cloud-platform-infrastructure
cloud-platform-infrastructure copied to clipboard
chore(deps): bump the cloud-platform-aws-account group across 1 directory with 6 updates
Bumps the cloud-platform-aws-account group with 6 updates in the /terraform/aws-accounts/cloud-platform-aws/account directory:
Package | From | To |
---|---|---|
auth0/auth0 | 0.50.2 |
1.2.0 |
ecr::cloud-platform-terraform-ecr-credentials | 6.1.0 |
7.0.0 |
hashicorp/aws | 5.31.0 |
5.49.0 |
integrations/github | 5.42.0 |
6.2.1 |
terraform-aws-modules/acm/aws | 5.0.0 |
5.0.1 |
terraform-aws-modules/s3-bucket/aws | 2.14.0 |
4.1.2 |
Updates auth0/auth0
from 0.50.2 to 1.2.0
Release notes
Sourced from auth0/auth0's releases.
v1.2.0
FEATURES:
resource/auth0_prompt_partials
: Add new resource to manage prompt partials (#918)v1.1.2
ENHANCEMENTS:
resource/auth0_action
: Prevent sendingsecrets
anddependencies
config if no changes triggered (#903)BUG FIXES:
resource/auth0_connection
: Fix PKCE values for OIDC connections (#896)resource/auth0_connection
: Allowsamlp
block to be defined as empty and inherit default values (#905)v1.1.1
BUG FIXES:
resource/auth0_client_grant
: Allowingscopes
to be set as empty (#888)v1.1.0
FEATURES:
resource/auth0_tenant
: Add support forcustomize_mfa_in_postlogin_action
setting (#871)ENHANCEMENTS:
resource/auth0_client
: Set defaulttoken_endpoint_auth_method
based onapp_type
on creation (#878)BUG FIXES:
resource/auth0_tenant
: Set defaultidle_session_lifetime
andsession_lifetime
on import (#849)resource/auth0_connection
: Prevent panic when checking for database config secrets (#864)resource/auth0_branding
: Allow deleting the resource even on free tenants (#875)data-source/auth0_organization
: Fix how we fetch organizations by name (#877)resource/auth0_connection
: Add support fordisable_self_service_change_password
on AD connection options (#874)v1.0.0
NOTES:
- :warning: Check our migration guide to navigate the breaking changes that were added in this release.
- This release supports auto generated terraform configuration. Check our guide for more info.
FEATURES:
resource/auth0_connection
: Add support for Line strategy (#818)resource/auth0_connection
: Addpkce
andattribute_map
settings to OIDC and Okta Workforce connection options (#815)resource/auth0_client
: Add support for pushed authorization requests setting (#756)resource/auth0_tenant
: Add support for pushed authorization requests setting (#756)
... (truncated)
Changelog
Sourced from auth0/auth0's changelog.
v1.2.0
FEATURES:
resource/auth0_prompt_partials
: Add new resource to manage prompt partials (#918)v1.1.2
ENHANCEMENTS:
resource/auth0_action
: Prevent sendingsecrets
anddependencies
config if no changes triggered (#903)BUG FIXES:
resource/auth0_connection
: Fix PKCE values for OIDC connections (#896)resource/auth0_connection
: Allowsamlp
block to be defined as empty and inherit default values (#905)v1.1.1
BUG FIXES:
resource/auth0_client_grant
: Allowingscopes
to be set as empty (#888)v1.1.0
FEATURES:
resource/auth0_tenant
: Add support forcustomize_mfa_in_postlogin_action
setting (#871)ENHANCEMENTS:
resource/auth0_client
: Set defaulttoken_endpoint_auth_method
based onapp_type
on creation (#878)BUG FIXES:
resource/auth0_tenant
: Set defaultidle_session_lifetime
andsession_lifetime
on import (#849)resource/auth0_connection
: Prevent panic when checking for database config secrets (#864)resource/auth0_branding
: Allow deleting the resource even on free tenants (#875)data-source/auth0_organization
: Fix how we fetch organizations by name (#877)resource/auth0_connection
: Add support fordisable_self_service_change_password
on AD connection options (#874)v1.0.0
NOTES:
- :warning: Check our migration guide to navigate the breaking changes that were added in this release.
- This release supports auto generated terraform configuration. Check our guide for more info.
