | | [boto3](https://redirect.github.com/boto/boto3) | | patch | `==1.42.30` → `==1.42.34` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.42.34?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.42.30/1.42.34?slim=true) | | [botocore](https://redirect.github.com/boto/botocore) | | patch | `==1.42.30` → `==1.42.34` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.42.34?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.42.30/1.42.34?slim=true) | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.31.10` → `v4.31.11` | ![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v4.31.11?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v4.31.10/v4.31.11?slim=true) | --- ### Release Notes <details> <summary>actions/checkout (actions/checkout)</summary> ### [`v6.0.2`](https://redirect.github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v602) [Compare Source](https://redirect.github.com/actions/checkout/compare/v6.0.1...v6.0.2) - Fix tag handling: preserve annotations and explicit fetch-tags by [@&#8203;ericsciple](https://redirect.github.com/ericsciple) in [#&#8203;2356](https://redirect.github.com/actions/checkout/pull/2356) </details> <details> <summary>boto/boto3 (boto3)</summary> ### [`v1.42.34`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14234) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.42.33...1.42.34) \======= - api-change:`connect`: \[`botocore`] Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. - api-change:`datazone`: \[`botocore`] Added api for deleting data export configuration for a domain - api-change:`qconnect`: \[`botocore`] Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. ### [`v1.42.33`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14233) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.42.32...1.42.33) \======= - api-change:`autoscaling`: \[`botocore`] This release adds support for Amazon EC2 Auto Scaling group deletion protection - api-change:`budgets`: \[`botocore`] Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. - api-change:`dynamodb`: \[`botocore`] Adds additional waiters to Amazon DynamoDB. - api-change:`ec2`: \[`botocore`] Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. - api-change:`endpoint-rules`: \[`botocore`] Update endpoint-rules client to latest version - api-change:`gamelift`: \[`botocore`] Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. - api-change:`guardduty`: \[`botocore`] Adding new enum value for ScanStatusReason - api-change:`health`: \[`botocore`] Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. - api-change:`meteringmarketplace`: \[`botocore`] Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. - api-change:`verifiedpermissions`: \[`botocore`] Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. ### [`v1.42.32`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14232) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.42.31...1.42.32) \======= - api-change:`bedrock-agentcore`: \[`botocore`] Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory - api-change:`config`: \[`botocore`] AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. - api-change:`ec2`: \[`botocore`] Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. - api-change:`quicksight`: \[`botocore`] Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs ### [`v1.42.31`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14231) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.42.30...1.42.31) \======= - api-change:`autoscaling`: \[`botocore`] This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. - api-change:`bedrock-runtime`: \[`botocore`] Added support for extended prompt caching with one hour TTL. - api-change:`keyspaces`: \[`botocore`] Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) - api-change:`odb`: \[`botocore`] Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. - api-change:`verifiedpermissions`: \[`botocore`] Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. - api-change:`workspaces-instances`: \[`botocore`] Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. </details> <details> <summary>boto/botocore (botocore)</summary> ### [`v1.42.34`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14234) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.42.33...1.42.34) \======= - api-change:`connect`: Amazon Connect now offers public APIs to programmatically configure and run automated tests for contact center experiences. Integrate testing into CICD pipelines, run multiple tests at scale, and retrieve results via API to automate validation of voice interactions and workflows. - api-change:`datazone`: Added api for deleting data export configuration for a domain - api-change:`qconnect`: Fixes incorrect types in the UpdateAssistantAIAgent API request, adds MESSAGE to TargetType enum, and other minor changes. ### [`v1.42.33`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14233) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.42.32...1.42.33) \======= - api-change:`autoscaling`: This release adds support for Amazon EC2 Auto Scaling group deletion protection - api-change:`budgets`: Add Budget FilterExpression and Metrics fields to DescribeBudgetPerformanceHistory to support more granular filtering options. - api-change:`dynamodb`: Adds additional waiters to Amazon DynamoDB. - api-change:`ec2`: Add better support for fractional GPU instances in DescribeInstanceTypes API. The new fields, logicalGpuCount, gpuPartitionSize, and workload array enable better GPU resource selection and filtering for both full and fractional GPU instance types. - api-change:`endpoint-rules`: Update endpoint-rules client to latest