Update all dependencies

jacobbmay · Oct 20, 2024 · 764d7b5 · 764d7b5
1 parent 516bc87
commit 764d7b5
Show file tree

Hide file tree

Showing 20 changed files with 226 additions and 108 deletions.
diff --git a/.env b/.env
@@ -1,3 +1,3 @@
 BUILD_HARNESS_REPO=ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=github-tags depName=defenseunicorns/build-harness
-BUILD_HARNESS_VERSION=1.7.0
+BUILD_HARNESS_VERSION=2.0.43
diff --git a/.github/actions/comment/action.yml b/.github/actions/comment/action.yml
@@ -18,7 +18,7 @@ runs:
     # Will update the comment that triggered the /test comment and add the run-url
     - name: Update comment
       if: github.event_name == 'repository_dispatch'
-      uses: peter-evans/create-or-update-comment@v3
+      uses: peter-evans/create-or-update-comment@v4
       with:
         token: ${{ inputs.token }}
         repository: ${{ github.event.client_payload.github.payload.repository.full_name }}

diff --git a/.github/actions/e2e/action.yml b/.github/actions/e2e/action.yml
@@ -39,26 +39,26 @@ runs:
         GITHUB_OWNER: ${{ github.event.client_payload.github.payload.repository.owner.login || github.repository_owner }}
 
     - name: Init gopath cache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: "${{ github.workspace }}/.cache/go"
         key: "gopath|${{ hashFiles('.tool-versions') }}|${{ hashFiles('go.sum') }}"
 
     - name: Init gobuild cache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: "${{ github.workspace }}/.cache/go-build"
         key: "gobuild|${{ hashFiles('.tool-versions') }}|${{ hashFiles('go.sum') }}"
 
     - name: Init zarf cache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: "${{ github.workspace }}/.cache/.zarf-cache"
         key: "zarf|${{ hashFiles('.tool-versions') }}"
 
     - name: Init docker cache
       id: init-docker-cache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: "${{ github.workspace }}/.cache/docker"
         key: "docker|${{ hashFiles('.env') }}"
@@ -80,13 +80,13 @@ runs:
       run: echo "tf_version=$(grep 'terraform ' .tool-versions)" >> $GITHUB_OUTPUT
 
     - name: Init Terraform Cache
-      uses: actions/cache@v3
+      uses: actions/cache@v4
       with:
         path: "${{ github.workspace }}/.cache/.terraform.d/plugin-cache"
         key: "${{ runner.os }}-terraform-plugins|${{ steps.get_tf_version.outputs.tf_version }}|${{ hashFiles('examples/complete/providers.tf') }}"
 
     - name: Configure AWS Credentials for Commercial
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@v4
       with:
         role-to-assume: ${{ inputs.role-to-assume }}
         role-session-name: ${{ github.event.client_payload.pull_request.head.sha || github.sha }}

diff --git a/.github/actions/pre-commit/action.yml b/.github/actions/pre-commit/action.yml
@@ -12,28 +12,28 @@
     using: composite
     steps:
       - name: Init pre-commit cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/pre-commit"
           key: "pre-commit-${{inputs.check-type}}|${{hashFiles('.tool-versions')}}|${{hashFiles('.pre-commit-config.yaml')}}"
 
       - name: Init gopath cache
         if: inputs.check-type == 'golang' || inputs.check-type == 'all'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/go"
           key: "gopath|${{hashFiles('.tool-versions')}}|${{hashFiles('go.sum')}}"
 
       - name: Init gobuild cache
         if: inputs.check-type == 'golang' || inputs.check-type == 'all'
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/go-build"
           key: "gobuild|${{hashFiles('.tool-versions')}}|${{hashFiles('go.sum')}}"
 
       - name: Init docker cache
         id: init-docker-cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/docker"
           key: "docker|${{hashFiles('.env')}}"

diff --git a/.github/workflows/auto-tag.yml b/.github/workflows/auto-tag.yml
@@ -11,7 +11,7 @@ jobs:
     - name: set env
       run: echo "NOW=v$(date +'%Y%m%d.%H%M%S')" >> $GITHUB_ENV
     - name: create tag
-      uses: actions/github-script@v6
+      uses: actions/github-script@v7
       with:
         github-token: ${{ secrets.PAT2 }}
         script: |

diff --git a/.github/workflows/label.yml b/.github/workflows/label.yml
@@ -13,7 +13,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: labeler
-        uses: actions/labeler@v4
+        uses: actions/labeler@v5
         with:
           repo-token: ${{ secrets.PAT }}
           dot: true
diff --git a/.github/workflows/pre-commit-pr.yml b/.github/workflows/pre-commit-pr.yml
@@ -8,7 +8,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: pre-commit
         uses: ./.github/actions/pre-commit
@@ -19,7 +19,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: pre-commit
         uses: ./.github/actions/pre-commit
@@ -30,7 +30,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: pre-commit
         uses: ./.github/actions/pre-commit
@@ -41,7 +41,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: pre-commit
         uses: ./.github/actions/pre-commit

diff --git a/.github/workflows/pre-commit-trunk.yml b/.github/workflows/pre-commit-trunk.yml
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: pre-commit
         uses: ./.github/actions/pre-commit

diff --git a/.github/workflows/slash-command-dispatch.yml b/.github/workflows/slash-command-dispatch.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Slash Command Dispatch
-        uses: peter-evans/slash-command-dispatch@v3
+        uses: peter-evans/slash-command-dispatch@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           commands: test

diff --git a/.github/workflows/test-command.yml b/.github/workflows/test-command.yml
@@ -26,7 +26,7 @@ jobs:
       test-distros: ${{ steps.parse.outputs.test-distros }}
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.client_payload.pull_request.head.repo.full_name || github.repository }}
@@ -40,7 +40,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.client_payload.pull_request.head.repo.full_name || github.repository }}
@@ -57,7 +57,7 @@ jobs:
     if: needs.parse.outputs.run-ping == 'true'
     steps:
       - name: Checkout Repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.client_payload.pull_request.head.repo.full_name || github.repository }}
@@ -81,7 +81,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           repository: ${{ github.event.client_payload.pull_request.head.repo.full_name || github.repository }}

diff --git a/.github/workflows/update-command.yml b/.github/workflows/update-command.yml
@@ -67,7 +67,7 @@ jobs:
       # Will update the comment that triggered the /test comment and add the run-url
       - name: Update comment
         if: github.event_name == 'repository_dispatch'
-        uses: peter-evans/create-or-update-comment@v3
+        uses: peter-evans/create-or-update-comment@v4
         with:
           token: ${{ secrets.PAT }}
           repository: ${{ github.event.client_payload.github.payload.repository.full_name }}
@@ -120,7 +120,7 @@ jobs:
       # Will update the comment that triggered the /test comment and add the run-url
       - name: Update comment
         if: github.event_name == 'repository_dispatch'
-        uses: peter-evans/create-or-update-comment@v3
+        uses: peter-evans/create-or-update-comment@v4
         with:
           token: ${{ secrets.PAT }}
           repository: ${{ github.event.client_payload.github.payload.repository.full_name }}
@@ -132,33 +132,33 @@ jobs:
 
       # Checkout the code from GitHub Pull Request
       - name: "Checkout the code"
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
         with:
           token: ${{ secrets.PAT }}
           repository: ${{ github.event.client_payload.pull_request.head.repo.full_name || github.repository }}
           ref: ${{ github.event.client_payload.pull_request.head.ref || github.ref_name }}
 
       - name: Init gopath cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/go"
           key: "gopath|${{ hashFiles('.tool-versions') }}|${{ hashFiles('go.sum') }}"
 
       - name: Init gobuild cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/go-build"
           key: "gobuild|${{ hashFiles('.tool-versions') }}|${{ hashFiles('go.sum') }}"
 
       - name: Init zarf cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/.zarf-cache"
           key: "zarf|${{ hashFiles('.tool-versions') }}"
 
       - name: Init docker cache
         id: init-docker-cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/docker"
           key: "docker|${{ hashFiles('.env') }}"
@@ -177,7 +177,7 @@ jobs:
         run: echo "tf_version=$(grep 'terraform ' .tool-versions)" >> $GITHUB_OUTPUT
 
       - name: Init Terraform Cache
-        uses: actions/cache@v3
+        uses: actions/cache@v4
         with:
           path: "${{ github.workspace }}/.cache/.terraform.d/plugin-cache"
           key: "${{ runner.os }}-terraform-plugins|${{ steps.get_tf_version.outputs.tf_version }}|${{ hashFiles('examples/complete/providers.tf') }}"
@@ -188,7 +188,7 @@ jobs:
           make autoformat || true
 
