Skip to content

Commit 4b170bc

Browse files
renovate[bot]renovate[bot]
authored
chore(deps): update all dependencies (#1309)
This PR contains the following updates: | Package | Type | Update | Change | Age | Confidence | |---|---|---|---|---|---| | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.3.0` -> `6.7.0` | [![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/hashicorp%2faws/6.7.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/hashicorp%2faws/6.3.0/6.7.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [boto3](https://redirect.github.com/boto/boto3) | | minor | `==1.39.14` -> `==1.40.1` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.39.14/1.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [botocore](https://redirect.github.com/boto/botocore) | | minor | `==1.39.14` -> `==1.40.1` | [![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.39.14/1.40.1?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [checkmarx/kics](https://redirect.github.com/Checkmarx/kics) | container | patch | `v2.1.11-debian` -> `v2.1.12-debian` | [![age](https://developer.mend.io/api/mc/badges/age/docker/checkmarx%2fkics/v2.1.12?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/checkmarx%2fkics/v2.1.11/v2.1.12?slim=true)](https://docs.renovatebot.com/merge-confidence/) | | [terraform-linters/tflint-ruleset-aws](https://redirect.github.com/terraform-linters/tflint-ruleset-aws) | plugin | minor | `0.40.0` -> `0.41.0` | [![age](https://developer.mend.io/api/mc/badges/age/github-releases/terraform-linters%2ftflint-ruleset-aws/0.41.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/github-releases/terraform-linters%2ftflint-ruleset-aws/0.40.0/0.41.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.7.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#670-July-31-2025) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.6.0...v6.7.0) FEATURES: - **New Resource:** `aws_quicksight_ip_restriction` ([#&#8203;43596](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43596)) - **New Resource:** `aws_quicksight_key_registration` ([#&#8203;43587](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43587)) ENHANCEMENTS: - data-source/aws\_codebuild\_fleet: Add `instance_type` attribute in `compute_configuration` block ([#&#8203;43449](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43449)) - data-source/aws\_ebs\_volume: Add `volume_initialization_rate` attribute ([#&#8203;43565](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43565)) - data-source/aws\_ecs\_service: Support `load_balancer` attribute ([#&#8203;43582](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43582)) - data-source/aws\_s3\_access\_point: Add `tags` attribute. This functionality requires the `s3:ListTagsForResource` IAM permission ([#&#8203;43630](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43630)) - data-source/aws\_verifiedpermissions\_policy\_store: Add `deletion_protection` attribute ([#&#8203;43452](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43452)) - resource/aws\_athena\_workgroup: Add `configuration.identity_center_configuration` argument ([#&#8203;38717](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/38717)) - resource/aws\_cleanrooms\_collaboration: Add `analytics_engine` argument ([#&#8203;43614](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43614)) - resource/aws\_codebuild\_fleet: Add `instance_type` argument in `compute_configuration` block to support custom instance types ([#&#8203;43449](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43449)) - resource/aws\_ebs\_volume: Add `volume_initialization_rate` argument ([#&#8203;43565](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43565)) - resource/aws\_s3\_access\_point: Add `tags` argument and `tags_all` attribute. This functionality requires the `s3:ListTagsForResource`, `s3:TagResource`, and `s3:UntagResource` IAM permissions ([#&#8203;43630](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43630)) - resource/aws\_verifiedpermissions\_policy\_store: Add `deletion_protection` argument ([#&#8203;43452](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43452)) BUG FIXES: - resource/aws\_bedrockagent\_flow: Fix `missing required field, CreateFlowInput.Definition.Nodes[0].Configuration[prompt].SourceConfiguration[resource].PromptArn` errors on Create ([#&#8203;43595](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43595)) - resource/aws\_s3\_bucket: Accept `NoSuchTagSetError` responses from S3-compatible services ([#&#8203;43589](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43589)) - resource/aws\_s3\_object: Accept `NoSuchTagSetError` responses from S3-compatible services ([#&#8203;43589](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43589)) - resource/aws\_servicequotas\_service\_quota: Fix error when updating a pending service quota request ([#&#8203;43606](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43606)) - resource/aws\_ssm\_parameter: Fix `Provider produced inconsistent final plan` errors when changing from using `value` to using `value_wo` ([#&#8203;42877](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42877)) - resource/aws\_ssm\_parameter: Fix `version` not being updated when `description` changes ([#&#8203;42595](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42595)) ### [`v6.6.