Bump aws-actions/configure-aws-credentials from 4.0.3 to 4.1.0 #979

dependabot · 2025-02-11T19:35:50Z

Bumps aws-actions/configure-aws-credentials from 4.0.3 to 4.1.0.

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v4.1.0

4.1.0 (2025-02-08)

Features

idempotent fetch (#1289) (eb70354)

Bug Fixes

build failure due to tests (#1283) (134d71e)

Dependabot autoapprove (#1284) (b9ee51d)

Dependabot autoapprove id-token write permission (#1285) (f0af89b)

typo (#1281) (39fd91c)

Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

4.1.0 (2025-02-08)

Features

idempotent fetch (#1289) (eb70354)

Bug Fixes

build failure due to tests (#1283) (134d71e)

Dependabot autoapprove (#1284) (b9ee51d)

Dependabot autoapprove id-token write permission (#1285) (f0af89b)

typo (#1281) (39fd91c)

4.0.3 (2025-01-27)

Features

added release-please action config (0f88004)

Bug Fixes

add id-token permission to automerge (97834a4)

cpy syntax on npm package (#1195) (83b5a56)

force push packaged files to main (bfd2185)

Miscellaneous Chores

release 4.0.3 (ca00fd4)

4.0.2 (2024-02-09)

Revert 4.0.1 to remove warning

4.0.1 (2023-10-03)

Documentation

Throw a warning when customers use long-term credentials.

4.0.0 (2023-09-11)

Upgraded runtime to node20 from node16

... (truncated)

Commits

ececac1 chore(main): release 4.1.0 (#1282)
16fec60 chore: Update dist
eb70354 feat: idempotent fetch (#1289)
3478c15 chore(deps-dev): bump memfs from 4.14.0 to 4.17.0 (#1250)
a69d38c chore: Update dist
6b1d0f8 chore(deps-dev): bump @smithy/property-provider from 3.1.8 to 4.0.1 (#1246)
f021516 chore: remove role session name
1c8dbbc chore(deps-dev): bump @vercel/ncc from 0.38.2 to 0.38.3 (#1204)
ce290d6 chore: change dependabot role session name
1780ebd chore: create one-off test for CAWSC
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [aws-actions/configure-aws-credentials](/~https://github.com/aws-actions/configure-aws-credentials) from 4.0.3 to 4.1.0. - [Release notes](/~https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](/~https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](aws-actions/configure-aws-credentials@4fc4975...ececac1) --- updated-dependencies: - dependency-name: aws-actions/configure-aws-credentials dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-02-13T13:43:00Z

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

…ure-aws-credentials-4.1.0

github-actions · 2025-02-26T12:29:29Z

commonimages/base/rhel_7_9 terragrunt plan on pull_request event #648

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 1s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this will be created
  + resource "aws_imagebuilder_image_pipeline" "this" {
      + arn                              = (known after apply)
      + date_created                     = (known after apply)
      + date_last_run                    = (known after apply)
      + date_next_run                    = (known after apply)
      + date_updated                     = (known after apply)
      + description                      = "shared rhel 7.9 base image"
      + distribution_configuration_arn   = "arn:aws:imagebuilder:eu-west-2:REDACTED:distribution-configuration/base-rhel-7-9"
      + enhanced_image_metadata_enabled  = true
      + id                               = (known after apply)
      + image_recipe_arn                 = (known after apply)
      + infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:REDACTED:infrastructure-configuration/base-rhel-7-9-0-1-2"
      + name                             = "base_rhel_7_9"
      + platform                         = (known after apply)
      + status                           = "ENABLED"
      + tags                             = {
          + "application"                     = "n/a"
          + "branch"                          = "main"
          + "business-unit"                   = "HMPPS"
          + "image-pipeline"                  = "base_rhel_7_9"
          + "image-recipe"                    = "base_rhel_7_9/0.1.2"
          + "infrastructure-configuration"    = "base_rhel_7_9/0.1.2"
          + "is-production"                   = "true"
          + "os-version"                      = "rhel 7.9"
          + "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
          + "release-or-patch"                = "n/a"
          + "source-code"                     = "/~https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
          + "stig-build-linux-medium-version" = "2024.4.0"
          + "update-linux-version"            = "1.0.2"
        }
      + tags_all                         = {
          + "application"                     = "n/a"
          + "branch"                          = "main"
          + "business-unit"                   = "HMPPS"
          + "image-pipeline"                  = "base_rhel_7_9"
          + "image-recipe"                    = "base_rhel_7_9/0.1.2"
          + "infrastructure-configuration"    = "base_rhel_7_9/0.1.2"
          + "is-production"                   = "true"
          + "os-version"                      = "rhel 7.9"
          + "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
          + "release-or-patch"                = "n/a"
          + "source-code"                     = "/~https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
          + "stig-build-linux-medium-version" = "2024.4.0"
          + "update-linux-version"            = "1.0.2"
        }

