chore(deps): update all non-major github action dependencies - autoclosed

renovate[bot] commented 8 months ago

This PR contains the following updates:

Package	Type	Update	Change
cds-snc/terraform-plan	action	minor	`v3.1.0` -> `v3.2.0`
dorny/paths-filter	action	minor	`v2.11.1` -> `v2.12.0`

Review

[ ] Updates have been tested and work
[ ] If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

Release Notes

cds-snc/terraform-plan (cds-snc/terraform-plan)

### [`v3.2.0`](https://togithub.com/cds-snc/terraform-plan/releases/tag/v3.2.0) [Compare Source](https://togithub.com/cds-snc/terraform-plan/compare/v3.1.1...v3.2.0) #### What's Changed - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/276](https://togithub.com/cds-snc/terraform-plan/pull/276) - chore(deps): update terraform test to ~> 3.6.0 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/277](https://togithub.com/cds-snc/terraform-plan/pull/277) - chore: synced file(s) with cds-snc/site-reliability-engineering by [@sre-read-write](https://togithub.com/sre-read-write) in [https://github.com/cds-snc/terraform-plan/pull/278](https://togithub.com/cds-snc/terraform-plan/pull/278) - chore(deps): update dependency prettier to v3.1.1 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/279](https://togithub.com/cds-snc/terraform-plan/pull/279) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/280](https://togithub.com/cds-snc/terraform-plan/pull/280) - chore(deps): update actions/setup-node action to v4.0.1 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/281](https://togithub.com/cds-snc/terraform-plan/pull/281) - chore(deps): update dependency eslint to v8.56.0 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/282](https://togithub.com/cds-snc/terraform-plan/pull/282) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/283](https://togithub.com/cds-snc/terraform-plan/pull/283) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/285](https://togithub.com/cds-snc/terraform-plan/pull/285) - chore(deps): update actions/cache action to v3.3.3 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/287](https://togithub.com/cds-snc/terraform-plan/pull/287) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/289](https://togithub.com/cds-snc/terraform-plan/pull/289) - chore(deps): update dependency prettier to v3.2.2 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/288](https://togithub.com/cds-snc/terraform-plan/pull/288) - feat: support new import block by [@CalvinRodo](https://togithub.com/CalvinRodo) in [https://github.com/cds-snc/terraform-plan/pull/291](https://togithub.com/cds-snc/terraform-plan/pull/291) **Full Changelog**: https://github.com/cds-snc/terraform-plan/compare/v3...v3.1.1 #### What's Changed - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/276](https://togithub.com/cds-snc/terraform-plan/pull/276) - chore(deps): update terraform test to ~> 3.6.0 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/277](https://togithub.com/cds-snc/terraform-plan/pull/277) - chore: synced file(s) with cds-snc/site-reliability-engineering by [@sre-read-write](https://togithub.com/sre-read-write) in [https://github.com/cds-snc/terraform-plan/pull/278](https://togithub.com/cds-snc/terraform-plan/pull/278) - chore(deps): update dependency prettier to v3.1.1 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/279](https://togithub.com/cds-snc/terraform-plan/pull/279) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/280](https://togithub.com/cds-snc/terraform-plan/pull/280) - chore(deps): update actions/setup-node action to v4.0.1 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/281](https://togithub.com/cds-snc/terraform-plan/pull/281) - chore(deps): update dependency eslint to v8.56.0 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/282](https://togithub.com/cds-snc/terraform-plan/pull/282) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/283](https://togithub.com/cds-snc/terraform-plan/pull/283) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/285](https://togithub.com/cds-snc/terraform-plan/pull/285) - chore(deps): update actions/cache action to v3.3.3 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/287](https://togithub.com/cds-snc/terraform-plan/pull/287) - chore(deps): lock file maintenance by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/289](https://togithub.com/cds-snc/terraform-plan/pull/289) - chore(deps): update dependency prettier to v3.2.2 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/288](https://togithub.com/cds-snc/terraform-plan/pull/288) - feat: support new import block by [@CalvinRodo](https://togithub.com/CalvinRodo) in [https://github.com/cds-snc/terraform-plan/pull/291](https://togithub.com/cds-snc/terraform-plan/pull/291) - chore(deps): update dependency prettier to v3.2.4 by [@renovate-cds](https://togithub.com/renovate-cds) in [https://github.com/cds-snc/terraform-plan/pull/290](https://togithub.com/cds-snc/terraform-plan/pull/290) **Full Changelog**: https://github.com/cds-snc/terraform-plan/compare/v3...v3.2.0 ### [`v3.1.1`](https://togithub.com/cds-snc/terraform-plan/compare/v3.1.0...v3.1.1) [Compare Source](https://togithub.com/cds-snc/terraform-plan/compare/v3.1.0...v3.1.1)

