chore(deps): update mono-update-renovate-automerge - autoclosed #36

renovate · 2024-04-20T00:39:05Z

This PR contains the following updates:

Package	Type	Update	Change
antonbabenko/pre-commit-terraform	repository	minor	`v1.88.4` -> `v1.89.1`
aquasecurity/tfsec		patch	`1.28.5` -> `1.28.6`
pre-commit		patch	`3.7.0` -> `3.7.1`
pre-commit/pre-commit		patch	`3.7.0` -> `3.7.1`
renovatebot/pre-commit-hooks	repository	minor	`37.278.0` -> `37.356.1`
rhysd/actionlint	repository	minor	`v1.6.27` -> `v1.7.0`
terraform		patch	`1.8.2` -> `1.8.3`
terraform-aws-modules/eks/aws (source)	module	major	`19.21.0` -> `20.10.0`
terraform-aws-modules/iam/aws (source)	module	minor	`5.34.0` -> `5.39.0`
terraform-aws-modules/vpc/aws (source)	module	minor	`5.5.2` -> `5.8.1`
terraform-linters/tflint		minor	`0.50.3` -> `0.51.1`
tflint		minor	`0.50.3` -> `0.51.1`
tfsec		patch	`1.28.5` -> `1.28.6`

Before merging, always check with the release notes if any other changes need to be done.

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

⚠️ THIS IS A MAJOR VERSION UPDATE ⚠️

Release Notes

antonbabenko/pre-commit-terraform (antonbabenko/pre-commit-terraform)

`v1.89.1`

Compare Source

Bug Fixes

docker: Prevent all possible "silent errors" during docker build (#644) (0340c8d)

`v1.89.0`

Compare Source

Features

Hook terraform_wrapper_module_for_each should use versions.tf from the module if it exists (#657) (b127601)

aquasecurity/tfsec (aquasecurity/tfsec)

`v1.28.6`

Compare Source

What's Changed

Bumped hashicorp/go-getter due Critical Vulnerability by @jdesouza in https://github.com/aquasecurity/tfsec/pull/2144

New Contributors

@jdesouza made their first contribution in https://github.com/aquasecurity/tfsec/pull/2144

Full Changelog: aquasecurity/tfsec@v1.28.5...v1.28.6

pre-commit/pre-commit (pre-commit)

`v3.7.1`

Compare Source

==================

Fixes

Fix language: rust default language version check when rust-toolchain.toml
is present.
- issue by @gaborbernat.
- #3201 PR by @asottile.

renovatebot/pre-commit-hooks (renovatebot/pre-commit-hooks)

rhysd/actionlint (rhysd/actionlint)

`v1.7.0`

Compare Source

From this version, actionlint starts to check action metadata file action.yml (or action.yaml). At this point, only very basic checks are implemented and contents of steps: are not checked yet.
- It checks properties under runs: section (e.g. main: can be specified when it is a JavaScript action), branding: properties, and so on.
```
name: 'My action'
author: '...'
```

ERROR: 'description' section is missing

branding:

ERROR: Invalid icon name

  icon: dog

runs:

ERROR: Node.js runtime version is too old

  using: 'node12'

ERROR: The source file being run by this action does not exist

  main: 'this-file-does-not-exist.js'

ERROR: 'env' configuration is only allowed for Docker actions

  env:
    SOME_VAR: SOME_VALUE
```

actionlint still focuses on checking workflow files. So there is no way to directly specify action.yml as an argument of actionlint command. actionlint checks all local actions which are used by given workflows. If you want to use actionlint for your action development, prepare a test/example workflow which uses your action, and check it with actionlint instead.
Checks for steps: contents are planned to be implemented. Since several differences are expected between steps: in workflow file and steps: in action metadata file (e.g. available contexts), the implementation is delayed to later version. And the current implementation of action metadata parser is ad hoc. I'm planning a large refactorying and breaking changes Go API around it are expected.

Add runner.environment property. (#412)

- run: echo 'Run by GitHub-hosted runner'
  if: runner.environment == 'github-hosted'

Using outdated popular actions is now detected at error. See the document for more details.
- Here 'outdated' means actions which use runtimes no longer supported by GitHub-hosted runners such as node12.

ERROR: actions/checkout@v2 is using the outdated runner 'node12'

- uses: actions/checkout@v2
```

