Bump mikepenz/release-changelog-builder-action from 4.1.1 to 4.2.0 (#…

…3423) * Bump cloudposse/github-action-matrix-outputs-read Bumps [cloudposse/github-action-matrix-outputs-read](https://github.com/cloudposse/github-action-matrix-outputs-read) from 0.1.2 to 1.0.0. - [Release notes](https://github.com/cloudposse/github-action-matrix-outputs-read/releases) - [Commits](cloudposse/github-action-matrix-outputs-read@e0de318...33cac12) --- updated-dependencies: - dependency-name: cloudposse/github-action-matrix-outputs-read dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> * Bump aquasecurity/trivy-action from 0.17.0 to 0.18.0 Bumps [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) from 0.17.0 to 0.18.0. - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](aquasecurity/trivy-action@84384bd...062f259) --- updated-dependencies: - dependency-name: aquasecurity/trivy-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * Bump aws-cli/aws-cli in /projects/redrive-dead-letter-queues/container Bumps aws-cli/aws-cli from 2.15.16 to 2.15.24. --- updated-dependencies: - dependency-name: aws-cli/aws-cli dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> * Bump dorny/paths-filter in /.github/actions/check-changes Bumps [dorny/paths-filter](https://github.com/dorny/paths-filter) from 3.0.1 to 3.0.2. - [Release notes](https://github.com/dorny/paths-filter/releases) - [Changelog](https://github.com/dorny/paths-filter/blob/master/CHANGELOG.md) - [Commits](dorny/paths-filter@ebc4d7e...de90cc6) --- updated-dependencies: - dependency-name: dorny/paths-filter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> * Bump mikepenz/release-changelog-builder-action from 4.1.1 to 4.2.0 Bumps [mikepenz/release-changelog-builder-action](https://github.com/mikepenz/release-changelog-builder-action) from 4.1.1 to 4.2.0. - [Release notes](https://github.com/mikepenz/release-changelog-builder-action/releases) - [Commits](mikepenz/release-changelog-builder-action@v4.1.1...v4.2.0) --- updated-dependencies: - dependency-name: mikepenz/release-changelog-builder-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * update jib to 3.4.1 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Anthony Britton <[email protected]>
ministryofjustice · Mar 5, 2024 · 882d96e · 882d96e
1 parent b1b381c
commit 882d96e
Show file tree

Hide file tree

Showing 6 changed files with 7 additions and 7 deletions.
diff --git a/.github/actions/check-changes/action.yml b/.github/actions/check-changes/action.yml
@@ -23,7 +23,7 @@ outputs:
 runs:
   using: "composite"
   steps:
-    - uses: dorny/paths-filter@ebc4d7e9ebcb0b1eb21480bb8f43113e996ac77a # v3.0.1
+    - uses: dorny/paths-filter@de90cc6fb38fc0963ad72b210f1f284cd68cea36 # v3.0.2
       id: paths-filter
       with:
         list-files: shell

diff --git a/.github/actions/merge-changes/action.yml b/.github/actions/merge-changes/action.yml
@@ -10,7 +10,7 @@ runs:
   using: "composite"
   steps:
     - uses: actions/checkout@v4
-    - uses: cloudposse/github-action-matrix-outputs-read@e0de318159d7139fb9e5f1d59e7f43f91d1d0904 # v0.1.2
+    - uses: cloudposse/github-action-matrix-outputs-read@33cac12fa9282a7230a418d859b93fdbc4f27b5a # v1
       id: read-changes
       with:
         matrix-step-name: output-changes

diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -16,7 +16,7 @@ jobs:
           fetch-depth: 0
       - name: Build Changelog
         id: github_release
-        uses: mikepenz/release-changelog-builder-action@v4.1.1
+        uses: mikepenz/release-changelog-builder-action@v4.2.0
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
         with:

diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml
@@ -32,7 +32,7 @@ jobs:
       - uses: actions/checkout@v4
 
       - name: Scan image
-        uses: aquasecurity/trivy-action@84384bd6e777ef152729993b8145ea352e9dd3ef # v0.17.0
+        uses: aquasecurity/trivy-action@062f2592684a31eb3aa050cc61e7ca1451cecd3d # v0.18.0
         with:
           image-ref: 'ghcr.io/ministryofjustice/hmpps-probation-integration-services/${{ matrix.project }}:latest'
           ignore-unfixed: true
@@ -50,7 +50,7 @@ jobs:
           sarif_file: 'trivy-results.sarif'
 
       - name: Get Trivy results
-        uses: aquasecurity/trivy-action@84384bd6e777ef152729993b8145ea352e9dd3ef # v0.17.0
+        uses: aquasecurity/trivy-action@062f2592684a31eb3aa050cc61e7ca1451cecd3d # v0.18.0
         with:
           image-ref: 'ghcr.io/ministryofjustice/hmpps-probation-integration-services/${{ matrix.project }}:latest'
           ignore-unfixed: true

diff --git a/buildSrc/build.gradle.kts b/buildSrc/build.gradle.kts
@@ -11,6 +11,6 @@ repositories {
 }
 
 dependencies {
-    implementation("com.google.cloud.tools:jib-gradle-plugin:3.4.0")
+    implementation("com.google.cloud.tools:jib-gradle-plugin:3.4.1")
     implementation("org.sonarsource.scanner.gradle:sonarqube-gradle-plugin:4.4.1.3373")
 }
diff --git a/projects/redrive-dead-letter-queues/container/Dockerfile b/projects/redrive-dead-letter-queues/container/Dockerfile
@@ -1,4 +1,4 @@
-FROM public.ecr.aws/aws-cli/aws-cli:2.15.16
+FROM public.ecr.aws/aws-cli/aws-cli:2.15.24
 
 USER root
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]