diff --git a/.github/actions/save-logs/action.yaml b/.github/actions/save-logs/action.yaml index 8b888facc..e258fc71d 100644 --- a/.github/actions/save-logs/action.yaml +++ b/.github/actions/save-logs/action.yaml @@ -69,7 +69,7 @@ runs: echo "::endgroup::" shell: bash - - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + - uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: debug-log${{ inputs.suffix }} retention-days: 7 diff --git a/.github/bundles/aks/uds-bundle.yaml b/.github/bundles/aks/uds-bundle.yaml index 3f7e636fb..2182249b4 100644 --- a/.github/bundles/aks/uds-bundle.yaml +++ b/.github/bundles/aks/uds-bundle.yaml @@ -12,7 +12,7 @@ metadata: packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.45.0 + ref: v0.46.0 - name: core path: ../../../build diff --git a/.github/bundles/eks/uds-bundle.yaml b/.github/bundles/eks/uds-bundle.yaml index c48f29aca..1b407d2f4 100644 --- a/.github/bundles/eks/uds-bundle.yaml +++ b/.github/bundles/eks/uds-bundle.yaml @@ -12,7 +12,7 @@ metadata: packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.45.0 + ref: v0.46.0 - name: core path: ../../../build diff --git a/.github/bundles/rke2/uds-bundle.yaml b/.github/bundles/rke2/uds-bundle.yaml index 9e77445b1..a8e7eadaa 100644 --- a/.github/bundles/rke2/uds-bundle.yaml +++ b/.github/bundles/rke2/uds-bundle.yaml @@ -16,7 +16,7 @@ packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.45.0 + ref: v0.46.0 overrides: zarf-registry: docker-registry: diff --git a/.github/test-infra/aws/rke2/irsa.tf b/.github/test-infra/aws/rke2/irsa.tf index 34cabc0c7..789b8816b 100644 --- a/.github/test-infra/aws/rke2/irsa.tf +++ b/.github/test-infra/aws/rke2/irsa.tf @@ -36,7 +36,7 @@ resource "aws_secretsmanager_secret_version" "private_key" { # Public bucket to host OIDC files module "oidc_bucket" { source = "terraform-aws-modules/s3-bucket/aws" - version = "4.3.0" + version = "4.4.0" bucket = "${var.environment}-oidc-${random_string.ssm.result}" force_destroy = var.force_destroy diff --git a/.github/test-infra/aws/rke2/versions.tf b/.github/test-infra/aws/rke2/versions.tf index 128cde057..8ffa4e29c 100644 --- a/.github/test-infra/aws/rke2/versions.tf +++ b/.github/test-infra/aws/rke2/versions.tf @@ -6,7 +6,7 @@ terraform { } required_providers { aws = { - version = "~> 5.82.0" + version = "~> 5.83.0" } random = { version = "~> 3.6.0" diff --git a/.github/workflows/compliance.yaml b/.github/workflows/compliance.yaml index 2fd73739d..01c4fb2de 100644 --- a/.github/workflows/compliance.yaml +++ b/.github/workflows/compliance.yaml @@ -69,7 +69,7 @@ jobs: ghToken: ${{ secrets.GITHUB_TOKEN }} - name: Upload Evaluated Assessment - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: ${{ inputs.flavor }}-assessment-results path: ./compliance/oscal-assessment-results.yaml diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml index cbd9b0551..b7981c39a 100644 --- a/.github/workflows/scorecard.yaml +++ b/.github/workflows/scorecard.yaml @@ -39,7 +39,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: Upload artifact - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: SARIF file path: results.sarif @@ -47,6 +47,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@48ab28a6f5dbc2a99bf1e0131198dd8f1df78169 # v3.28.0 + uses: github/codeql-action/upload-sarif@b6a472f63d85b9c78a3ac5e89422239fc15e9b3c # v3.28.1 with: sarif_file: results.sarif diff --git a/.github/workflows/test.yaml b/.github/workflows/test.yaml index 5053f1adf..42fd38f2b 