version - api-change:`gamelift`: Amazon GameLift Servers Realtime now supports Node.js 24.x runtime on the Amazon Linux 2023 operating system. - api-change:`guardduty`: Adding new enum value for ScanStatusReason - api-change:`health`: Updates the lower range for the maxResults request property for DescribeAffectedEntities, DescribeAffectedEntitiesForOrganization, DescribeEvents, and DescribeEventsForOrganization API request properties. - api-change:`meteringmarketplace`: Customer Identifier parameter deprecation date has been removed. For new implementations, we recommend using the CustomerAWSAccountID. Your current integration will continue to work. When updating your implementation, consider migrating to CustomerAWSAccountID for improved integration. - api-change:`verifiedpermissions`: Adding documentation to user guide and API documentation for how customers can create new encrypted policy stores by passing in their customer managed key during policy store creation. ### [`v1.42.32`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14232) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.42.31...1.42.32) \======= - api-change:`bedrock-agentcore`: Supports custom browser extensions for AgentCore Browser and increased message payloads up to 100KB per message in an Event for AgentCore Memory - api-change:`config`: AWS Config Conformance Packs now support tag-on-create through PutConformancePack API. - api-change:`ec2`: Added support of multiple EBS cards. New EbsCardIndex parameter enables attaching volumes to specific EBS cards on supported instance types for improved storage performance. - api-change:`quicksight`: Added documentation and model for sheet layout groups - allows sheet elements to be grouped, Added documentation and the feature enables admins to have granular control over connectors under actions, Updated API documentation for PDF Export in Snapshot Export APIs ### [`v1.42.31`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14231) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.42.30...1.42.31) \======= - api-change:`autoscaling`: This release adds support for three new filters when describing scaling activities, StartTimeLowerBound, StartTimeUpperBound, and Status. - api-change:`bedrock-runtime`: Added support for extended prompt caching with one hour TTL. - api-change:`keyspaces`: Adds support for managing table pre-warming in Amazon Keyspaces (for Apache Cassandra) - api-change:`odb`: Adds support for associating and disassociating IAM roles with Autonomous VM cluster resources through the AssociateIamRoleToResource and DisassociateIamRoleFromResource APIs. The GetCloudAutonomousVmCluster and ListCloudAutonomousVmClusters API responses now include the iamRoles field. - api-change:`verifiedpermissions`: Amazon Verified Permissions now supports encryption of resources by a customer managed KMS key. Customers can now create new encrypted policy stores by passing in their customer managed key during policy store creation. - api-change:`workspaces-instances`: Added billing configuration support for WorkSpaces Instances with monthly and hourly billing modes, including new filtering capabilities for instance type searches. </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.31.11`](https://redirect.github.com/github/codeql-action/releases/tag/v4.31.11) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.31.10...v4.31.11) - When running a Default Setup workflow with [Actions debugging enabled](https://docs.github.com/en/actions/how-tos/monitor-workflows/enable-debug-logging), the CodeQL Action will now use more unique names when uploading logs from the Dependabot authentication proxy as workflow artifacts. This ensures that the artifact names do not clash between multiple jobs in a build matrix. [#&#8203;3409](https://redirect.github.com/github/codeql-action/pull/3409) - Improved error handling throughout the CodeQL Action. [#&#8203;3415](https://redirect.github.com/github/codeql-action/pull/3415) - Added experimental support for automatically excluding [generated files](https://docs.github.com/en/repositories/working-with-files/managing-files/customizing-how-changed-files-appear-on-github) from the analysis. This feature is not currently enabled for any analysis. In the future, it may be enabled by default for some GitHub-managed analyses. [#&#8203;3318](https://redirect.github.com/github/codeql-action/pull/3318) - The changelog extracts that are included with releases of the CodeQL Action are now shorter to avoid duplicated information from appearing in Dependabot PRs. [#&#8203;3403](https://redirect.github.com/github/codeql-action/pull/3403) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent 5496d4f commit 59be483

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

.github/workflows/tfsec.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424

2525
steps:
2626
- name: Clone repo
27-
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
27+
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
2828
with:
2929
persist-credentials: false
3030

@@ -34,7 +34,7 @@ jobs:
3434
sarif_file: tfsec.sarif
3535

3636
- name: Upload SARIF file
37-
uses: github/codeql-action/upload-sarif@cdefb33c0f6224e58673d9004f47f7cb3e328b89 # v4.31.10
37+
uses: github/codeql-action/upload-sarif@19b2f06db2b6f5108140aeb04014ef02b648f789 # v4.31.11
3838
with:
3939
# Path to SARIF file relative to the root of the repository
4040
sarif_file: tfsec.sarif
Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
1-
boto3 ==1.42.30
2-
botocore ==1.42.30
1+
boto3 ==1.42.34
2+
botocore ==1.42.34

0 commit comments

Comments
 (0)