Renovate Update Patch & Minor Updates #282
Open
+146
−95
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
renovate
bot
added
dependencies
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
3ab10cb to
1e0ab25
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
1e0ab25 to
afe31b2
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
afe31b2 to
55577d7
Compare
|
This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation. |
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
2 times, most recently
from
e80fe69 to
197d2a4
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
197d2a4 to
7804646
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
7804646 to
1aec22b
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
1aec22b to
4a28b6e
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
4a28b6e to
9f07960
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
9f07960 to
d1c4ec4
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
d1c4ec4 to
67af4a2
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
67af4a2 to
a2255d2
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
a2255d2 to
de1af90
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
4521fed to
456e460
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
456e460 to
418e802
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
418e802 to
9ecb925
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
9ecb925 to
d6cfc6f
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
d6cfc6f to
287f534
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
287f534 to
956e162
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
956e162 to
06e8a14
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
06e8a14 to
0768320
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
0768320 to
ff8664f
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
ff8664f to
28f15cd
Compare
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
28f15cd to
d56943b
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
d56943b to
485c276
Compare
renovate
bot
force-pushed
the
renovate-all-minor-patch-updates
branch
from
485c276 to
de20571
Compare
|
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==3.0.3->==3.1.0==3.1.4->==3.1.50.28.0->0.29.05.73.0->5.82.2==0.23.0->==0.23.6==1.35.50->==1.35.861.35.87==1.35.50->==1.35.861.35.87v1.32.3->v1.32.7v1.28.1->v1.28.7v1.15.13->v1.15.22v1.36.3->v1.38.1v1.35.3->v1.36.1v1.66.2->v1.71.1v1.34.3->v1.34.8v1.31.0->v1.62.0v1.9.0->v1.10.0v2.46.3->v2.50.0v2.50.11.23.2->1.23.41.23.2->1.23.31.23.4v1.61.0->v1.62.2==2.9.0->==2.10.1Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2024-56326
An oversight in how the Jinja sandboxed environment detects calls to
str.formatallows an attacker that controls the content of a template to execute arbitrary Python code.To exploit the vulnerability, an attacker needs to control the content of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates.
Jinja's sandbox does catch calls to
str.formatand ensures they don't escape the sandbox. However, it's possible to store a reference to a malicious string'sformatmethod, then pass that to a filter that calls it. No such filters are built-in to Jinja, but could be present through custom filters in an application. After the fix, such indirect calls are also handled by the sandbox.CVE-2024-56201
A bug in the Jinja compiler allows an attacker that controls both the content and filename of a template to execute arbitrary Python code, regardless of if Jinja's sandbox is used.
To exploit the vulnerability, an attacker needs to control both the filename and the contents of a template. Whether that is the case depends on the type of application using Jinja. This vulnerability impacts users of applications which execute untrusted templates where the template author can also choose the template filename.
Release Notes
pallets/flask (Flask)
v3.1.0Compare Source
Released 2024-11-13
5623Werkzeug >= 3.1, ItsDangerous >= 2.2, Blinker >= 1.9. :pr:
5624,5633responses. :pr:
5496Flask.open_resource/open_instance_resourceandBlueprint.open_resourcetake anencodingparameter to use whenopening in text mode. It defaults to
utf-8. :issue:5504Request.max_content_lengthcan be customized per-request instead of onlythrough the
MAX_CONTENT_LENGTHconfig. AddedMAX_FORM_MEMORY_SIZEandMAX_FORM_PARTSconfig. Added documentationabout resource limits to the security page. :issue:
5625Partitionedcookie attribute (CHIPS), with theSESSION_COOKIE_PARTITIONEDconfig. :issue:5472-e pathtakes precedence over default.envand.flaskenvfiles.load_dotenvloads default files in addition to a path unlessload_defaults=Falseis passed. :issue:5628SECRET_KEY_FALLBACKSconfig, a list of oldsecret keys that can still be used for unsigning. Extensions will need to
add support. :issue:
5621host_matching=Trueorsubdomain_matching=Falseinteracts with
SERVER_NAME. SettingSERVER_NAMEno longer restrictsrequests to only that domain. :issue:
5553Request.trusted_hostsis checked during routing, and can be set throughthe
TRUSTED_HOSTSconfig. :issue:5636pallets/jinja (Jinja2)
v3.1.5Compare Source
Unreleased
renderfor an async template usesasyncio.run.:pr:
1952auto_aiterwarnings. :pr:1960aclose-ableAsyncGeneratorfromTemplate.generate_async. :pr:1960root_render_func()unclosed inTemplate.generate_async. :pr:1960:pr:
1960aquasecurity/trivy-action (aquasecurity/trivy-action)
v0.29.0Compare Source
What's Changed
setup-trivyby @DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/421setup-trivyand add newcontribdirectory path info by @DmitriyLewen in https://github.com/aquasecurity/trivy-action/pull/424New Contributors
Full Changelog: aquasecurity/trivy-action@0.28.0...0.29.0
hashicorp/terraform-provider-aws (aws)
v5.82.2Compare Source
BUG FIXES:
mutual_authentication.advertise_trust_store_ca_namesattribute. This fixes a regression introduced in v5.82.0 causingsetting mutual_authentication: Invalid address to set: []string{"mutual_authentication", "0", "advertise_trust_store_ca_names"}errors (#40658)v5.82.1Compare Source
ENHANCEMENTS:
availability_zone_distributionargument (#40634)BUG FIXES:
statementsid(#40639)v5.82.0Compare Source
NOTES:
idattribute has changed to prevent inconsistent parsing which resulted in provider crashes under certain conditions. The new format is a comma-delimited string combininggroup_arnandresource_arnin their entirety. Configuarations relying on the previous format may need to be updated to continue functioning correctly. (#40579)FEATURES:
aws_servicecatalogappregistry_attribute_group_associations(#38306)aws_api_gateway_domain_name_access_association(#40566)aws_cloudfront_vpc_origin(#40239)aws_memorydb_multi_region_cluster(#40376)aws_networkmanager_dx_gateway_attachment(#40546)aws_rds_cluster_snapshot_copy(#40398)ENHANCEMENTS:
arnattribute (#40546)statementsidis valid, including on alphanumeric characters (#40562)service_regionattribute (#40583)agent_collaborationattribute to configure agent collaboration role (#40543)origin.vpc_origin_configargument (#40239)name_prefixargument (#40622)arnattribute (#40546)efa_enabledargument (#40381)advertise_trust_store_ca_namesattribute to themutual_authenticationconfiguration block (#40550)multi_region_cluster_nameargument (#40376)edge_locationsattribute (#40546)service_regionargument (#40583)BUG FIXES:
