chore(deps): update all dependencies by renovate[bot] · Pull Request #1377 · cattle-ops/terraform-aws-gitlab-runner

renovate · 2026-06-08T00:35:55Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
actions/cache	action	major	`v5` → `v6`
actions/checkout	action	major	`v6` → `v7`
actions/checkout	action	major	`v6.0.2` → `v7.0.1`
actions/stale	action	major	`v10` → `v11`
aws (source)	required_provider	minor	`6.44.0` → `6.61.0`
boto3		patch	`==1.43.6` → `==1.43.78`
botocore		patch	`==1.43.6` → `==1.43.78`
github/codeql-action	action	minor	`v4.35.4` → `v4.37.8`
local (source)	required_provider	minor	`2.8.0` → `2.9.0`
oxsecurity/megalinter	action	major	`v9.4.0` → `v10.0.0`
random (source)	required_provider	minor	`3.8.0` → `3.9.0`
terraform-linters/setup-tflint (changelog)	action	digest	`b480b8f` → `6e1e064`
terraform-linters/tflint-ruleset-aws	plugin	minor	`0.47.0` → `0.48.0`
tls (source)	required_provider	minor	`4.2.1` → `4.3.0`

Release Notes

actions/cache (actions/cache)

`v6.1.0`

Compare Source

What's Changed

Bump @actions/cache to v6.1.0 - handle read-only cache access by @jasongin in #1768

Full Changelog: actions/cache@v6...v6.1.0

`v6.0.0`

Compare Source

What's Changed

Update packages, migrate to ESM by @Samirat in #1760

Full Changelog: actions/cache@v5...v6.0.0

`v6`

Compare Source

actions/checkout (actions/checkout)

`v7.0.1`

Compare Source

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in #2475
Bump actions/setup-node from 4 to 6 by @dependabot[bot] in #2477
Bump docker/build-push-action from 6.5.0 to 7.2.0 by @dependabot[bot] in #2478
Bump docker/login-action from 3.3.0 to 4.2.0 by @dependabot[bot] in #2479
Bump actions/checkout from 6 to 7 by @dependabot[bot] in #2488
Bump actions/upload-artifact from 4 to 7 by @dependabot[bot] in #2476
eslint 9 by @dependabot[bot] in #2474
Bump the minor-actions-dependencies group with 2 updates by @dependabot[bot] in #2499
skip running unsafe pr check if input is default by @aiqiaoy in #2518
trim only ascii whitespace for branch by @aiqiaoy in #2521
escape values passed to --unset by @aiqiaoy in #2530

`v7.0.0`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

`v7`

Compare Source

Block checking out fork PR for pull_request_target and workflow_run by @aiqiaoy in #2454
Bump actions/publish-immutable-action from 0.0.3 to 0.0.4 in the minor-actions-dependencies group across 1 directory by @dependabot[bot] in #2458
Bump flatted from 3.3.1 to 3.4.2 by @dependabot[bot] in #2460
Bump js-yaml from 4.1.0 to 4.2.0 by @dependabot[bot] in #2461
Bump @actions/core and @actions/tool-cache and Remove uuid by @dependabot[bot] in #2459
upgrade module to esm and update dependencies by @aiqiaoy in #2463
Bump the minor-npm-dependencies group across 1 directory with 3 updates by @dependabot[bot] in #2462

actions/stale (actions/stale)

`v11.0.0`

Compare Source

What's Changed

Enhancement

Migrate to ESM and update dependencies by @chiranjib-swain in #1350

Dependency Update

Override brace-expansion to 5.0.8 to address 24 high-severity dependency vulnerabilities by @dependabot in #1351

Full Changelog: actions/stale@v10...v11.0.0

`v11`

Compare Source

hashicorp/terraform-provider-aws (aws)

`v6.61.0`

Compare Source

FEATURES:

New Data Source: aws_odb_iam_role_association (#46794)
New List Resource: aws_ec2_ami_launch_permission (#49461)
New List Resource: aws_iam_instance_profile (#49576)
New List Resource: aws_lambdacore_network_connector (#49387)
New List Resource: aws_mailmanager_relay (#49394)
New List Resource: aws_resiliencehubv2_assertion (#48329)
New List Resource: aws_resiliencehubv2_service_function (#48328)
New List Resource: aws_resiliencehubv2_user_journey (#48330)
New Resource: aws_dsql_cluster_policy (#47748)
New Resource: aws_lambdacore_network_connector (#49387)
New Resource: aws_lambdamicrovms_image (#48950)
New Resource: aws_mailmanager_relay (#49394)
New Resource: aws_odb_iam_role_association (#46794)
New Resource: aws_resiliencehubv2_assertion (#48329)
New Resource: aws_resiliencehubv2_service_function (#48328)
New Resource: aws_resiliencehubv2_user_journey (#48330)
New Resource: aws_securityhub_feature_v2 (#49503)

ENHANCEMENTS:

data-source/aws_fsx_ontap_file_system: Add network_type attribute (#49512)
data-source/aws_fsx_windows_file_system: Add network_type attribute (#49514)
data-source/aws_lb_listener_rule: Add condition.source_ip.ip_address_type attribute (#49476)
data-source/aws_resiliencehubv2_service: Add associated_system attribute (#49498)
data-source/aws_vpclattice_service: Add idle_timeout_seconds attribute (#49540)
resource/aws_bedrockagentcore_harness: Adds attribute environment_actual (#48815)
resource/aws_ec2_ami_launch_permission: Add resource identity support (#49461)
resource/aws_fsx_ontap_file_system: Add network_type argument (#49512)
resource/aws_fsx_openzfs_file_system: Add network_type argument (#49513)
resource/aws_fsx_windows_file_system: Add network_type argument (#49514)
resource/aws_lb_listener_rule: Add condition.source_ip.ip_address_type argument (#49476)
resource/aws_lb_listener_rule: Change condition.source_ip.values to Optional (#49476)
resource/aws_medialive_channel: Add resource identity (#49532)
resource/aws_medialive_input: Add resource identity support (#49534)
resource/aws_medialive_input_security_group: Add resource identity support (#49537)
resource/aws_medialive_multiplex: Add resource identity support (#49557)
resource/aws_medialive_multiplex_program: Add resource identity (#49561)
resource/aws_observabilityadmin_centralization_rule_for_organization: Add encryption_scope argument to the logs_encryption_configuration configuration block (#49563)
resource/aws_pinpointsmsvoicev2_phone_number: Add status attribute (#49485)
resource/aws_pinpointsmsvoicev2_phone_number: Add wait_for_active argument to allow create and update to return without waiting for the phone number to reach ACTIVE status. Number types gated on carrier or registration approval (for example TEN_DLC, TOLL_FREE, or any number submitted with registration_id) can remain PENDING for days to weeks, which previously caused terraform apply to time out (#49485)
resource/aws_resiliencehubv2_service: Add associated_system configuration block (#49498)
resource/aws_vpclattice_service: Add idle_timeout_seconds argument (#49540)

BUG FIXES:

list-resource/aws_bedrockagentcore_harness: Prevents error when remote resource disappears during List (#49446)
list-resource/aws_bedrockagentcore_online_evaluation_config: Prevents error when remote resource disappears during List (#49479)
list-resource/aws_bedrockagentcore_policy_engine: Prevents error when remote resource disappears during List (#49478)
list-resource/aws_bedrockagentcore_registry: Prevents error when remote resource disappears during List (#49480)
list-resource/aws_bedrockagentcore_resource_policy: Prevents error when remote resource disappears during List (#49481)
resource/aws_bedrockagentcore_harness: Fix Provider produced inconsistent result after apply error for environment (#48815)
resource/aws_bedrockagentcore_online_evaluation_config: Retries additional IAM propagation errors on creation (#49479)
resource/aws_mailmanager_ingress_point: Include FAILED as a pending state while an ingress point is deleting (#49502)
resource/aws_nat_gateway: Allow updating secondary_private_ip_address_count in-place for private NAT gateways (#47477)
resource/aws_observabilityadmin_telemetry_enrichment: Prevent couldn't find resource (21 retries) errors on delete if enrichment has never been started in the Region (#49502)
resource/aws_observabilityadmin_telemetry_evaluation: Include NOT_STARTED as a target state while the resource is deleting (#49502)

`v6.60.0`

Compare Source

FEATURES:

New List Resource: aws_db_parameter_group (#49418)
New List Resource: aws_resiliencehubv2_input_source (#48327)
New Resource: aws_resiliencehubv2_input_source (#48327)

ENHANCEMENTS:

resource/aws_db_parameter_group: Add Resource Identity support (#49418)

BUG FIXES:

resource/aws_bedrockagentcore_gateway_target: Prevent state inconsistencies caused by the service-managed policy session header (#49447)
resource/aws_network_acl_rule: Fix Missing Resource Identity After Read errors. This fixes a regression introduced in v6.59.0 (#49470)

`v6.59.0`

Compare Source

FEATURES:

New Data Source: aws_rds_snapshots (#49259)
New Data Source: aws_resiliencehubv2_policy (#48324)
New Data Source: aws_resiliencehubv2_service (#48326)
New Data Source: aws_resiliencehubv2_system (#48325)
New Data Source: aws_vpclattice_service_network_service_associations (#42680)
New List Resource: aws_backup_plan (#49329)
New List Resource: aws_backup_selection (#49283)
New List Resource: aws_backup_vault (#49423)
New List Resource: aws_bedrockagentcore_gateway_rule (#48804)
New List Resource: aws_mailmanager_ingress_point (#49322)
New List Resource: aws_neptunegraph_private_graph_endpoint (#45929)
New List Resource: aws_networkfirewall_container_association (#49321)
New List Resource: aws_pinpointsmsvoicev2_resource_policy (#48771)
New List Resource: aws_pinpointsmsvoicev2_sender_id (#46472)
New List Resource: aws_resiliencehubv2_service (#48323)
New List Resource: aws_resiliencehubv2_system (#48322)
New List Resource: aws_ssm_patch_baseline (#49332)
New Resource: aws_bedrockagentcore_gateway_rule (#48804)
New Resource: aws_mailmanager_ingress_point (#49322)
New Resource: aws_neptunegraph_private_graph_endpoint (#45929)
New Resource: aws_networkfirewall_container_association (#49321)
New Resource: aws_pinpointsmsvoicev2_resource_policy (#48771)
New Resource: aws_pinpointsmsvoicev2_sender_id (#46472)
New Resource: aws_resiliencehubv2_service (#48323)
New Resource: aws_resiliencehubv2_system (#48322)

ENHANCEMENTS:

data-source/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config attributes (#49420)
data-source/aws_eks_cluster_versions: Add control_plane_component_config and control_plane_scaling_tiers attributes (#49421)
resource/aws_arcregionswitch_plan: Add step.aurora_provisioned_scaling_config, step.aurora_serverless_scaling_config, step.neptune_global_database_config, and step.lambda_event_source_mapping_config arguments (#48392)
resource/aws_arcregionswitch_plan: Add provider-side validation restricting report_configuration and report_configuration.report_output.s3_configuration to a single block each (#46758)
resource/aws_backup_plan: Add resource identity support (#49329)
resource/aws_backup_selection: Add resource identity support (#49283)
resource/aws_backup_vault: Add resource identity support (#49423)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.mcp.mcp_server.mcp_tool_schema configuration block and target_configuration.mcp.mcp_server.resource_priority argument (#48703)
resource/aws_bedrockagentcore_harness: Adds computed attribute memory_actual (#49383)
resource/aws_bedrockagentcore_harness: Adds support for memory.disabled (#49334)
resource/aws_bedrockagentcore_harness: Adds support for memory.managed_memory_configuration (#49285)
resource/aws_dlm_lifecycle_policy: Add policy_details.parameters.exclude_data_volume_tags argument (#45113)
resource/aws_ec2_client_vpn_route: Add transit_gateway_attachment_id attribute (#49274)
resource/aws_ec2_client_vpn_route: Change target_vpc_subnet_id to Optional (#49274)
resource/aws_ec2_client_vpn_route: Increase default timeouts values to 30m (#49274)
resource/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config arguments (#49412)
resource/aws_prometheus_scraper: Add exporter configuration block with OpenSearch exporter support (#49346)
resource/aws_wafv2_rule_group: Add pre_parse_text_transformation argument to byte_match_statement, regex_match_statement, regex_pattern_set_reference_statement, size_constraint_statement, sqli_match_statement, and xss_match_statement rule statements (#49381)
resource/aws_wafv2_web_acl: Add pre_parse_text_transformation argument to byte_match_statement, regex_match_statement, regex_pattern_set_reference_statement, size_constraint_statement, sqli_match_statement, and xss_match_statement rule statements (#49381)

BUG FIXES:

data-source/aws_lakeformation_permissions: Fix failure to read cross-account IAM principals (#49398)
data-source/aws_mq_broker: Fix reading MQ Broker (...) shared resources errors when reading RabbitMQ brokers in partitions where mq:DescribeSharedResources is unavailable, such as AWS GovCloud (US) (#49340)
resource/aws_bedrockagentcore_gateway_target: Remove client-side count validation for metadata_configuration request and response headers (#49374)
resource/aws_bedrockagentcore_gateway_target: Treat OAuth CREATE_PENDING_AUTH and UPDATE_PENDING_AUTH statuses as successful terminal states (#48703)
resource/aws_lakeformation_permissions: Fix failure to read cross-account IAM principals (#49398)
resource/aws_mq_broker: Fix reading MQ Broker (...) shared resources errors when reading RabbitMQ brokers in partitions where mq:DescribeSharedResources is unavailable, such as AWS GovCloud (US) (#49340)
resource/aws_rds_cluster: Fix InvalidParameterCombination error when engine_version is updated externally (#49396)
resource/aws_route53domains_registered_domain: Fix UpdateDomainContactPrivacy being incorrectly triggered when billing_contact changes (#49314)
resource/aws_ssm_parameter: Fixes error where name with a leading slash and no other slashes was stripping the leading slash. (#49339)

`v6.58.0`

Compare Source

FEATURES:

New List Resource: aws_mailmanager_rule_set (#49257)
New List Resource: aws_prometheus_anomaly_detector (#49139)
New List Resource: aws_prometheus_scraper (#47466)
New List Resource: aws_prometheus_scraper_logging_configuration (#47466)
New List Resource: aws_resiliencehubv2_policy (#48321)
New Resource: aws_mailmanager_rule_set (#49257)
New Resource: aws_prometheus_anomaly_detector (#49139)
New Resource: aws_prometheus_scraper_logging_configuration (#47466)
New Resource: aws_resiliencehubv2_policy (#48321)

ENHANCEMENTS:

resource/aws_api_gateway_rest_api: Add configurable resource timeouts. (#49205)
resource/aws_dx_connection: Add state attribute (#42150)
resource/aws_ecs_capacity_provider: Add RESERVED as a valid value for managed_instances_provider.instance_launch_template.capacity_option_type (#48816)
resource/aws_ecs_capacity_provider: Add local_storage_configuration attribute to managed_instances_provider.instance_launch_template (#47513)
resource/aws_ecs_capacity_provider: Add managed_instances_provider.instance_launch_template.capacity_reservations argument (#48816)
resource/aws_glue_catalog_table_optimizer: Add configuration.compaction_configuration argument (#43868)
resource/aws_prometheus_scraper: Add Resource Identity support (#47466)
resource/aws_prometheus_scraper: Add destination.cloudwatch configuration block for CloudWatch Metrics destination support (#49088)

BUG FIXES:

resource/aws_api_gateway_rest_api: Wait for the REST API to reach an available state on create and update, and to be fully deleted on delete, preventing intermittent BadRequestException: There is already an update in progress errors (#49205)
resource/aws_appstream_stack: Fix embed_host_domains not being sent to the AWS API on update, which caused a permanent plan diff when the argument was added or changed on an existing stack (#49015)
resource/aws_bedrockagent_data_source: Fix validator incorrectly requiring bedrock_data_automation_configuration when parsing_strategy = "BEDROCK_DATA_AUTOMATION", a regression introduced in v6.56.0 (#49111)
resource/aws_bedrockagentcore_agent_runtime: Allow : (colon) in the match_value_string and match_value_string_list attributes of authorizer_configuration.custom_jwt_authorizer.custom_claim.authorizing_claim_match_value.claim_match_value (#48437)
resource/aws_bedrockagentcore_memory_strategy: Fix Value Conversion Error ... Received null value, however the target type cannot handle null values errors (#49188)
resource/aws_bedrockagentcore_memory_strategy: Fix too many results: wanted 1, got 2 error when creating or updating a strategy on a memory that already has another strategy of a different type (#49250)
resource/aws_bedrockagentcore_memory_strategy: Replace resource rather than erroring when configuration.consolidation, configuration.extraction, or configuration.reflection blocks are removed (#49188)
resource/aws_ecs_service: Fix sigint_rollback falsely rolling back healthy deployments during wait_for_steady_state (#49077)
resource/aws_ecs_service: Prevent non-EBS deployment volume configurations from being written to state (#48947)
resource/aws_elasticache_replication_group: Fix perpetual diff when changes are pending for the next maintenance window (apply_immediately = false) (#48246)
resource/aws_glue_catalog_table: Fix InvalidInputException: StorageDescriptor is not allowed error when creating or updating ATHENA-dialect views (#49156)
resource/aws_glue_catalog_table: Fix InvalidInputException error when creating or updating SPARK-dialect views without an explicit storage_descriptor block (#49156)
resource/aws_glue_catalog_table: Fix perpetual diff on view_definition.representations fields (validation_connection, view_original_text, view_expanded_text) that AWS Glue does not echo back for validated ATHENA views (#49156)
resource/aws_iam_user: Retry destroying users when there are conflicts, and ignore non-errors during destroy (#49260)
resource/aws_route53recoverycontrolconfig_safety_rule: Fix crash when the create operation returns an error (#49155)
resource/aws_ssm_parameter: Correctly imports when passing ARN value. (#49134)
resource/aws_ssm_parameter: Prevents errors when importing specific version. (#49134)

`v6.57.1`

Compare Source

NOTES:

resource/aws_bedrockagentcore_memory_strategy: The memory_execution_role_arn attribute has been deprecated. This attribute should be removed from configurations (#49140)
resource/aws_bedrockagentcore_memory_strategy: The namespaces attribute has been deprecated. All configurations using namespaces should be updated to use the namespace_templates attribute instead (#49140)

FEATURES:

New Data Source: aws_eks_access_policies (#49090)
New List Resource: aws_bedrock_evaluation_job (#49044)
New List Resource: aws_eks_access_entry (#49090)
New List Resource: aws_eks_access_policy_association (#49121)
New List Resource: aws_eks_node_group (#49073)
New List Resource: aws_flow_log (#49086)
New List Resource: aws_mailmanager_traffic_policy (#49043)
New List Resource: aws_osis_pipeline (#49157)
New List Resource: aws_osis_pipeline_endpoint (#44383)
New List Resource: aws_osis_resource_policy (#44383)
New List Resource: aws_rekognition_collection (#49135)
New Resource: aws_bedrock_evaluation_job (#49044)
New Resource: aws_cloudwatch_log_storage_tier_policy (#49076)
New Resource: aws_mailmanager_traffic_policy (#49043)
New Resource: aws_osis_pipeline_endpoint (#44383)
New Resource: aws_osis_resource_policy (#44383)

ENHANCEMENTS:

data-source/aws_launch_template: Add ena_queue_count attribute to network_interfaces configuration block (#48892)
data-source/aws_secretsmanager_secret: Add type attribute (#46414)
data-source/aws_secretsmanager_secret_rotation: Add external_secret_rotation_metadata and external_secret_rotation_role_arn attributes (#46414)
data-source/aws_vpc: Adds support for ipv6_cidr_block_associations. (#46918)
data-source/aws_vpc: Deprecates ipv6_association_id and ipv6_cidr_block. (#46918)
resource/aws_autoscaling_group: Add reservations-then-balanced valid value for availability_zone_distribution.capacity_distribution_strategy (#48934)
resource/aws_bedrockagentcore_memory: Add timeouts.update with a default value of 30m (#49140)
resource/aws_bedrockagentcore_memory_strategy: Add configuration.reflection configuration block for EPISODIC_OVERRIDE strategy type (#49140)
resource/aws_bedrockagentcore_memory_strategy: Add namespace_templates argument (#49140)
resource/aws_bedrockagentcore_memory_strategy: Add reflection_configuration configuration block for EPISODIC strategy type (#49140)
resource/aws_bedrockagentcore_memory_strategy: Increase default timeouts values to 45m (#49140)
resource/aws_codepipeline: Add stage.action.commands and stage.action.output_artifacts_for_compute_action arguments to support Compute action types (#42507)
resource/aws_codepipeline: stage.action.output_artifacts_for_compute_action and stage.action.output_artifacts now conflict (#42507)
resource/aws_eks_pod_identity_association: Add policy argument to support inline session policies (#48869)
resource/aws_fis_experiment_template: Support MultiRegionClusters as a value for action.target.key (#48781)
resource/aws_flow_log: Add resource identity support (#49086)
resource/aws_launch_template: Add ena_queue_count argument to network_interfaces configuration block (#48892)
resource/aws_rekognition_collection: Add Resource Identity support (#49022)
resource/aws_rekognition_project: Add Resource Identity support (#49022)
resource/aws_rekognition_stream_processor: Add Resource Identity support (#49022)
resource/aws_secretsmanager_secret: Add type argument in support of managed external secrets (#46414)
resource/aws_secretsmanager_secret_rotation: Add external_secret_rotation_metadata and external_secret_rotation_role_arn arguments in support of managed external secrets (#46414)

BUG FIXES:

provider: Fixes api error UnknownError: UnknownError introduced in release 6.57.0 (#49175)
resource/aws_dynamodb_table: No longer replace resource when decreasing warm_throughput values (#49032)

`v6.56.0`

Compare Source

FEATURES:

New Action: aws_elasticache_apply_service_update (#48963)
New Data Source: aws_elasticache_service_update_actions (#48958)
New Data Source: aws_s3_buckets (#48965)
New List Resource: aws_eks_addon (#49067)
New List Resource: aws_s3_bucket_notification (#48974)
New List Resource: aws_secretsmanager_secret_policy (#49058)

ENHANCEMENTS:

data-source/aws_eks_node_group: Add warm_pool_config attribute (#48977)
data-source/aws_msk_bootstrap_brokers: Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs (#48975)
data-source/aws_opensearchserverless_security_config: Add iam_federation_options block (#48495)
data-source/aws_opensearchserverless_security_config: Add iam_identity_center_options block (#48495)
provider: Web identity tokens can be configured via the TF_AWS_WEB_IDENTITY_TOKEN environment variable. Any value configured via assume_role_with_web_identity.web_identity_token takes precedence (#48736)
resource/aws_autoscaling_group: Add instance_lifecycle_policy configuration block (#48973)
resource/aws_bedrockagent_data_source: Add data_source_configuration.managed_knowledge_base_connector_configuration block (#48904)
resource/aws_bedrockagent_data_source: Add timeouts.update with a default value of 30m (#48904)
resource/aws_bedrockagent_knowledge_base: Add vector_knowledge_base_configuration.bedrock_embedding_model_configuration.audio and vector_knowledge_base_configuration.bedrock_embedding_model_configuration.video configuration blocks (#48538)
resource/aws_bedrockagent_knowledge_base: Add support for Managed Knowledge Base type (type = "MANAGED") with managed_knowledge_base_configuration block (#48904)
resource/aws_cloudwatch_log_subscription_filter: Add @source.log as a valid value for emit_system_fields (#48956)
resource/aws_eks_node_group: Add warm_pool_config configuration block (#48977)
resource/aws_flow_log: Add tag_field_specification configuration block (#48913)
resource/aws_guardduty_detector_feature: Support AI_PROTECTION and AI_ANALYST feature names (#48972)
resource/aws_guardduty_organization_configuration_feature: Support AI_PROTECTION and AI_ANALYST feature names (#48972)
resource/aws_msk_cluster: Add bootstrap_brokers_ipv6, bootstrap_brokers_sasl_iam_ipv6, bootstrap_brokers_sasl_scram_ipv6, and bootstrap_brokers_tls_ipv6 attributes to expose IPv6 bootstrap broker URLs (#48975)
resource/aws_opensearch_package_association: Add import support (#46690)
resource/aws_opensearchserverless_security_config: Add iam_federation_options configuration block (#48495)
resource/aws_opensearchserverless_security_config: Add iam_identity_center_options configuration block (#48495)
resource/aws_s3tables_table: Add metadata.iceberg.properties argument (#48635)

BUG FIXES:

provider: Fix "one of assume_role_with_web_identity.0.web_identity_token,assume_role_with_web_identity.0.web_identity_token_file must be specified" errors, allowing any AWS_WEB_IDENTITY_TOKEN_FILE environment variable value to be used (#48736)
resource/aws_bedrockagent_data_source: Short-circuit waiting for creation if the resource reaches a FAILED state (#48904)
resource/aws_datazone_domain: Fixed AccessDeniedException error when deleting (#48516)
resource/aws_fsx_lustre_file_system: Fix perpetual diff in data_read_cache_configuration.size when sizing_mode is PROPORTIONAL_TO_THROUGHPUT_CAPACITY and size is not specified (#49023)
resource/aws_mq_broker: Fix perpetual shared_resources diffs for ActiveMQ brokers (#48962)
resource/aws_mq_configuration: Retry ConflictException: Configuration ID [...] is in use errors on delete (#48962)
resource/aws_sagemaker_endpoint: Prevents Cannot create already existing endpoint error when retrying creation. (#48966)
resource/aws_subnet: Wait for IPAM to release its CIDR

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-06-08T00:36:04Z

Hey @renovate[bot]! 👋

Thank you for your contribution to the project. Please refer to the contribution rules for a quick overview of the process.

Make sure that this PR clearly explains:

the problem being solved
the best way a reviewer and you can test your changes

With submitting this PR you confirm that you hold the rights of the code added and agree that it will published under this LICENSE.

The following ChatOps commands are supported:

/help: notifies a maintainer to help you out

Simply add a comment with the command in the first line. If you need to pass more information, separate it with a blank line from the command.

This message was generated automatically. You are welcome to improve it.

github-actions · 2026-06-08T00:40:22Z

❌MegaLinter analysis: Error

Descriptor	Linter	Files	Fixed	Errors	Warnings	Elapsed time
✅ ACTION	actionlint	5		0	0	0.08s
❌ ACTION	zizmor	5	0	1	0	0.42s
❌ COPYPASTE	jscpd	yes		28	no	0.69s
✅ REPOSITORY	betterleaks	yes		no	no	0.72s
✅ REPOSITORY	checkov	yes		no	no	39.04s
✅ REPOSITORY	dustilock	yes		no	no	0.64s
✅ REPOSITORY	git_diff	yes		no	no	0.02s
✅ REPOSITORY	grype	yes		no	no	61.14s
✅ REPOSITORY	kingfisher	yes		no	no	23.83s
✅ REPOSITORY	osv-scanner	yes		no	no	2.19s
✅ REPOSITORY	secretlint	yes		no	no	1.63s
✅ REPOSITORY	syft	yes		no	no	2.21s
✅ REPOSITORY	trivy-sbom	yes		no	no	0.16s
✅ REPOSITORY	trufflehog	yes		no	no	4.88s
✅ SPELL	cspell	6		0	0	2.79s
✅ YAML	prettier	5	2	0	0	1.47s
✅ YAML	v8r	5		0	0	3.32s
✅ YAML	yamllint	5		0	0	1.09s

