search

eana / bitwarden-tf-aws

Terraform module for running a cheap and yet stable vaultwarden instance (formerly bitwarden_rs) in AWS
15 stars 1 forks source link

Update development (patch and minor) upgrades #190

Closed renovate[bot] closed 2 months ago

renovate[bot] commented 4 months ago

Mend Renovate

This PR contains the following updates:

Package Type Update Change
antonbabenko/pre-commit-terraform repository minor v1.89.1 -> v1.92.0
cimg/python docker patch 3.12.3 -> 3.12.4
docker/compose minor v2.27.0 -> v2.28.1
mariadb minor 11.3.2 -> 11.4.2
mozilla/sops minor v3.8.1 -> v3.9.0
traefik patch v3.0.0 -> v3.0.4

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

Release Notes

antonbabenko/pre-commit-terraform (antonbabenko/pre-commit-terraform) ### [`v1.92.0`](https://togithub.com/antonbabenko/pre-commit-terraform/releases/tag/v1.92.0) [Compare Source](https://togithub.com/antonbabenko/pre-commit-terraform/compare/v1.91.0...v1.92.0) ##### Features - Add `terragrunt_validate_inputs` hook to check unused and undefined inputs ([#​677](https://togithub.com/antonbabenko/pre-commit-terraform/issues/677)) ([a139b71](https://togithub.com/antonbabenko/pre-commit-terraform/commit/a139b71bc722ac1d2d5ed89caeb74d66a882bb94)) ### [`v1.91.0`](https://togithub.com/antonbabenko/pre-commit-terraform/releases/tag/v1.91.0) [Compare Source](https://togithub.com/antonbabenko/pre-commit-terraform/compare/v1.90.0...v1.91.0) ##### Features - Added Terramate as sponsor ([#​676](https://togithub.com/antonbabenko/pre-commit-terraform/issues/676)) ([dae1a48](https://togithub.com/antonbabenko/pre-commit-terraform/commit/dae1a483b429506863c3c7203932fef4fa74f86a)) ### [`v1.90.0`](https://togithub.com/antonbabenko/pre-commit-terraform/releases/tag/v1.90.0) [Compare Source](https://togithub.com/antonbabenko/pre-commit-terraform/compare/v1.89.1...v1.90.0) ##### Features - Support set custom TF/OpenTofu binary. | If you use a custom Docker image build, please note that `TERRAFORM_VERSION` now must be provided ([#​670](https://togithub.com/antonbabenko/pre-commit-terraform/issues/670)) ([c7011c0](https://togithub.com/antonbabenko/pre-commit-terraform/commit/c7011c06b84fc96c9a5f2f4508d5ced83ddd2af0))
docker/compose (docker/compose) ### [`v2.28.1`](https://togithub.com/docker/compose/releases/tag/v2.28.1) [Compare Source](https://togithub.com/docker/compose/compare/v2.28.0...v2.28.1) #### What's Changed 🐛 Fixes - Remove `console.Terminal` check and use `IsTerminal` from `streams.Out` by [@​vvoland](https://togithub.com/vvoland) in [https://github.com/docker/compose/pull/11934](https://togithub.com/docker/compose/pull/11934) #### New Contributors - [@​vvoland](https://togithub.com/vvoland) made their first contribution in [https://github.com/docker/compose/pull/11934](https://togithub.com/docker/compose/pull/11934) **Full Changelog**: https://github.com/docker/compose/compare/v2.28.0...v2.28.1 ### [`v2.28.0`](https://togithub.com/docker/compose/releases/tag/v2.28.0) [Compare Source](https://togithub.com/docker/compose/compare/v2.27.3...v2.28.0) #### What's Changed ⚙️ Dependencies - bump docker/docker and docker/cli `v27.0.1-rc.1`, compose-go `v2.1.3` [(11926)](https://togithub.com/docker/compose/pull/11926) **Full Changelog**: https://github.com/docker/compose/compare/v2.27.3...v2.28.0 ### [`v2.27.3`](https://togithub.com/docker/compose/releases/tag/v2.27.3) [Compare Source](https://togithub.com/docker/compose/compare/v2.27.2...v2.27.3) #### What's Changed ⚙️ Dependencies - build(deps): bump github.com/docker/buildx from `0.15.0` to `0.15.1` [(11921)](https://togithub.com/docker/compose/pull/11921) - build(deps): bump github.com/spf13/cobra from `1.8.0` to `1.8.1` [(11915)](https://togithub.com/docker/compose/pull/11915) **Full Changelog**: https://github.com/docker/compose/compare/v2.27.2...v2.27.3 ### [`v2.27.2`](https://togithub.com/docker/compose/releases/tag/v2.27.2) [Compare Source](https://togithub.com/docker/compose/compare/v2.27.1...v2.27.2) #### What's Changed ##### ✨ Improvements - Add `--environment` flag to `config` command [(11891)](https://togithub.com/docker/compose/pull/11891) ##### 🐛 Fixes - Prevent concurrent map write relying on project immutability [(11860)](https://togithub.com/docker/compose/pull/11860) - Fix `COMPOSE_PROFILES` can be set by .env file [(11861)](https://togithub.com/docker/compose/pull/11861) - Fix: change append to use slice index in `ps` [(11862)](https://togithub.com/docker/compose/pull/11862) - Return an error when `--detach` and `--watch` are used together in `up` command [(11890)](https://togithub.com/docker/compose/pull/11890) - Fix dot env file to define `COMPOSE_*` variables[(11889)](https://togithub.com/docker/compose/pull/11889) - Enforce keyboard.Close is always