      + image_tests_configuration {
          + image_tests_enabled = false
          + timeout_minutes     = 720
        }

      + schedule {
          + pipeline_execution_start_condition = "EXPRESSION_MATCH_ONLY"
          + schedule_expression                = "cron(0 0 1 * ? *)"
          + timezone                           = (known after apply)
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:REDACTED:image-recipe/base-rhel-7-9/0.1.2" -> (known after apply)
      ~ date_created     = "2024-01-23T09:50:18.412Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:REDACTED:image-recipe/base-rhel-7-9/0.1.2" -> (known after apply)
        name             = "base_rhel_7_9"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-0c2f9865057c3dfe1" -> "ami-0c1e9b4f894b82051" # forces replacement
      ~ platform         = "Linux" -> (known after apply)
      ~ tags             = {
            "application"                     = "n/a"
            "branch"                          = "main"
            "business-unit"                   = "HMPPS"
            "image-pipeline"                  = "base_rhel_7_9"
            "image-recipe"                    = "base_rhel_7_9/0.1.2"
            "infrastructure-configuration"    = "base_rhel_7_9/0.1.2"
            "is-production"                   = "true"
            "os-version"                      = "rhel 7.9"
            "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                = "n/a"
            "source-code"                     = "/~https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
          ~ "stig-build-linux-medium-version" = "2024.2.3" -> "2024.4.0"
            "update-linux-version"            = "1.0.2"
        }
      ~ tags_all         = {
          ~ "stig-build-linux-medium-version" = "2024.2.3" -> "2024.4.0"
            # (12 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
        # (2 unchanged attributes hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:REDACTED:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 30 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"
          + no_device   = (known after apply)

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:REDACTED:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 30
              + volume_type           = "gp3"
            }
        }

        # (5 unchanged blocks hidden)
    }

Plan: 2 to add, 0 to change, 1 to destroy.

github-actions · 2025-02-26T12:31:42Z

commonimages/base/rhel_7_9 terragrunt plan on push event #649

module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Reading...
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Reading...
module.imagebuilder.data.terraform_remote_state.imagebuilder_mp: Read complete after 2s
module.imagebuilder.data.aws_secretsmanager_secret.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Reading...
module.imagebuilder.data.aws_secretsmanager_secret_version.environment_management: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.terraform_remote_state.core_shared_services_production: Read complete after 3s
module.imagebuilder.data.aws_caller_identity.current: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Reading...
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Reading...
module.imagebuilder.data.aws_ami.parent[0]: Reading...
module.imagebuilder.data.aws_caller_identity.current: Read complete after 0s [id=<REDACTED>]
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Reading...
module.imagebuilder.data.aws_kms_key.hmpps_ebs_encryption_cmk: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["update-linux"]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_ami.parent[0]: Read complete after 1s [id=<REDACTED>]
module.imagebuilder.data.aws_imagebuilder_component.this["stig-build-linux-medium"]: Read complete after 2s [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_infrastructure_configuration.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_image_recipe.this: Refreshing state... [id=<REDACTED>]
module.imagebuilder.aws_imagebuilder_distribution_configuration.this: Refreshing state... [id=<REDACTED>]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  + create
+/- create replacement and then destroy

Terraform will perform the following actions:

  # module.imagebuilder.aws_imagebuilder_image_pipeline.this will be created
  + resource "aws_imagebuilder_image_pipeline" "this" {
      + arn                              = (known after apply)
      + date_created                     = (known after apply)
      + date_last_run                    = (known after apply)
      + date_next_run                    = (known after apply)
      + date_updated                     = (known after apply)
      + description                      = "shared rhel 7.9 base image"
      + distribution_configuration_arn   = "arn:aws:imagebuilder:eu-west-2:REDACTED:distribution-configuration/base-rhel-7-9"
      + enhanced_image_metadata_enabled  = true
      + id                               = (known after apply)
      + image_recipe_arn                 = (known after apply)
      + infrastructure_configuration_arn = "arn:aws:imagebuilder:eu-west-2:REDACTED:infrastructure-configuration/base-rhel-7-9-0-1-2"
      + name                             = "base_rhel_7_9"
      + platform                         = (known after apply)
      + status                           = "ENABLED"
      + tags                             = {
          + "application"                     = "n/a"
          + "branch"                          = "main"
          + "business-unit"                   = "HMPPS"
          + "image-pipeline"                  = "base_rhel_7_9"
          + "image-recipe"                    = "base_rhel_7_9/0.1.2"
          + "infrastructure-configuration"    = "base_rhel_7_9/0.1.2"
          + "is-production"                   = "true"
          + "os-version"                      = "rhel 7.9"
          + "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
          + "release-or-patch"                = "n/a"
          + "source-code"                     = "/~https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
          + "stig-build-linux-medium-version" = "2024.4.0"
          + "update-linux-version"            = "1.0.2"
        }
      + tags_all                         = {
          + "application"                     = "n/a"
          + "branch"                          = "main"
          + "business-unit"                   = "HMPPS"
          + "image-pipeline"                  = "base_rhel_7_9"
          + "image-recipe"                    = "base_rhel_7_9/0.1.2"
          + "infrastructure-configuration"    = "base_rhel_7_9/0.1.2"
          + "is-production"                   = "true"
          + "os-version"                      = "rhel 7.9"
          + "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
          + "release-or-patch"                = "n/a"
          + "source-code"                     = "/~https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
          + "stig-build-linux-medium-version" = "2024.4.0"
          + "update-linux-version"            = "1.0.2"
        }