Detailed Issues

❌ COPYPASTE / jscpd - 28 errors

Using config from megalinter-reports/jscpd-config.json
Clone found (hcl)
 - docker_autoscaler_security_group.tf [18:94 - 33:2] (16 lines, 75 tokens)
   docker_autoscaler_security_group.tf [50:93 - 65:2]
Clone found (hcl)
 - docker_autoscaler_security_group.tf [20:59 - 35:9] (16 lines, 68 tokens)
   docker_machine_security_group.tf [26:56 - 41:9]
Clone found (hcl)
 - docker_autoscaler_security_group.tf [20:62 - 32:9] (13 lines, 60 tokens)
   modules/terminate-agent-hook/main.tf [30:68 - 42:9]
Clone found (hcl)
 - docker_autoscaler_security_group.tf [20:62 - 35:47] (16 lines, 66 tokens)
   runner_security_group.tf [22:48 - 37:46]
Clone found (hcl)
 - docker_machine_policy.tf [11:1 - 17:53] (7 lines, 170 tokens)
   runner_policy.tf [63:1 - 68:42]
Clone found (hcl)
 - docker_machine_policy.tf [36:61 - 41:3] (6 lines, 95 tokens)
   runner_policy.tf [33:50 - 38:42]
Clone found (hcl)
 - docker_machine_security_group.tf [24:91 - 39:2] (16 lines, 75 tokens)
   docker_machine_security_group.tf [42:90 - 57:2]
Clone found (hcl)
 - examples/runner-certificates/main.tf [3:1 - 47:20] (45 lines, 124 tokens)
   examples/runner-default/main.tf [8:1 - 51:20]
Clone found (hcl)
 - examples/runner-certificates/main.tf [22:3 - 47:20] (26 lines, 60 tokens)
   examples/runner-docker/main.tf [18:3 - 42:20]
Clone found (hcl)
 - examples/runner-certificates/variables.tf [1:1 - 28:2] (28 lines, 62 tokens)
   examples/runner-docker/variables.tf [1:1 - 28:2]
Clone found (hcl)
 - examples/runner-certificates/versions.tf [2:1 - 27:2] (26 lines, 59 tokens)
   examples/runner-default/versions.tf [2:1 - 27:2]
Clone found (hcl)
 - examples/runner-certificates/versions.tf [2:1 - 27:2] (26 lines, 59 tokens)
   examples/runner-docker/versions.tf [2:1 - 27:2]
Clone found (hcl)
 - examples/runner-certificates/versions.tf [2:1 - 27:2] (26 lines, 59 tokens)
   examples/runner-fleeting-plugin/versions.tf [2:1 - 27:2]
Clone found (hcl)
 - examples/runner-certificates/versions.tf [2:1 - 27:2] (26 lines, 59 tokens)
   examples/runner-public/versions.tf [2:1 - 27:2]
Clone found (hcl)
 - examples/runner-certificates/versions.tf [2:1 - 27:2] (26 lines, 59 tokens)
   examples/runner-windows/versions.tf [2:1 - 27:2]
Clone found (hcl)
 - examples/runner-default/main.tf [1:1 - 58:22] (58 lines, 173 tokens)
   examples/runner-fleeting-plugin/main.tf [1:1 - 58:22]
Clone found (hcl)
 - examples/runner-default/main.tf [1:1 - 61:39] (61 lines, 188 tokens)
   examples/runner-windows/main.tf [1:1 - 61:39]
Clone found (hcl)
 - examples/runner-default/main.tf [41:19 - 62:4] (22 lines, 64 tokens)
   examples/runner-windows/main.tf [41:19 - 62:25]
Clone found (hcl)
 - examples/runner-default/variables.tf [1:1 - 34:2] (34 lines, 75 tokens)
   examples/runner-fleeting-plugin/variables.tf [1:1 - 34:2]
Clone found (hcl)
 - examples/runner-default/variables.tf [1:1 - 34:2] (34 lines, 75 tokens)
   examples/runner-windows/variables.tf [1:1 - 34:2]
Clone found (hcl)
 - examples/runner-fleeting-plugin/main.tf [93:46 - 114:16] (22 lines, 52 tokens)
   examples/runner-windows/main.tf [118:46 - 139:19]
Clone found (hcl)
 - modules/terminate-agent-hook/variables.tf [109:25 - 118:38] (10 lines, 53 tokens)
   variables.tf [475:53 - 484:38]
Clone found (hcl)
 - modules/terminate-agent-hook/variables.tf [111:3 - 120:6] (10 lines, 64 tokens)
   variables.tf [183:3 - 192:6]
Clone found (hcl)
 - runner_security_group.tf [22:3 - 37:46] (16 lines, 71 tokens)
   runner_security_group.tf [40:3 - 55:46]
Clone found (hcl)
 - variables.tf [185:31 - 197:50] (13 lines, 64 tokens)
   variables.tf [898:31 - 910:57]
Clone found (hcl)
 - variables.tf [219:31 - 231:15] (13 lines, 58 tokens)
   variables.tf [479:31 - 491:14]
Clone found (hcl)
 - variables.tf [481:21 - 502:4] (22 lines, 79 tokens)
   variables.tf [934:21 - 954:7]
Clone found (hcl)
 - variables.tf [862:46 - 878:9] (17 lines, 114 tokens)
   variables.tf [878:49 - 894:9]
┌────────┬────────────────┬─────────────┬──────────────┬──────────────┬──────────────────┬───────────────────┐
│ Format │ Files analyzed │ Total lines │ Total tokens │ Clones found │ Duplicated lines │ Duplicated tokens │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ bash   │ 3              │ 702         │ 2527         │ 0            │ 0 (0.00%)        │ 0 (0.00%)         │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ hcl    │ 41             │ 4559        │ 29956        │ 28           │ 623 (13.67%)     │ 2280 (7.61%)      │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ python │ 1              │ 299         │ 1452         │ 0            │ 0 (0.00%)        │ 0 (0.00%)         │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ smarty │ 1              │ 8           │ 53           │ 0            │ 0 (0.00%)        │ 0 (0.00%)         │
├────────┼────────────────┼─────────────┼──────────────┼──────────────┼──────────────────┼───────────────────┤
│ Total: │ 46             │ 5568        │ 33988        │ 28           │ 623 (11.19%)     │ 2280 (6.71%)      │
└────────┴────────────────┴─────────────┴──────────────┴──────────────┴──────────────────┴───────────────────┘
Found 28 clones.
HTML report saved to megalinter-reports/copy-paste/jscpd-report.html
ERROR: jscpd found too many duplicates (11.2%) over threshold (0.0%)
time: 84.581ms

