chore(deps): update all dependencies

[renovate[bot]]

trafficstars

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/github-script	action	major	v6 -> v7
actions/stale	action	major	v7 -> v9
amannn/action-semantic-pull-request	action	digest	67cbd7a -> e9fabac
aws (source)	required_provider	minor	5.40.0 -> 5.41.0
boto3		patch	==1.34.59 -> ==1.34.64
botocore		patch	==1.34.59 -> ==1.34.64
google-github-actions/release-please-action	action	major	v3 -> v4
local (source)	required_provider	minor	2.4.1 -> 2.5.1
peter-evans/slash-command-dispatch	action	major	v3 -> v4
terraform-aws-modules/vpc/aws (source)	module	minor	5.5.3 -> 5.6.0
terraform-docs/gh-actions	action	digest	7c16aaa -> f6d59f8

---

Release Notes

actions/github-script (actions/github-script)

v7

Compare Source

actions/stale (actions/stale)

v9

Compare Source

v8

Compare Source

hashicorp/terraform-provider-aws (aws)

v5.41.0

Compare Source

FEATURES:

• New Data Source: aws_apprunner_hosted_zone_id (#​36288)
• New Data Source: aws_medialive_input (#​36307)
• New Resource: aws_lakeformation_data_cells_filter (#​36264)
• New Resource: aws_securityhub_configuration_policy (#​35752)
• New Resource: aws_securityhub_configuration_policy_association (#​35752)
• New Resource: aws_securitylake_subscriber_notification (#​36323)

ENHANCEMENTS:

• data-source/aws_ec2_transit_gateway_peering_attachment: Add state attribute (#​36304)
• data-source/aws_lakeformation_permissions: Add data_cells_filter attribute (#​36264)
• data-source/aws_ram_resource_share: name is Optional (#​36062)
• resource/aws_cognito_user_pool: Add pre_token_generation_config configuration block (#​35236)
• resource/aws_ec2_transit_gateway_peering_attachment: Add state attribute (#​36304)
• resource/aws_ecs_cluster: Add default value (DEFAULT) for configuration.execute_command_configuration.logging (#​36341)
• resource/aws_lakeformation_permissions: Add data_cells_filter attribute (#​36264)
• resource/aws_ram_resource_association: Add plan-time validation of resource_arn and resource_share_arn (#​36062)
• resource/aws_route53domains_registered_domain: Add billing_contact and billing_privacy arguments (#​36285)
• resource/aws_securityhub_organization_configuration: Add organization_configuration configuration block to support central configuration (#​35752)
• resource/aws_securityhub_organization_configuration: Set auto_enable to false, auto_enable_standards to NONE, and organization_configuration.configuration_type to LOCAL on resource Delete (#​35752)

BUG FIXES:

• data-source/aws_iam_policy_document: Fix Failed to marshal state to json: unsupported attribute "override_json" and Failed to marshal state to json: unsupported attribute "source_json" errors when running terraform show -json or terraform state rm (#​36383)
• data-source/aws_opensearch_domain : Add auto_tune_options.use_off_peak_window attribute. This fixes a regression introduced in v5.40.0 causing Invalid address to set errors (#​36298)
• resource/aws_cognito_identity_pool: Fix handling of resources deleted out of band (#​36100)
• resource/aws_cognito_identity_provider: Fix InvalidParameterException: ActiveEncryptionCertificate is not a valid key for SAML identity provider details errors on resource Update (#​36311)
• resource/aws_ec2_instance: Remove ForceNew from ipv6_address_count (#​36308)
• resource/aws_ecs_cluster: Fix panic: interface conversion: interface {} is nil, not map[string]interface {} when configuration, configuration.execute_command_configuration, or configuration.execute_command_configuration.log_configuration are empty (#​36341)
• resource/aws_ecs_service: Fix panic: interface conversion: interface {} is nil, not map[string]interface {} when service_connect_configuration.service.timeout is empty (#​36309)
• resource/aws_ecs_service: service_connect_configuration.service.tls.issuer_cert_authority.aws_pca_authority_arn is Required (#​36309)
• resource/aws_elasticache_replication_group: Fix bugs causing errors like InvalidReplicationGroupState: Cluster not in available state to perform tagging operations. (#​36310)
• resource/aws_finspace_kx_cluster: Prevent command_line_arguments and initialization_script updates from overwriting one another (#​36361)
• resource/aws_network_acl_rule: Fix InvalidNetworkAclID.NotFound errors on resource Delete (#​36326)
• resource/aws_network_acl_rule: Prevent creation of duplicate Terraform resources (#​36326)
• resource/aws_ram_principal_association: Prevent creation of duplicate Terraform resources (#​36062)
• resource/aws_ram_principal_association: Remove from state on resource Read if principal is disassociated outside of Terraform (#​36062)
• resource/aws_ram_resource_association: Prevent creation of duplicate Terraform resources (#​36062)
• resource/aws_route: Prevent creation of duplicate Terraform resources (#​36326)
• resource/aws_route_table: Fix couldn't find resource errors on resource Delete (#​36326)
• resource/aws_vpn_connection: Correct plan-time validation of tunnel1_inside_ipv6_cidr and tunnel2_inside_ipv6_cidr (#​36236)

boto/boto3 (boto3)

v1.34.64

Compare Source

=======

• api-change:backup: [botocore] This release introduces a boolean attribute ManagedByAWSBackupOnly as part of ListRecoveryPointsByResource api to filter the recovery points based on ownership. This attribute can be used to filter out the recovery points protected by AWSBackup.
• api-change:codebuild: [botocore] AWS CodeBuild now supports overflow behavior on Reserved Capacity.
• api-change:connect: [botocore] This release adds Hierarchy based Access Control fields to Security Profile public APIs and adds support for UserAttributeFilter to SearchUsers API.
• api-change:ec2: [botocore] Add media accelerator and neuron device information on the describe instance types API.
• api-change:kinesisanalyticsv2: [botocore] Support for Flink 1.18 in Managed Service for Apache Flink
• api-change:s3: [botocore] Documentation updates for Amazon S3.
• api-change:sagemaker: [botocore] Adds m6i, m6id, m7i, c6i, c6id, c7i, r6i r6id, r7i, p5 instance type support to Sagemaker Notebook Instances and miscellaneous wording fixes for previous Sagemaker documentation.
• api-change:workspaces-thin-client: [botocore] Removed unused parameter kmsKeyArn from UpdateDeviceRequest

v1.34.63

Compare Source

=======

• api-change:amplify: [botocore] Documentation updates for Amplify. Identifies the APIs available only to apps created using Amplify Gen 1.
• api-change:ec2-instance-connect: [botocore] This release includes a new exception type "SerialConsoleSessionUnsupportedException" for SendSerialConsoleSSHPublicKey API.
• api-change:elbv2: [botocore] This release allows you to configure HTTP client keep-alive duration for communication between clients and Application Load Balancers.
• api-change:fis: [botocore] This release adds support for previewing target resources before running a FIS experiment. It also adds resource ARNs for actions, experiments, and experiment templates to API responses.
• api-change:iot-roborunner: [botocore] The iot-roborunner client has been removed following the deprecation of the service.
• api-change:rds: [botocore] Updates Amazon RDS documentation for EBCDIC collation for RDS for Db2.
• api-change:secretsmanager: [botocore] Doc only update for Secrets Manager
• api-change:timestream-influxdb: [botocore] This is the initial SDK release for Amazon Timestream for InfluxDB. Amazon Timestream for InfluxDB is a new time-series database engine that makes it easy for application developers and DevOps teams to run InfluxDB databases on AWS for near real-time time-series applications using open source APIs.
• enhancement:urllib3: [botocore] Added support for urllib3 2.2.1+ in Python 3.10+

v1.34.62

Compare Source

=======

• api-change:ivs-realtime: [botocore] adds support for multiple new composition layout configuration options (grid, pip)
• api-change:kinesisanalyticsv2: [botocore] Support new RuntimeEnvironmentUpdate parameter within UpdateApplication API allowing callers to change the Flink version upon which their application runs.
• api-change:s3: [botocore] This release makes the default option for S3 on Outposts request signing to use the SigV4A algorithm when using AWS Common Runtime (CRT).