executed to restore terminal [(11896)](https://togithub.com/docker/compose/pull/11896) - Stop `watch` process when associated `up` process is stopped [(11911)](https://togithub.com/docker/compose/pull/11911) - Using as flag of the `up` command, `watch` was blocking process shutdown [(11919)](https://togithub.com/docker/compose/pull/11919) ##### 🔧 Internal - Correct typo in comment [(11877)](https://togithub.com/docker/compose/pull/11877) - Chore(publish): remove unreachable code[(11888)](https://togithub.com/docker/compose/pull/11888) - Update GH actions versions, update engine matrix, bump Golang to 1.21.11 [(11885)](https://togithub.com/docker/compose/pull/11885) - Build: replace uses of archive.CanonicalTarNameForPath [(11910)](https://togithub.com/docker/compose/pull/11910) - Add open watch docs in up menu [(11917)](https://togithub.com/docker/compose/pull/11917) ##### ⚙️ Dependencies - Build(deps): bump github.com/hashicorp/go-version from `1.6.0` to `1.7.0`[(11854)](https://togithub.com/docker/compose/pull/11854) - Build(deps): bump golang.org/x/sys from `0.20.0` to `0.21.0` [(11883)](https://togithub.com/docker/compose/pull/11883) - Build(deps): bump github.com/containerd/containerd from `1.7.17` to `1.7.18` [(11897)](https://togithub.com/docker/compose/pull/11897) - Build(deps): bump github.com/docker/docker from `26.1.3+incompatible` to `26.1.4+incompatible` [(11898)](https://togithub.com/docker/compose/pull/11898) - Bump buildkit to `0.14.0` and buildx to `0.15.0` [(11913)](https://togithub.com/docker/compose/pull/11913) #### New Contributors - [@​IDOMATH](https://togithub.com/IDOMATH) made their first contribution in [https://github.com/docker/compose/pull/11862](https://togithub.com/docker/compose/pull/11862) - [@​korverdev](https://togithub.com/korverdev) made their first contribution in [https://github.com/docker/compose/pull/11877](https://togithub.com/docker/compose/pull/11877) - [@​Lunal98](https://togithub.com/Lunal98) made their first contribution in [https://github.com/docker/compose/pull/11888](https://togithub.com/docker/compose/pull/11888) **Full Changelog**: https://github.com/docker/compose/compare/v2.27.1...v2.27.2 ### [`v2.27.1`](https://togithub.com/docker/compose/releases/tag/v2.27.1) [Compare Source](https://togithub.com/docker/compose/compare/v2.27.0...v2.27.1) #### What's Changed ##### ✨ Improvements - Add new navigation menu to open Compose app configuration in Docker Desktop [(11834)](https://togithub.com/docker/compose/pull/11834) ##### 🐛 Fixes - Allow a local .env file to override compose.yaml sibling .env [(11824)](https://togithub.com/docker/compose/pull/11824) - Fix `--resolve-image-digests` [(11825)](https://togithub.com/docker/compose/pull/11825) - Fix opentelemetry [(11845)](https://togithub.com/docker/compose/pull/11845) ##### 🔧 Internal - Add documentation for `--menu` up option and `COMPOSE_MENU` environment var [(11800)](https://togithub.com/docker/compose/pull/11800) - Backport OpenBSD patches [(11832)](https://togithub.com/docker/compose/pull/11832) - Per endpoint driver opts [(11815)](https://togithub.com/docker/compose/pull/11815) - Add `gui/composeview` as part of available commands [(11851)](https://togithub.com/docker/compose/pull/11851) - Drop `COMPOSE_EXPERIMENTAL_OTEL` as docker/cli has opentelemetry in \[(11850)][https://github.com/docker/compose/pull/11850](https://togithub.com/docker/compose/pull/11850)50 ##### ⚙️ Dependencies - Bump compose-go to `v2.1.1` [(11815)](https://togithub.com/docker/compose/pull/11815) - Bump docker to `v26.1.1` [(11794)](https://togithub.com/docker/compose/pull/11794) - Bump docker to `v26.1.2` [(11811)](https://togithub.com/docker/compose/pull/11811) - Bump Docker engine and cli to `v26.1.3` [(11826)](https://togithub.com/docker/compose/pull/11826) - Build(deps): bump golang.org/x/sys from `0.19.0` to `0.20.0` [(11798)](https://togithub.com/docker/compose/pull/11798) - Build(deps): bump github.com/fsnotify/fsevents from `0.1.1` to `0.2.0` [(11814)](https://togithub.com/docker/compose/pull/11814) - Build(deps): bump github.com/docker/buildx from `0.14.0` to `0.14.1` [(11847)](https://togithub.com/docker/compose/pull/11847) - Build(deps): bump github.com/containerd/containerd from `1.7.16` to `1.7.17` [(11833)](https://togithub.com/docker/compose/pull/11833) #### New Contributors - [@​catap](https://togithub.com/catap) made their first contribution in [https://github.com/docker/compose/pull/11832](https://togithub.com/docker/compose/pull/11832) - [@​robmry](https://togithub.com/robmry) made their first contribution in [https://github.com/docker/compose/pull/11815](https://togithub.com/docker/compose/pull/11815) **Full Changelog**: https://github.com/docker/compose/compare/v2.27.0...v2.27.1