dorny/paths-filter (dorny/paths-filter)

### [`v2.12.0`](https://togithub.com/dorny/paths-filter/compare/v2.11.1...v2.12.0) [Compare Source](https://togithub.com/dorny/paths-filter/compare/v2.11.1...v2.12.0)

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

github-actions[bot] commented 8 months ago

Staging: ssm

✅ Terraform Init: success ✅ Terraform Validate: success ✅ Terraform Format: success ✅ Terraform Plan: success ✅ Conftest: success

Plan: 0 to add, 1 to change, 0 to destroy

Show summary

| CHANGE | NAME | |--------|-------------------------------------| | update | `aws_ssm_parameter.saas_app_config` |

Show plan

```terraform Resource actions are indicated with the following symbols: ~ update in-place Terraform will perform the following actions: # aws_ssm_parameter.saas_app_config will be updated in-place ~ resource "aws_ssm_parameter" "saas_app_config" { id = "saas_app_config" + insecure_value = (known after apply) name = "saas_app_config" tags = { "CostCentre" = "saas-procurement" "Terraform" = "true" } ~ value = (sensitive value) ~ version = 15 -> (known after apply) # (6 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. Changes to Outputs: - saas_app_config_value = (sensitive value) -> null ───────────────────────────────────────────────────────────────────────────── Saved the plan to: plan.tfplan To perform exactly these actions, run the following command to apply: terraform apply "plan.tfplan" ```

Show Conftest results

```sh 20 tests, 20 passed, 0 warnings, 0 failures, 0 exceptions ```

github-actions[bot] commented 8 months ago

Staging: rds

✅ Terraform Init: success ✅ Terraform Validate: success ✅ Terraform Format: success ✅ Terraform Plan: success ✅ Conftest: success

Plan: 0 to add, 1 to change, 0 to destroy

Show summary

| CHANGE | NAME | |--------|---------------------------------------------------| | update | `module.rds_cluster.aws_security_group.rds_proxy` |

Show plan

```terraform Resource actions are indicated with the following symbols: ~ update in-place Terraform will perform the following actions: # module.rds_cluster.aws_security_group.rds_proxy will be updated in-place ~ resource "aws_security_group" "rds_proxy" { id = "sg-051638cd60aef88c3" ~ ingress = [ - { - cidr_blocks = [] - description = "" - from_port = 5432 - ipv6_cidr_blocks = [] - prefix_list_ids = [] - protocol = "tcp" - security_groups = [] - self = true - to_port = 5432 }, - { - cidr_blocks = [] - description = "Allow RDS cluster to receive requests from ECS" - from_port = 5432 - ipv6_cidr_blocks = [] - prefix_list_ids = [] - protocol = "tcp" - security_groups = [ - "sg-0d1ca7e7e561a219f", ] - self = false - to_port = 5432 }, + { + cidr_blocks = [] + from_port = 5432 + ipv6_cidr_blocks = [] + prefix_list_ids = [] + protocol = "tcp" + security_groups = [] + self = true + to_port = 5432 }, ] name = "saas-procurement-database_rds_proxy_sg" tags = { "CostCentre" = "saas-procurement" "Name" = "saas-procurement-database_rds_proxy_sg" "Terraform" = "true" } # (7 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 0 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: plan.tfplan To perform exactly these actions, run the following command to apply: terraform apply "plan.tfplan" ```

Show Conftest results