v1.34.61

Compare Source

=======

• api-change:cloudformation: [botocore] CloudFormation documentation update for March, 2024
• api-change:connect: [botocore] This release increases MaxResults limit to 500 in request for SearchUsers, SearchQueues and SearchRoutingProfiles APIs of Amazon Connect.
• api-change:ec2: [botocore] Documentation updates for Amazon EC2.
• api-change:kafka: [botocore] Added support for specifying the starting position of topic replication in MSK-Replicator.
• api-change:ssm: [botocore] March 2024 doc-only updates for Systems Manager.

v1.34.60

Compare Source

=======

• api-change:codestar-connections: [botocore] Added a sync configuration enum to disable publishing of deployment status to source providers (PublishDeploymentStatus). Added a sync configuration enum (TriggerStackUpdateOn) to only trigger changes.
• api-change:elasticache: [botocore] Revisions to API text that are now to be carried over to SDK text, changing usages of "SFO" in code examples to "us-west-1", and some other typos.
• api-change:mediapackagev2: [botocore] This release enables customers to safely update their MediaPackage v2 channel groups, channels and origin endpoints using entity tags.

boto/botocore (botocore)

v1.34.64

Compare Source

=======

• api-change:backup: This release introduces a boolean attribute ManagedByAWSBackupOnly as part of ListRecoveryPointsByResource api to filter the recovery points based on ownership. This attribute can be used to filter out the recovery points protected by AWSBackup.
• api-change:codebuild: AWS CodeBuild now supports overflow behavior on Reserved Capacity.
• api-change:connect: This release adds Hierarchy based Access Control fields to Security Profile public APIs and adds support for UserAttributeFilter to SearchUsers API.
• api-change:ec2: Add media accelerator and neuron device information on the describe instance types API.
• api-change:kinesisanalyticsv2: Support for Flink 1.18 in Managed Service for Apache Flink
• api-change:s3: Documentation updates for Amazon S3.
• api-change:sagemaker: Adds m6i, m6id, m7i, c6i, c6id, c7i, r6i r6id, r7i, p5 instance type support to Sagemaker Notebook Instances and miscellaneous wording fixes for previous Sagemaker documentation.
• api-change:workspaces-thin-client: Removed unused parameter kmsKeyArn from UpdateDeviceRequest

v1.34.63

Compare Source

=======

• api-change:amplify: Documentation updates for Amplify. Identifies the APIs available only to apps created using Amplify Gen 1.
• api-change:ec2-instance-connect: This release includes a new exception type "SerialConsoleSessionUnsupportedException" for SendSerialConsoleSSHPublicKey API.
• api-change:elbv2: This release allows you to configure HTTP client keep-alive duration for communication between clients and Application Load Balancers.
• api-change:fis: This release adds support for previewing target resources before running a FIS experiment. It also adds resource ARNs for actions, experiments, and experiment templates to API responses.
• api-change:iot-roborunner: The iot-roborunner client has been removed following the deprecation of the service.
• api-change:rds: Updates Amazon RDS documentation for EBCDIC collation for RDS for Db2.
• api-change:secretsmanager: Doc only update for Secrets Manager
• api-change:timestream-influxdb: This is the initial SDK release for Amazon Timestream for InfluxDB. Amazon Timestream for InfluxDB is a new time-series database engine that makes it easy for application developers and DevOps teams to run InfluxDB databases on AWS for near real-time time-series applications using open source APIs.
• enhancement:urllib3: Added support for urllib3 2.2.1+ in Python 3.10+

v1.34.62

Compare Source

=======

• api-change:ivs-realtime: adds support for multiple new composition layout configuration options (grid, pip)
• api-change:kinesisanalyticsv2: Support new RuntimeEnvironmentUpdate parameter within UpdateApplication API allowing callers to change the Flink version upon which their application runs.
• api-change:s3: This release makes the default option for S3 on Outposts request signing to use the SigV4A algorithm when using AWS Common Runtime (CRT).

