chore(deps): update all non-major github action dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	patch	v4.3.0 → v4.3.1
actions/create-github-app-token	action	minor	v2.1.4 → v2.2.2
actions/dependency-review-action	action	minor	v4.8.0 → v4.9.0
cds-snc/dns-proxy-action	action	digest	a0d4428 → bbde31a
cds-snc/terraform-plan	action	minor	v3.4.3 → v3.7.0
cds-snc/terraform-tools-setup	action	minor	v1 → v1.2.0
googleapis/release-please-action	action	minor	v4.3.0 → v4.4.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Review

• Updates have been tested and work
• If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

actions/checkout (actions/checkout)

v4.3.1

Compare Source

What's Changed

• Port v6 cleanup to v4 by @​ericsciple in #​2305

Full Changelog: actions/checkout@v4...v4.3.1

actions/create-github-app-token (actions/create-github-app-token)

v2.2.2

Compare Source

Bug Fixes

• deps: bump @​actions/core from 1.11.1 to 3.0.0 (#​337) (b044133)
• deps: bump minimatch from 9.0.5 to 9.0.9 (#​335) (5cbc656)
• deps: bump the production-dependencies group with 4 updates (#​336) (6bda5bc)
• deps: bump undici from 7.16.0 to 7.18.2 (#​323) (b4f638f)

v2.2.1

Compare Source

Bug Fixes

• deps: bump the production-dependencies group with 2 updates (#​311) (b212e6a)

v2.2.0

Compare Source

Bug Fixes

• deps: bump glob from 10.4.5 to 10.5.0 (#​305) (5480f43)
• deps: bump p-retry from 6.2.1 to 7.1.0 (#​294) (dce3be8)
• deps: bump the production-dependencies group with 2 updates (#​292) (55e2a4b)

Features

• update permission inputs (#​296) (d90aa53)

actions/dependency-review-action (actions/dependency-review-action)

v4.9.0: Dependency Review Action 4.9.0

Compare Source

This feature release contains a couple of notable changes:

• There is a new configuration option show_patched_versions which will add a column to the output, showing the fix version of each vulnerable dependency. Thanks @​felickz!
• Runs which do not display OpenSSF scorecards no longer fetch scorecard information; previously it was fetched regardless of whether or not it was displayed, causing unneccessary slowness. Great catch @​jantiebot!
• There are a couple of fixes to purl parsing which should improve match accuracy for allow-package-dependency lists, including case (in)sensitivity and url-encoded namespaces Thanks @​juxtin!

What's Changed

• Compare normalized purls to account for encoding quirks by @​juxtin in #​1056
• Make purl comparisons case insensitive by @​juxtin in #​1057
• Feat: Add Patched Version to Vulnerabilities summary by @​felickz in #​1045
• fix: only get scorecard levels if user wants to see the OpenSSF scorecard by @​jantiebot in #​1060
• Bump actions/stale from 10.1.0 to 10.2.0 by @​dependabot[bot] in #​1058
• Bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​1021
• Updates for release 4.9.0 by @​ahpook in #​1064

New Contributors

• @​jantiebot made their first contribution in #​1060

Full Changelog: actions/dependency-review-action@v4.8.3...v4.9.0

v4.8.3: 4.8.3

Compare Source

Dependency Review Action v4.8.3

This is a bugfix release that updates a number of upstream dependencies and includes a fix for the earlier feature that detected oversized summaries and upload them as artifacts, which could occasionally crash the action.

We have also updated the release process to use a long-lived v4 branch for the action, instead of a force-pushed tag, which aligns better with git branching strategies; the change should be transparent to end users.

What's Changed

• GitHub Actions can't push to our protected main by @​dangoor in #​1017
• Bump actions/stale from 9.1.0 to 10.1.0 by @​dependabot[bot] in #​995
• Bump github/codeql-action from 3 to 4 by @​dependabot[bot] in #​1003
• Bump actions/setup-node from 4 to 6 by @​dependabot[bot] in #​1005
• Upgrade glob to address a vulnerability by @​brrygrdn in #​1024
• Bump js-yaml by @​dependabot[bot] in #​1020
• Addressing vulnerabilities by @​Ahmed3lmallah in #​1036
• Bump fast-xml-parser from 5.3.3 to 5.3.5 by @​dependabot[bot] in #​1050
• Bump fast-xml-parser from 5.3.5 to 5.3.6 by @​dependabot[bot] in #​1053
• Properly truncate long summaries and catch errors by @​juxtin in #​1052
• Bump spdx-expression-parse from 3.0.1 to 4.0.0 in the spdx-licenses group across 1 directory by @​dependabot[bot] in #​931
• Changes for Release 4.8.3 by @​ahpook in #​1054

Full Changelog: https://github.com/actions/dependency-review-action/compare/v4.8.2..v4.8.3

v4.8.2

Compare Source

Minor fixes:

• Fix PURL parsing for scoped packages (#​1008 from @​danielhardej)
• Fix for large summaries (#​1007 from @​gitulisca)
• README includes a working example for allow-dependencies-licenses (#​1009 from @​danielhardej)

v4.8.1: Dependency Review Action v4.8.1

Compare Source

What's Changed

• (bug) Fix spamming link test in deprecation warning (again) by @​ahpook in #​1000
• Bump version for 4.8.1 release by @​ahpook in #​1001

Full Changelog: actions/dependency-review-action@v4...v4.8.1

cds-snc/terraform-plan (cds-snc/terraform-plan)

v3.7.0: Add Drift Detection feature

Compare Source

What's Changed

• chore(deps): update dependency node to v22.21.1 by @​renovate-cds[bot] in #​513
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​514
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​516
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​515
• chore(deps): update all non-major github action dependencies by @​renovate-cds[bot] in #​517
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​518
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​519
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:bullseye docker digest to 7916038 by @​renovate-cds[bot] in #​520
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​521
• chore(deps): update aws-actions/configure-aws-credentials action to v5.1.1 by @​renovate-cds[bot] in #​522
• chore(deps): update dependency prettier to v3.7.2 by @​renovate-cds[bot] in #​523
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​524
• chore(deps): update dependency prettier to v3.7.4 by @​renovate-cds[bot] in #​525
• chore(deps): update cds-snc/terraform-tools-setup action to v1.1.0 by @​renovate-cds[bot] in #​526
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​527
• feat: add Slack integration with payload output by @​CalvinRodo in #​529

Full Changelog: cds-snc/terraform-plan@v3.6.1...v3.7.0

v3.6.1

Compare Source

What's Changed

• feat: custom TruffleHog config by @​patheard in #​512

Full Changelog: cds-snc/terraform-plan@v3...v3.6.1

v3.6.0

Compare Source

What's Changed

• chore(deps): update dependency node to v22.18.0 by @​renovate-cds[bot] in #​486
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​487
• chore(deps): update all non-major github action dependencies by @​renovate-cds[bot] in #​488
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​493
• chore(deps): update all non-major github action dependencies by @​renovate-cds[bot] in #​490
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​491
• chore(deps): update dependency @​vercel/ncc to v0.38.4 by @​renovate-cds[bot] in #​492
• fix: limit number of parallel PR test runs by @​patheard in #​495
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​494
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:bullseye docker digest to b387f79 by @​renovate-cds[bot] in #​489
• chore(deps): update dependency jest to v30 by @​renovate-cds[bot] in #​500
• chore(deps): update actions/checkout action to v5 by @​renovate-cds[bot] in #​496
• chore(deps): update actions/github-script action to v8 by @​renovate-cds[bot] in #​497
• chore(deps): update actions/setup-node action to v5 by @​renovate-cds[bot] in #​498
• chore(deps): update aws-actions/configure-aws-credentials action to v5 by @​renovate-cds[bot] in #​499
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​501
• chore(deps): update opentofu/setup-opentofu digest to 5e2b22f by @​renovate-cds[bot] in #​502
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​503
• chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:bullseye docker digest to 1f1835d by @​renovate-cds[bot] in #​504
• chore(deps): update opentofu/setup-opentofu digest to 339b7b2 by @​renovate-cds[bot] in #​505
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​506
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​507
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​508
• chore(deps): update dependency node to v22.21.0 by @​renovate-cds[bot] in #​509
• chore(deps): lock file maintenance by @​renovate-cds[bot] in #​510
• feat: add TruffleHog secret scan by @​patheard in #​511

Full Changelog: cds-snc/terraform-plan@v3...v3.6.0

cds-snc/terraform-tools-setup (cds-snc/terraform-tools-setup)

v1.2.0

Compare Source

What's Changed

• fix: grep for sha256sum command by @​patheard in #​18
• chore: synced file(s) with cds-snc/site-reliability-engineering by @​sre-read-write[bot] in #​12

Full Changelog: cds-snc/terraform-tools-setup@v1.1.0...v1.2.0

googleapis/release-please-action (googleapis/release-please-action)

v4.4.0

Compare Source

Features

• add ability to select versioning-strategy and release-as (#​1121) (ee0f5ba)

Bug Fixes

• changelog-host parameter ignored when using manifest configuration (#​1151) (535c413)
• bump mocha from 11.7.1 to 11.7.2 in the npm_and_yarn group across 1 directory (#​1149) (3612a99)
• bump release-please from 17.1.2 to 17.1.3 (#​1158) (66fbfe9)

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.