Renovate Update Patch & Minor Updates

.github/workflows/_docker_build_scan_push.yml

@@ -92,7 +92,7 @@ jobs:
           provenance: false
 
       - name: Trivy scan
-        uses: aquasecurity/trivy-action@0.19.0
+        uses: aquasecurity/trivy-action@0.24.0
         with:
           image-ref: '${{ steps.docker_tags.outputs.semver_tag }}'
           severity: 'HIGH,CRITICAL'

.github/workflows/analysis-codeql.yml

@@ -42,7 +42,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@v3.25.3
+      uses: github/codeql-action/init@v3.26.6
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -53,7 +53,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@v3.25.3
+      uses: github/codeql-action/autobuild@v3.26.6
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 https://git.io/JvXDl
@@ -67,4 +67,4 @@ jobs:
     #   make release
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@v3.25.3
+      uses: github/codeql-action/analyze@v3.26.6

.github/workflows/analysis-tfsec-to-github-security.yml

@@ -32,6 +32,6 @@ jobs:
         with:
           sarif_file: tfsec.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@v3.25.3
+        uses: github/codeql-action/upload-sarif@v3.26.6
         with:
           sarif_file: tfsec.sarif

docs/support_scripts/load_testing/go.mod

@@ -2,6 +2,6 @@ module load_testing
 
 go 1.20
 
-require github.com/aws/aws-sdk-go v1.52.2
+require github.com/aws/aws-sdk-go v1.55.5
 
 require github.com/jmespath/go-jmespath v0.4.0 // indirect

docs/support_scripts/load_testing/go.sum

@@ -2,6 +2,8 @@ github.com/aws/aws-sdk-go v1.44.281 h1:z/ptheJvINaIAsKXthxONM+toTKw2pxyk700Hfm6y
 github.com/aws/aws-sdk-go v1.44.281/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go v1.52.2 h1:l4g9wBXRBlvCtScvv4iLZCzLCtR7BFJcXOnOGQ20orw=
 github.com/aws/aws-sdk-go v1.52.2/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.55.5 h1:KKUZBfBoyqy5d3swXyiC7Q76ic40rYcbqH7qjh59kzU=
+github.com/aws/aws-sdk-go v1.55.5/go.mod h1:eRwEWoyTWFMVYVQzKMNHWP5/RV4xIUGMQfXQHfHkpNU=
 github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=

docs/support_scripts/requests/go.mod

@@ -2,6 +2,6 @@ module api_request
 
 go 1.20
 
-require github.com/aws/aws-sdk-go v1.52.2
+require github.com/aws/aws-sdk-go v1.55.5
 
 require github.com/jmespath/go-jmespath v0.4.0 // indirect

docs/support_scripts/requests/go.sum

@@ -2,6 +2,8 @@ github.com/aws/aws-sdk-go v1.44.284 h1:Oc5Kubi43/VCkerlt3ZU3KpBju6BpNkoG3s7E8vj/
 github.com/aws/aws-sdk-go v1.44.284/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI=
 github.com/aws/aws-sdk-go v1.52.2 h1:l4g9wBXRBlvCtScvv4iLZCzLCtR7BFJcXOnOGQ20orw=
 github.com/aws/aws-sdk-go v1.52.2/go.mod h1:LF8svs817+Nz+DmiMQKTO3ubZ/6IaTpq3TjupRn3Eqk=
+github.com/aws/aws-sdk-go v1.55.5 h1:KKUZBfBoyqy5d3swXyiC7Q76ic40rYcbqH7qjh59kzU=
+github.com/aws/aws-sdk-go v1.55.5/go.mod h1:eRwEWoyTWFMVYVQzKMNHWP5/RV4xIUGMQfXQHfHkpNU=
 github.com/davecgh/go-spew v1.1.0 h1:ZDRjVQ15GmhC3fiQ8ni8+OwkZQO4DARzQgrnXU1Liz8=
 github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
 github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg=

integration_tests/v1/requirements.txt

@@ -1,10 +1,10 @@
-pytest==8.2.0
-pytest-env==1.1.3
+pytest==8.3.2
+pytest-env==1.1.4
 pytest-xdist==3.6.1
 pytest-html==4.1.1
-requests_aws4auth==1.2.3
-boto3==1.34.98
-jsonschema==4.22.0
-fakeredis==2.22.0
+requests_aws4auth==1.3.1
+boto3==1.35.14
+jsonschema==4.23.0
+fakeredis==2.24.1
 flask==3.0.3
-coverage==7.5.0
+coverage==7.6.1

lambda_functions/v1/requirements/dev-requirements.txt

@@ -1,16 +1,16 @@
-connexion==3.0.6
-fakeredis==2.22.0
-flake8==7.0.0
+connexion==3.1.0
+fakeredis==2.24.1
+flake8==7.1.1
 flake8-quotes==3.4.0
-hypothesis==6.100.2
-moto==5.0.6
-pytest==8.2.0
+hypothesis==6.112.0
+moto==5.0.14
+pytest==8.3.2
 pytest-cov==5.0.0
-pytest-env==1.1.3
+pytest-env==1.1.4
 pytest-html==4.1.1
 tenacity==9.0.0
-validators==0.28.1
-yarl==1.9.4
-importlib-metadata==8.0.0
+validators==0.34.0
+yarl==1.11.0
+importlib-metadata==8.4.0
 opg-sirius-service==2.1.1
-typing-extensions==4.11.0
+typing-extensions==4.12.2

lambda_functions/v1/requirements/pact-requirements.txt

@@ -1,3 +1,3 @@
-connexion==3.0.6
+connexion==3.1.0
 swagger-ui-bundle
 requests

lambda_functions/v1/requirements/requirements.txt

@@ -2,8 +2,8 @@
 Flask==3.0.3
 markupsafe==2.1.5
 localstack-client==2.5
-redis==5.0.4
-requests==2.32.0
-Werkzeug==3.0.3
-requests-aws4auth==1.0.1
+redis==5.0.8
+requests==2.32.3
+Werkzeug==3.0.4
+requests-aws4auth==1.3.1
 opg-sirius-service==2.1.1

mock_sirius_backend/requirements.txt

@@ -1,4 +1,4 @@
-connexion==3.0.6
+connexion==3.1.0
 Flask==3.0.3
 markupsafe==2.1.5
 requests

terraform/environment/lambda.tf

@@ -3,7 +3,7 @@ data "aws_secretsmanager_secret" "jwt_secret_key" {
 }
 
 module "lambda_lpa_v1" {
-  source = "github.com/terraform-aws-modules/terraform-aws-lambda.git?ref=v7.4.0"
+  source = "github.com/terraform-aws-modules/terraform-aws-lambda.git?ref=v7.8.1"
 
   function_name          = "lpa-${local.environment}-v1"
   handler                = "app.lpa.lambda_handler"

terraform/environment/versions.tf

@@ -5,5 +5,5 @@ terraform {
       version = "~> 5.0"
     }
   }
-  required_version = "1.8.5"
+  required_version = "1.9.5"
 }