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#660-July-28-2025) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.5.0...v6.6.0) FEATURES: - **New Resource:** `aws_connect_phone_number_contact_flow_association` ([#&#8203;43557](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43557)) - **New Resource:** `aws_nat_gateway_eip_association` ([#&#8203;42591](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42591)) ENHANCEMENTS: - data-source/aws\_cloudwatch\_event\_bus: Add `log_config` attribute ([#&#8203;43453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43453)) - data-source/aws\_ssm\_patch\_baseline: Add `available_security_updates_compliance_status` argument ([#&#8203;43560](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43560)) - feature/aws\_bedrock\_guardrail: Add `cross_region_config`, `content_policy_config.tier_config`, and `topic_policy_config.tier_config` arguments ([#&#8203;43517](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43517)) - resource/aws\_athena\_database: Add `workgroup` argument ([#&#8203;36628](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36628)) - resource/aws\_batch\_compute\_environment: Add `compute_resources.ec2_configuration.image_kubernetes_version` argument ([#&#8203;43454](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43454)) - resource/aws\_cloudwatch\_event\_bus: Add `log_config` argument ([#&#8203;43453](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43453)) - resource/aws\_cognito\_resource\_server: Allow `name` to be updated in-place ([#&#8203;41702](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/41702)) - resource/aws\_cognito\_user\_pool: Allow `name` to be updated in-place ([#&#8203;42639](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42639)) - resource/aws\_globalaccelerator\_custom\_routing\_endpoint\_group: Add resource identity support ([#&#8203;43539](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43539)) - resource/aws\_globalaccelerator\_custom\_routing\_listener: Add resource identity support ([#&#8203;43539](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43539)) - resource/aws\_globalaccelerator\_endpoint\_group: Add resource identity support ([#&#8203;43539](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43539)) - resource/aws\_globalaccelerator\_listener: Add resource identity support ([#&#8203;43539](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43539)) - resource/aws\_imagebuilder\_container\_recipe: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_imagebuilder\_distribution\_configuration: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_imagebuilder\_image: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_imagebuilder\_image\_pipeline: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_imagebuilder\_image\_recipe: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_imagebuilder\_infrastructure\_configuration: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_imagebuilder\_workflow: Add resource identity support ([#&#8203;43540](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43540)) - resource/aws\_inspector\_assessment\_target: Add resource identity support ([#&#8203;43542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43542)) - resource/aws\_inspector\_assessment\_template: Add resource identity support ([#&#8203;43542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43542)) - resource/aws\_inspector\_resource\_group: Add resource identity support ([#&#8203;43542](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43542)) - resource/aws\_nat\_gateway: Change `secondary_allocation_ids` to Optional and Computed ([#&#8203;42591](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42591)) - resource/aws\_ssm\_patch\_baseline: Add `available_security_updates_compliance_status` argument ([#&#8203;43560](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43560)) - resource/aws\_ssm\_service\_setting: Support short format (with `/ssm/` prefix) for `setting_id` ([#&#8203;43562](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43562)) BUG FIXES: - resource/aws\_appsync\_api\_cache: Fix "missing required field" error during update ([#&#8203;43523](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43523)) - resource/aws\_cloudwatch\_log\_delivery\_destination: Fix update failure when tags are set ([#&#8203;43576](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43576)) - resource/aws\_ecs\_service: Fix unspecified `test_listener_rule` incorrectly being set as empty string in `load_balancer.advanced_configuration` block ([#&#8203;43558](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43558)) ### [`v6.5.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#650-July-24-2025) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.4.0...v6.5.0) NOTES: - resource/aws\_cognito\_log\_delivery\_configuration: Because we cannot easily test all this functionality, it is best effort and we ask for community help in testing ([#&#8203;43396](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43396)) - resource/aws\_ecs\_service: Acceptance tests cannot fully reproduce scenarios with deployments older than 3 months. Community feedback on this fix is appreciated, particularly for long-running ECS services with in-place updates ([#&#8203;43502](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43502)) FEATURES: - **New Data Source:** `aws_ecr_images` ([#&#8203;42577](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42577)) - **New Resource:** `aws_cognito_log_delivery_configuration` ([#&#8203;43396](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43396)) - **New Resource:** `aws_networkfirewall_firewall_transit_gateway_attachment_accepter` ([#&#8203;43430](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43430)) - **New Resource:** `aws_s3_bucket_metadata_configuration` ([#&#8203;41364](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/41364)) ENHANCEMENTS: - data-source/aws\_dms\_endpoint: Add `postgres_settings.authentication_method` and `postgres_settings.service_access_role_arn` attributes ([#&#8203;43440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43440)) - data-source/aws\_networkfirewall\_firewall: Add `availability_zone_change_protection`, `availability_zone_mapping`, `firewall_status.sync_states.attachment.status_message`, `firewall_status.transit_gateway_attachment_sync_states`, `transit_gateway_id`, and `transit_gateway_owner_account_id` attributes ([#&#8203;43430](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43430)) - resource/aws\_alb\_listener: Add resource identity support ([#&#8203;43161](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43161)) - resource/aws\_alb\_listener\_rule: Add resource identity support ([#&#8203;43155](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43155)) - resource/aws\_alb\_target\_group: Add resource identity support ([#&#8203;43171](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43171)) - resource/aws\_dms\_endpoint: Add `oracle_settings` configuration block for authentication method ([#&#8203;43125](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43125)) - resource/aws\_dms\_endpoint: Add `postgres_settings.authentication_method` and `postgres_settings.service_access_role_arn` arguments ([#&#8203;43440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43440)) - resource/aws\_dms\_endpoint: Add plan-time validation of `postgres_settings.database_mode`, `postgres_settings.map_long_varchar_as`, and `postgres_settings.plugin_name` arguments ([#&#8203;43440](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43440)) - resource/aws\_dms\_replication\_instance: Add `dns_name_servers` attribute and `kerberos_authentication_settings` configuration block for Kerberos authentication settings ([#&#8203;43125](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43125)) - resource/aws\_dx\_gateway\_association: Add `transit_gateway_attachment_id` attribute. This functionality requires the `ec2:DescribeTransitGatewayAttachments` IAM permission ([#&#8203;43436](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43436)) - resource/aws\_globalaccelerator\_accelerator: Add resource identity support ([#&#8203;43200](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43200)) - resource/aws\_globalaccelerator\_custom\_routing\_accelerator: Add resource identity support ([#&#8203;43423](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43423)) - resource/aws\_glue\_registry: Add resource identity support ([#&#8203;43450](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43450)) - resource/aws\_glue\_schema: Add resource identity support ([#&#8203;43450](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43450)) - resource/aws\_iam\_openid\_connect\_provider: Add resource identity support ([#&#8203;43503](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43503)) - resource/aws\_iam\_policy: Add resource identity support ([#&#8203;43503](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43503)) - resource/aws\_iam\_saml\_provider: Add resource identity support ([#&#8203;43503](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43503)) - resource/aws\_iam\_service\_linked\_role: Add resource identity support ([#&#8203;43503](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43503)) - resource/aws\_inspector2\_enabler: Support `CODE_REPOSITORY` as a valid value for `resource_types` ([#&#8203;43525](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43525)) - resource/aws\_inspector2\_organization\_configuration: Add `auto_enable.code_repository` argument ([#&#8203;43525](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43525)) - resource/aws\_lb\_listener: Add resource identity support ([#&#8203;43161](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43161)) - resource/aws\_lb\_listener\_rule: Add resource identity support ([#&#8203;43155](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43155)) - resource/aws\_lb\_target\_group: Add resource identity support ([#&#8203;43171](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43171)) - resource/aws\_lb\_trust\_store: Add resource identity support ([#&#8203;43186](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43186)) - resource/aws\_networkfirewall\_firewall: Add `availability_zone_change_protection`, `availability_zone_mapping`, and `transit_gateway_id` arguments and `firewall_status.transit_gateway_attachment_sync_states` and `transit_gateway_owner_account_id` attributes ([#&#8203;43430](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43430)) - resource/aws\_networkfirewall\_firewall: Mark `subnet_mapping` and `vpc_id` as Optional ([#&#8203;43430](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43430)) - resource/aws\_quicksight\_account\_subscription: Add import support. This resource can now be imported via the `aws_account_id` argument. ([#&#8203;43501](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43501)) - resource/aws\_sns\_topic: Add resource identity support ([#&#8203;43202](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43202)) - resource/aws\_wafv2\_rule\_group: Add `rules_json` argument ([#&#8203;43397](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43397)) - resource/aws\_wafv2\_web\_acl: Add `statement.rate_based_statement.custom_key.asn` argument ([#&#8203;43506](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43506)) BUG FIXES: - provider: Prevent planned `forces replacement` on `region` for numerous resource types when upgrading from a pre-v6.0.0 provider version and `-refresh=false` is in effect ([#&#8203;43516](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43516)) - resource/aws\_api\_gateway\_resource: Recompute `path` when `path_part` is updated ([#&#8203;43215](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43215)) - resource/aws\_bedrockagent\_flow: Remove `definition.connection` and `definition.node` list length limits ([#&#8203;43471](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43471)) - resource/aws\_ecs\_service: Improve stabilization logic to handle both new deployments and in-place updates correctly. This fixes a regression introduced in [v6.4.