From ea6496ecfd421e5cbb988dc56d87e547ab011fb0 Mon Sep 17 00:00:00 2001 From: Oliver Slater Date: Tue, 21 Jul 2026 14:15:47 +0100 Subject: [PATCH 1/4] build(deps): bump the terraform-minor-patch group across 3 directories with 4 updates Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/iam directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/iam/aws](https://github.com/terraform-aws-modules/terraform-aws-iam). Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/lambda directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/lambda/aws](https://github.com/terraform-aws-modules/terraform-aws-lambda). Bumps the terraform-minor-patch group with 2 updates in the /infrastructure/modules/s3-bucket directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws) and [terraform-aws-modules/s3-bucket/aws](https://github.com/terraform-aws-modules/terraform-aws-s3-bucket). --- .../modules/iam/.terraform.lock.hcl | 42 +++++++++---------- infrastructure/modules/iam/README.md | 4 +- infrastructure/modules/iam/main.tf | 4 +- .../modules/lambda/.terraform.lock.hcl | 42 +++++++++---------- infrastructure/modules/lambda/README.md | 4 +- infrastructure/modules/lambda/main.tf | 2 +- .../modules/s3-bucket/.terraform.lock.hcl | 42 +++++++++---------- infrastructure/modules/s3-bucket/README.md | 2 +- infrastructure/modules/s3-bucket/main.tf | 2 +- 9 files changed, 72 insertions(+), 72 deletions(-) diff --git a/infrastructure/modules/iam/.terraform.lock.hcl b/infrastructure/modules/iam/.terraform.lock.hcl index bcdf2549..19b85462 100644 --- a/infrastructure/modules/iam/.terraform.lock.hcl +++ b/infrastructure/modules/iam/.terraform.lock.hcl @@ -2,29 +2,29 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "6.50.0" + version = "6.55.0" constraints = ">= 6.14.0, >= 6.28.0" hashes = [ - "h1:8y10QFtGLHl3pF/R1/hO7VCPHTexm1whc0BfuG4uruw=", - "h1:D8uNiOpl3UkAX4zI5T47ALMiRFXTa1XfdQC+TBu3RmE=", - "h1:Uf2LlEibaBdksEUkOoiQbzEbkIgOR6tUE/0tCd36Xzk=", - "h1:gnyVeH3L2erQ/di0a4x5i0AlsIcdLjyK5+Vmbf3qyck=", - "h1:mNg4vBXXqbO0hY2jCxhOyKVrnjEO0viTG2EY4oAlWaQ=", - "zh:0072806bb262c6d86bc25b4a75750e469881144c14818afdba7b82db840e1588", - "zh:1ebc2dae335dad7a8b16a1985b69a63a14954282bb44fdba7d5103f77551ac7b", - "zh:2dab48fe8f3193b8216d578ac1e3674fa566435cc7dbce2953d55b72e31d0241", - "zh:2fc3d3029c2b7429472391ef339672e1fca8e6ff32c8a519bf3acedafa7e24fe", - "zh:38a36e64e7212f6cedac861ea4d449cce07131b3378de601bf9d49a99e000208", - "zh:3ac70758ed251ce78b7f541a5a79cc6fe56474412783ae1decef719bdd0f30bf", - "zh:4385d3903e685bddb2b8005b4eb7db89f030267d4d03c7d792d2f5e739cc874a", - "zh:4cce0760b87fbafd51f30faec2a737f4183b7c615f4a86557f7d3c893a610dc5", - "zh:4feaeed18694239b896c6415d9a1e5ef89e1da4f4ad60924aa0522adeb1f6599", - "zh:502fca2be1c95f443c3e67d0555601d1de65b4ca82d197c059e9c868360e3a0a", - "zh:57d037f6fdd045f2660909c3bdface9622d81165ce647479cba98d1f353c5eab", - "zh:5dc5a0b915c2ac5256d909458f5c8e40b35f78b3a36ea893c86624eaf6c54e37", + "h1:3OSTaIx7d6T+N6gwNtw0gR+IwExbHqb0y4v529Vey/4=", + "h1:99+MYIg/y3gmsZkhAcffwOpMat+liRJ8b+eyCIax6hk=", + "h1:QIQoZv637BE40vg7/0gf/5gQbY/ZTngSuJWDl7fJr2s=", + "h1:tBAaeIprhWQmlsq/CoHLXWOLZZYRdCVA1wbNv2co55g=", + "h1:yM6149NHHl8NWU/OCIV2/x6tLrNgDTRKgR8cVrbk9BU=", + "zh:1161fb2d032ad982587b2662a5229e5d06598c5b7fc5c86b2ad64d49225047cd", + "zh:1f412b09bbece216da0ba08106f3bbb42d8c8971c02d032ab518629915086966", + "zh:2c8b789450bb67181b5f0546714bf6336ba21183c307e001fe848c22dac1f8a6", + "zh:31eec91f896743bab641c06930fe0c277143f17dd25b2510991c08e013c8da67", + "zh:4419d3e906f1ca9c99703b2c4c5082f58aaeb8b8b82e2657a187a6bdf42d8881", + "zh:58e9a7e0581e8cd5f35eb2ce308b2d572073c112facdd0a60aee032146b146b5", + "zh:72fdb02a0cb6351626df460c047d1471f26dad781160cc95abd84f8849daf950", "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425", - "zh:b84c87c58a320adbb2c74a4cad03ae5aac7f2eae21db26f00fdde98c8c4d4523", - "zh:c895f1d5cbcbeff77850ac99efd36bde0048d4e909b296882331b9b9ebf48cfa", - "zh:ead82831683619124597a1f170dd31e9b293e9cf22f558cb166d5e734fcd11e4", + "zh:aa527913348c33969d80527d424917876657741493f294e160f1191dbc7c1d45", + "zh:b66e5abd756064f55ff06e1ef83eb8d0b7ea6d96625cfcd24408df5472d5f899", + "zh:ba9ab4ba151ac69a854407e27d3a12a2eb260fc4205bbb5c25618e6c8ce69568", + "zh:e1bf63e8a6b9790836f74848b458cdf679a7841e66a25b4b9f6034efc9310b34", + "zh:ec4adcec426f7181faa5de976cedbd35e15d7d1ac2914bbd9cab9f4f8b018b7f", + "zh:f17b485ae74bb4272d2bd680e7d47b0cfd073d192a4f10c8bdfd9d9f25c990a1", + "zh:f6650c2d0d3e614c3ccd623bb027a52bce1f5285c4f1824a26f265eb7529a45a", + "zh:f7383732f8704099db2166a3516e0a803bf46f42c30cd20a0471b55658ae6e51", ] } diff --git a/infrastructure/modules/iam/README.md b/infrastructure/modules/iam/README.md index d50dfb41..be3ae25d 100644 --- a/infrastructure/modules/iam/README.md +++ b/infrastructure/modules/iam/README.md @@ -173,10 +173,10 @@ No providers. | Name | Source | Version | | ---- | ------ | ------- | -| [policies](#module\_policies) | terraform-aws-modules/iam/aws//modules/iam-policy | 6.6.0 | +| [policies](#module\_policies) | terraform-aws-modules/iam/aws//modules/iam-policy | 6.6.1 | | [policy\_label](#module\_policy\_label) | ../tags | n/a | | [role\_label](#module\_role\_label) | ../tags | n/a | -| [roles](#module\_roles) | terraform-aws-modules/iam/aws//modules/iam-role | 6.6.0 | +| [roles](#module\_roles) | terraform-aws-modules/iam/aws//modules/iam-role | 6.6.1 | | [this](#module\_this) | ../tags | n/a | ## Resources diff --git a/infrastructure/modules/iam/main.tf b/infrastructure/modules/iam/main.tf index 2c1e3b84..e31bb23a 100644 --- a/infrastructure/modules/iam/main.tf +++ b/infrastructure/modules/iam/main.tf @@ -39,7 +39,7 @@ module "role_label" { module "policies" { source = "terraform-aws-modules/iam/aws//modules/iam-policy" - version = "6.6.0" + version = "6.6.1" for_each = module.this.enabled ? var.policies : {} name = module.policy_label[each.key].id @@ -63,7 +63,7 @@ module "policies" { module "roles" { source = "terraform-aws-modules/iam/aws//modules/iam-role" - version = "6.6.0" + version = "6.6.1" for_each = module.this.enabled ? var.roles : {} name = module.role_label[each.key].id diff --git a/infrastructure/modules/lambda/.terraform.lock.hcl b/infrastructure/modules/lambda/.terraform.lock.hcl index 0088d5fd..02951f4a 100644 --- a/infrastructure/modules/lambda/.terraform.lock.hcl +++ b/infrastructure/modules/lambda/.terraform.lock.hcl @@ -2,30 +2,30 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "6.50.0" + version = "6.55.0" constraints = ">= 6.14.0, >= 6.28.0" hashes = [ - "h1:8y10QFtGLHl3pF/R1/hO7VCPHTexm1whc0BfuG4uruw=", - "h1:D8uNiOpl3UkAX4zI5T47ALMiRFXTa1XfdQC+TBu3RmE=", - "h1:Uf2LlEibaBdksEUkOoiQbzEbkIgOR6tUE/0tCd36Xzk=", - "h1:gnyVeH3L2erQ/di0a4x5i0AlsIcdLjyK5+Vmbf3qyck=", - "h1:mNg4vBXXqbO0hY2jCxhOyKVrnjEO0viTG2EY4oAlWaQ=", - "zh:0072806bb262c6d86bc25b4a75750e469881144c14818afdba7b82db840e1588", - "zh:1ebc2dae335dad7a8b16a1985b69a63a14954282bb44fdba7d5103f77551ac7b", - "zh:2dab48fe8f3193b8216d578ac1e3674fa566435cc7dbce2953d55b72e31d0241", - "zh:2fc3d3029c2b7429472391ef339672e1fca8e6ff32c8a519bf3acedafa7e24fe", - "zh:38a36e64e7212f6cedac861ea4d449cce07131b3378de601bf9d49a99e000208", - "zh:3ac70758ed251ce78b7f541a5a79cc6fe56474412783ae1decef719bdd0f30bf", - "zh:4385d3903e685bddb2b8005b4eb7db89f030267d4d03c7d792d2f5e739cc874a", - "zh:4cce0760b87fbafd51f30faec2a737f4183b7c615f4a86557f7d3c893a610dc5", - "zh:4feaeed18694239b896c6415d9a1e5ef89e1da4f4ad60924aa0522adeb1f6599", - "zh:502fca2be1c95f443c3e67d0555601d1de65b4ca82d197c059e9c868360e3a0a", - "zh:57d037f6fdd045f2660909c3bdface9622d81165ce647479cba98d1f353c5eab", - "zh:5dc5a0b915c2ac5256d909458f5c8e40b35f78b3a36ea893c86624eaf6c54e37", + "h1:3OSTaIx7d6T+N6gwNtw0gR+IwExbHqb0y4v529Vey/4=", + "h1:99+MYIg/y3gmsZkhAcffwOpMat+liRJ8b+eyCIax6hk=", + "h1:QIQoZv637BE40vg7/0gf/5gQbY/ZTngSuJWDl7fJr2s=", + "h1:tBAaeIprhWQmlsq/CoHLXWOLZZYRdCVA1wbNv2co55g=", + "h1:yM6149NHHl8NWU/OCIV2/x6tLrNgDTRKgR8cVrbk9BU=", + "zh:1161fb2d032ad982587b2662a5229e5d06598c5b7fc5c86b2ad64d49225047cd", + "zh:1f412b09bbece216da0ba08106f3bbb42d8c8971c02d032ab518629915086966", + "zh:2c8b789450bb67181b5f0546714bf6336ba21183c307e001fe848c22dac1f8a6", + "zh:31eec91f896743bab641c06930fe0c277143f17dd25b2510991c08e013c8da67", + "zh:4419d3e906f1ca9c99703b2c4c5082f58aaeb8b8b82e2657a187a6bdf42d8881", + "zh:58e9a7e0581e8cd5f35eb2ce308b2d572073c112facdd0a60aee032146b146b5", + "zh:72fdb02a0cb6351626df460c047d1471f26dad781160cc95abd84f8849daf950", "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425", - "zh:b84c87c58a320adbb2c74a4cad03ae5aac7f2eae21db26f00fdde98c8c4d4523", - "zh:c895f1d5cbcbeff77850ac99efd36bde0048d4e