Renovate Update Patch & Minor Updates

.github/workflows/analysis-codeql.yml

@@ -42,7 +42,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3.25.3
+      uses: github/codeql-action/init@v3.28.0
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3.25.3
+      uses: github/codeql-action/autobuild@v3.28.0
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3.25.3
+      uses: github/codeql-action/analyze@v3.28.0

.github/workflows/analysis-tfsec-to-github-security.yml

@@ -32,6 +32,6 @@ jobs:
         with:
           sarif_file: tfsec.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3.25.3
+        uses: github/codeql-action/upload-sarif@v3.28.0
         with:
           sarif_file: tfsec.sarif

docs/support_scripts/load_testing/go.mod

@@ -2,6 +2,6 @@ module load_testing
 
 go 1.20
 
-require github.com/aws/aws-sdk-go v1.52.2
+require github.com/aws/aws-sdk-go v1.55.5
 
 require github.com/jmespath/go-jmespath v0.4.0 // indirect

docs/support_scripts/load_testing/go.sum

@@ -2,6 +2,8 @@ github.com/aws/aws-sdk-go v1.44.281 h1:z/ptheJvINaIAsKXthxONM+toTKw2pxyk700Hfm6y
 github.com/aws/aws-sdk-go v1.44.281/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go v1.52.2 h1:l4g9wBXRBlvCtScvv4iLZCzLCtR7BFJcXOnOGQ20orw=
 github.com/aws/aws-sdk-go v1.52.2/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.55.5 h1:KKUZBfBoyqy5d3swXyiC7Q76ic40rYcbqH7qjh59kzU=
+github.com/aws/aws-sdk-go v1.55.5/go.mod h1:eRwEWoyTWFMVYVQzKMNHWP5/RV4xIUGMQfXQHfHkpNU=
 github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=

docs/support_scripts/requests/go.mod

@@ -2,6 +2,6 @@ module api_request
 
 go 1.20
 
-require github.com/aws/aws-sdk-go v1.52.2
+require github.com/aws/aws-sdk-go v1.55.5
 
 require github.com/jmespath/go-jmespath v0.4.0 // indirect

docs/support_scripts/requests/go.sum

@@ -2,6 +2,8 @@ github.com/aws/aws-sdk-go v1.44.284 h1:Oc5Kubi43/VCkerlt3ZU3KpBju6BpNkoG3s7E8vj/
 github.com/aws/aws-sdk-go v1.44.284/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go v1.52.2 h1:l4g9wBXRBlvCtScvv4iLZCzLCtR7BFJcXOnOGQ20orw=
 github.com/aws/aws-sdk-go v1.52.2/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.55.5 h1:KKUZBfBoyqy5d3swXyiC7Q76ic40rYcbqH7qjh59kzU=
+github.com/aws/aws-sdk-go v1.55.5/go.mod h1:eRwEWoyTWFMVYVQzKMNHWP5/RV4xIUGMQfXQHfHkpNU=
 github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=

integration_tests/v1/requirements.txt

@@ -1,10 +1,10 @@
-pytest==8.2.0
-pytest-env==1.1.3
+pytest==8.3.4
+pytest-env==1.1.5
 pytest-xdist==3.6.1
 pytest-html==4.1.1
-requests_aws4auth==1.2.3
-boto3==1.34.98
-jsonschema==4.22.0
-fakeredis==2.22.0
-flask==3.0.3
-coverage==7.5.0
+requests_aws4auth==1.3.1
+boto3==1.35.87
+jsonschema==4.23.0
+fakeredis==2.26.2
+flask==3.1.0
+coverage==7.6.9

lambda_functions/v1/Dockerfile-Function

@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.13
 
 COPY lambda_functions/v1/functions/lpa/ ${LAMBDA_TASK_ROOT}
 

lambda_functions/v1/Dockerfile-tests

@@ -1,4 +1,4 @@
-FROM public.ecr.aws/lambda/python:3.12
+FROM public.ecr.aws/lambda/python:3.13
 
 COPY /functions/lpa/ ${LAMBDA_TASK_ROOT}/lambda_functions/v1/functions/lpa
 COPY /tests/  ${LAMBDA_TASK_ROOT}/lambda_functions/v1/tests

lambda_functions/v1/requirements/dev-requirements.txt

@@ -1,16 +1,16 @@
-connexion==3.0.6
-fakeredis==2.22.0
-flake8==7.0.0
+connexion==3.1.0
+fakeredis==2.26.2
+flake8==7.1.1
 flake8-quotes==3.4.0
-hypothesis==6.100.2
-moto==5.0.6
-pytest==8.2.0
+hypothesis==6.123.1
+moto==5.0.24
+pytest==8.3.4
 pytest-cov==6.0.0
-pytest-env==1.1.3
+pytest-env==1.1.5
 pytest-html==4.1.1
 tenacity==9.0.0
-validators==0.28.1
-yarl==1.9.4
-importlib-metadata==8.0.0
+validators==0.34.0
+yarl==1.18.3
+importlib-metadata==8.5.0
 opg-sirius-service==2.1.1
-typing-extensions==4.11.0
+typing-extensions==4.12.2

lambda_functions/v1/requirements/pact-requirements.txt

@@ -1,3 +1,3 @@
-connexion==3.0.6
+connexion==3.1.0
 swagger-ui-bundle
 requests

lambda_functions/v1/requirements/requirements.txt

@@ -1,9 +1,9 @@
 #Update this date to trigger update of layers: 20230619
-Flask==3.0.3
-markupsafe==3.0.0
-localstack-client==2.5
-redis==5.0.4
-requests==2.32.0
-Werkzeug==3.0.6
-requests-aws4auth==1.0.1
+Flask==3.1.0
+markupsafe==3.0.2
+localstack-client==2.7
+redis==5.2.1
+requests==2.32.3
+Werkzeug==3.1.3
+requests-aws4auth==1.3.1
 opg-sirius-service==2.1.1

mock_sirius_backend/requirements.txt

@@ -1,4 +1,4 @@
-connexion==3.0.6
-Flask==3.0.3
-markupsafe==3.0.0
+connexion==3.1.0
+Flask==3.1.0
+markupsafe==3.0.2
 requests

terraform/environment/lambda.tf

@@ -7,7 +7,7 @@ data "aws_kms_key" "secrets_manager" {
 }
 
 module "lambda_lpa_v1" {
-  source = "github.com/terraform-aws-modules/terraform-aws-lambda.git?ref=v7.4.0"
+  source = "github.com/terraform-aws-modules/terraform-aws-lambda.git?ref=v7.17.0"
 
   function_name          = "lpa-${local.environment}-v1"
   handler                = "app.lpa.lambda_handler"

terraform/environment/versions.tf

@@ -5,5 +5,5 @@ terraform {
       version = "~> 5.0"
     }
   }
-  required_version = "1.9.7"
+  required_version = "1.10.3"
 }