mozilla/sops (mozilla/sops) ### [`v3.9.0`](https://togithub.com/getsops/sops/releases/tag/v3.9.0) [Compare Source](https://togithub.com/mozilla/sops/compare/v3.8.1...v3.9.0) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.linux.amd64 ### Move the binary in to your PATH mv sops-v3.9.0.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.9.0.checksums.txt \ --certificate sops-v3.9.0.checksums.pem \ --signature sops-v3.9.0.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.9.0.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.9.0.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://togithub.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.9.0/sops-v3.9.0.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact \ --provenance-path sops-v3.9.0.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.9.0 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.9.0` - `ghcr.io/getsops/sops:v3.9.0-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.9.0` - `quay.io/getsops/sops:v3.9.0-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.9.0 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://togithub.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `.spdx.sbom.json`. #### What's Changed - Respect aws_profile from Keygroup Config by [@​Kouzukii](https://togithub.com/Kouzukii) in [https://github.com/getsops/sops/pull/1049](https://togithub.com/getsops/sops/pull/1049) - build(deps): Bump the go group with 6 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1327](https://togithub.com/getsops/sops/pull/1327) - build(deps): Bump the go group with 3 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1328](https://togithub.com/getsops/sops/pull/1328) - build(deps): Bump the go group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1330](https://togithub.com/getsops/sops/pull/1330) - build(deps): Bump github.com/docker/docker from 20.10.24+incompatible to 24.0.7+incompatible by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1336](https://togithub.com/getsops/sops/pull/1336) - build(deps): Bump the go group with 3 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1334](https://togithub.com/getsops/sops/pull/1334) - Improve README.rst by [@​Ph0tonic](https://togithub.com/Ph0tonic) in [https://github.com/getsops/sops/pull/1339](https://togithub.com/getsops/sops/pull/1339) - Fix typos by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1337](https://togithub.com/getsops/sops/pull/1337) - build(deps): Bump the go group with 7 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1344](https://togithub.com/getsops/sops/pull/1344) - Add --mac-only-encrypted to compute MAC only over values which end up encrypted by [@​mitar](https://togithub.com/mitar) in [https://github.com/getsops/sops/pull/973](https://togithub.com/getsops/sops/pull/973) - build(deps): Bump the ci group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1347](https://togithub.com/getsops/sops/pull/1347) - build(deps): Bump the go group with 7 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1348](https://togithub.com/getsops/sops/pull/1348) - README: Correctly tag code as yaml-stream by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1350](https://togithub.com/getsops/sops/pull/1350) - build(deps): Bump the go group with 5 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1354](https://togithub.com/getsops/sops/pull/1354) - use getUserConfigDir also in tests by [@​bkreitch](https://togithub.com/bkreitch) in [https://github.com/getsops/sops/pull/1346](https://togithub.com/getsops/sops/pull/1346) - Overwrite home dir in vault test by [@​bkreitch](https://togithub.com/bkreitch) in [https://github.com/getsops/sops/pull/1349](https://togithub.com/getsops/sops/pull/1349) - Allow configuration of indentation for YAML and JSON stores by [@​Ph0tonic](https://togithub.com/Ph0tonic) in [https://github.com/getsops/sops/pull/1273](https://togithub.com/getsops/sops/pull/1273) - build(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1357](https://togithub.com/getsops/sops/pull/1357) - build(deps): Bump the go group with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1360](https://togithub.com/getsops/sops/pull/1360) - build(deps): Bump the ci group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1359](https://togithub.com/getsops/sops/pull/1359) - Fix TestGnuPGHome_Validate by [@​stormentt](https://togithub.com/stormentt) in [https://github.com/getsops/sops/pull/1370](https://togithub.com/getsops/sops/pull/1370) - build(deps): Bump the go group with 6 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1373](https://togithub.com/getsops/sops/pull/1373) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1376](https://togithub.com/getsops/sops/pull/1376) - Docs: indent is used both for encryption and