... (truncated)
Commits
21e8c52
Feat: Add resource for prompt partials (#918)b5d51e8
Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.32.0 to 2.33.0 (#922)1806bbf
Bump github.com/hashicorp/terraform-plugin-docs from 0.17.0 to 0.18.0 (#913)718d7e5
Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.31.0 to 2.32.0 (#915)ba1ec90
Bump github.com/hashicorp/terraform-plugin-docs from 0.16.0 to 0.17.0 (#907)f3b2416
Add changelog for v1.1.2 (#906)ded242d
ESD-33548: Allow samlp block to be defined as empty and inherit default value...9ebd304
Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#904)c2807a3
Add HasChange check to action secrets and dependencies (#903)9b04210
Documenting limitation of managing action secrets out-of-bound (#898)- Additional commits viewable in compare view
Updates ecr::cloud-platform-terraform-ecr-credentials
from 6.1.0 to 7.0.0
Release notes
Sourced from ecr::cloud-platform-terraform-ecr-credentials's releases.
v7.0.0
What's Changed
- Update example to use the latest release by
@poornima-krishnasamy
in ministryofjustice/cloud-platform-terraform-ecr-credentials#103- Repo vars condition by
@sj-williams
in ministryofjustice/cloud-platform-terraform-ecr-credentials#109Full Changelog: https://github.com/ministryofjustice/cloud-platform-terraform-ecr-credentials/compare/6.1.1...7.0.0
Breaking Changes
Headline: If optional
github_environments
field is set, any pre-existing default repository ECR secrets and variables will be deleted.This release introduces functionality that could potentially break some existing GitHub Actions pipelines that utilise GitHub Secrets and Variables. Please read this guidance thoroughly and check that your GitHub Actions workflows are configured correctly.
Action required
If you’re using the ECR module in your environment, and are not setting the optional
github_environments
field, then this7.0.0
update will have no impact on your CI/CD workflows and you can ignore this guidance.If you are setting the
github_environments
field, then you should be accessing your ECR secrets and variables:
ECR_ROLE_TO_ASSUME
ECR_REGION
ECR_REPOSITORY
(these will vary if you are settinggithub_actions_prefix
in your module call)from your own defined GitHub environments within your repository workflows. This can be verified by reviewing your GitHub Actions yaml ECR build configurations and verifying that your ECR secrets and variables are scoped within an
environment
block, similar to the below workflow snippet:on: push: branches: [main]
jobs: ecr: environment: development # <-- Your environment name here runs-on: ubuntu-latest ... ... steps: ... # Assume role in Cloud Platform - uses: aws-actions/configure-aws-credentials@v2 with: role-to-assume: ${{ secrets.ECR_ROLE_TO_ASSUME }} # <-- environment scoped secret aws-region: ${{ vars.ECR_REGION }} # <-- environment scoped variable
... (truncated)
Commits
6e9c083
Merge pull request #109 from ministryofjustice/repo-vars-conditionb09aa1e
readme update79ccaaf
readme update073f0e3
set repo vars resource creation dependency on environments list0b52bb9
Merge pull request #103 from ministryofjustice/ecr-example-014a5633d
Update example to use the latest release0386403
Merge pull request #101 from ministryofjustice/tf-validation2dc4c13
feat(action): add setup go to pipeline5915061
feat(action): add action for unit test115f8bd
feat(Go): add unit tests for validation of tf- Additional commits viewable in compare view
Updates hashicorp/aws
from 5.31.0 to 5.49.0
Release notes
Sourced from hashicorp/aws's releases.