```sh 20 tests, 20 passed, 0 warnings, 0 failures, 0 exceptions ```

github-actions[bot] commented 8 months ago

Staging: ecs

✅ Terraform Init: success ✅ Terraform Validate: success ✅ Terraform Format: success ✅ Terraform Plan: success ✅ Conftest: success

⚠️ Warning: resources will be destroyed by this change!

Plan: 0 to add, 1 to change, 1 to destroy

Show summary

| CHANGE | NAME | |--------|------------------------------------| | delete | `aws_ecs_cluster.saas_procurement` | | update | `aws_security_group.ecs_tasks` |

Show plan

```terraform Resource actions are indicated with the following symbols: ~ update in-place - destroy Terraform will perform the following actions: # aws_ecs_cluster.saas_procurement will be destroyed # (because aws_ecs_cluster.saas_procurement is not in configuration) - resource "aws_ecs_cluster" "saas_procurement" { - arn = "arn:aws:ecs:ca-central-1:394954348146:cluster/saas-procurement-cluster" -> null - capacity_providers = [ - "FARGATE", ] -> null - id = "arn:aws:ecs:ca-central-1:394954348146:cluster/saas-procurement-cluster" -> null - name = "saas-procurement-cluster" -> null - tags = { - "CostCentre" = "saas-procurement" - "Terraform" = "true" } -> null - tags_all = { - "CostCentre" = "saas-procurement" - "Terraform" = "true" } -> null - default_capacity_provider_strategy { - base = 1 -> null - capacity_provider = "FARGATE" -> null - weight = 1 -> null } - setting { - name = "containerInsights" -> null - value = "enabled" -> null } } # aws_security_group.ecs_tasks will be updated in-place ~ resource "aws_security_group" "ecs_tasks" { ~ egress = [ - { - cidr_blocks = [] - description = "Allow ECS to talk to the RDS cluster" - from_port = 5432 - ipv6_cidr_blocks = [] - prefix_list_ids = [] - protocol = "tcp" - security_groups = [ - "sg-051638cd60aef88c3", ] - self = false - to_port = 5432 }, # (1 unchanged element hidden) ] id = "sg-0d1ca7e7e561a219f" name = "saas-procurement-security-group" tags = { "CostCentre" = "saas-procurement" } # (7 unchanged attributes hidden) } Plan: 0 to add, 1 to change, 1 to destroy. ───────────────────────────────────────────────────────────────────────────── Saved the plan to: plan.tfplan To perform exactly these actions, run the following command to apply: terraform apply "plan.tfplan" ```

Show Conftest results

```sh WARN - plan.json - main - Missing Common Tags: ["aws_security_group.ecs_tasks"] WARN - plan.json - main - Missing Common Tags: ["module.saas_procurement.module.sentinel_forwarder[0].aws_cloudwatch_log_group.sentinel_forwarder_lambda"] WARN - plan.json - main - Missing Common Tags: ["module.saas_procurement.module.sentinel_forwarder[0].aws_iam_policy.sentinel_forwarder_lambda"] WARN - plan.json - main - Missing Common Tags: ["module.saas_procurement.module.sentinel_forwarder[0].aws_iam_role.sentinel_forwarder_lambda"] WARN - plan.json - main - Missing Common Tags: ["module.saas_procurement.module.sentinel_forwarder[0].aws_lambda_function.sentinel_forwarder"] 24 tests, 19 passed, 5 warnings, 0 failures, 0 exceptions ```

cds-snc / saas-procurement