chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
awscli	patch	2.15.16 -> 2.15.17
defenseunicorns/build-harness	patch	1.15.0 -> 1.15.1
flux2	patch	2.2.2 -> 2.2.3
https://github.com/bridgecrewio/checkov.git	patch	3.2.5 -> 3.2.8

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-cli (awscli)

v2.15.17

Compare Source

defenseunicorns/build-harness (defenseunicorns/build-harness)

v1.15.1

Compare Source

Miscellaneous Chores

• deps: update all dependencies (#​167) (2d096b8)

fluxcd/flux2 (flux2)

v2.2.3

Compare Source

Highlights

Flux v2.2.3 is a patch release which comes with various fixes and improvements. Users are encouraged to upgrade for the best experience.

💡 For upgrading to Flux v2.2, please see the procedure documented in 2.2.0.

This release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.

All controllers are built with Go 1.21.6 using Alpine Linux 3.19.1 base image.

[!NOTE]
Due to breaking changes in Helm v3.14.0, the helm-controller version included in this patch release comes with Helm SDK v3.13.3.
A preview build of the helm-controller with the latest Helm SDK is available at helm-controller#879.

Fixes:

• Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the kustomize-controller upgrade to Kustomize v5.3 and has been fixed in this patch release.
• The regression due to which Roles and ClusterRoles with aggregated roles were continuous reconciled by kustomize-controller has been fixed.
• The HelmRelease status reporting has been improved by ensuring that the stale failure conditions get updated after failure recovery.

See the components changelog for a full list of bug fixes.

Components changelog

• source-controller v1.2.4
• kustomize-controller v1.2.2
• notification-controller v1.2.4
• helm-controller v0.37.4
• image-reflector-controller v0.31.2
• image-automation-controller v0.37.1

CLI Changelog

• PR #​4589 - @​stefanprodan - Update dependencies
• PR #​4585 - @​dependabot[bot] - build(deps): bump the ci group with 3 updates
• PR #​4583 - @​fluxcdbot - Update toolkit components
• PR #​4575 - @​stefanprodan - Update dependencies to Kubernetes v1.28.6
• PR #​4573 - @​dependabot[bot] - build(deps): bump the ci group with 5 updates
• PR #​4558 - @​twinguy - flux check should error on unrecognised args
• PR #​4557 - @​twinguy - flux stats should error on unrecognised args
• PR #​4554 - @​dependabot[bot] - build(deps): bump the ci group with 3 updates
• PR #​4553 - @​twinguy - Properly detect unexpected arguments during uninstall
• PR #​4535 - @​dependabot[bot] - build(deps): bump github.com/cloudflare/circl from 1.3.6 to 1.3.7
• PR #​4533 - @​darkowlzz - tests/int: Add separate resource cleanup step

bridgecrewio/checkov (https://github.com/bridgecrewio/checkov.git)

v3.2.8

Compare Source

v3.2.7

Compare Source

Feature

• azure: create arm check StorageAccountMinimumTlsVersion CKV_AZURE_236 - #​5986
• sast: add dataflow to output - #​5987

Bug Fix

• terraform: Correctly relace foreach_value inside _update_attributes for complex cases - #​5994

v3.2.6

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.