100644 --- a/.github/workflows/test.yaml +++ b/.github/workflows/test.yaml @@ -80,7 +80,7 @@ jobs: - name: Upload Assessment if: ${{ inputs.package == 'all' && inputs.test_type == 'install' }} - uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0 + uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0 with: name: ${{ inputs.flavor }}-assessment-results path: ./compliance/oscal-assessment-results.yaml diff --git a/bundles/k3d-slim-dev/uds-bundle.yaml b/bundles/k3d-slim-dev/uds-bundle.yaml index 43d28c8c7..ffcfc99be 100644 --- a/bundles/k3d-slim-dev/uds-bundle.yaml +++ b/bundles/k3d-slim-dev/uds-bundle.yaml @@ -32,7 +32,7 @@ packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.45.0 + ref: v0.46.0 - name: core-base path: ../../build/ diff --git a/bundles/k3d-standard/uds-bundle.yaml b/bundles/k3d-standard/uds-bundle.yaml index e59705dd3..978f5c830 100644 --- a/bundles/k3d-standard/uds-bundle.yaml +++ b/bundles/k3d-standard/uds-bundle.yaml @@ -32,7 +32,7 @@ packages: - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.45.0 + ref: v0.46.0 - name: core path: ../../build/ diff --git a/src/test/app-admin.yaml b/src/test/app-admin.yaml index 09e771b36..b8de5aad5 100644 --- a/src/test/app-admin.yaml +++ b/src/test/app-admin.yaml @@ -73,7 +73,7 @@ spec: spec: serviceAccountName: httpbin containers: - - image: docker.io/kong/httpbin:0.2.1 + - image: docker.io/kong/httpbin:0.2.3 imagePullPolicy: IfNotPresent name: httpbin resources: diff --git a/src/test/app-authservice-tenant.yaml b/src/test/app-authservice-tenant.yaml index 4e0995dff..14b87b056 100644 --- a/src/test/app-authservice-tenant.yaml +++ b/src/test/app-authservice-tenant.yaml @@ -73,7 +73,7 @@ spec: spec: serviceAccountName: httpbin containers: - - image: docker.io/kong/httpbin:0.2.1 + - image: docker.io/kong/httpbin:0.2.3 imagePullPolicy: IfNotPresent name: httpbin resources: diff --git a/src/test/zarf.yaml b/src/test/zarf.yaml index 8972946b2..cfdfe1dfe 100644 --- a/src/test/zarf.yaml +++ b/src/test/zarf.yaml @@ -21,7 +21,7 @@ components: files: - "app-authservice-tenant.yaml" images: - - docker.io/kong/httpbin:0.2.1 + - docker.io/kong/httpbin:0.2.3 - hashicorp/http-echo:latest - name: podinfo diff --git a/tasks/create.yaml b/tasks/create.yaml index 9b99fccce..9eae072b8 100644 --- a/tasks/create.yaml +++ b/tasks/create.yaml @@ -3,7 +3,7 @@ includes: - - common: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.1/tasks/create.yaml + - common: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.2/tasks/create.yaml variables: - name: FLAVOR diff --git a/tasks/iac.yaml b/tasks/iac.yaml index 7eec9f854..f2585da1d 100644 --- a/tasks/iac.yaml +++ b/tasks/iac.yaml @@ -22,7 +22,7 @@ tasks: - name: install-eksctl actions: - cmd: | - curl --silent --location "https://github.com/weaveworks/eksctl/releases/download/v0.199.0/eksctl_Linux_amd64.tar.gz" | tar xz -C /tmp + curl --silent --location "https://github.com/weaveworks/eksctl/releases/download/v0.200.0/eksctl_Linux_amd64.tar.gz" | tar xz -C /tmp sudo mv /tmp/eksctl /usr/local/bin - name: create-cluster diff --git a/tasks/lint.yaml b/tasks/lint.yaml index 0be7b6c10..9191165d3 100644 --- a/tasks/lint.yaml +++ b/tasks/lint.yaml @@ -2,7 +2,7 @@ # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial includes: - - remote: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.1/tasks/lint.yaml + - remote: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.2/tasks/lint.yaml tasks: - name: fix