Support attestations permission which was recently added to GitHub Actions as beta. (#418, thanks @bdehamer)
```
permissions:
  id-token: write
  contents: read
  attestations: write
```
Check comparison expressions more strictly. Arbitrary types of operands can be compared as the official document explains. However, comparisons between some types are actually meaningless because the values are converted to numbers implicitly. actionlint catches such meaningless comparisons as errors. Please see the check document for more details.
```
on:
  workflow_call:
    inputs:
      timeout:
        type: boolean

jobs:
  test:
    runs-on: ubuntu-latest
    steps:
      - run: echo 'called!'
```

ERROR: Comparing string to object is always evaluated to false

      if: ${{ github.event == 'workflow_call' }}
    - run: echo 'timeout is too long'

ERROR: Comparing boolean value with `>` doesn't make sense

      if: ${{ inputs.timeout > 60 }}

- Follow the update that `macos-latest` is now an alias to `macos-14` runner.
- Support a custom python shell by `pyflakes` rule.
- Add workaround actionlint reports that `dorny/paths-filter`'s `predicate-quantifier` input is not defined. ([#&#8203;416](https://togithub.com/rhysd/actionlint/issues/416))
- Fix the type of a conditional expression by comparison operators is wider than expected by implementing type narrowing. ([#&#8203;384](https://togithub.com/rhysd/actionlint/issues/384))
- For example, the type of following expression should be `number` but it was actually `string | number` and actionlint complained that `timeout-minutes` must take a number value.
  ```yaml
  timeout-minutes: ${{ env.FOO && 10 || 60 }}
  ```
- Fix `${{ }}` placeholder is not available at `jobs.<job_id>.services`. ([#&#8203;402](https://togithub.com/rhysd/actionlint/issues/402))
```yaml
jobs:
  test:
    services: ${{ fromJSON('...') }}
    runs-on: ubuntu-latest
    steps:
      - run: ...

Do not check outputs of google-github-actions/get-secretmanager-secrets because this action sets outputs dynamically. (#404)

Fix defaults.run is ignored on detecting the shell used in run:. (#409)

defaults:
  run:
    shell: pwsh
jobs:
  test:
    runs-on: ubuntu-latest
    steps:

This was wrongly detected as bash script

    - run: $Env:FOO = "FOO"

- Fix parsing a syntax error reported from pyflakes when checking a Python script in `run:`. ([#&#8203;411](https://togithub.com/rhysd/actionlint/issues/411))
```yaml
- run: print(
  shell: python

Skip checking exclude: items in matrix: when they are constructed from ${{ }} dynamically. (#414)
```
matrix:
  foo: ['a', 'b']
  exclude:
```

actionlint complained this value didn't exist in matrix combinations

  - foo: ${{ env.EXCLUDE_FOO }}

- Fix checking `exclude:` items when `${{ }}` is used in items of nested arrays.
```yaml
matrix:
  foo:
    - ["${{ fromJSON('...') }}"]
  exclude:
### actionlint complained this value didn't match to any matrix combinations
    - foo: ['foo']

Update popular actions data set. New major versions are added and the following actions are newly added.
- peaceiris/actions-hugo
- actions/attest-build-provenance
- actions/add-to-project
- octokit/graphql-action
Update Go dependencies to the latest.
Reduce the size of actionlint executable by removing redundant data from popular actions data set.
- x86_64 executable binary size was reduced from 6.9MB to 6.7MB (2.9% smaller).
- Wasm binary size was reduced from 9.4MB to 8.9MB (5.3% smaller).
Describe how to integrate actionlint to Pulsar Edit in the document. (#408, thanks @mschuchard)
Update outdated action versions in the usage document. (#413, thanks @naglis)

[Changes][v1.7.0]

hashicorp/terraform (terraform)

`v1.8.3`

Compare Source

1.8.3 (May 8, 2024)

BUG FIXES:

terraform test: Providers configured within an overridden module could panic. (#35110)
core: Fix crash when a provider incorrectly plans a nested object when the configuration is null (#35090)

terraform-aws-modules/terraform-aws-eks (terraform-aws-modules/eks/aws)

`v20.10.0`

Compare Source

Features

Add support for Pod Identity assocation on Karpenter sub-module (#3031) (cfcaf27)

`v20.9.0`

Compare Source

Features

Propagate ami_type to self-managed node group; allow using ami_type only (#3030) (74d3918)

`v20.8.5`

Compare Source

Bug Fixes

Forces cluster outputs to wait until access entries are complete (#3000) (e2a39c0)

`v20.8.4`

Compare Source

Bug Fixes

Pass nodeadm user data variables from root module down to nodegroup sub-modules (#2981) (84effa0)

`v20.8.3`

Compare Source

Bug Fixes

Ensure the correct service CIDR and IP family is used in the rendered user data (#2963) (aeb9f0c)

`v20.8.2`

Compare Source

Bug Fixes

Ensure a default ip_family value is provided to guarantee a CNI policy is attached to nodes (#2967) (29dcca3)

`v20.8.1`

Compare Source

Bug Fixes

Do not attach policy if Karpenter node role is not created by module (#2964) (3ad19d7)

`v20.8.0`

Compare Source

Features

Replace the use of toset() with static keys for node IAM role policy attachment (#2962) (57f5130)

`v20.7.0`

Compare Source

Features

Add supprot for creating placement group for managed node group (#2959) (3031631)

`v20.6.0`

Compare Source

Features

Add support for tracking latest AMI release version on managed nodegroups (#2951) (393da7e)

`v20.5.3`

Compare Source

Bug Fixes

Update AWS provider version to support AL2023_* AMI types; ensure AL2023 user data receives cluster service CIDR (#2960) (dfe4114)

`v20.5.2`

Compare Source

Bug Fixes

Use the launch_template_tags on the launch template (#2957) (0ed32d7)

`v20.5.1`

Compare Source

Bug Fixes

Update CI workflow versions to remove deprecated runtime warnings (#2956) (d14cc92)

`v20.5.0`

Compare Source

Features

Add support for AL2023 nodeadm user data (#2942) (7c99bb1)

`v20.4.0`

Compare Source

Features

Add support for enabling EFA resources (#2936) (7f472ec)

`v20.3.0`

Compare Source

Features

Add support for addon and identity provider custom tags (#2938) (f6255c4)

20.2.2 (2024-02-21)

Bug Fixes

Replace Karpenter SQS policy dynamic service princpal DNS suffixes with static amazonaws.com (#2941) (081c762)

20.2.1 (2024-02-08)

Bug Fixes

Karpenter enable_spot_termination = false should not result in an error (#2907) (671fc6e)

`v20.2.2`

Compare Source

`v20.2.1`

Compare Source

`v20.2.0`

Compare Source

Features

Allow enable/disable of EKS pod identity for the Karpenter controller (#2902) (cc6919d)

20.1.1 (2024-02-06)

Bug Fixes

Update access entries kubernetes_groups default value to null (#2897) (1e32e6a)

`v20.1.1`

Compare Source

`v20.1.0`

Compare Source

Features

Add output for access_policy_associations (#2904) (0d2a4c2)

20.0.1 (2024-02-03)

Bug Fixes

Correct cluster access entry to create multiple policy associations per access entry (#2892) (4177913)

`v20.0.1`

Compare Source

`v20.0.0`

Compare Source

⚠ BREAKING CHANGES

Replace the use of aws-auth configmap with EKS cluster access entry (#2858)

Features

Replace the use of aws-auth configmap with EKS cluster access entry (#2858) (6b40bdb)

terraform-aws-modules/terraform-aws-iam (terraform-aws-modules/iam/aws)

`v5.39.0`

Compare Source

Features

Enable override policy name iam-group-with-assumable-roles-policy (#468) (bf013d2)
Update VPC CNI policy to 3/4/24 (#476) (f9d5e28)

`v5.38.0`

Compare Source

Features

EBS fast snapshot restores persmission for EKS IRSA (#469) (9ea77ca)

`v5.37.2`