AccessDeniedException: ... is not authorized to perform: acm-pca:GetCertificateAuthorityCsr on resource: ...errors for RAM-shared CAs (#39952)setting entitlements: Invalid address to set: []string{"entitlements", "0", "overage"}errors (#40621)certificate_settingswhen updating. (#40589)certificate_settings.typetoCUSTOM. (#40589)ValidationExceptionwhen settingcertificate_settings.typetoAMPLIFY_MANAGED. (#40589)certificate_settingsnot set. (#40589)certificate_settingsis not set during update. (#40589)arnfor private custom domain names (#40566)vpc_configuration.tls_certificateas Optional (#40574)at_rest_encryption_enabledwhenengineisvalkey. (#40514)IAMPrincipalsprincipal group (#38600)permissionsandpermissions_with_grant_optionattributes (#38047)resultattribute when changinginputattribute, for lifecycle scope "CRUD" (#34263)teletext_destination_settings. (#33797)allocated_storage(#40601)force_destroy = truecan now delete objects with non-XML-safe keys (#40537)force_destroy = truecan now delete objects with non-XML-safe keys (#40537)automatically_after_dayswas not being set properly whenschedule_expressionhad been set previously (#34295)InvalidRequestException: A previous rotation isn't complete. That rotation will be reattempted.(#34295)redrive_allow_policydiffs (#40604)v5.81.0Compare Source
FEATURES:
aws_servicecatalogappregistry_attribute_group(#38188)aws_ssm_parameter(#40313)aws_bedrock_inference_profile(#40294)aws_cloudwatch_log_anomaly_detector(#40437)aws_ecr_account_setting(#40219)aws_msk_single_scram_secret_association(#37056)aws_servicecatalogappregistry_attribute_group(#38183)aws_servicecatalogappregistry_attribute_group_association(#38290)ENHANCEMENTS:
policyanddomain_name_idattributes (#40364)tagsattribute (#38243)delivery_options.max_delivery_secondsandtracking_options.https_policyattributes (#40194)domain_name_idargument (#40447)policyargument anddomain_name_idattribute (#40364)PRIVATEas a valid value forendpoint_configuration.typesargument, enabling custom domain name support for private REST API endpoints (#40364)completion_duration_minutesargument (#40336)configuration.retention_configurationandconfiguration.orphan_file_deletion_configurationattributes. (#40199)enable_primary_ipv6argument to add support for enabling primary IPv6 addresses on EC2 instances (#36425)shard_countwould not exceed the AWS account's shard quota when the data stream capacity mode isPROVISIONED, preventing the provider from retrying for 1 hour in the case that the quota is exceeded. This functionality requires thekinesis:DescribeLimitsIAM permission (#40499)kinesis:DescribeLimitsIAM permission (#40499)topic_replication.topic_name_configurationargument (#40101)enable_primary_ipv6argument to add support for enabling primary IPv6 addresses for network interfaces (#36425)stateful_engine_options.flow_timeoutsargument (#39996)serverlessv2_scaling_configuration.seconds_until_auto_pauseargument (#40441)tagsargument andtags_allattribute (#40470)notebook-al2-v3value forplatform_identifier(#40484)tagsargument andtags_allattribute (#38243)delivery_options.max_delivery_secondsandtracking_options.https_policyarguments (#40194)BUG FIXES:
InvalidArgumentException: NextToken and StreamName cannot be provided togethererrors when the data stream has more than 1000 shards (#40499)rulefromTypeSettoTypeListas order is significant (#40521)throughput_capacityvalidation to allow values up to12228(#40468)logging_configuration.log_destination_configs (#40092)InvalidDBClusterStateFaulterrors when deleting clusters that are members of a global cluster (#40333)InvalidParameterValue: Serverless v2 maximum capacity 0.0 isn't valid. The maximum capacity must be at least 1.0.errors when removingserverlessv2_scaling_configurationin an update (#40511)storage_typewhen restoring from S3 (#40471)storage_typewhen restoring from snapshot (#40471)storage_typewhen restoring to a point in time (#40471)database_nameas Computed. This prevents resource recreation when the source cluster specifies adatabase_name(#40469)v5.80.0Compare Source
FEATURES:
aws_codeconnections_connection(#40300)aws_codeconnections_host(#40300)aws_s3tables_namespace(#40420)aws_s3tables_table(#40420)aws_s3tables_table_bucket(#40420)aws_s3tables_table_bucket_policy(#40420)aws_s3tables_table_policy(#40420)ENHANCEMENTS:
instructionmax length for validation to 8000 (#40279)deletion_protection_enabledargument (#35359)serverlessv2_scaling_configuration.max_capacityandserverlessv2_scaling_configuration.min_capacityminimum values to0to support Amazon Aurora Serverless v2 scaling to 0 ACUs (#40230)LocalZoneas a valid value forlocation.type, enabling support for Amazon S3 Express One Zone in AWS Dedicated Local Zones (#40339)BUG FIXES:
tags_allwhen planning. (#40305)deserialization failed, failed to decode response body with invalid JSONerrors on Read (#40419)v5.79.0Compare Source
FEATURES:
aws_vpc_block_public_access_exclusion(#40235)aws_vpc_block_public_access_options(#40233)ENHANCEMENTS:
compute_config,storage_config, andkubernetes_network_config.elastic_load_balancingarguments for EKS Auto Mode (#40370)remote_network_configargument for EKS Auto Mode (#40371)metrics_configargument (#40322)provisioned_poller_configargument (#40303)supported_regionsargument (#40346)BUG FIXES:
disk_iops_configuration.iopsfrom350000to400000fordeployment_type = "SINGLE_AZ_2"(#40359)v5.78.0Compare Source
NOTES:
FEATURES:
aws_iam_organizations_features(#40164)ENHANCEMENTS:
engineattribute (#40224)cluster_configuration.engineattribute (#40224)engineargument (#40224)cluster_configuration.engineattribute (#40224)BUG FIXES:
product_description(e.g., "postgresql") is a substring of multiple products, fixError: multiple RDS Reserved Instance Offerings matched; use additional constraints to reduce matches to a single RDS Reserved Instance Offering(#40281)Warning: AWS account ID not found for providerwhenskip_requesting_account_idistrue(#40264)eksPropertiesorecsPropertiesblock (#40172)content_policy_config.filters_configs are specified. (#40304)sns_topic_arnschanges (#40253)sns_topic_arnschanges (#40291)storage_typefromio1orio2togp3, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#37257)gp3volume'sallocated_storageto a value larger than the threshold value forengine, fix bug causing errorInvalidParameterCombination: You must specify both the storage size and iops when modifying the storage size or iops on a DB instance that has iops(#28847)v5.77.0Compare Source
NOTES:
aws_kms_secrets,aws_lambda_invocation, andaws_secretsmanager_secret_versionnow support ephemeral values. (#40009)FEATURES:
aws_kms_secrets(#40009)aws_lambda_invocation(#39988)aws_secretsmanager_secret_version(#40009)aws_rds_instance_state(#40180)ENHANCEMENTS:
most_recentis true and certain filter criteria are missing (#40211)availability_zone_rebalancingattribute (#40225)availability_zone_rebalancingattribute (#40225)versionConsistencyargument tocontainer_definitions(#40216)nodejs22.xruntimevalue (#40277)nodejs22.xcompatible_runtimesvalue (#40277)endpointargument to point to the writer DB instance in the current primary cluster (#39960)BUG FIXES:
tagsfrom theDescribeSubnetsresponse, removing the need for theec2:DescribeTagsIAM permission (#40144)schemaelement (#40195)pod_identity_associationis modified (#40168)pod_identity_associationis changed (#40168)v5.76.0Compare Source
FEATURES:
aws_vpc_security_group_vpc_association(#40069)ENHANCEMENTS:
python3.13runtimevalue (#40277)python3.13compatible_runtimesvalue (#40277)BUG FIXES:
BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parametersand/orcache_key_parameters(#40124)BadRequestException: Invalid mapping expression specifiedandNotFoundException: Invalid parameter name specifiederrors when making updates torequest_parameters(#40124)launch_templatethat is updated causingValidationError: You must use a valid fully-formed launch template.(#40088)ipam_pool_idis set (#40082)Provider returned invalid result object after applyerrors (#40090)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)policy_names(#40076)policy_arns(#40076)v5.75.1Compare Source
ENHANCEMENTS:
descriptionattribute (#39980)reset_on_deleteto properly reset CloudWatch Role ARN on deletion. (#40004)descriptionargument (#39980)BUG FIXES:
canary_settingsandstage_descriptionwhen `stage_naConfiguration
📅 Schedule: Branch creation - "* 0-6 1 * *" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.