v1.34.61

Compare Source

=======

• api-change:cloudformation: CloudFormation documentation update for March, 2024
• api-change:connect: This release increases MaxResults limit to 500 in request for SearchUsers, SearchQueues and SearchRoutingProfiles APIs of Amazon Connect.
• api-change:ec2: Documentation updates for Amazon EC2.
• api-change:kafka: Added support for specifying the starting position of topic replication in MSK-Replicator.
• api-change:ssm: March 2024 doc-only updates for Systems Manager.

v1.34.60

Compare Source

=======

• api-change:codestar-connections: Added a sync configuration enum to disable publishing of deployment status to source providers (PublishDeploymentStatus). Added a sync configuration enum (TriggerStackUpdateOn) to only trigger changes.
• api-change:elasticache: Revisions to API text that are now to be carried over to SDK text, changing usages of "SFO" in code examples to "us-west-1", and some other typos.
• api-change:mediapackagev2: This release enables customers to safely update their MediaPackage v2 channel groups, channels and origin endpoints using entity tags.

google-github-actions/release-please-action (google-github-actions/release-please-action)

v4

Compare Source

hashicorp/terraform-provider-local (local)

v2.5.1

Compare Source

NOTES:

• No functional changes from v2.5.0. Minor documentation fixes. (#​303)

v2.5.0

Compare Source

FEATURES:

• functions/direxists: Added a new direxists function that checks for the existence of a directory, similar to the built-in fileexists function. (#​285)

peter-evans/slash-command-dispatch (peter-evans/slash-command-dispatch)

v4

Compare Source

terraform-aws-modules/terraform-aws-vpc (terraform-aws-modules/vpc/aws)

v5.6.0

Compare Source

Features

• Support VPC flow log cloudwatch log group class (#​1053) (e2970fd)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions[bot]]

Hey @renovate[bot]! 👋

Thank you for your contribution to the project. Please refer to the contribution rules for a quick overview of the process.

Make sure that this PR clearly explains:

• the problem being solved
• the best way a reviewer and you can test your changes

With submitting this PR you confirm that you hold the rights of the code added and agree that it will published under this LICENSE.

The following ChatOps commands are supported:

• /help: notifies a maintainer to help you out

Simply add a comment with the command in the first line. If you need to pass more information, separate it with a blank line from the command.

This message was generated automatically. You are welcome to improve it.

[github-actions[bot]]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ ACTION	actionlint	8		0	0.06s
✅ COPYPASTE	jscpd	yes		no	1.96s
✅ REPOSITORY	checkov	yes		no	16.93s
✅ REPOSITORY	dustilock	yes		no	0.1s
✅ REPOSITORY	gitleaks	yes		no	1.02s
✅ REPOSITORY	git_diff	yes		no	0.44s
✅ REPOSITORY	grype	yes		no	10.51s
✅ REPOSITORY	secretlint	yes		no	1.34s
✅ REPOSITORY	syft	yes		no	0.47s
✅ REPOSITORY	trivy-sbom	yes		no	1.45s
✅ REPOSITORY	trufflehog	yes		no	9.7s
✅ SPELL	cspell	20		0	3.52s
✅ TERRAFORM	terraform-fmt	11	0	0	0.88s
✅ YAML	prettier	8	3	0	0.84s
✅ YAML	v8r	8		0	5.49s
✅ YAML	yamllint	8		0	0.47s

See detailed report in MegaLinter reports Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by