decryption by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1372](https://togithub.com/getsops/sops/pull/1372) - fix a bug where not having a config results in a panic by [@​stormentt](https://togithub.com/stormentt) in [https://github.com/getsops/sops/pull/1371](https://togithub.com/getsops/sops/pull/1371) - Polish the 'sops help' output a bit by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1341](https://togithub.com/getsops/sops/pull/1341) - introduce a --pristine flag to sops exec-env by [@​e-nikolov](https://togithub.com/e-nikolov) in [https://github.com/getsops/sops/pull/912](https://togithub.com/getsops/sops/pull/912) - Allow to pass multiple paths to 'updatekeys' by [@​sj14](https://togithub.com/sj14) in [https://github.com/getsops/sops/pull/1274](https://togithub.com/getsops/sops/pull/1274) - Warn/fail if the wrong number of arguments is provided by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1342](https://togithub.com/getsops/sops/pull/1342) - Allow to override fileName with different value by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1332](https://togithub.com/getsops/sops/pull/1332) - Sort masterkeys according to decryption-order by [@​bkreitch](https://togithub.com/bkreitch) in [https://github.com/getsops/sops/pull/1345](https://togithub.com/getsops/sops/pull/1345) - build(deps): Bump the ci group with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1382](https://togithub.com/getsops/sops/pull/1382) - build(deps): Bump the go group with 5 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1381](https://togithub.com/getsops/sops/pull/1381) - Deprecate the --background option to exec-env and exec-file by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1379](https://togithub.com/getsops/sops/pull/1379) - build(deps): Bump golang.org/x/crypto from 0.16.0 to 0.17.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1383](https://togithub.com/getsops/sops/pull/1383) - build(deps): Bump the ci group with 1 update by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1386](https://togithub.com/getsops/sops/pull/1386) - build(deps): Bump the go group with 5 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1385](https://togithub.com/getsops/sops/pull/1385) - Consolidate Flatten/Unflatten pre/post processing by [@​lancerushing](https://togithub.com/lancerushing) in [https://github.com/getsops/sops/pull/1356](https://togithub.com/getsops/sops/pull/1356) - INI, DotEnv stores: shamir_threshold is an integer by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1394](https://togithub.com/getsops/sops/pull/1394) - Improve integration tests: reformat test code, make sure exit codes are always checked by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1390](https://togithub.com/getsops/sops/pull/1390) - Make check whether file contains invalid keys for encryption dependent on output store by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1393](https://togithub.com/getsops/sops/pull/1393) - Create a constant for the 'sops' metadata key by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1398](https://togithub.com/getsops/sops/pull/1398) - build(deps): Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1408](https://togithub.com/getsops/sops/pull/1408) - build(deps): Bump the ci group with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1425](https://togithub.com/getsops/sops/pull/1425) - build(deps): Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1428](https://togithub.com/getsops/sops/pull/1428) - build(deps): Bump the go group with 10 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1429](https://togithub.com/getsops/sops/pull/1429) - build(deps): Bump the ci group with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1432](https://togithub.com/getsops/sops/pull/1432) - Warn if more than one command is used by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1388](https://togithub.com/getsops/sops/pull/1388) - Move extraction of encryption and rotation options to separate functions by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1389](https://togithub.com/getsops/sops/pull/1389) - Add separate subcommands for encryption, decryption, rotating, editing, and setting values by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1391](https://togithub.com/getsops/sops/pull/1391) - Add basic tests for exec-env and exec-file by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1396](https://togithub.com/getsops/sops/pull/1396) - build with go 1.21 and update dependencies by [@​b-dean](https://togithub.com/b-dean) in [https://github.com/getsops/sops/pull/1427](https://togithub.com/getsops/sops/pull/1427) - build(deps): Bump the go group with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1439](https://togithub.com/getsops/sops/pull/1439) - sops: fix typo in interface name by [@​duthils](https://togithub.com/duthils) in [https://github.com/getsops/sops/pull/1477](https://togithub.com/getsops/sops/pull/1477) - Fix function name in comment by [@​pullmerge](https://togithub.com/pullmerge) in [https://github.com/getsops/sops/pull/1484](https://togithub.com/getsops/sops/pull/1484) - build(deps): Bump the ci group across 1 directory with 9 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1498](https://togithub.com/getsops/sops/pull/1498) - build(deps): Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1454](https://togithub.com/getsops/sops/pull/1454) - build(deps): Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1460](https://togithub.com/getsops/sops/pull/1460) - build(deps): Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1466](https://togithub.com/getsops/sops/pull/1466) - build(deps): Bump golang.org/x/net from 0.21.0 to 0.23.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1489](https://togithub.com/getsops/sops/pull/1489) - build(deps): Bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1503](https://togithub.com/getsops/sops/pull/1503) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1508](https://togithub.com/getsops/sops/pull/1508) - LoadCreationRuleForFile: correctly handle nil without error in callers by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1506](https://togithub.com/getsops/sops/pull/1506) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1510](https://togithub.com/getsops/sops/pull/1510) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1516](https://togithub.com/getsops/sops/pull/1516) - Fix CVE-2024-2660 by [@​TheoBrigitte](https://togithub.com/TheoBrigitte) in [https://github.com/getsops/sops/pull/1519](https://togithub.com/getsops/sops/pull/1519) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1521](https://togithub.com/getsops/sops/pull/1521) - fix(Makefile): set locale to make tests pass by [@​jonasbadstuebner](https://togithub.com/jonasbadstuebner) in [https://github.com/getsops/sops/pull/1492](https://togithub.com/getsops/sops/pull/1492) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1524](https://togithub.com/getsops/sops/pull/1524) - Adjust Makefile to new goreleaser 6.0.0 release by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1526](https://togithub.com/getsops/sops/pull/1526) - build(deps): Bump the go group across 1 directory with 23 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1525](https://togithub.com/getsops/sops/pull/1525) - update documentation for age by [@​tomaszduda23](https://togithub.com/tomaszduda23) in [https://github.com/getsops/sops/pull/1399](https://togithub.com/getsops/sops/pull/1399) - exec-file: if `--filename` is used, use the provided filename without random suffix by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1474](https://togithub.com/getsops/sops/pull/1474) - build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1528](https://togithub.com/getsops/sops/pull/1528) - Do not use DotEnv store for exec-env, but specialized environment serializing code by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1436](https://togithub.com/getsops/sops/pull/1436) - build(deps): Bump the ci group with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1534](https://togithub.com/getsops/sops/pull/1534) - Decryption: do not fail if no matching creation_rule is present in config file by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1434](https://togithub.com/getsops/sops/pull/1434) - add filestatus command by [@​endorama](https://togithub.com/endorama) in [https://github.com/getsops/sops/pull/545](https://togithub.com/getsops/sops/pull/545) - build(deps): Bump the go group across 1 directory with 16 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1540](https://togithub.com/getsops/sops/pull/1540) - build(deps): Bump the go group across 1 directory with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/getsops/sops/pull/1543](https://togithub.com/getsops/sops/pull/1543) - add command unset by [@​duthils](https://togithub.com/duthils) in [https://github.com/getsops/sops/pull/1475](https://togithub.com/getsops/sops/pull/1475) - Update sops.go comment by [@​rjeczkow](https://togithub.com/rjeczkow) in [https://github.com/getsops/sops/pull/1544](https://togithub.com/getsops/sops/pull/1544) - Support using comments to select parts to encrypt by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1392](https://togithub.com/getsops/sops/pull/1392) - Feature: `merge` key for key groups and *make keys unique* by [@​jonasbadstuebner](https://togithub.com/jonasbadstuebner) in [https://github.com/getsops/sops/pull/1493](https://togithub.com/getsops/sops/pull/1493) - Update all go deps