❌ ACTION / zizmor - 1 error

INFO zizmor: 🌈 zizmor v1.25.0
fatal: no audit was performed
'artipacked' audit failed on file://.github/workflows/ci.yml

Caused by:
    0: error in 'artipacked' audit
    1: couldn't list tags for actions/checkout
    2: request error while accessing GitHub API
    3: HTTP status client error (401 Unauthorized) for url (https://github.com/actions/checkout.git/git-upload-pack)

Notices

⚠️ Your configuration references items that have been removed from MegaLinter and are ignored: MARKDOWN_MARKDOWN_LINK_CHECK, REPOSITORY_KICS, SPELL_MISSPELL, TERRAFORM_TERRASCAN. See Removed linters to find their replacements.

See detailed reports in MegaLinter artifacts
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

Show us your support by starring ⭐ the repository

renovate Bot requested review from kayman-mk and npalm as code owners June 8, 2026 00:35

renovate Bot force-pushed the renovate/all branch 6 times, most recently from e2afe8f to 96e782f Compare June 12, 2026 23:29

renovate Bot force-pushed the renovate/all branch 11 times, most recently from 79656ae to a94de8e Compare June 23, 2026 15:39

renovate Bot force-pushed the renovate/all branch 7 times, most recently from 96af70d to d0c07c3 Compare June 30, 2026 22:48

renovate Bot force-pushed the renovate/all branch 2 times, most recently from 7b26345 to 7a712fa Compare July 2, 2026 09:46

renovate Bot force-pushed the renovate/all branch 8 times, most recently from 93035d2 to 786d33d Compare July 15, 2026 22:08

renovate Bot force-pushed the renovate/all branch 7 times, most recently from 2eb33c5 to 2db9535 Compare July 22, 2026 12:30

renovate Bot force-pushed the renovate/all branch 7 times, most recently from 056bf48 to 4e07712 Compare August 15, 2026 00:32

renovate Bot force-pushed the renovate/all branch 6 times, most recently from 4fa56ab to 1084d88 Compare August 21, 2026 16:40

chore(deps): update all dependencies

e8e77d1

renovate Bot force-pushed the renovate/all branch from 1084d88 to e8e77d1 Compare August 21, 2026 22:52

Navigation Menu

Uh oh!

Uh oh!

chore(deps): update all dependencies - #1377

chore(deps): update all dependencies#1377
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

renovate Bot commented Jun 8, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 8, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Uh oh!

Conversation

renovate Bot commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

What's Changed

Enhancement

Dependency Update

Configuration

Uh oh!

github-actions Bot commented Jun 8, 2026

Uh oh!

github-actions Bot commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

❌MegaLinter analysis: Error

Detailed Issues

Notices

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Jun 8, 2026 •

edited

Loading

github-actions Bot commented Jun 8, 2026 •

edited

Loading