Update all dependencies

| datasource | package | from | to | | --------------- | ----------------------------------------------------------- | ---------- | ---------- | | github-tags | aws-actions/configure-aws-credentials | v2 | v4 | | gitlab-tags | big-bang/product/packages/mattermost | 8.1.2-bb.0 | 9.0.0-bb.1 | | github-tags | defenseunicorns/zarf | v0.29.2 | v0.30.1 | | docker | docker.io/calico/cni | v3.26.1 | v3.26.3 | | docker | docker.io/calico/kube-controllers | v3.26.1 | v3.26.3 | | docker | docker.io/calico/node | v3.26.1 | v3.26.3 | | github-tags | docker/login-action | v2 | v3 | | docker | ghcr.io/defenseunicorns/build-harness/build-harness | 1.10.2 | 1.13.1 | | docker | ghcr.io/defenseunicorns/packages/dubbd-k3d | 0.9.0 | 0.11.0 | | go | github.com/gruntwork-io/terratest | v0.44.0 | v0.46.0 | | github-tags | golang/go | 1.21.0 | 1.21.3 | | github-tags | golangci/golangci-lint | 1.54.1 | 1.54.2 | | github-tags | golangci/golangci-lint | v1.54.1 | v1.54.2 | | github-tags | pre-commit/pre-commit | 3.3.3 | 3.5.0 | | github-tags | pre-commit/pre-commit-hooks | v4.4.0 | v4.5.0 | | github-tags | python-jsonschema/check-jsonschema | 0.24.1 | 0.27.0 | | docker | rancher/k3s | v1.26.5 | v1.28.2 | | docker | registry1.dso.mil/ironbank/opensource/mattermost/mattermost | 8.1.2 | 9.1.0 | | github-tags | renovatebot/pre-commit-hooks | 36.44.1 | 37.27.0 | | github-releases | mozilla/sops | 3.7.3 | 3.8.1 | | github-releases | hashicorp/terraform | 1.5.5 | 1.6.1 | | github-tags | terraform-linters/tflint | 0.47.0 | 0.48.0 | | github-tags | aquasecurity/tfsec | 1.28.1 | 1.28.4 |
defenseunicorns · Oct 18, 2023 · 7f38b45 · 7f38b45
1 parent b76487b
commit 7f38b45
Show file tree

Hide file tree

Showing 11 changed files with 30 additions and 28 deletions.
diff --git a/.github/actions/e2e/action.yml b/.github/actions/e2e/action.yml
@@ -86,7 +86,7 @@ runs:
       run: echo "tf_version=$(grep 'terraform ' .tool-versions)" >> $GITHUB_OUTPUT
 
     - name: Configure AWS Credentials for Commercial
-      uses: aws-actions/configure-aws-credentials@v2
+      uses: aws-actions/configure-aws-credentials@v4
       with:
         role-to-assume: ${{ inputs.role-to-assume }}
         role-session-name: ${{ github.event.client_payload.pull_request.head.sha || github.sha }}

diff --git a/.github/workflows/publish.yml b/.github/workflows/publish.yml
@@ -28,20 +28,20 @@ jobs:
         uses: supplypike/setup-bin@v3
         with:
           # renovate: zarf-uri datasource=github-tags depName=defenseunicorns/zarf
-          uri: 'https://github.com/defenseunicorns/zarf/releases/download/v0.29.2/zarf_v0.29.2_Linux_amd64'
+          uri: 'https://github.com/defenseunicorns/zarf/releases/download/v0.30.1/zarf_v0.30.1_Linux_amd64'
           name: 'zarf'
           # renovate: datasource=github-tags depName=defenseunicorns/zarf versioning=semver
-          version: 'v0.29.2'
+          version: 'v0.30.1'
 
       - name: Login to GHCR
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Login to registry1
-        uses: docker/login-action@v2
+        uses: docker/login-action@v3
         with:
           registry: registry1.dso.mil
           username: ${{ secrets.REGISTRY1_USERNAME }}

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -1,6 +1,6 @@
 repos:
   - repo: https://github.com/pre-commit/pre-commit-hooks
-    rev: v4.4.0
+    rev: v4.5.0
     hooks:
       - id: check-added-large-files
         args: ["--maxkb=1024"]
@@ -31,7 +31,7 @@ repos:
     hooks:
       - id: fix-smartquotes
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.24.1
+    rev: 0.27.0
     hooks:
       - id: check-jsonschema
         name: "Validate Zarf Configs Against Schema"
@@ -44,10 +44,10 @@ repos:
             "--no-cache"
           ]
   - repo: https://github.com/golangci/golangci-lint
-    rev: v1.54.1
+    rev: v1.54.2
     hooks:
       - id: golangci-lint
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 36.44.1
+    rev: 37.27.0
     hooks:
       - id: renovate-config-validator
diff --git a/.tool-versions b/.tool-versions
@@ -1,7 +1,7 @@
-golang 1.21.0
-golangci-lint 1.54.1
-pre-commit 3.3.3
-terraform 1.5.5
-tflint 0.47.0
-tfsec 1.28.1
-sops 3.7.3
+golang 1.21.3
+golangci-lint 1.54.2
+pre-commit 3.5.0
+terraform 1.6.1
+tflint 0.48.0
+tfsec 1.28.4
+sops 3.8.1
diff --git a/Makefile b/Makefile
@@ -1,14 +1,14 @@
 # The version of Zarf to use. To keep this repo as portable as possible the Zarf binary will be downloaded and added to
 # the build folder.
 # renovate: datasource=github-tags depName=defenseunicorns/zarf
-ZARF_VERSION := v0.29.2
+ZARF_VERSION := v0.30.1
 
