Merge pull request #123 from ministryofjustice/renovate-all-minor-pat…

…ch-updates [SECURITY] Renovate Update Security Alerts [SECURITY]
ministryofjustice · May 7, 2024 · 93129d3 · 93129d3
2 parents 57e6872 + 29269e8
commit 93129d3
Show file tree

Hide file tree

Showing 15 changed files with 54 additions and 38 deletions.
diff --git a/.github/workflows/analysis-codeql.yml b/.github/workflows/analysis-codeql.yml
@@ -42,7 +42,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/[email protected].1
+      uses: github/codeql-action/[email protected].3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/[email protected].1
+      uses: github/codeql-action/[email protected].3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/[email protected].1
+      uses: github/codeql-action/[email protected].3
diff --git a/.github/workflows/analysis-tfsec-to-github-security.yml b/.github/workflows/analysis-tfsec-to-github-security.yml
@@ -32,6 +32,6 @@ jobs:
         with:
           sarif_file: tfsec.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/[email protected].1
+        uses: github/codeql-action/[email protected].3
         with:
           sarif_file: tfsec.sarif
diff --git a/docs/support_scripts/load_testing/go.mod b/docs/support_scripts/load_testing/go.mod
@@ -2,6 +2,6 @@ module load_testing
 
 go 1.20
 
-require github.com/aws/aws-sdk-go v1.44.281
+require github.com/aws/aws-sdk-go v1.52.2
 
 require github.com/jmespath/go-jmespath v0.4.0 // indirect
diff --git a/docs/support_scripts/load_testing/go.sum b/docs/support_scripts/load_testing/go.sum
@@ -1,5 +1,7 @@
 github.com/aws/aws-sdk-go v1.44.281 h1:z/ptheJvINaIAsKXthxONM+toTKw2pxyk700Hfm6yUw=
 github.com/aws/aws-sdk-go v1.44.281/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
+github.com/aws/aws-sdk-go v1.52.2 h1:l4g9wBXRBlvCtScvv4iLZCzLCtR7BFJcXOnOGQ20orw=
+github.com/aws/aws-sdk-go v1.52.2/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=

diff --git a/docs/support_scripts/requests/go.mod b/docs/support_scripts/requests/go.mod
@@ -2,6 +2,6 @@ module api_request
 
 go 1.20
 
-require github.com/aws/aws-sdk-go v1.44.284
+require github.com/aws/aws-sdk-go v1.52.2
 
 require github.com/jmespath/go-jmespath v0.4.0 // indirect
diff --git a/docs/support_scripts/requests/go.sum b/docs/support_scripts/requests/go.sum
@@ -1,5 +1,7 @@
 github.com/aws/aws-sdk-go v1.44.284 h1:Oc5Kubi43/VCkerlt3ZU3KpBju6BpNkoG3s7E8vj/O8=
 github.com/aws/aws-sdk-go v1.44.284/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
+github.com/aws/aws-sdk-go v1.52.2 h1:l4g9wBXRBlvCtScvv4iLZCzLCtR7BFJcXOnOGQ20orw=
+github.com/aws/aws-sdk-go v1.52.2/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
 github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=

diff --git a/integration_tests/v1/requirements.txt b/integration_tests/v1/requirements.txt
@@ -1,10 +1,10 @@
-pytest==8.1.1
+pytest==8.2.0
 pytest-env==1.1.3
-pytest-xdist==3.5.0
+pytest-xdist==3.6.1
 pytest-html==4.1.1
 requests_aws4auth==1.2.3
-boto3==1.34.87
-jsonschema==4.21.1
-fakeredis==2.21.3
+boto3==1.34.98
+jsonschema==4.22.0
+fakeredis==2.22.0
 flask==3.0.3
-coverage==7.4.4
+coverage==7.5.0
diff --git a/lambda_functions/v1/Dockerfile b/lambda_functions/v1/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.8-slim-buster
+FROM python:3.11-slim-buster
 WORKDIR /var/www/lambda_functions/v1
 
 # Install Python Dependencies

diff --git a/lambda_functions/v1/requirements/pact-requirements.txt b/lambda_functions/v1/requirements/pact-requirements.txt
@@ -1,3 +1,3 @@
-connexion==2.7.0
+connexion==2.14.2
 swagger-ui-bundle
 requests
diff --git a/lambda_functions/v1/requirements/requirements.txt b/lambda_functions/v1/requirements/requirements.txt
@@ -4,6 +4,6 @@ markupsafe==2.1.5
 localstack-client==2.5
 redis==5.0.4
 requests==2.31.0
-Werkzeug==3.0.2
+Werkzeug==3.0.3
 requests-aws4auth==1.0.1
-opg-sirius-service==2.1.1
+opg-sirius-service==2.1.1
diff --git a/mock_sirius_backend/Dockerfile b/mock_sirius_backend/Dockerfile
@@ -1,5 +1,5 @@
 # our base image
-FROM python:3.8-slim
+FROM python:3.12-slim
 
 WORKDIR /var/www/
 COPY requirements.txt .

diff --git a/mock_sirius_backend/requirements.txt b/mock_sirius_backend/requirements.txt
@@ -1,4 +1,4 @@
-connexion==2.7.0
+connexion==2.14.2
 Flask==3.0.3
-markupsafe==2.1.1
+markupsafe==2.1.5
 requests
diff --git a/terraform/environment/.terraform.lock.hcl b/terraform/environment/.terraform.lock.hcl
diff --git a/terraform/environment/lambda.tf b/terraform/environment/lambda.tf
@@ -3,7 +3,7 @@ data "aws_secretsmanager_secret" "jwt_secret_key" {
 }
 
 module "lambda_lpa_v1" {
-  source = "github.com/terraform-aws-modules/terraform-aws-lambda.git?ref=v7.2.6"
+  source = "github.com/terraform-aws-modules/terraform-aws-lambda.git?ref=v7.4.0"
 
   function_name          = "lpa-${local.environment}-v1"
   handler                = "app.lpa.lambda_handler"

diff --git a/terraform/environment/versions.tf b/terraform/environment/versions.tf
@@ -5,5 +5,5 @@ terraform {
       version = "~> 5.0"
     }
   }
-  required_version = "1.8.0"
+  required_version = "1.8.2"
 }