by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1545](https://togithub.com/getsops/sops/pull/1545) - Release 3.9.0 by [@​felixfontein](https://togithub.com/felixfontein) in [https://github.com/getsops/sops/pull/1546](https://togithub.com/getsops/sops/pull/1546) #### New Contributors - [@​Kouzukii](https://togithub.com/Kouzukii) made their first contribution in [https://github.com/getsops/sops/pull/1049](https://togithub.com/getsops/sops/pull/1049) - [@​Ph0tonic](https://togithub.com/Ph0tonic) made their first contribution in [https://github.com/getsops/sops/pull/1339](https://togithub.com/getsops/sops/pull/1339) - [@​bkreitch](https://togithub.com/bkreitch) made their first contribution in [https://github.com/getsops/sops/pull/1346](https://togithub.com/getsops/sops/pull/1346) - [@​stormentt](https://togithub.com/stormentt) made their first contribution in [https://github.com/getsops/sops/pull/1370](https://togithub.com/getsops/sops/pull/1370) - [@​e-nikolov](https://togithub.com/e-nikolov) made their first contribution in [https://github.com/getsops/sops/pull/912](https://togithub.com/getsops/sops/pull/912) - [@​sj14](https://togithub.com/sj14) made their first contribution in [https://github.com/getsops/sops/pull/1274](https://togithub.com/getsops/sops/pull/1274) - [@​lancerushing](https://togithub.com/lancerushing) made their first contribution in [https://github.com/getsops/sops/pull/1356](https://togithub.com/getsops/sops/pull/1356) - [@​b-dean](https://togithub.com/b-dean) made their first contribution in [https://github.com/getsops/sops/pull/1427](https://togithub.com/getsops/sops/pull/1427) - [@​duthils](https://togithub.com/duthils) made their first contribution in [https://github.com/getsops/sops/pull/1477](https://togithub.com/getsops/sops/pull/1477) - [@​pullmerge](https://togithub.com/pullmerge) made their first contribution in [https://github.com/getsops/sops/pull/1484](https://togithub.com/getsops/sops/pull/1484) - [@​TheoBrigitte](https://togithub.com/TheoBrigitte) made their first contribution in [https://github.com/getsops/sops/pull/1519](https://togithub.com/getsops/sops/pull/1519) - [@​jonasbadstuebner](https://togithub.com/jonasbadstuebner) made their first contribution in [https://github.com/getsops/sops/pull/1492](https://togithub.com/getsops/sops/pull/1492) - [@​tomaszduda23](https://togithub.com/tomaszduda23) made their first contribution in [https://github.com/getsops/sops/pull/1399](https://togithub.com/getsops/sops/pull/1399) - [@​endorama](https://togithub.com/endorama) made their first contribution in [https://github.com/getsops/sops/pull/545](https://togithub.com/getsops/sops/pull/545) - [@​rjeczkow](https://togithub.com/rjeczkow) made their first contribution in [https://github.com/getsops/sops/pull/1544](https://togithub.com/getsops/sops/pull/1544) **Full Changelog**: https://github.com/getsops/sops/compare/v3.8.1...v3.9.0
containous/traefik (traefik) ### [`v3.0.4`](https://togithub.com/traefik/traefik/releases/tag/v3.0.4) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.4...v3.0.4) CVE: [CVE-2024-39321](https://www.cve.org/CVERecord?id=CVE-2024-39321) (Advisory [GHSA-gxrv-wf35-62w9](https://togithub.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9)) **Documentation:** - **\[k8s]** Fix some documentation links ([#​10841](https://togithub.com/traefik/traefik/pull/10841) by [rtribotte](https://togithub.com/rtribotte)) - Update maintainers ([#​10827](https://togithub.com/traefik/traefik/pull/10827) by [emilevauge](https://togithub.com/emilevauge)) **Misc:** - Merge current v2.11 into v3.0 ([#​10869](https://togithub.com/traefik/traefik/pull/10869) by [kevinpollet](https://togithub.com/kevinpollet)) - Merge current v2.11 into v3.0 ([#​10851](https://togithub.com/traefik/traefik/pull/10851) by [mmatur](https://togithub.com/mmatur)) - Merge current v2.11 into v3.0 ([#​10831](https://togithub.com/traefik/traefik/pull/10831) by [mmatur](https://togithub.com/mmatur)) ### [`v3.0.4`](https://togithub.com/traefik/traefik/releases/tag/v3.0.4) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.3...v3.0.4) CVE: [CVE-2024-39321](https://www.cve.org/CVERecord?id=CVE-2024-39321) (Advisory [GHSA-gxrv-wf35-62w9](https://togithub.com/traefik/traefik/security/advisories/GHSA-gxrv-wf35-62w9)) **Documentation:** - **\[k8s]** Fix some documentation links ([#​10841](https://togithub.com/traefik/traefik/pull/10841) by [rtribotte](https://togithub.com/rtribotte)) - Update maintainers ([#​10827](https://togithub.com/traefik/traefik/pull/10827) by [emilevauge](https://togithub.com/emilevauge)) **Misc:** - Merge current v2.11 into v3.0 ([#​10869](https://togithub.com/traefik/traefik/pull/10869) by [kevinpollet](https://togithub.com/kevinpollet)) - Merge current v2.11 into v3.0 ([#​10851](https://togithub.com/traefik/traefik/pull/10851) by [mmatur](https://togithub.com/mmatur)) - Merge current v2.11 into v3.0 ([#​10831](https://togithub.com/traefik/traefik/pull/10831) by [mmatur](https://togithub.com/mmatur)) ### [`v3.0.3`](https://togithub.com/containous/traefik/blob/HEAD/CHANGELOG.md#v303-2024-06-18) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.3...v3.0.3) [All Commits](https://togithub.com/traefik/traefik/compare/v3.0.2...v3.0.3) **Misc:** - Merge v2.11 into v3.0 ([#​10823](https://togithub.com/traefik/traefik/pull/10823) by [kevinpollet](https://togithub.com/kevinpollet)) - Merge v2.11 into v3.0 ([#​10810](https://togithub.com/traefik/traefik/pull/10810) by [mmatur](https://togithub.com/mmatur)) ### [`v3.0.3`](https://togithub.com/containous/traefik/blob/HEAD/CHANGELOG.md#v303-2024-06-18) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.2...v3.0.3) [All Commits](https://togithub.com/traefik/traefik/compare/v3.0.2...v3.0.3) **Misc:** - Merge v2.11 into v3.0 ([#​10823](https://togithub.com/traefik/traefik/pull/10823) by [kevinpollet](https://togithub.com/kevinpollet)) - Merge v2.11 into v3.0 ([#​10810](https://togithub.com/traefik/traefik/pull/10810) by [mmatur](https://togithub.com/mmatur)) ### [`v3.0.2`](https://togithub.com/containous/traefik/blob/HEAD/CHANGELOG.md#v302-2024-06-10) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.2...v3.0.2) [All Commits](https://togithub.com/traefik/traefik/compare/v3.0.1...v3.0.2) **Bug fixes:** - **\[logs]** Bump OTel dependencies ([#​10763](https://togithub.com/traefik/traefik/pull/10763) by [DrFaust92](https://togithub.com/DrFaust92)) - **\[logs]** Append to log file if it exists ([#​10756](https://togithub.com/traefik/traefik/pull/10756) by [lbenguigui](https://togithub.com/lbenguigui)) - **\[metrics]** Fix service name label_replace in Grafana ([#​10758](https://togithub.com/traefik/traefik/pull/10758) by [xdavidwu](https://togithub.com/xdavidwu)) - **\[middleware]** Forward the correct status code when compression is disabled within the Brotli handler ([#​10780](https://togithub.com/traefik/traefik/pull/10780) by [rtribotte](https://togithub.com/rtribotte)) - **\[middleware]** Support Accept-Encoding header weights with Compress middleware ([#​10777](https://togithub.com/traefik/traefik/pull/10777) by [ldez](https://togithub.com/ldez)) **Documentation:** - Update v2 > v3 migration guide ([#​10728](https://togithub.com/traefik/traefik/pull/10728) by [0anas01](https://togithub.com/0anas01)) **Misc:** - Merge current v2.11 into v3.0 ([#​10796](https://togithub.com/traefik/traefik/pull/10796) by [kevinpollet](https://togithub.com/kevinpollet)) - Merge current v2.11 into v3.0 ([#​10781](https://togithub.com/traefik/traefik/pull/10781) by [ldez](https://togithub.com/ldez)) ### [`v3.0.2`](https://togithub.com/containous/traefik/blob/HEAD/CHANGELOG.md#v302-2024-06-10) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.1...v3.0.2) [All Commits](https://togithub.com/traefik/traefik/compare/v3.0.1...v3.0.2) **Bug fixes:** - **\[logs]** Bump OTel dependencies ([#​10763](https://togithub.com/traefik/traefik/pull/10763) by [DrFaust92](https://togithub.com/DrFaust92)) - **\[logs]** Append to log file if it exists ([#​10756](https://togithub.com/traefik/traefik/pull/10756) by [lbenguigui](https://togithub.com/lbenguigui)) - **\[metrics]** Fix service name label_replace in Grafana ([#​10758](https://togithub.com/traefik/traefik/pull/10758) by [xdavidwu](https://togithub.com/xdavidwu)) - **\[middleware]** Forward the correct status code when compression is disabled within the Brotli handler ([#​10780](https://togithub.com/traefik/traefik/pull/10780) by [rtribotte](https://togithub.com/rtribotte)) - **\[middleware]** Support Accept-Encoding header weights with Compress middleware ([#​10777](https://togithub.com/traefik/traefik/pull/10777) by [ldez](https://togithub.com/ldez)) **Documentation:** - Update v2 > v3 migration guide ([#​10728](https://togithub.com/traefik/traefik/pull/10728) by [0anas01](https://togithub.com/0anas01)) **Misc:** - Merge current v2.11 into v3.0 ([#​10796](https://togithub.com/traefik/traefik/pull/10796) by [kevinpollet](https://togithub.com/kevinpollet)) - Merge current v2.11 into v3.0 ([#​10781](https://togithub.com/traefik/traefik/pull/10781) by [ldez](https://togithub.com/ldez)) ### [`v3.0.1`](https://togithub.com/containous/traefik/blob/HEAD/CHANGELOG.md#v301-2024-05-22) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.1...v3.0.1) [All Commits](https://togithub.com/traefik/traefik/compare/v3.0.0...v3.0.1) **Bug fixes:** - **\[k8s/ingress]** Fix rule syntax version for all internal routers ([#​10689](https://togithub.com/traefik/traefik/pull/10689) by [HalloTschuess](https://togithub.com/HalloTschuess)) - **\[metrics,tracing]** Allow empty configuration for OpenTelemetry metrics and tracing ([#​10729](https://togithub.com/traefik/traefik/pull/10729) by [rtribotte](https://togithub.com/rtribotte)) - **\[provider,tls]** Bump tscert dependency to [`28a91b6`](https://togithub.com/containous/traefik/commit/28a91b69a046) ([#​10668](https://togithub.com/traefik/traefik/pull/10668) by [kevinpollet](https://togithub.com/kevinpollet)) - **\[rules,tcp]** Fix the rule syntax mechanism for TCP ([#​10680](https://togithub.com/traefik/traefik/pull/10680) by [lbenguigui](https://togithub.com/lbenguigui)) - **\[tls,server]** Remove deadlines when handling PostgreSQL connections ([#​10675](https://togithub.com/traefik/traefik/pull/10675) by [rtribotte](https://togithub.com/rtribotte)) - **\[webui]** Add support for IP White list ([#​10740](https://togithub.com/traefik/traefik/pull/10740) by [davidbaptista](https://togithub.com/davidbaptista)) **Documentation:** - **\[http3]** Add link to the new http3 config in migration ([#​10673](https://togithub.com/traefik/traefik/pull/10673) by [yyewolf](https://togithub.com/yyewolf)) - **\[logs]** Fix log.compress value ([#​10716](https://togithub.com/traefik/traefik/pull/10716) by [mmatur](https://togithub.com/mmatur)) - **\[metrics]** Fix OTel documentation ([#​10723](https://togithub.com/traefik/traefik/pull/10723) by [nmengin](https://togithub.com/nmengin)) - **\[middleware]** Fix doc consistency forwardauth ([#​10724](https://togithub.com/traefik/traefik/pull/10724) by [mmatur](https://togithub.com/mmatur)) - **\[middleware]** Remove providers not supported in documentation ([#​10725](https://togithub.com/traefik/traefik/pull/10725) by [mmatur](https://togithub.com/mmatur)) - **\[rules]** Fix typo in PathRegexp explanation ([#​10719](https://togithub.com/traefik/traefik/pull/10719) by [BreadInvasion](https://togithub.com/BreadInvasion)) - **\[rules]** Fix router documentation example ([#​10704](https://togithub.com/traefik/traefik/pull/10704) by [ldez](https://togithub.com/ldez)) ### [`v3.0.1`](https://togithub.com/containous/traefik/blob/HEAD/CHANGELOG.md#v301-2024-05-22) [Compare Source](https://togithub.com/containous/traefik/compare/v3.0.0...v3.0.1) [All Commits](https://togithub.com/traefik/traefik/compare/v3.0.0...v3.0.1) **Bug fixes:** - **\[k8s/ingress]** Fix rule syntax version for all internal routers ([#​10689](https://togithub.com/traefik/traefik/pull/10689) by [HalloTschuess](https://togithub.com/HalloTschuess)) - **\[metrics,tracing]** Allow empty configuration for OpenTelemetry metrics and tracing ([#​10729](https://togithub.com/traefik/traefik/pull/10729) by [rtribotte](https://togithub.com/rtribotte)) - **\[provider,tls]** Bump tscert dependency to [`28a91b6`](https://togithub.com/containous/traefik/commit/28a91b69a046) ([#​10668](https://togithub.com/traefik/traefik/pull/10668) by [kevinpollet](https://togithub.com/kevinpollet)) - **\[rules,tcp]** Fix the rule syntax mechanism for TCP ([#​10680](https://togithub.com/traefik/traefik/pull/10680) by [lbenguigui](https://togithub.com/lbenguigui)) - **\[tls,server]** Remove deadlines when handling PostgreSQL connections ([#​10675](https://togithub.com/traefik/traefik/pull/10675) by [rtribotte](https://togithub.com/rtribotte)) - **\[webui]** Add support for IP White list ([#​10740](https://togithub.com/traefik/traefik/pull/10740) by [davidbaptista](https://togithub.com/davidbaptista)) **Documentation:** - **\[http3]** Add link to the new http3 config in migration ([#​10673](https://togithub.com/traefik/traefik/pull/10673) by [yyewolf](https://togithub.com/yyewolf)) - **\[logs]** Fix log.compress value ([#​10716](https://togithub.com/traefik/traefik/pull/10716) by [mmatur](https://togithub.com/mmatur)) - **\[metrics]** Fix OTel documentation ([#​10723](https://togithub.com/traefik/traefik/pull/10723) by [nmengin](https://togithub.com/nmengin)) - **\[middleware]** Fix doc consistency forwardauth ([#​10724](https://togithub.com/traefik/traefik/pull/10724) by [mmatur](https://togithub.com/mmatur)) - **\[middleware]** Remove providers not supported in documentation ([#​10725](https://togithub.com/traefik/traefik/pull/10725) by [mmatur](https://togithub.com/mmatur)) - **\[rules]** Fix typo in PathRegexp explanation ([#​10719](https://togithub.com/traefik/traefik/pull/10719) by [BreadInvasion](https://togithub.com/BreadInvasion)) - **\[rules]** Fix router documentation example ([#​10704](https://togithub.com/traefik/traefik/pull/10704) by [ldez](https://togithub.com/ldez))

Configuration

📅 Schedule: Branch creation - "after 8am and before 8pm every weekday" in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR has been generated by Mend Renovate. View repository job log here.