 # The version of the build harness container to use
 BUILD_HARNESS_REPO := ghcr.io/defenseunicorns/build-harness/build-harness
 # renovate: datasource=docker depName=ghcr.io/defenseunicorns/build-harness/build-harness
-BUILD_HARNESS_VERSION := 1.10.2
+BUILD_HARNESS_VERSION := 1.13.1
 # renovate: datasource=docker depName=ghcr.io/defenseunicorns/packages/dubbd-k3d extractVersion=^(?<version>\d+\.\d+\.\d+)
-DUBBD_K3D_VERSION := 0.9.0
+DUBBD_K3D_VERSION := 0.11.0
 
 # Figure out which Zarf binary we should use based on the operating system we are on
 ZARF_BIN := zarf

diff --git a/go.mod b/go.mod
@@ -3,7 +3,7 @@ module github.com/defenseunicorns/uds-capability-mattermost-operator
 go 1.21.1
 
 require (
-	github.com/gruntwork-io/terratest v0.44.0
+	github.com/gruntwork-io/terratest v0.46.0
 	github.com/stretchr/testify v1.8.4
 )
 

diff --git a/go.sum b/go.sum
@@ -376,6 +376,8 @@ github.com/gruntwork-io/go-commons v0.8.0 h1:k/yypwrPqSeYHevLlEDmvmgQzcyTwrlZGRa
 github.com/gruntwork-io/go-commons v0.8.0/go.mod h1:gtp0yTtIBExIZp7vyIV9I0XQkVwiQZze678hvDXof78=
 github.com/gruntwork-io/terratest v0.44.0 h1:3k7lglJFAtw77p2HnR5vaZBCBnlHmu3DuLjVyuCZXJ0=
 github.com/gruntwork-io/terratest v0.44.0/go.mod h1:EAEuzSjvxAzQoJCEQ06bJPTmdC9HikzgvhmxnAYuExM=
+github.com/gruntwork-io/terratest v0.46.0 h1:ezeJ045eOniWO+0T78SFQrVo6tIJ2or/DBtYvJnweOs=
+github.com/gruntwork-io/terratest v0.46.0/go.mod h1:4TWB5SYgATxJFfg+RNpE0gwiUWxtfMLGOXo5gwcGgMs=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=

diff --git a/mattermost-flux-values.yaml b/mattermost-flux-values.yaml
@@ -6,7 +6,7 @@ application:
   repository: https://repo1.dso.mil/big-bang/product/packages/mattermost.git
   ref:
     # renovate: datasource=gitlab-tags depName=big-bang/product/packages/mattermost versioning=loose registryUrl=https://repo1.dso.mil
-    tag: 8.1.2-bb.0
+    tag: 9.0.0-bb.1
   dependsOn:
     ###ZARF_VAR_MATTERMOST_DEPENDS_ON###
   baseValues:

diff --git a/utils/calico/calico.yaml b/utils/calico/calico.yaml
@@ -4642,7 +4642,7 @@ spec:
         # It can be deleted if this is a fresh installation, or if you have already
         # upgraded to use calico-ipam.
         - name: upgrade-ipam
-          image: docker.io/calico/cni:v3.26.1
+          image: docker.io/calico/cni:v3.26.3
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/calico-ipam", "-upgrade"]
           envFrom:
@@ -4670,7 +4670,7 @@ spec:
         # This container installs the CNI binaries
         # and CNI network config file on each node.
         - name: install-cni
-          image: docker.io/calico/cni:v3.26.1
+          image: docker.io/calico/cni:v3.26.3
           imagePullPolicy: IfNotPresent
           command: ["/opt/cni/bin/install"]
           envFrom:
@@ -4713,7 +4713,7 @@ spec:
         # i.e. bpf at /sys/fs/bpf and cgroup2 at /run/calico/cgroup. Calico-node initialisation is executed
         # in best effort fashion, i.e. no failure for errors, to not disrupt pod creation in iptable mode.
         - name: "mount-bpffs"
-          image: docker.io/calico/node:v3.26.1
+          image: docker.io/calico/node:v3.26.3
           imagePullPolicy: IfNotPresent
           command: ["calico-node", "-init", "-best-effort"]
           volumeMounts:
@@ -4739,7 +4739,7 @@ spec:
         # container programs network policy and routes on each
         # host.
         - name: calico-node
-          image: docker.io/calico/node:v3.26.1
+          image: docker.io/calico/node:v3.26.3
           imagePullPolicy: IfNotPresent
           envFrom:
           - configMapRef:
@@ -4956,7 +4956,7 @@ spec:
       priorityClassName: system-cluster-critical
       containers:
         - name: calico-kube-controllers
-          image: docker.io/calico/kube-controllers:v3.26.1
+          image: docker.io/calico/kube-controllers:v3.26.3
           imagePullPolicy: IfNotPresent
           env:
             # Choose which controllers to run.

diff --git a/utils/k3d/k3d-config.yaml b/utils/k3d/k3d-config.yaml
@@ -3,7 +3,7 @@ kind: Simple
 metadata:
   name: ci
 servers: 1
-image: rancher/k3s:v1.26.5-k3s1
+image: rancher/k3s:v1.28.2-k3s1
 options:
   k3s:
     extraArgs:

diff --git a/zarf.yaml b/zarf.yaml
@@ -70,7 +70,7 @@ components:
     repos:
       - https://repo1.dso.mil/big-bang/product/packages/mattermost.git
     images:
-      - "registry1.dso.mil/ironbank/opensource/mattermost/mattermost:8.1.2"
+      - "registry1.dso.mil/ironbank/opensource/mattermost/mattermost:9.1.0"
       - "registry1.dso.mil/ironbank/opensource/postgres/postgresql12:12.16"
     actions:
       onDeploy: