chore(deps): update all dependencies (#1341)

renovate[bot] · web-flow · commit f403b2ef392a · 2025-10-13T04:49:35.000Z
This PR contains the following updates: | Package | Type | Update | Change | Age | Confidence | |---|---|---|---|---|---| | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.15.0` -> `6.16.0` | [![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/hashicorp%2faws/6.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/hashicorp%2faws/6.15.0/6.16.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [boto3](https://redirect.github.com/boto/boto3) | | patch | `==1.40.48` -> `==1.40.50` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.40.50?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.40.48/1.40.50?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [botocore](https://redirect.github.com/boto/botocore) | | patch | `==1.40.48` -> `==1.40.50` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.40.50?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.40.48/1.40.50?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.30.7` -> `v4.30.8` | [![age](https://developer.mend.io/api/mc/badges/age/github-tags/github%2fcodeql-action/v4.30.8?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/github%2fcodeql-action/v4.30.7/v4.30.8?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.16.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6160-October-9-2025) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.15.0...v6.16.0) FEATURES: - **New Action:** `aws_transcribe_start_transcription_job` ([#&#8203;44445](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44445)) - **New Data Source:** `aws_odb_cloud_autonomous_vm_clusters` ([#&#8203;44336](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44336)) - **New Data Source:** `aws_odb_cloud_exadata_infrastructures` ([#&#8203;44336](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44336)) - **New Data Source:** `aws_odb_cloud_vm_clusters` ([#&#8203;44336](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44336)) - **New Data Source:** `aws_odb_network_peering_connections` ([#&#8203;44336](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44336)) - **New Data Source:** `aws_odb_networks` ([#&#8203;44336](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44336)) - **New Resource:** `aws_prometheus_resource_policy` ([#&#8203;44256](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44256)) - **New Resource:** `aws_transfer_host_key` ([#&#8203;44559](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44559)) - **New Resource:** `aws_transfer_web_app` ([#&#8203;42708](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42708)) - **New Resource:** `aws_transfer_web_app_customization` ([#&#8203;42708](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42708)) ENHANCEMENTS: - resource/aws\_codebuild\_project: Add `auto_retry_limit` argument ([#&#8203;40035](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/40035)) - resource/aws\_emrserverless\_application: Add `scheduler_configuration` block ([#&#8203;44589](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44589)) - resource/aws\_lambda\_event\_source\_mapping: Add `schema_registry_config` configuration blocks to `amazon_managed_kafka_event_source_config` and `self_managed_kafka_event_source_config` blocks ([#&#8203;44540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44540)) - resource/aws\_ssmcontacts\_contact: Add resource identity support ([#&#8203;44548](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44548)) - resource/aws\_vpclattice\_resource\_gateway: Add `ipv4_addresses_per_eni` argument ([#&#8203;44560](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44560)) BUG FIXES: - provider: Correctly validate AWS European Sovereign Cloud Regions in ARNs ([#&#8203;44573](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44573)) - provider: Fix `Missing Resource Identity After Update` errors for non-refreshed and failed updates of Plugin Framework based resources ([#&#8203;44518](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44518)) - provider: Fix `Unexpected Identity Change` errors when fully-null identity values in state are updated to valid values for Plugin Framework based resources ([#&#8203;44518](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44518)) - resource/aws\_datazone\_environment: Correctly updates `glossary_terms`. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Prevents `unknown value` error when optional `account_identifier` is not specified. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Prevents `unknown value` error when optional `account_region` is not specified. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Prevents error when updating. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Prevents occasional `unexpected state` error when deleting. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Properly passes `blueprint_identifier` on creation. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Sets values for `user_parameters` when importing. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_environment: Values in `user_parameters` should not be updateable. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_project: No longer ignores errors when deleting. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_datazone\_project: No longer returns error when already deleting. ([#&#8203;44491](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44491)) - resource/aws\_dynamodb\_table: Do not retry on `LimitExceededException` ([#&#8203;44576](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44576)) - resource/aws\_ivschat\_room: Set `maximum_message_rate_per_second` validation maximum to `100` ([#&#8203;44572](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44572)) - resource/aws\_launch\_template: `kms_key_id` validation now accepts key ID, alias, and alias ARN in addition to key ARN ([#&#8203;44505](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44505)) - resource/aws\_servicecatalog\_portfolio\_share: Add global mutex lock around create and delete operations to prevent `ThrottlingException` errors ([#&#8203;24730](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/24730)) </details> <details> <summary>boto/boto3 (boto3)</summary> ### [`v1.40.50`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14050) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.40.49...1.40.50) \======= - api-change:`bedrock-agentcore`: \[`botocore`] Bedrock AgentCore release for Runtime, and Memory. - api-change:`bedrock-agentcore-control`: \[`botocore`] Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. - api-change:`cloudfront`: \[`botocore`] Added new viewer security policy, TLSv1.2\_2025, for CloudFront. - api-change:`glue`: \[`botocore`] Addition of AuditContext in GetTable/GetTables Request - api-change:`lambda`: \[`botocore`] Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. - api-change:`odb`: \[`botocore`] This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. - api-change:`rds`: \[`botocore`] Updated the text in the Important section of the ModifyDBClusterParameterGroup page. ### [`v1.40.49`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14049) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.40.48...1.40.49) \======= - api-change:`quicksight`: \[`botocore`] This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. - api-change:`wafv2`: \[`botocore`] This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. </details> <details> <summary>boto/botocore (botocore)</summary> ### [`v1.40.50`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14050) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.40.49...1.40.50) \======= - api-change:`bedrock-agentcore`: Bedrock AgentCore release for Runtime, and Memory. - api-change:`bedrock-agentcore-control`: Bedrock AgentCore release for Gateway, and Memory including Self-Managed Strategies support for Memory. - api-change:`cloudfront`: Added new viewer security policy, TLSv1.2\_2025, for CloudFront. - api-change:`glue`: Addition of AuditContext in GetTable/GetTables Request - api-change:`lambda`: Add InvokedViaFunctionUrl context key to limit invocations to only FURL invokes. - api-change:`odb`: This release adds APIs that allow you to specify CIDR ranges in your ODB peering connection. - api-change:`rds`: Updated the text in the Important section of the ModifyDBClusterParameterGroup page. ### [`v1.40.49`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14049) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.40.48...1.40.49) \======= - api-change:`quicksight`: This release adds support for ActionConnector and Flow, which are new resources associated with Amazon Quick Suite. Additional updates include expanded Data Source options, further branding customization, and new capabilities that can be restricted by Admins. - api-change:`wafv2`: This release adds the ability to throw WafLimitsExceededException when the maximum number of Application Load Balancer (ALB) associations per AWS WAF v2 WebACL is exceeded. </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.30.8`](https://redirect.github.com/github/codeql-action/releases/tag/v4.30.8) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.30.7...v4.30.8) ### CodeQL Action Changelog See the [releases page](https://redirect.github.com/github/codeql-action/releases) for the relevant changes to the CodeQL CLI and language packs. #### 4.30.8 - 10 Oct 2025 No user facing changes. See the full [CHANGELOG.md](https://redirect.github.com/github/codeql-action/blob/v4.30.8/CHANGELOG.md) for more information. </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/tfsec.yml b/.github/workflows/tfsec.yml
@@ -34,7 +34,7 @@ jobs:
           sarif_file: tfsec.sarif
 
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@e296a935590eb16afc0c0108289f68c87e2a89a5 # v4.30.7
+        uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v4.30.8
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: tfsec.sarif
diff --git a/.terraform.lock.hcl b/.terraform.lock.hcl
diff --git a/modules/terminate-agent-hook/lambda/requirements.txt b/modules/terminate-agent-hook/lambda/requirements.txt
@@ -1,2 +1,2 @@
-boto3 ==1.40.48
-botocore ==1.40.48
+boto3 ==1.40.50
+botocore ==1.40.50
