Bump github.com/cloudposse/atmos from 1.45.0 to 1.47.0

[dependabot]

Bumps github.com/cloudposse/atmos from 1.45.0 to 1.47.0.

Release notes

Sourced from github.com/cloudposse/atmos's releases.

v1.47.0

what

• Add vendor.yaml as a new way of vendoring components, stacks and other artifacts
• Add/update docs
  • https://atmos.tools/core-concepts/vendoring/
  • https://atmos.tools/cli/commands/vendor/pull/

why

Atmos natively supports the concept of "vendoring", which is making copies of the 3rd party components, stacks, and other artifacts in your own repo.

The vendoring configuration is described in the vendor.yaml manifest, which should be placed in the directory from which the atmos vendor pull command is executed, usually in the root of the infrastructure repo.

After defining the vendor.yaml manifest, all the remote artifacts can be downloaded by running the following command:

atmos vendor pull

To vendor a particular component or other artifact, execute the following command:

atmos vendor pull -c <component>

Vendoring Manifest

To vendor remote artifacts, create a vendor.yaml file similar to the example below:

apiVersion: atmos/v1
kind: AtmosVendorConfig
metadata:
  name: example-vendor-config
  description: Atmos vendoring manifest
spec:
  # `imports` or `sources` (or both) must be defined in a vendoring manifest
  imports:
    - "vendor/vendor2.yaml"
    # The imported file extension is optional. 
    # If an import is defined without an extension, the `.yaml` extension is assumed and used by default.
    - "vendor/vendor3"
sources:
# source supports the following protocols: OCI (https://opencontainers.org), Git, Mercurial, HTTP, HTTPS, Amazon S3, Google GCP,
# and all URL and archive formats as described in https://github.com/hashicorp/go-getter.
# In 'source', Golang templates are supported  https://pkg.go.dev/text/template.
# If 'version' is provided, '{{.Version}}' will be replaced with the 'version' value before pulling the files from 'source'.
# Download the component from the AWS public ECR registry (https://docs.aws.amazon.com/AmazonECR/latest/public/public-registries.html).
</tr></table>

... (truncated)

Commits

• 01154c2 Support vendor.yaml as a new way of vendoring components, stacks or any oth...
• 5fa72c9 New features and improvements (#437)
• a0b90d7 Warning Message for go Templating (#426)
• f9e9a36 Bugfix: formula-path for Promoting to homebrew (#424)
• dca315e Update Secret Reference to Fix Brew workflow (#423)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[bridgecrew]

Bridgecrew has found errors in this PR ⬇️

[bridgecrew]

golang.org/x/net v0.15.0 / go.mod

Total vulnerabilities: 2

Critical: 0	High: 0	Medium: 2	Low: 0

Vulnerability ID	Severity	CVSS	Fixed in	Status
CVE-2023-44487	MEDIUM	5.3	0.17.0	Open
CVE-2023-39325	MEDIUM	-	0.17.0	Open

[dependabot]

Superseded by #337.