diff --git a/.github/actions/setup/action.yaml b/.github/actions/setup/action.yaml index cedb8bb5..ab844bad 100644 --- a/.github/actions/setup/action.yaml +++ b/.github/actions/setup/action.yaml @@ -12,4 +12,4 @@ runs: - name: Install UDS CLI shell: bash # renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver - run: brew install defenseunicorns/tap/uds@0.17.0 + run: brew install defenseunicorns/tap/uds@0.18.0 diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index 06be9580..e81b73f9 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -15,7 +15,7 @@ jobs: steps: - name: Checkout - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4.2.1 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 0 diff --git a/.github/workflows/publish-bundle-rke2.yaml b/.github/workflows/publish-bundle-rke2.yaml index 96b85ffc..35fc8b12 100644 --- a/.github/workflows/publish-bundle-rke2.yaml +++ b/.github/workflows/publish-bundle-rke2.yaml @@ -17,7 +17,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout repository - uses: actions/checkout@eef61447b9ff4aafe5dcd4e0bbf5d482be7e7871 # v4 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4 with: token: ${{ secrets.PAT }} repository: ${{ github.repository }} @@ -34,7 +34,7 @@ jobs: password: ${{ secrets.IRON_BANK_ROBOT_PASSWORD }} - name: Init zarf cache - uses: actions/cache@3624ceb22c1c5a301c8db4169662070a689d9ea8 # v4 + uses: actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a # v4 with: path: "~/.zarf-cache" key: zarf-cache diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index 17838d62..1e7a8270 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -3,7 +3,7 @@ repos: # GENERAL CHECKS ################ - repo: https://github.com/pre-commit/pre-commit-hooks - rev: v4.0.1 + rev: v5.0.0 hooks: - id: check-added-large-files name: Large Files Check @@ -26,7 +26,7 @@ repos: args: [--markdown-linebreak-ext=md] - repo: https://github.com/gitleaks/gitleaks - rev: v8.18.0 + rev: v8.21.2 hooks: - id: gitleaks name: GitLeaks Checks diff --git a/.vscode/settings.json b/.vscode/settings.json index b31c0276..4273b877 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -9,18 +9,18 @@ }, "yaml.schemas": { // renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver - "https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.16.0/uds.schema.json": [ + "https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.18.0/uds.schema.json": [ "uds-bundle.yaml" ], // renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver - "https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.16.0/tasks.schema.json": [ + "https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.18.0/tasks.schema.json": [ "tasks.yaml", "tasks/**/*.yaml", "src/**/validate.yaml" ], // renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver - "https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.16.0/zarf.schema.json": [ + "https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.18.0/zarf.schema.json": [ "zarf.yaml" ] }, diff --git a/bundles/rke2/uds-bundle.yaml b/bundles/rke2/uds-bundle.yaml index a2ef0cc6..b7f329af 100644 --- a/bundles/rke2/uds-bundle.yaml +++ b/bundles/rke2/uds-bundle.yaml @@ -1,4 +1,4 @@ -# yaml-language-server: $schema=https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.17.0/uds.schema.json +# yaml-language-server: $schema=https://raw.githubusercontent.com/defenseunicorns/uds-cli/v0.18.0/uds.schema.json kind: UDSBundle metadata: name: software-factory-nutanix-rke2 @@ -33,7 +33,7 @@ packages: # Zarf init - name: init repository: ghcr.io/zarf-dev/packages/init - ref: v0.39.0 + ref: v0.42.1 overrides: zarf-seed-registry: docker-registry: @@ -81,11 +81,11 @@ packages: # MetalLB - name: metallb repository: ghcr.io/defenseunicorns/packages/metallb - ref: 0.0.5-amd64 + ref: 0.1.1-amd64 - name: core repository: ghcr.io/defenseunicorns/packages/uds/core - ref: 0.29.0-registry1 + ref: 0.30.0-registry1 optionalComponents: - metrics-server overrides: @@ -395,7 +395,7 @@ packages: # Gitlab - name: gitlab-valkey repository: ghcr.io/defenseunicorns/packages/uds/valkey - ref: 7.2.6-uds.0-upstream + ref: 8.0.1-uds.0-upstream overrides: valkey: uds-valkey-config: @@ -425,7 +425,7 @@ packages: - name: gitlab repository: ghcr.io/defenseunicorns/packages/uds/gitlab - ref: 17.2.9-uds.0-registry1 + ref: 17.5.1-uds.0-registry1 overrides: gitlab: uds-gitlab-config: @@ -568,7 +568,7 @@ packages: # Gitlab Runner - name: gitlab-runner repository: ghcr.io/defenseunicorns/packages/uds/gitlab-runner - ref: 17.1.0-uds.1-registry1 + ref: 17.2.1-uds.5-registry1 overrides: gitlab-runner: gitlab-runner: @@ -604,7 +604,7 @@ packages: - name: jira repository: ghcr.io/defenseunicorns/packages/uds/jira - ref: 1.22.0-uds.0-registry1 + ref: 9.12.13-uds.0-registry1 overrides: jira: uds-jira-config: @@ -653,7 +653,7 @@ packages: - name: confluence repository: ghcr.io/defenseunicorns/packages/uds/confluence - ref: 1.20.0-uds.4-registry1 + ref: 8.5.16-uds.0-registry1 