v5.49.0
FEATURES:
- New Data Source:
aws_datazone_environment_blueprint
(#36600)- New Resource:
aws_bedrockagent_data_source
(#37158)- New Resource:
aws_datazone_domain
(#36600)- New Resource:
aws_datazone_environment_blueprint_configuration
(#36600)ENHANCEMENTS:
- data-source/aws_iam_policy_document: Add
minified_json
attribute (#35677)- resource/aws_dynamodb_table_export: Add plan-time validation of
table_arn
(#37288)- resource/aws_kms_key: Add
rotation_period_in_days
argument (#37140)- resource/aws_securitylake_subscriber_notification: Better handles importing resource (#37332)
- resource/aws_securitylake_subscriber_notification: Deprecates
endpoint_id
in favor ofsubscriber_endpoint
(#37332)- resource/aws_securitylake_subscriber_notification: Handles
configuration.https_notification_configuration.authorization_api_key_value
as sensitive value (#37332)BUG FIXES:
- data-source/aws_fsx_ontap_storage_virtual_machine: Correctly set
tags
on Read (#37353)- data-source/aws_rds_orderable_db_instance: Fix
InvalidParameterValue: Invalid value 3412 for MaxRecords. Must be between 20 and 1000
errors (#37251)- data-source/aws_resourceexplorer2_search: Fix 401 unauthorized error due to missing
view_arn
in the AWS API request (#36778)- data-source/aws_resourceexplorer2_search: Fix panic caused by bad mappping between Terraform and AWS schemas (#36778)
- data-source/aws_resourceexplorer2_search: Fix state persistence and data types (#36778)
- resource/aws_bedrockagent_agent: Fix to use the configured
prepare_agent
value (or default value oftrue
when omitted) for all create and update operations (#37405)- resource/aws_elasticsearch_domain: Fix handling of unset
auto_tune_options.rollback_on_disable
argument (#37394)- resource/aws_fsx_ontap_storage_virtual_machine: Correctly set
tags
andtags_all
on resource Read (#37353)- resource/aws_fsx_openzfs_file_system: Correctly set
tags
andtags_all
on resource Read (#37353)- resource/aws_kms_custom_key_store: Change
trust_anchor_certificate
to ForceNew (#37092)- resource/aws_opensearch_domain: Fix handling of unset
auto_tune_options.rollback_on_disable
argument (#37394)- resource/aws_opensearch_domain: Wait for
auto_tune_options
to be applied during creation (#37394)- resource/aws_securitylake_aws_log_source: Correctly handles unspecified
source_version
(#36268)- resource/aws_securitylake_aws_log_source: Prevents errors when creating multiple log sources concurrently (#36268)
- resource/aws_securitylake_custom_log_source: Prevents errors when creating multiple log sources concurrently (#36268)
- resource/aws_securitylake_custom_log_source: Validates length of
source_name
parameter (#36268)- resource/aws_securitylake_subscriber: Allow more than one log source (#36268)
- resource/aws_securitylake_subscriber: Correctly handles unspecified
access_type
(#36268)- resource/aws_securitylake_subscriber: Correctly handles unspecified
source_version
parameter foraws_log_source_resource
andcustom_log_source_resource
(#36268)- resource/aws_securitylake_subscriber: Correctly requires
source_name
parameter foraws_log_source_resource
andcustom_log_source_resource
(#36268)- resource/aws_securitylake_subscriber_notification: No longer recreates resource when not needed (#37332)
- resource/aws_securitylake_subscriber_notification: Requires value for
configuration.https_notification_configuration.endpoint
(#37332)- resource/provider: Change the AWS SDK for Go v2 API client
BackoffDelayer
to maintain behavioral compatibility with AWS SDK for Go v1 (#37404)v5.48.0
FEATURES:
- New Resource:
aws_bedrockagent_agent_knowledge_base_association
(#37185)ENHANCEMENTS:
... (truncated)
Changelog
Sourced from hashicorp/aws's changelog.
5.49.0 (May 10, 2024)
FEATURES:
- New Data Source:
aws_datazone_environment_blueprint
(#36600)- New Resource:
aws_bedrockagent_data_source
(#37158)- New Resource:
aws_datazone_domain
(#36600)- New Resource:
aws_datazone_environment_blueprint_configuration
(#36600)ENHANCEMENTS:
- data-source/aws_iam_policy_document: Add
minified_json
attribute (#35677)- resource/aws_dynamodb_table_export: Add plan-time validation of
table_arn
(#37288)- resource/aws_kms_key: Add
rotation_period_in_days
argument (#37140)- resource/aws_securitylake_subscriber_notification: Better handles importing resource (#37332)
- resource/aws_securitylake_subscriber_notification: Deprecates
endpoint_id
in favor ofsubscriber_endpoint
(#37332)- resource/aws_securitylake_subscriber_notification: Handles
configuration.https_notification_configuration.authorization_api_key_value
as sensitive value (#37332)BUG FIXES:
- data-source/aws_fsx_ontap_storage_virtual_machine: Correctly set
tags
on Read (#37353)- data-source/aws_rds_orderable_db_instance: Fix
InvalidParameterValue: Invalid value 3412 for MaxRecords. Must be between 20 and 1000