      + image_tests_configuration {
          + image_tests_enabled = false
          + timeout_minutes     = 720
        }

      + schedule {
          + pipeline_execution_start_condition = "EXPRESSION_MATCH_ONLY"
          + schedule_expression                = "cron(0 0 1 * ? *)"
          + timezone                           = (known after apply)
        }
    }

  # module.imagebuilder.aws_imagebuilder_image_recipe.this must be replaced
+/- resource "aws_imagebuilder_image_recipe" "this" {
      ~ arn              = "arn:aws:imagebuilder:eu-west-2:REDACTED:image-recipe/base-rhel-7-9/0.1.2" -> (known after apply)
      ~ date_created     = "2024-01-23T09:50:18.412Z" -> (known after apply)
      ~ id               = "arn:aws:imagebuilder:eu-west-2:REDACTED:image-recipe/base-rhel-7-9/0.1.2" -> (known after apply)
        name             = "base_rhel_7_9"
      ~ owner            = "374269020027" -> (known after apply)
      ~ parent_image     = "ami-0c2f9865057c3dfe1" -> "ami-0c1e9b4f894b82051" # forces replacement
      ~ platform         = "Linux" -> (known after apply)
      ~ tags             = {
            "application"                     = "n/a"
            "branch"                          = "main"
            "business-unit"                   = "HMPPS"
            "image-pipeline"                  = "base_rhel_7_9"
            "image-recipe"                    = "base_rhel_7_9/0.1.2"
            "infrastructure-configuration"    = "base_rhel_7_9/0.1.2"
            "is-production"                   = "true"
            "os-version"                      = "rhel 7.9"
            "owner"                           = "digital-studio-operations-team@digital.justice.gov.uk"
            "release-or-patch"                = "n/a"
            "source-code"                     = "/~https://github.com/ministryofjustice/modernisation-platform-ami-builds/tree/main/commonimages/base/rhel_7_9"
          ~ "stig-build-linux-medium-version" = "2024.2.3" -> "2024.4.0"
            "update-linux-version"            = "1.0.2"
        }
      ~ tags_all         = {
          ~ "stig-build-linux-medium-version" = "2024.2.3" -> "2024.4.0"
            # (12 unchanged elements hidden)
        }
      + user_data_base64 = (known after apply)
        # (2 unchanged attributes hidden)

      - block_device_mapping {
          - device_name = "/dev/sda1" -> null
          - no_device   = false -> null

          - ebs {
              - delete_on_termination = "true" -> null
              - encrypted             = "true" -> null
              - iops                  = 0 -> null
              - kms_key_id            = "arn:aws:kms:eu-west-2:REDACTED:key/12984197-3371-4c21-8e43-a88a1581e691" -> null
              - throughput            = 0 -> null
              - volume_size           = 30 -> null
              - volume_type           = "gp3" -> null
            }
        }
      + block_device_mapping {
          + device_name = "/dev/sda1"
          + no_device   = (known after apply)

          + ebs {
              + delete_on_termination = "true"
              + encrypted             = "true"
              + kms_key_id            = "arn:aws:kms:eu-west-2:REDACTED:key/12984197-3371-4c21-8e43-a88a1581e691"
              + volume_size           = 30
              + volume_type           = "gp3"
            }
        }

        # (5 unchanged blocks hidden)
    }

Plan: 2 to add, 0 to change, 1 to destroy.

dependabot bot requested a review from a team as a code owner February 11, 2025 19:35

dependabot bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Feb 11, 2025

mikereiddigital closed this Feb 13, 2025

mikereiddigital reopened this Feb 13, 2025

mikereiddigital temporarily deployed to core-shared-services February 13, 2025 13:43 — with GitHub Actions Inactive