diff --git a/tasks/setup.yaml b/tasks/setup.yaml index daa954134..feb3bc0c0 100644 --- a/tasks/setup.yaml +++ b/tasks/setup.yaml @@ -15,4 +15,4 @@ tasks: - description: "Initialize the cluster with Zarf" # renovate: datasource=github-tags depName=zarf-dev/zarf versioning=semver - cmd: "uds zarf package deploy oci://ghcr.io/zarf-dev/packages/init:v0.45.0 --confirm --no-progress" + cmd: "uds zarf package deploy oci://ghcr.io/zarf-dev/packages/init:v0.46.0 --confirm --no-progress" diff --git a/tasks/test.yaml b/tasks/test.yaml index 39d6add6d..bc1c54b04 100644 --- a/tasks/test.yaml +++ b/tasks/test.yaml @@ -9,7 +9,7 @@ includes: - base-layer: ../packages/base/tasks.yaml - idam-layer: ../packages/identity-authorization/tasks.yaml - common-setup: https://raw.githubusercontent.com/defenseunicorns/uds-common/refs/tags/v0.13.1/tasks/setup.yaml - - compliance: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.1/tasks/compliance.yaml + - compliance: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.6.2/tasks/compliance.yaml tasks: - name: base diff --git a/test/jest/package-lock.json b/test/jest/package-lock.json index b761b230e..2e6e2420b 100644 --- a/test/jest/package-lock.json +++ b/test/jest/package-lock.json @@ -1245,9 +1245,9 @@ "dev": true }, "node_modules/@types/node": { - "version": "22.10.5", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.5.tgz", - "integrity": "sha512-F8Q+SeGimwOo86fiovQh8qiXfFEh2/ocYv7tU5pJ3EXMSSxk1Joj5wefpFK2fHTf/N6HKGSxIDBT9f3gCxXPkQ==", + "version": "22.10.6", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.6.tgz", + "integrity": "sha512-qNiuwC4ZDAUNcY47xgaSuS92cjf8JbSUoaKS77bmLG1rU7MlATVSiw/IlrjtIyyskXBZ8KkNfjK/P5na7rgXbQ==", "dev": true, "license": "MIT", "dependencies": { @@ -4514,9 +4514,9 @@ } }, "node_modules/typescript": { - "version": "5.7.2", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.7.2.tgz", - "integrity": "sha512-i5t66RHxDvVN40HfDd1PsEThGNnlMCMT3jMUuoh9/0TaqWevNontacunWyN02LA9/fIbEWlcHZcgTKb9QoaLfg==", + "version": "5.7.3", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.7.3.tgz", + "integrity": "sha512-84MVSjMEHP+FQRPy3pX9sTVV/INIex71s9TL2Gm5FG/WG1SqXeKyZ0k7/blY/4FdOzI12CBy1vGc4og/eus0fw==", "dev": true, "license": "Apache-2.0", "bin": { diff --git a/test/playwright/package-lock.json b/test/playwright/package-lock.json index 50d771765..3625846ac 100644 --- a/test/playwright/package-lock.json +++ b/test/playwright/package-lock.json @@ -28,9 +28,9 @@ } }, "node_modules/@types/node": { - "version": "22.10.5", - "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.5.tgz", - "integrity": "sha512-F8Q+SeGimwOo86fiovQh8qiXfFEh2/ocYv7tU5pJ3EXMSSxk1Joj5wefpFK2fHTf/N6HKGSxIDBT9f3gCxXPkQ==", + "version": "22.10.6", + "resolved": "https://registry.npmjs.org/@types/node/-/node-22.10.6.tgz", + "integrity": "sha512-qNiuwC4ZDAUNcY47xgaSuS92cjf8JbSUoaKS77bmLG1rU7MlATVSiw/IlrjtIyyskXBZ8KkNfjK/P5na7rgXbQ==", "dev": true, "license": "MIT", "dependencies": { @@ -84,9 +84,9 @@ } }, "node_modules/typescript": { - "version": "5.7.2", - "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.7.2.tgz", - "integrity": "sha512-i5t66RHxDvVN40HfDd1PsEThGNnlMCMT3jMUuoh9/0TaqWevNontacunWyN02LA9/fIbEWlcHZcgTKb9QoaLfg==", + "version": "5.7.3", + "resolved": "https://registry.npmjs.org/typescript/-/typescript-5.7.3.tgz", + "integrity": "sha512-84MVSjMEHP+FQRPy3pX9sTVV/INIex71s9TL2Gm5FG/WG1SqXeKyZ0k7/blY/4FdOzI12CBy1vGc4og/eus0fw==", "dev": true, "license": "Apache-2.0", "bin": {