errors (#37251)- data-source/aws_resourceexplorer2_search: Fix 401 unauthorized error due to missing
view_arn
in the AWS API request (#36778)- data-source/aws_resourceexplorer2_search: Fix panic caused by bad mappping between Terraform and AWS schemas (#36778)
- data-source/aws_resourceexplorer2_search: Fix state persistence and data types (#36778)
- resource/aws_bedrockagent_agent: Fix to use the configured
prepare_agent
value (or default value oftrue
when omitted) for all create and update operations (#37405)- resource/aws_elasticsearch_domain: Fix handling of unset
auto_tune_options.rollback_on_disable
argument (#37394)- resource/aws_fsx_ontap_storage_virtual_machine: Correctly set
tags
andtags_all
on resource Read (#37353)- resource/aws_fsx_openzfs_file_system: Correctly set
tags
andtags_all
on resource Read (#37353)- resource/aws_kms_custom_key_store: Change
trust_anchor_certificate
to ForceNew (#37092)- resource/aws_opensearch_domain: Fix handling of unset
auto_tune_options.rollback_on_disable
argument (#37394)- resource/aws_opensearch_domain: Wait for
auto_tune_options
to be applied during creation (#37394)- resource/aws_securitylake_aws_log_source: Correctly handles unspecified
source_version
(#36268)- resource/aws_securitylake_aws_log_source: Prevents errors when creating multiple log sources concurrently (#36268)
- resource/aws_securitylake_custom_log_source: Prevents errors when creating multiple log sources concurrently (#36268)
- resource/aws_securitylake_custom_log_source: Validates length of
source_name
parameter (#36268)- resource/aws_securitylake_subscriber: Allow more than one log source (#36268)
- resource/aws_securitylake_subscriber: Correctly handles unspecified
access_type
(#36268)- resource/aws_securitylake_subscriber: Correctly handles unspecified
source_version
parameter foraws_log_source_resource
andcustom_log_source_resource
(#36268)- resource/aws_securitylake_subscriber: Correctly requires
source_name
parameter foraws_log_source_resource
andcustom_log_source_resource
(#36268)- resource/aws_securitylake_subscriber_notification: No longer recreates resource when not needed (#37332)
- resource/aws_securitylake_subscriber_notification: Requires value for
configuration.https_notification_configuration.endpoint
(#37332)- resource/provider: Change the AWS SDK for Go v2 API client
BackoffDelayer
to maintain behavioral compatibility with AWS SDK for Go v1 (#37404)5.48.0 (May 2, 2024)
FEATURES:
- New Resource:
aws_bedrockagent_agent_knowledge_base_association
(#37185)
... (truncated)
Commits
5547244
Update CHANGELOG.md for #37405aa32010
r/aws_bedrockagent_agent: use configuredprepare_agent
valueef68be1
r/aws_bedrockagent_agent(doc): document prepare_agent argument, cleanup3736c10
Merge pull request #37408 from hashicorp/t-literal-endpoint-string-constant10ff2e4
yaml: Whitespacee330179
worklink: Use constants for strings71d211c
wafv2: Use constants for stringsd32ced5
wafregional: Use constants for stringsd8f31d8
waf: Use constants for strings3a6d488
transfer: Use constants for strings- Additional commits viewable in compare view
Updates integrations/github
from 5.42.0 to 6.2.1
Release notes
Sourced from integrations/github's releases.
v6.2.1
What's Changed
🐛 Bugfixes
- chore(actions_runner_group): fix missing schema id by
@EttoreFoti
in integrations/terraform-provider-github#2195- chore(organization_webhook): fix insecure_ssl by
@EttoreFoti
in integrations/terraform-provider-github#2196🛠️ Maintenance
- build(deps): bump actions/add-to-project from 0.6.0 to 0.6.1 by
@dependabot
in integrations/terraform-provider-github#2210- build(deps): bump github.com/golangci/golangci-lint from 1.56.2 to 1.57.1 by
@dependabot
in integrations/terraform-provider-github#2209New Contributors
@EttoreFoti
made their first contribution in integrations/terraform-provider-github#2195Full Changelog: https://github.com/integrations/terraform-provider-github/compare/v6.2.0...v6.2.1
v6.2.0
What's Changed
Features
- feat: add
github_enterprise_actions_runner_group
by@bradam12
in integrations/terraform-provider-github#2158- Feat: Fixes abandoned PR #2017: Add support for the require_last_push_approval flag in github_branch_protection_v3 by
@georgekaz
in integrations/terraform-provider-github#2199Bugfixes
- fix(data_source_github_rest_api): just read body and convert bytes into string by
@riezebosch
in integrations/terraform-provider-github#2152🛠️ Maintenance
- build(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 by
@dependabot
in integrations/terraform-provider-github#2189- build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by
@dependabot
in integrations/terraform-provider-github#2194Full Changelog: https://github.com/integrations/terraform-provider-github/compare/v6.1.0...v6.2.0