909b296882331b9b9ebf48cfa", - "zh:ead82831683619124597a1f170dd31e9b293e9cf22f558cb166d5e734fcd11e4", + "zh:aa527913348c33969d80527d424917876657741493f294e160f1191dbc7c1d45", + "zh:b66e5abd756064f55ff06e1ef83eb8d0b7ea6d96625cfcd24408df5472d5f899", + "zh:ba9ab4ba151ac69a854407e27d3a12a2eb260fc4205bbb5c25618e6c8ce69568", + "zh:e1bf63e8a6b9790836f74848b458cdf679a7841e66a25b4b9f6034efc9310b34", + "zh:ec4adcec426f7181faa5de976cedbd35e15d7d1ac2914bbd9cab9f4f8b018b7f", + "zh:f17b485ae74bb4272d2bd680e7d47b0cfd073d192a4f10c8bdfd9d9f25c990a1", + "zh:f6650c2d0d3e614c3ccd623bb027a52bce1f5285c4f1824a26f265eb7529a45a", + "zh:f7383732f8704099db2166a3516e0a803bf46f42c30cd20a0471b55658ae6e51", ] } diff --git a/infrastructure/modules/lambda/README.md b/infrastructure/modules/lambda/README.md index 378e55f1..13936d10 100644 --- a/infrastructure/modules/lambda/README.md +++ b/infrastructure/modules/lambda/README.md @@ -124,13 +124,13 @@ module "lambda_with_layers" { | Name | Version | | ---- | ------- | -| [aws](#provider\_aws) | 6.50.0 | +| [aws](#provider\_aws) | 6.55.0 | ## Modules | Name | Source | Version | | ---- | ------ | ------- | -| [lambda\_function](#module\_lambda\_function) | terraform-aws-modules/lambda/aws | 8.7.0 | +| [lambda\_function](#module\_lambda\_function) | terraform-aws-modules/lambda/aws | 8.8.0 | | [this](#module\_this) | ../tags | n/a | ## Resources diff --git a/infrastructure/modules/lambda/main.tf b/infrastructure/modules/lambda/main.tf index 869cf839..250131d4 100644 --- a/infrastructure/modules/lambda/main.tf +++ b/infrastructure/modules/lambda/main.tf @@ -5,7 +5,7 @@ module "lambda_function" { source = "terraform-aws-modules/lambda/aws" # downgrade version as workaround for bug https://github.com/terraform-aws-modules/terraform-aws-lambda/issues/733 - version = "8.7.0" + version = "8.8.0" function_name = local.function_name description = var.function_description diff --git a/infrastructure/modules/s3-bucket/.terraform.lock.hcl b/infrastructure/modules/s3-bucket/.terraform.lock.hcl index 27a6db38..f18f3e0d 100644 --- a/infrastructure/modules/s3-bucket/.terraform.lock.hcl +++ b/infrastructure/modules/s3-bucket/.terraform.lock.hcl @@ -2,29 +2,29 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "6.50.0" + version = "6.55.0" constraints = ">= 6.14.0, >= 6.42.0" hashes = [ - "h1:8y10QFtGLHl3pF/R1/hO7VCPHTexm1whc0BfuG4uruw=", - "h1:D8uNiOpl3UkAX4zI5T47ALMiRFXTa1XfdQC+TBu3RmE=", - "h1:Uf2LlEibaBdksEUkOoiQbzEbkIgOR6tUE/0tCd36Xzk=", - "h1:gnyVeH3L2erQ/di0a4x5i0AlsIcdLjyK5+Vmbf3qyck=", - "h1:mNg4vBXXqbO0hY2jCxhOyKVrnjEO0viTG2EY4oAlWaQ=", - "zh:0072806bb262c6d86bc25b4a75750e469881144c14818afdba7b82db840e1588", - "zh:1ebc2dae335dad7a8b16a1985b69a63a14954282bb44fdba7d5103f77551ac7b", - "zh:2dab48fe8f3193b8216d578ac1e3674fa566435cc7dbce2953d55b72e31d0241", - "zh:2fc3d3029c2b7429472391ef339672e1fca8e6ff32c8a519bf3acedafa7e24fe", - "zh:38a36e64e7212f6cedac861ea4d449cce07131b3378de601bf9d49a99e000208", - "zh:3ac70758ed251ce78b7f541a5a79cc6fe56474412783ae1decef719bdd0f30bf", - "zh:4385d3903e685bddb2b8005b4eb7db89f030267d4d03c7d792d2f5e739cc874a", - "zh:4cce0760b87fbafd51f30faec2a737f4183b7c615f4a86557f7d3c893a610dc5", - "zh:4feaeed18694239b896c6415d9a1e5ef89e1da4f4ad60924aa0522adeb1f6599", - "zh:502fca2be1c95f443c3e67d0555601d1de65b4ca82d197c059e9c868360e3a0a", - "zh:57d037f6fdd045f2660909c3bdface9622d81165ce647479cba98d1f353c5eab", - "zh:5dc5a0b915c2ac5256d909458f5c8e40b35f78b3a36ea893c86624eaf6c54e37", + "h1:3OSTaIx7d6T+N6gwNtw0gR+IwExbHqb0y4v529Vey/4=", + "h1:99+MYIg/y3gmsZkhAcffwOpMat+liRJ8b+eyCIax6hk=", + "h1:QIQoZv637BE40vg7/0gf/5gQbY/ZTngSuJWDl7fJr2s=", + "h1:tBAaeIprhWQmlsq/CoHLXWOLZZYRdCVA1wbNv2co55g=", + "h1:yM6149NHHl8NWU/OCIV2/x6tLrNgDTRKgR8cVrbk9BU=", + "zh:1161fb2d032ad982587b2662a5229e5d06598c5b7fc5c86b2ad64d49225047cd", + "zh:1f412b09bbece216da0ba08106f3bbb42d8c8971c02d032ab518629915086966", + "zh:2c8b789450bb67181b5f0546714bf6336ba21183c307e001fe848c22dac1f8a6", + "zh:31eec91f896743bab641c06930fe0c277143f17dd25b2510991c08e013c8da67", + "zh:4419d3e906f1ca9c99703b2c4c5082f58aaeb8b8b82e2657a187a6bdf42d8881", + "zh:58e9a7e0581e8cd5f35eb2ce308b2d572073c112facdd0a60aee032146b146b5", + "zh:72fdb02a0cb6351626df460c047d1471f26dad781160cc95abd84f8849daf950", "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425", - "zh:b84c87c58a320adbb2c74a4cad03ae5aac7f2eae21db26f00fdde98c8c4d4523", - "zh:c895f1d5cbcbeff77850ac99efd36bde0048d4e909b296882331b9b9ebf48cfa", - "zh:ead82831683619124597a1f170dd31e9b293e9cf22f558cb166d5e734fcd11e4", + "zh:aa527913348c33969d80527d424917876657741493f294e160f1191dbc7c1d45", + "zh:b66e5abd756064f55ff06e1ef83eb8d0b7ea6d96625cfcd24408df5472d5f899", + "zh:ba9ab4ba151ac69a854407e27d3a12a2eb260fc4205bbb5c25618e6c8ce69568", + "zh:e1bf63e8a6b9790836f74848b458cdf679a7841e66a25b4b9f6034efc9310b34", + "zh:ec4adcec426f7181faa5de976cedbd35e15d7d1ac2914bbd9cab9f4f8b018b7f", + "zh:f17b485ae74bb4272d2bd680e7d47b0cfd073d192a4f10c8bdfd9d9f25c990a1", + "zh:f6650c2d0d3e614c3ccd623bb027a52bce1f5285c4f1824a26f265eb7529a45a", + "zh:f7383732f8704099db2166a3516e0a803bf46f42c30cd20a0471b55658ae6e51", ] } diff --git a/infrastructure/modules/s3-bucket/README.md b/infrastructure/modules/s3-bucket/README.md index eb41aabe..4ffa0240 100644 --- a/infrastructure/modules/s3-bucket/README.md +++ b/infrastructure/modules/s3-bucket/README.md @@ -107,7 +107,7 @@ No providers. | Name | Source | Version | | ---- | ------ | ------- | -| [s3\_bucket](#module\_s3\_bucket) | terraform-aws-modules/s3-bucket/aws | 5.13.0 | +| [s3\_bucket](#module\_s3\_bucket) | terraform-aws-modules/s3-bucket/aws | 5.14.1 | | [this](#module\_this) | ../tags | n/a | ## Resources diff --git a/infrastructure/modules/s3-bucket/main.tf b/infrastructure/modules/s3-bucket/main.tf index fe765e69..709ac064 100644 --- a/infrastructure/modules/s3-bucket/main.tf +++ b/infrastructure/modules/s3-bucket/main.tf @@ -17,7 +17,7 @@ module "s3_bucket" { source = "terraform-aws-modules/s3-bucket/aws" - version = "5.13.0" + version = "5.14.1" create_bucket = module.this.enabled From dd4c3622b9461b0b36c0c5970c88a0f91da83a4e Mon Sep 17 00:00:00 2001 From: Oliver Slater Date: Tue, 21 Jul 2026 14:31:42 +0100 Subject: [PATCH 2/4] fix(actions): add cache directory for Grype database in dependency scan --- .github/actions/scan-dependencies/action.yaml | 2 ++ .tool-versions | 4 ++-- 2 files changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/actions/scan-dependencies/action.yaml b/.github/actions/scan-dependencies/action.yaml index 5655d215..63b7907e 100644 --- a/.github/actions/scan-dependencies/action.yaml +++ b/.github/actions/scan-dependencies/action.yaml @@ -41,6 +41,8 @@ runs: shell: bash run: | export BUILD_DATETIME=${{ inputs.build_datetime }} + export GRYPE_DB_CACHE_DIR="${RUNNER_TEMP}/grype-db-${{ github.run_id }}-${{ github.run_attempt }}-${{ github.job }}" + mkdir -p "${GRYPE_DB_CACHE_DIR}" ./scripts/reports/scan-vulnerabilities.sh - name: "Compress vulnerabilities report" shell: bash diff --git a/.tool-versions b/.tool-versions index bc9593b0..f8c5c561 100644 --- a/.tool-versions +++ b/.tool-versions @@ -20,7 +20,7 @@ make 4.4.1 # The section below is reserved for Docker image versions. # TODO: Move this section - consider using a different file for the repository template dependencies. -# docker/ghcr.io/anchore/grype v0.100.0@sha256:651e558f9ba84f2a790b3449c8a57cbbf4f34e004f7d3f14ae8f8cbeede4cd33 # SEE: https://github.com/anchore/grype/pkgs/container/grype +# docker/ghcr.io/anchore/grype v0.116.0@sha256:fd4ab4d1042b522c896e73bdf09ab8bf384fa417df99d6dd0d6e1008c7e7c821 # SEE: https://github.com/anchore/grype/pkgs/container/grype # docker/ghcr.io/anchore/syft v0.92.0@sha256:63c60f0a21efb13e80aa1359ab243e49213b6cc2d7e0f8179da38e6913b997e0 # SEE: https://github.com/anchore/syft/pkgs/container/syft # docker/ghcr.io/gitleaks/gitleaks v8.18.0@sha256:fd2b5cab12b563d2cc538b14631764a1c25577780e3b7dba71657d58da45d9d9 # SEE: https://github.com/gitleaks/gitleaks/pkgs/container/gitleaks # docker/ghcr.io/igorshubovych/markdownlint-cli v0.37.0@sha256:fb3e79946fce78e1cde84d6798c6c2a55f2de11fc16606a40d49411e281d950d # SEE: https://github.com/igorshubovych/markdownlint-cli/pkgs/container/markdownlint-cli @@ -31,4 +31,4 @@ make 4.4.1 # docker/jdkato/vale v3.6.0@sha256:0ef22c8d537f079633cfff69fc46f69a2196072f69cab1ab232e8a79a388e425 # SEE: https://hub.docker.com/r/jdkato/vale/tags # docker/koalaman/shellcheck latest@sha256:e40388688bae0fcffdddb7e4dea49b900c18933b452add0930654b2dea3e7d5c # SEE: https://hub.docker.com/r/koalaman/shellcheck/tags # docker/mstruebing/editorconfig-checker 