overrides: confluence: uds-confluence-config: @@ -706,7 +706,7 @@ packages: # Mattermost - name: mattermost repository: ghcr.io/defenseunicorns/packages/uds/mattermost - ref: 10.0.0-uds.1-registry1 + ref: 10.1.2-uds.0-registry1 overrides: mattermost: mattermost-enterprise-edition: diff --git a/packages/additional-manifests/jobs/pepr-restart-job.yaml b/packages/additional-manifests/jobs/pepr-restart-job.yaml index b9cca6b1..7b78b9ee 100644 --- a/packages/additional-manifests/jobs/pepr-restart-job.yaml +++ b/packages/additional-manifests/jobs/pepr-restart-job.yaml @@ -42,7 +42,7 @@ spec: restartPolicy: OnFailure containers: - name: kubectl-container - image: registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.29.4 + image: registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.30.6 args: - rollout - restart @@ -50,7 +50,7 @@ spec: - -n - pepr-system - name: kubectl-container2 - image: registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.29.4 + image: registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.30.6 args: - rollout - restart diff --git a/packages/additional-manifests/zarf.yaml b/packages/additional-manifests/zarf.yaml index a8ed274d..24d527a2 100644 --- a/packages/additional-manifests/zarf.yaml +++ b/packages/additional-manifests/zarf.yaml @@ -21,7 +21,7 @@ components: - gitlab/envoy-filter.yaml - gitlab/gitaly-priority-class.yaml images: - - registry.gitlab.com/gitlab-org/build/cng/gitaly-init-cgroups:v17.2.9 # Remember to redeploy this package if changing stuff around this image in the gitlab package + - registry.gitlab.com/gitlab-org/build/cng/gitaly-init-cgroups:v17.5.1 # Remember to redeploy this package if changing stuff around this image in the gitlab package - name: pepr-policy-exemptions required: true @@ -38,4 +38,4 @@ components: files: - jobs/pepr-restart-job.yaml images: - - registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.29.4 + - registry1.dso.mil/ironbank/opensource/kubernetes/kubectl:v1.30.6 diff --git a/packages/nutanix-csi/values/nutanix-storage-values.yaml b/packages/nutanix-csi/values/nutanix-storage-values.yaml index dc0ffcf1..c9567935 100644 --- a/packages/nutanix-csi/values/nutanix-storage-values.yaml +++ b/packages/nutanix-csi/values/nutanix-storage-values.yaml @@ -103,7 +103,7 @@ node: memory: 200Mi precheck: - image: docker.io/nutanix/ntnx-csi-precheck:3.0.0 + image: docker.io/nutanix/ntnx-csi-precheck:3.1.0 sidecars: registrar: diff --git a/packages/nutanix-csi/zarf.yaml b/packages/nutanix-csi/zarf.yaml index b3f05502..5a08a619 100644 --- a/packages/nutanix-csi/zarf.yaml +++ b/packages/nutanix-csi/zarf.yaml @@ -36,8 +36,8 @@ components: images: - registry.k8s.io/sig-storage/snapshot-controller:v8.1.0 - registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.1.0 - - docker.io/nutanix/ntnx-csi:3.0.0 - - docker.io/nutanix/ntnx-csi-precheck:3.0.0 + - docker.io/nutanix/ntnx-csi:3.1.0 + - docker.io/nutanix/ntnx-csi-precheck:3.1.0 - registry.k8s.io/sig-storage/csi-node-driver-registrar:v2.12.0 - registry.k8s.io/sig-storage/csi-provisioner:v5.1.0 - registry.k8s.io/sig-storage/csi-snapshotter:v8.1.0 @@ -46,7 +46,7 @@ components: - registry.k8s.io/sig-storage/livenessprobe:v2.14.0 - registry.k8s.io/sig-storage/csi-external-health-monitor-controller:v0.13.0 - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-csi:v0.7.1 - - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws:v1.10.1 + - registry1.dso.mil/ironbank/opensource/velero/velero-plugin-for-aws:v1.11.0 - name: nutanix-csi-snapshot required: false diff --git a/packages/trust-manager/zarf.yaml b/packages/trust-manager/zarf.yaml index 1d748389..0a72aba6 100644 --- a/packages/trust-manager/zarf.yaml +++ b/packages/trust-manager/zarf.yaml @@ -10,7 +10,7 @@ components: - name: trust-manager-images required: true images: - - quay.io/jetstack/trust-manager:v0.12.0 + - quay.io/jetstack/trust-manager:v0.13.0 - quay.io/jetstack/cert-manager-package-debian:20210119.0 - quay.io/jetstack/cert-manager-controller:v1.16.1 - quay.io/jetstack/cert-manager-webhook:v1.16.1 @@ -21,7 +21,7 @@ components: required: true charts: - name: trust-manager - version: v0.12.0 + version: v0.13.0 namespace: trust-manager url: https://charts.jetstack.io/ valuesFiles: diff --git a/tasks.yaml b/tasks.yaml index b60cd292..3351253c 100644 --- a/tasks.yaml +++ b/tasks.yaml @@ -1,9 +1,9 @@ includes: - create: ./tasks/create.yaml - deploy: ./tasks/deploy.yaml - - lint: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.1.0/tasks/lint.yaml - - actions: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.1.0/tasks/actions.yaml - - setup: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.1.0/tasks/setup.yaml + - lint: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.2.2/tasks/lint.yaml + - actions: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.2.2/tasks/actions.yaml + - setup: https://raw.githubusercontent.com/defenseunicorns/uds-common/v1.2.2/tasks/setup.yaml tasks: - name: dev-rke2