       - name: Commit and push changes
-        uses: stefanzweifel/git-auto-commit-action@v4
+        uses: stefanzweifel/git-auto-commit-action@v5
         with:
           skip_checkout: true
 

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: v5.0.0
     hooks:
       - id: check-added-large-files
         args: ["--maxkb=1024"]
@@ -26,7 +26,7 @@ repos:
       - id: go-fmt
       - id: golangci-lint
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.81.0
+    rev: v1.96.1
     hooks:
       - id: terraform_fmt
       - id: terraform_docs
@@ -40,6 +40,6 @@ repos:
         args:
           - --args=--config=__GIT_WORKING_DIR__/.tflint.hcl
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 36.7.0
+    rev: 38.128.2
     hooks:
       - id: renovate-config-validator
diff --git a/.tool-versions b/.tool-versions
@@ -1,12 +1,12 @@
 adr-tools 3.0.0
-awscli 2.13.0
-checkov 2.3.234
-golang 1.20.5
-golangci-lint 1.53.3
-pre-commit 3.3.3
-terraform 1.5.2
-terraform-docs 0.16.0
-tflint 0.47.0
-tfsec 1.28.1
+awscli 2.18.10
+checkov 3.2.267
+golang 1.23.2
+golangci-lint 1.61.0
+pre-commit 4.0.1
+terraform 1.9.8
+terraform-docs 0.19.0
+tflint 0.53.0
+tfsec 1.28.11
 # renovate: datasource=github-tags depName=defenseunicorns/zarf
-zarf 0.28.1
+zarf 0.42.0
diff --git a/examples/complete/fixtures.common.tfvars b/examples/complete/fixtures.common.tfvars
@@ -20,12 +20,12 @@ secondary_cidr_blocks = ["100.64.0.0/16"] #https://aws.amazon.com/blogs/containe
 bastion_ssh_user     = "ec2-user" # local user in bastion used to ssh
 bastion_ssh_password = "my-password"
 # renovate: datasource=github-tags depName=defenseunicorns/zarf
-zarf_version = "v0.26.3"
+zarf_version = "v0.42.0"
 
 ###########################################################
 #################### EKS Config ###########################
 # renovate: datasource=endoflife-date depName=amazon-eks versioning=loose extractVersion=^(?<version>.*)-eks.+$
-cluster_version = "1.26"
+cluster_version = "1.31"
 
 ###########################################################
 ############## Big Bang Dependencies ######################
@@ -92,14 +92,14 @@ enable_aws_node_termination_handler = true
 aws_node_termination_handler_helm_config = {
   wait = false
   # renovate: datasource=docker depName=public.ecr.aws/aws-ec2/helm/aws-node-termination-handler
-  version = "v0.21.0"
+  version = "v0.24.1"
 }
 
 enable_cluster_autoscaler = true
 cluster_autoscaler_helm_config = {
   wait = false
   # renovate: datasource=github-tags depName=kubernetes/autoscaler extractVersion=^cluster-autoscaler-chart-(?<version>.*)$
-  version = "v9.28.0"
+  version = "v9.43.0"
   set = [
     {
       name  = "extraArgs.expander"
@@ -108,7 +108,7 @@ cluster_autoscaler_helm_config = {
     {
       name = "image.tag"
       # renovate: datasource=github-tags depName=kubernetes/autoscaler extractVersion=^cluster-autoscaler-(?<version>.*)$
-      value = "v1.27.1"
+      value = "v1.31.0"
     }
   ]
 }
@@ -117,14 +117,14 @@ enable_metrics_server = true
 metrics_server_helm_config = {
   wait = false
   # renovate: datasource=github-tags depName=kubernetes-sigs/metrics-server extractVersion=^metrics-server-helm-chart-(?<version>.*)$
-  version = "v3.10.0"
+  version = "v3.12.2"
 }
 
 enable_calico = true
 calico_helm_config = {
   wait = false
   # renovate: datasource=github-tags depName=projectcalico/calico
-  version = "v3.25.1"
+  version = "v3.28.2"
 }
 
 ######################################################

diff --git a/examples/complete/main.tf b/examples/complete/main.tf
@@ -357,7 +357,7 @@ module "key_pair" {
 
 module "ebs_kms_key" {
   source  = "terraform-aws-modules/kms/aws"
-  version = "~> 1.5"
+  version = "~> 3.0"
 
   count = var.keycloak_enabled ? 1 : 0