2.7.1@sha256:dd3ca9ea50ef4518efe9be018d669ef9cf937f6bb5cfe2ef84ff2a620b5ddc24 # SEE: https://hub.docker.com/r/mstruebing/editorconfig-checker/tags -# docker/sonarsource/sonar-scanner-cli 5.0.1@sha256:494ecc3b5b1ee1625bd377b3905c4284e4f0cc155cff397805a244dee1c7d575 # SEE: https://hub.docker.com/r/sonarsource/sonar-scanner-cli/tags +# docker/sonarsource/sonar-scanner-cli 12.1@sha256:23ca0f137965d9dff2198074043fd48d386280bc5d0ccac8c8349cea4cf096a9 # SEE: https://hub.docker.com/r/sonarsource/sonar-scanner-cli/tags From ccec3cd7a05dbaa22a637d7e52fb6908569711a9 Mon Sep 17 00:00:00 2001 From: Oliver Slater Date: Tue, 21 Jul 2026 14:37:52 +0100 Subject: [PATCH 3/4] build(deps): update mise-managed tool versions (from PR#86) --- .tool-versions | 4 +- mise.lock | 139 +++++++++++++++++++++++++++++++------------------ mise.toml | 4 +- 3 files changed, 93 insertions(+), 54 deletions(-) diff --git a/.tool-versions b/.tool-versions index f8c5c561..b4362c67 100644 --- a/.tool-versions +++ b/.tool-versions @@ -3,7 +3,7 @@ terraform 1.13.5 tflint 0.62.1 terraform-docs 0.24.0 -go 1.26.4 +go 1.26.5 go:github.com/hashicorp/terraform-config-inspect latest pre-commit 4.6.0 python 3.12 @@ -11,7 +11,7 @@ vale 3.6.0 gitleaks 8.30.1 shellcheck 0.11.0 actionlint 1.7.12 -jq 1.8.1 +jq 1.8.2 yq 4.53.3 nodejs 24.16.0 make 4.4.1 diff --git a/mise.lock b/mise.lock index a9e4a34c..0a809bcc 100644 --- a/mise.lock +++ b/mise.lock @@ -24,6 +24,30 @@ checksum = "sha256:4592b096e553f67799ae70d4b6167eeda3ec74587d68c7aecbf4e7b1df136 url = "https://conda.anaconda.org/conda-forge/linux-aarch64/libgomp-15.2.0-h8acb6b2_19.conda" checksum = "sha256:2370ef0ffcbae5bede3c4bf136add4abc257245eb91f724c99bb4a43116c5a83" +[conda-packages.linux-x64."_openmp_mutex-4.5-20_gnu"] +url = "https://conda.anaconda.org/conda-forge/linux-64/_openmp_mutex-4.5-20_gnu.conda" +checksum = "sha256:1dd3fffd892081df9726d7eb7e0dea6198962ba775bd88842135a4ddb4deb3c9" + +[conda-packages.linux-x64."libgcc-15.2.0-he0feb66_19"] +url = "https://conda.anaconda.org/conda-forge/linux-64/libgcc-15.2.0-he0feb66_19.conda" +checksum = "sha256:8e0a3b5e41272e5678499b5dfc4cddb673f9e935de01eb0767ce857001229f46" + +[conda-packages.linux-x64."libgomp-15.2.0-he0feb66_19"] +url = "https://conda.anaconda.org/conda-forge/linux-64/libgomp-15.2.0-he0feb66_19.conda" +checksum = "sha256:5abe4ab9d93f6c9757d654f1969ae2267d4505315c1f2f8fe705fd60af084f1b" + +[conda-packages.linux-x64-musl."_openmp_mutex-4.5-20_gnu"] +url = "https://conda.anaconda.org/conda-forge/linux-64/_openmp_mutex-4.5-20_gnu.conda" +checksum = "sha256:1dd3fffd892081df9726d7eb7e0dea6198962ba775bd88842135a4ddb4deb3c9" + +[conda-packages.linux-x64-musl."libgcc-15.2.0-he0feb66_19"] +url = "https://conda.anaconda.org/conda-forge/linux-64/libgcc-15.2.0-he0feb66_19.conda" +checksum = "sha256:8e0a3b5e41272e5678499b5dfc4cddb673f9e935de01eb0767ce857001229f46" + +[conda-packages.linux-x64-musl."libgomp-15.2.0-he0feb66_19"] +url = "https://conda.anaconda.org/conda-forge/linux-64/libgomp-15.2.0-he0feb66_19.conda" +checksum = "sha256:5abe4ab9d93f6c9757d654f1969ae2267d4505315c1f2f8fe705fd60af084f1b" + [conda-packages.windows-x64."_openmp_mutex-4.5-20_gnu"] url = "https://conda.anaconda.org/conda-forge/win-64/_openmp_mutex-4.5-20_gnu.conda" checksum = "sha256:8a1cee28bd0ee7451ada1cd50b64720e57e17ff994fc62dd8329bef570d382e4" @@ -116,78 +140,78 @@ checksum = "sha256:d29144deff3a68aa93ced33dddf84b7fdc26070add4aa0f4513094c8332af url = "https://github.com/gitleaks/gitleaks/releases/download/v8.30.1/gitleaks_8.30.1_windows_x64.zip" [[tools.go]] -version = "1.26.4" +version = "1.26.5" backend = "core:go" [tools.go."platforms.linux-arm64"] -checksum = "sha256:ef758ae7c6cf9267c9c0ef080b8965f453d89ab2d25d9eb22de4405925238768" -url = "https://dl.google.com/go/go1.26.4.linux-arm64.tar.gz" +checksum = "sha256:fe4789e92b1f33358680864bbe8704289e7bb5fc207d80623c308935bd696d49" +url = "https://dl.google.com/go/go1.26.5.linux-arm64.tar.gz" [tools.go."platforms.linux-arm64-musl"] -checksum = "sha256:ef758ae7c6cf9267c9c0ef080b8965f453d89ab2d25d9eb22de4405925238768" -url = "https://dl.google.com/go/go1.26.4.linux-arm64.tar.gz" +checksum = "sha256:fe4789e92b1f33358680864bbe8704289e7bb5fc207d80623c308935bd696d49" +url = "https://dl.google.com/go/go1.26.5.linux-arm64.tar.gz" [tools.go."platforms.linux-x64"] -checksum = "sha256:1153d3d50e0ac764b447adfe05c2bcf08e889d42a02e0fe0259bd47f6733ad7f" -url = "https://dl.google.com/go/go1.26.4.linux-amd64.tar.gz" +checksum = "sha256:5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053" +url = "https://dl.google.com/go/go1.26.5.linux-amd64.tar.gz" [tools.go."platforms.linux-x64-musl"] -checksum = "sha256:1153d3d50e0ac764b447adfe05c2bcf08e889d42a02e0fe0259bd47f6733ad7f" -url = "https://dl.google.com/go/go1.26.4.linux-amd64.tar.gz" +checksum = "sha256:5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053" +url = "https://dl.google.com/go/go1.26.5.linux-amd64.tar.gz" [tools.go."platforms.macos-arm64"] -checksum = "sha256:b62ad2b6d7d2464f12a5bcad7ff47f19d08325773b5efd21610e445a05a9bf53" -url = "https://dl.google.com/go/go1.26.4.darwin-arm64.tar.gz" +checksum = "sha256:efb87ff28af9a188d0536ef5d42e63dd52ba8263cd7344a993cc48dd11dedb6a" +url = "https://dl.google.com/go/go1.26.5.darwin-arm64.tar.gz" [tools.go."platforms.macos-x64"] -checksum = "sha256:05dc9b5f9997744520aaebb3d5deaa7c755371aebbfb7f97c2511a9f3367538d" -url = "https://dl.google.com/go/go1.26.4.darwin-amd64.tar.gz" +checksum = "sha256:6231d8d3b8f5552ec6cbf6d685bdd5482e1e703214b120e89b3bf0d7bf1ef725" +url = "https://dl.google.com/go/go1.26.5.darwin-amd64.tar.gz" [tools.go."platforms.windows-x64"] -checksum = "sha256:3ca8fb4630b07c419cbdd51f754e31363cfcfb83b3a5354d9e895c90be2cc345" -url = "https://dl.google.com/go/go1.26.4.windows-amd64.zip" +checksum = "sha256:97e6b2a833b6d89f9ff17d25419ac0a7e3b482a044e9ab18cdef834bd834fd38" +url = "https://dl.google.com/go/go1.26.5.windows-amd64.zip" [[tools."go:github.com/hashicorp/terraform-config-inspect"]] version = "0.0.0-20260224005459-813a97530220" backend = "go:github.com/hashicorp/terraform-config-inspect" [[tools.jq]] -version = "1.8.1" +version = "1.8.2" backend = "aqua:jqlang/jq" [tools.jq."platforms.linux-arm64"] -checksum = "sha256:6bc62f25981328edd3cfcfe6fe51b073f2d7e7710d7ef7fcdac28d4e384fc3d4" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-linux-arm64" +checksum = "sha256:8b85c817833814ddca00a144c33705546355afccf0cf39b188f3cdb48b852309" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-linux-arm64" provenance = "github-attestations" [tools.jq."platforms.linux-arm64-musl"] -checksum = "sha256:6bc62f25981328edd3cfcfe6fe51b073f2d7e7710d7ef7fcdac28d4e384fc3d4" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-linux-arm64" +checksum = "sha256:8b85c817833814ddca00a144c33705546355afccf0cf39b188f3cdb48b852309" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-linux-arm64" provenance = "github-attestations" [tools.jq."platforms.linux-x64"] -checksum = "sha256:020468de7539ce70ef1bceaf7cde2e8c4f2ca6c3afb84642aabc5c97d9fc2a0d" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-linux-amd64" +checksum = "sha256:b1c22172dd303f3be49e935aa56aa48a8b7a46e0bc838b4997d3bb451495870f" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-linux-amd64" provenance = "github-attestations" [tools.jq."platforms.linux-x64-musl"] -checksum = "sha256:020468de7539ce70ef1bceaf7cde2e8c4f2ca6c3afb84642aabc5c97d9fc2a0d" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-linux-amd64" +checksum = "sha256:b1c22172dd303f3be49e935aa56aa48a8b7a46e0bc838b4997d3bb451495870f" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-linux-amd64" provenance = "github-attestations" [tools.jq."platforms.macos-arm64"] -checksum = "sha256:a9fe3ea2f86dfc72f6728417521ec9067b343277152b114f4e98d8cb0e263603" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-macos-arm64" +checksum = "sha256:2d75340ba57a4b4b4c8708a21c2dc8e958a48aaa8bba13b27f77f6e4c0eca07e" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-macos-arm64" provenance = "github-attestations" [tools.jq."platforms.macos-x64"] -checksum = "sha256:e80dbe0d2a2597e3c11c404f03337b981d74b4a8504b70586c354b7697a7c27f" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-macos-amd64" +checksum = "sha256:e94b266e3c26690550006abe63152b782280f4e14374accdf04cbde844f00bc0" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-macos-amd64" provenance = "github-attestations" [tools.jq."platforms.windows-x64"] -checksum = "sha256:23cb60a1354eed6bcc8d9b9735e8c7b388cd1fdcb75726b93bc299ef22dd9334" -url = "https://github.com/jqlang/jq/releases/download/jq-1.8.1/jq-windows-amd64.exe" +checksum = "sha256:a6fc67fedaf9128a3309a1e2ebb8b986aeccf70122ee46d2cb4849e423f0c627" +url = "https://github.com/jqlang/jq/releases/download/jq-1.8.2/jq-windows-amd64.exe" provenance = "github-attestations" [[tools.make]] @@ -216,22 +240,30 @@ conda_deps = [ ] [tools.make."platforms.linux-x64"] -checksum = "sha256:1c6bac75dff518720d86d4535d8eb10647037925a2662d6cf8009e7252966cb2" -url = "https://conda.anaconda.org/conda-forge/linux-64/make-4.4.1-hb9d3cd8_0.conda" +checksum = "sha256:d652c7bd4d3b6f82b0f6d063b0d8df6f54cc47531092d7ff008e780f3261bdda" +url = "https://conda.anaconda.org/conda-forge/linux-64/make-4.4.1-hb9d3cd8_2.conda" +conda_deps = [ + "libgcc-15.2.0-he0feb66_19", + "_openmp_mutex-4.5-20_gnu", + "libgomp-15.2.0-he0feb66_19", +] [tools.make."platforms.linux-x64-musl"] -checksum = "sha256:1c6bac75dff518720d86d4535d8eb10647037925a2662d6cf8009e7252966cb2" -url = "https://conda.anaconda.org/conda-forge/linux-64/make-4.4.1-hb9d3cd8_0.conda" +checksum = "sha256:d652c7bd4d3b6f82b0f6d063b0d8df6f54cc47531092d7ff008e780f3261bdda" +url = "https://conda.anaconda.org/conda-forge/linux-64/make-4.4.1-hb9d3cd8_2.conda" +conda_deps = [ + "libgcc-15.2.0-he0feb66_19", + "_openmp_mutex-4.5-20_gnu", + "libgomp-15.2.0-he0feb66_19", +] [tools.make."platforms.macos-arm64"] checksum = "sha256:90ca65e788406d9029ae23ad4bd944a8b5353ad5f59bd6ce326f980cde46f37e" url = "https://conda.anaconda.org/conda-forge/osx-arm64/make-4.4.1-hc9fafa5_2.conda" -conda_deps = [] [tools.make."platforms.macos-x64"] checksum = "sha256:5a5ab3ee828309185e0a76ca80f5da85f31d8480d923abb508ca00fe194d1b5a" url = "https://conda.anaconda.org/conda-forge/osx-64/make-4.4.1-h00291cd_2.conda" -conda_deps = [] [tools.make."platforms.windows-x64"] checksum = "sha256:a810cdca3d5fa50d562cda23c0c1195b45ff5f9b0c41e0d4c8c2dd3c043ff4f2" @@ -309,38 +341,38 @@ version = "3.12.13" backend = "core:python" [tools.python."platforms.linux-arm64"] -checksum = "sha256:eb85c6903552b1cb40b183a119681a9326fa97e31cf0e4b8c78bf26735ff1552" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-aarch64-unknown-linux-gnu-install_only_stripped.tar.gz" +checksum = "sha256:f226576b91491ffa5739aa85726521e9031f4d87f80627d64ed348ac77cb31e9" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-aarch64-unknown-linux-gnu-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.linux-arm64-musl"] -checksum = "sha256:f9153de0832a08a98cde89f7f5f2cc376544813c05bd2737279a1c8e3cb97913" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-aarch64-unknown-linux-musl-install_only_stripped.tar.gz" +checksum = "sha256:55ee512cae752b6a8b04e598923d888311e2ed60e3307a33306ef1ab0f003ae9" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-aarch64-unknown-linux-musl-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.linux-x64"] -checksum = "sha256:6682afef6b510037a0ad84e61150e5121af2e2785c9ca27b047e029270a840fe" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz" +checksum = "sha256:5854aa6ec71cad00334d5065633c210b2e7feb40956767a59a91791cadcf0b79" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-x86_64-unknown-linux-gnu-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.linux-x64-musl"] -checksum = "sha256:cca04a9f21a8efb43f1da1f4d1b55da04e9af23e8ce6259f58c94b4ef1fa48a6" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-x86_64-unknown-linux-musl-install_only_stripped.tar.gz" +checksum = "sha256:d62168126b2d92e5db649cfe89fb13bf165654c027707c0ef80d7823757c9b1d" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-x86_64-unknown-linux-musl-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.macos-arm64"] -checksum = "sha256:f0a7fa7decc75df2b1a789329a44f657c4a15c0a683f197ce46a5cb621bc6ef4" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-aarch64-apple-darwin-install_only_stripped.tar.gz" +checksum = "sha256:9a1e9e06175c10efd8378b904b07fa21bd791ab3345d7cdffeb4a76c9ff55903" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-aarch64-apple-darwin-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.macos-x64"] -checksum = "sha256:c56c2dfe3fb5569430f4eabcff1fc1334c66db708bf17c103eef3dd237f3e3ab" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-x86_64-apple-darwin-install_only_stripped.tar.gz" +checksum = "sha256:8e6b7e6533bdf746287008edf91102e7bee0a6ca1d24f16c4514237cafd706c5" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-x86_64-apple-darwin-install_only_stripped.tar.gz" provenance = "github-attestations" [tools.python."platforms.windows-x64"] -checksum = "sha256:99dce0b23bf3c3b28d350cdd7bfe3cd3be51cc4f285faae7c0df110d106d1a8d" -url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260610/cpython-3.12.13+20260610-x86_64-pc-windows-msvc-install_only_stripped.tar.gz" +checksum = "sha256:0d422a1439ec308e03f47df551bc30f5994727c456e414b026d202bcda9b7c1c" +url = "https://github.com/astral-sh/python-build-standalone/releases/download/20260718/cpython-3.12.13+20260718-x86_64-pc-windows-msvc-install_only_stripped.tar.gz" provenance = "github-attestations" [[tools.shellcheck]] @@ -446,30 +478,37 @@ backend = "aqua:terraform-linters/tflint" [tools.tflint."platforms.linux-arm64"] checksum = "sha256:9f3bce43f7f58f05ddcf193f0bf1f7e7a9c7a79d7f46f72dd38e97f96fcaf14c" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_linux_arm64.zip" +provenance = "github-attestations" [tools.tflint."platforms.linux-arm64-musl"] checksum = "sha256:9f3bce43f7f58f05ddcf193f0bf1f7e7a9c7a79d7f46f72dd38e97f96fcaf14c" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_linux_arm64.zip" +provenance = "github-attestations" [tools.tflint."platforms.linux-x64"] checksum = "sha256:c004ec45ade3caf87cd4089feb1d2af9f7df57b13140a36df8a63c0a8cc69f14" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_linux_amd64.zip" +provenance = "github-attestations" [tools.tflint."platforms.linux-x64-musl"] checksum = "sha256:c004ec45ade3caf87cd4089feb1d2af9f7df57b13140a36df8a63c0a8cc69f14" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_linux_amd64.zip" +provenance = "github-attestations" [tools.tflint."platforms.macos-arm64"] checksum = "sha256:927866fef68382138b8fed038721a03c0928ce9486e1616b18bd3dd11e7cdacb" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_darwin_arm64.zip" +provenance = "github-attestations" [tools.tflint."platforms.macos-x64"] checksum = "sha256:7f55df3a25deb610c267f600eb4247657e3ff776d0322916ceecd7b58142a73a" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_darwin_amd64.zip" +provenance = "github-attestations" [tools.tflint."platforms.windows-x64"] checksum = "sha256:bef472fd62dcbdb616bbdf67800f1bcf8db64598529c09610154686555180edd" url = "https://github.com/terraform-linters/tflint/releases/download/v0.62.1/tflint_windows_amd64.zip" +provenance = "github-attestations" [[tools.vale]] version = "3.6.0" diff --git a/mise.toml b/mise.toml index 7706c2aa..cf1790fc 100644 --- a/mise.toml +++ b/mise.toml @@ -14,10 +14,10 @@ vale = "3.6.0" gitleaks = "8.30.1" shellcheck = "0.11.0" actionlint = "1.7.12" -jq = "1.8.1" +jq = "1.8.2" yq = "4.53.3" nodejs = "24.16.0" -go = "1.26.4" # needed for installing go-based tools from source +go = "1.26.5" make = "4.4.1" # default version on macos is too old # Go-based tools using backend syntax From 2e6b66daf04ec21488c473d805f638f7d759de55 Mon Sep 17 00:00:00 2001 From: Oliver Slater Date: Tue, 21 Jul 2026 14:42:09 +0100 Subject: [PATCH 4/4] build(deps): bump actions/setup-node from 6.4.0 to 7.0.0 build(deps): bump actions/cache from 5.0.5 to 6.1.0 --- .github/workflows/cicd-2-publish.yaml | 2 +- .github/workflows/stage-1-pre-commit.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/cicd-2-publish.yaml b/.github/workflows/cicd-2-publish.yaml index fbc7e500..c1def78f 100644 --- a/.github/workflows/cicd-2-publish.yaml +++ b/.github/workflows/cicd-2-publish.yaml @@ -61,7 +61,7 @@ jobs: persist-credentials: false fetch-depth: 0 - name: "Set correct Node.js version" - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 + uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 with: node-version: ${{ needs.metadata.outputs.nodejs_version }} - name: "Install dependencies" diff --git a/.github/workflows/stage-1-pre-commit.yml b/.github/workflows/stage-1-pre-commit.yml index 8d6a59fd..e34b4f05 100644 --- a/.github/workflows/stage-1-pre-commit.yml +++ b/.github/workflows/stage-1-pre-commit.yml @@ -78,7 +78,7 @@ jobs: - name: "Cache Terraform plugins" if: contains(matrix.shard.name, 'terraform-') - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5.0.5 + uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0 with: path: ~/.terraform.d/plugin-cache key: ${{ runner.os }}-terraform-plugins-${{ hashFiles('**/.terraform.lock.hcl') }}