v6.1.0
What's Changed
- fix: validation rule for
results_per_page
ofgithub_repositories
data source by@dschniepp
in integrations/terraform-provider-github#2185- fix: Prevent loading of allowed actions if not configured by
@Danielku15
in integrations/terraform-provider-github#2186- fix(data_source_github_rest_api): only allow for 404 on err by
@riezebosch
in integrations/terraform-provider-github#2154- fix: error if autolink reference not found by
@bradam12
in integrations/terraform-provider-github#2164- feat: Add
github_actions_enterprise_permissions
by@ErikElkins
in integrations/terraform-provider-github#2155- docs: configure release notes categories based on labels by
@laughedelic
in integrations/terraform-provider-github#2184New Contributors
@dschniepp
made their first contribution in integrations/terraform-provider-github#2185@riezebosch
made their first contribution in integrations/terraform-provider-github#2154@bradam12
made their first contribution in integrations/terraform-provider-github#2164@ErikElkins
made their first contribution in integrations/terraform-provider-github#2155
... (truncated)
Commits
e1f5feb
chore(organization_webhook): fix insecure_ssl (#2196)e3d487b
chore(actions_runner_group): fix missing schema id (#2195)0ff85ac
build(deps): bump github.com/golangci/golangci-lint (#2209)4c8424f
build(deps): bump actions/add-to-project from 0.6.0 to 0.6.1 (#2210)84e8d55
Feat: Fixes abandoned PR #2017: Add support for the require_last_push_approva...b1243e4
feat:add github_enterprise_actions_runner_group
(#2158)5e090bc
build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#2194)af693fd
fix(data_source_github_rest_api): store raw body in state (#2152)30e6176
build(deps): bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 (#2189)dd57a50
docs: configure release notes categories based on labels (#2184)- Additional commits viewable in compare view
Updates terraform-aws-modules/acm/aws
from 5.0.0 to 5.0.1
Release notes
Sourced from terraform-aws-modules/acm/aws's releases.
v5.0.1
5.0.1 (2024-03-06)
Bug Fixes
Commits
f421377
chore(release): version 5.0.1 [skip ci]859fb3c
fix: Update CI workflow versions to remove deprecated runtime warnings (#151)- See full diff in compare view
Updates terraform-aws-modules/s3-bucket/aws
from 2.14.0 to 4.1.2
Release notes
Sourced from terraform-aws-modules/s3-bucket/aws's releases.
v4.1.2
4.1.2 (2024-04-16)
Bug Fixes
v4.1.1
4.1.1 (2024-03-06)
Bug Fixes
v4.1.0
4.1.0 (2024-01-26)
Features
v4.0.1
4.0.1 (2024-01-13)
Bug Fixes
v4.0.0
4.0.0 (2024-01-13)
⚠ BREAKING CHANGES
- upd versions.tf to require >= 5.27
Features
- logging: change logging variable type to any (2c45bde)
- logging: Date based partitioning for access-logs (59f65af)
- upd versions.tf to require >= 5.27 (7a4aab6)
v3.15.2
3.15.2 (2024-01-12)
... (truncated)
Changelog
Sourced from terraform-aws-modules/s3-bucket/aws's changelog.
4.1.2 (2024-04-16)
Bug Fixes
4.1.1 (2024-03-06)
Bug Fixes
4.1.0 (2024-01-26)
Features
4.0.1 (2024-01-13)
Bug Fixes
4.0.0 (2024-01-13)
⚠ BREAKING CHANGES
- upd versions.tf to require >= 5.27
Features
- logging: change logging variable type to any (2c45bde)
- logging: Date based partitioning for access-logs (59f65af)
- upd versions.tf to require >= 5.27 (7a4aab6)
3.15.2 (2024-01-12)
Bug Fixes
3.15.1 (2023-08-26)
... (truncated)
Commits
8a0b697
chore(release): version 4.1.2 [skip ci]b4a5347
fix: Typo in description ofaccess_log_delivery_policy_source_buckets
varia...cd61253
chore(release): version 4.1.1 [skip ci]ca372ac
fix: Update CI workflow versions to remove deprecated runtime warnings (#274)3a1c80b
chore(release): version 4.1.0 [skip ci]f9e1740
feat: Allow override of the default tags override (#261)fccafe5
chore(release): version 4.0.1 [skip ci]116f79b
fix: Fixed routing rule condition (#270)12361ab
chore(release): version 4.0.0 [skip ci]b3885bb
Updated Terraform versions everywhere to 1.0- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
-
@dependabot rebase
will rebase this PR -
@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it -
@dependabot merge
will merge this PR after your CI passes on it -
@dependabot squash and merge
will squash and merge this PR after your CI passes on it -
@dependabot cancel merge
will cancel a previously requested merge and block automerging -
@dependabot reopen
will reopen this PR if it is closed -
@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually -
@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency -
@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) -
@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) -
@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) -
@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency -
@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions