Bump govuk_app_config from 7.1.0 to 9.7.0

[dependabot]

Bumps govuk_app_config from 7.1.0 to 9.7.0.

Changelog

Sourced from govuk_app_config's changelog.

9.7.0

• Enable adding custom LogStasher fields from apps (#327)

9.6.0

• Allow YouTube thumbnails from https://i.ytimg.com in the global Content Security Policy (#328)

9.5.0

• Allow gov.uk domains to embed pages in the global Content Security Policy (#325)

9.4.0

• Disallow any domain from embeding a page to prevent clickjacking (#322)
• Fix GovukContentSecurityPolicy test (#324)

9.3.0

• Get prometheus labels from controller, not params (#320)

9.2.0

• Default to Prometheus histograms, not summaries (#318)

9.1.0

• GovukAppConfig silences OpenTelemetry log output when running a rake task (#311)
• Update warning message for Prometheus metric server address already in use.
• Add ability to support custom collectors in the Prometheus exporter.

9.0.4

• Fix an issue with Rails.logger being not an instance of ActiveSupport::Logger. Rails expects Rails.logger to have methods that Ruby STD Logger does not provide. e.g. silence() (#309)

9.0.3

• When error is reported by Rails logger, the field is now logged as "error_message" in order to avoid overwriting the "message" field.

9.0.2

• GovukAppConfig no longer automatically initialises OpenTelemetry when running in rails console.

9.0.1

• Rename the "error" field in Rails logs from logstasher to "message" as error is supposed to be an object.

9.0.0

• BREAKING: JSON logs are no longer configured automatically for production Rails apps and are turned on with the GOVUK_RAILS_JSON_LOGGING environment variable (#302)

... (truncated)

Commits

• 6dcd26f Merge pull request #327 from alphagov/enable-adding-more-custom-logstasher-fi...
• 2305f46 Release version 9.7.0
• 9faf031 Test the adding of custom fields via LogStasher
• 3cdb633 Enable adding custom LogStasher fields from apps
• 6c67586 Merge pull request #331 from alphagov/add-sca-sast-scans
• 135e98e Add CodeQL (SAST) scan and Dependency Review (SCA) scan to CI pipeline
• 8598b90 Merge pull request #328 from alphagov/update-csp
• 389993c Release version 9.6.0
• 6ae4b5c Allow YouTube thumbnails from https://i.ytimg.com
• d83f880 Merge pull request #326 from alphagov/dependabot/bundler/opentelemetry-instru...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #1229.