feat: (IAC-1260) Update Dependencies to remediate security vulnerabilities (#358)

Author: riragh

Dockerfile

@@ -1,5 +1,5 @@
-ARG TERRAFORM_VERSION=1.6.4
-ARG AZURECLI_VERSION=2.54.0
+ARG TERRAFORM_VERSION=1.6.6
+ARG AZURECLI_VERSION=2.56.0
 
 FROM hashicorp/terraform:$TERRAFORM_VERSION as terraform
 FROM mcr.microsoft.com/azure-cli:$AZURECLI_VERSION

README.md

@@ -57,10 +57,10 @@ This project supports two options for running Terraform scripts:
 Access to an **Azure Subscription** and an [**Identity**](./docs/user/TerraformAzureAuthentication.md) with the *Contributor* role are required.
 
 #### Terraform Requirements:
-- [Terraform](https://www.terraform.io/downloads.html) - v1.6.4
+- [Terraform](https://www.terraform.io/downloads.html) - v1.6.6
 - [kubectl](https://kubernetes.io/docs/tasks/tools/install-kubectl) - v1.27.9
 - [jq](https://stedolan.github.io/jq/) - v1.6
-- [Azure CLI](https://docs.microsoft.com/en-us/cli/azure) - (optional - useful as an alternative to the Azure Portal) - v2.54.0
+- [Azure CLI](https://docs.microsoft.com/en-us/cli/azure) - (optional - useful as an alternative to the Azure Portal) - v2.56.0
 
 #### Docker Requirements:
 - [Docker](https://docs.docker.com/get-docker/)

container-structure-test.yaml

@@ -17,7 +17,7 @@ commandTests:
   - name: "terraform version"
     command: "terraform"
     args: ["--version"]
-    expectedOutput: ["Terraform v1.6.4"]
+    expectedOutput: ["Terraform v1.6.6"]
   - name: "python version"
     command: "python3"
     args: ["--version"]
@@ -29,7 +29,7 @@ commandTests:
       - -c
       - |
         az version -o tsv
-    expectedOutput: ["2.54.0\t2.54.0\t1.1.0"]
+    expectedOutput: ["2.56.0\t2.56.0\t1.1.0"]
 
 metadataTest:
   workdir: "/viya4-iac-azure"

versions.tf

@@ -3,40 +3,40 @@
 
 terraform {
 
-  required_version = ">= 1.6.4"
+  required_version = ">= 1.6.6"
 
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "3.81.0"
+      version = "3.86.0"
     }
     azuread = {
       source  = "hashicorp/azuread"
-      version = "2.46.0"
+      version = "~>2.47"
     }
     external = {
       source  = "hashicorp/external"
-      version = "2.3.2"
+      version = "~>2.3"
     }
     local = {
       source  = "hashicorp/local"
-      version = "2.4.0"
+      version = "~>2.4"
     }
     null = {
       source  = "hashicorp/null"
-      version = "3.2.2"
+      version = "~>3.2"
     }
     tls = {
       source  = "hashicorp/tls"
-      version = "4.0.4"
+      version = "~>4.0"
     }
     cloudinit = {
       source  = "hashicorp/cloudinit"
-      version = "2.3.2"
+      version = "~>2.3"
     }
     kubernetes = {
       source  = "hashicorp/kubernetes"
-      version = "2.23.0"
+      version = "~>2.25"
     }
   }
 }