Compare Source

Bug Fixes

Allow user to change own password when no MFA is present (#470) (ef0056b)

`v5.37.1`

Compare Source

Bug Fixes

Update CI workflow versions to remove deprecated runtime warnings (#465) (82348df)

`v5.37.0`

Compare Source

Features

Extend self-management policy to read account summary (iam-group-with-policies) (#462) (0bedaf4)

`v5.36.0`

Compare Source

Features

Add support for Mountpoint S3 CSI driver to EKS IRSA (#459) (21fb8d9)

`v5.35.0`

Compare Source

Features

Allow users to set and read own access keys description (iam-group-with-policies) (#461) (c80cd10)

terraform-aws-modules/terraform-aws-vpc (terraform-aws-modules/vpc/aws)

`v5.8.1`

Compare Source

Bug Fixes

Do not replace NAT gateways when additional subnets are added (#1055) (cf18c37)

`v5.8.0`

Compare Source

Features

Add support for multiple route tables to public and intra subnets (#1051) (da05f24)

`v5.7.2`

Compare Source

Bug Fixes

Create private_ipv6_egress routes only when having at least one private subnet (#1062) (8701204)

`v5.7.1`

Compare Source

Bug Fixes

Create the same number of IPv6 egress only gateway routes as the number of NAT gateways that are enabled/created (#1059) (77df552)

`v5.7.0`

Compare Source

Features

Allow setting vpc endpoints as an input for each endpoint (#1056) (9163310)

[`v5.6.0`](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/blo

Configuration

📅 Schedule: Branch creation - "every weekend" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

| datasource | package | from | to | | ---------------- | --------------------------------- | -------- | -------- | | github-tags | antonbabenko/pre-commit-terraform | v1.88.4 | v1.89.1 | | github-releases | aquasecurity/tfsec | v1.28.5 | v1.28.6 | | github-tags | pre-commit/pre-commit | 3.7.0 | 3.7.1 | | github-releases | pre-commit/pre-commit | v3.7.0 | v3.7.1 | | github-tags | renovatebot/pre-commit-hooks | 37.278.0 | 37.356.1 | | github-tags | rhysd/actionlint | v1.6.27 | v1.7.0 | | github-releases | hashicorp/terraform | 1.8.2 | 1.8.3 | | terraform-module | terraform-aws-modules/eks/aws | 19.21.0 | 20.10.0 | | terraform-module | terraform-aws-modules/iam/aws | 5.34.0 | 5.39.0 | | terraform-module | terraform-aws-modules/vpc/aws | 5.5.2 | 5.8.1 | | github-releases | terraform-linters/tflint | v0.50.3 | v0.51.1 | | github-tags | terraform-linters/tflint | 0.50.3 | 0.51.1 | | github-tags | aquasecurity/tfsec | 1.28.5 | 1.28.6 |

renovate bot added automerge group:terraform upgrade:major upgrade:minor labels Apr 20, 2024

renovate bot force-pushed the renovate/mono-update-renovate-automerge branch 16 times, most recently from 8d7275b to 7403931 Compare April 24, 2024 12:06

renovate bot added the upgrade:patch label Apr 24, 2024

github-actions bot added the terraform label Apr 24, 2024

renovate bot force-pushed the renovate/mono-update-renovate-automerge branch 8 times, most recently from a0b6998 to 00d44fa Compare April 26, 2024 07:12

renovate bot force-pushed the renovate/mono-update-renovate-automerge branch 25 times, most recently from 122de0c to dec981d Compare May 11, 2024 22:18

renovate bot force-pushed the renovate/mono-update-renovate-automerge branch from dec981d to ab45577 Compare May 12, 2024 18:49

renovate bot changed the title ~~chore(deps): update mono-update-renovate-automerge~~ chore(deps): update mono-update-renovate-automerge - autoclosed May 13, 2024

renovate bot closed this May 13, 2024

renovate bot deleted the renovate/mono-update-renovate-automerge branch May 13, 2024 14:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update mono-update-renovate-automerge - autoclosed #36

chore(deps): update mono-update-renovate-automerge - autoclosed #36

renovate bot commented Apr 20, 2024 •

edited

Loading

chore(deps): update mono-update-renovate-automerge - autoclosed #36

chore(deps): update mono-update-renovate-automerge - autoclosed #36

Conversation

renovate bot commented Apr 20, 2024 • edited Loading

Release Notes

Bug Fixes

Features

What's Changed

New Contributors

Fixes

ERROR: 'description' section is missing

ERROR: Invalid icon name

ERROR: Node.js runtime version is too old

ERROR: The source file being run by this action does not exist

ERROR: 'env' configuration is only allowed for Docker actions

ERROR: actions/checkout@v2 is using the outdated runner 'node12'

ERROR: Comparing string to object is always evaluated to false

ERROR: Comparing boolean value with > doesn't make sense

This was wrongly detected as bash script

actionlint complained this value didn't exist in matrix combinations

1.8.3 (May 8, 2024)

Features

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Features

Features

Features

Bug Fixes

renovate bot commented Apr 20, 2024 •

edited

Loading

ERROR: Comparing boolean value with `>` doesn't make sense