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#640-july-17-2025) ([#&#8203;43502](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43502)) - resource/aws\_instance: Recompute `ipv6_addresses` when `ipv6_address_count` is updated ([#&#8203;43158](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43158)) ### [`v6.4.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#640-July-17-2025) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.3.0...v6.4.0) FEATURES: - **New Data Source:** `aws_s3_access_point` ([#&#8203;43391](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43391)) - **New Resource:** `aws_bedrockagent_flow` ([#&#8203;42201](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42201)) - **New Resource:** `aws_fsx_s3_access_point_attachment` ([#&#8203;43391](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43391)) ENHANCEMENTS: - data-source/aws\_bedrock\_inference\_profiles: Add `type` argument ([#&#8203;43150](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43150)) - data-source/aws\_lakeformation\_resource: Support `hybrid_access_enabled`, `with_federation` and `with_privileged_access` attributes ([#&#8203;43377](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43377)) - resource/aws\_acm\_certificate: Support `options.export` argument to issue an exportable certificate ([#&#8203;43207](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43207)) - resource/aws\_cloudwatch\_log\_metric\_filter: Add `apply_on_transformed_logs` argument ([#&#8203;43381](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43381)) - resource/aws\_datasync\_location\_object\_storage: Make `agent_arns` optional ([#&#8203;43400](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43400)) - resource/aws\_ecs\_service: Add `deployment_configuration` argument ([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434)) - resource/aws\_ecs\_service: Add `load_balancer.advanced_configuration` argument ([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434)) - resource/aws\_ecs\_service: Add `service.client_alias.test_traffic_rules` argument ([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434)) - resource/aws\_ecs\_service: `deployment_controller.type` changes no longer force a replacement ([#&#8203;43434](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43434)) - resource/aws\_lakeformation\_resource: Support `with_privileged_access` argument ([#&#8203;43377](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43377)) - resource/aws\_s3\_bucket\_public\_access\_block: Add `skip_destroy` argument ([#&#8203;43415](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43415)) BUG FIXES: - resource/aws\_bedrockagent\_agent\_action\_group: Correctly set `parent_action_group_signature` on Read ([#&#8203;43355](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43355)) - resource/aws\_datazone\_environment\_blueprint\_configuration: Fix `Inappropriate value for attribute "regional_parameters"` errors during planning. This fixes a regression introduced in [v6.0.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#600-june-18-2025) ([#&#8203;43382](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43382)) - resource/aws\_ec2\_transit\_gateway\_route\_table\_propagation: Don't mark `transit_gateway_attachment_id` as [ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew) if the value is known not to change ([#&#8203;43405](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43405)) - resource/aws\_lambda\_function: Fix `waiting for Lambda Function (...) version publish: unexpected state '', wanted target 'Successful'` errors on Update. This fixes a regression introduced in [v6.2.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#620-july--2-2025) ([#&#8203;43416](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43416)) - resource/aws\_lexv2models\_slot: Fix error when `sub_slot_setting.slot_specification.value_elicitation_setting.prompt_specification.prompt_attempts_specification` and `value_elicitation_setting.prompt_specification.prompt_attempts_specification` have default values ([#&#8203;43358](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43358)) - resource/aws\_securitylake\_data\_lake: Allow `meta_store_role_arn` to be updated in-place ([#&#8203;36874](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/36874)) </details> <details> <summary>boto/boto3 (boto3)</summary> ### [`v1.40.1`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1401) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.40.0...1.40.1) \====== - api-change:`acm-pca`: \[`botocore`] Doc-only update to add more information to GetCertificate action. - api-change:`aiops`: \[`botocore`] This release includes fix for InvestigationGroup timestamp conversion issue. - api-change:`arc-region-switch`: \[`botocore`] This is the initial SDK release for Region switch - api-change:`auditmanager`: \[`botocore`] Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. - api-change:`lightsail`: \[`botocore`] This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. - api-change:`observabilityadmin`: \[`botocore`] CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. - api-change:`pcs`: \[`botocore`] Add support for IPv6 Networking for Clusters. - api-change:`securityhub`: \[`botocore`] Release new resource detail type CodeRepository - api-change:`sns`: \[`botocore`] Amazon SNS support for Amazon SQS fair queues ### [`v1.40.0`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#1400) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.39.17...1.40.0) \====== - api-change:`customer-profiles`: \[`botocore`] The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. - api-change:`ec2`: \[`botocore`] Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. - api-change:`elbv2`: \[`botocore`] This release enables secondary IP addresses for Network Load Balancers. - api-change:`entityresolution`: \[`botocore`] Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. - api-change:`glue`: \[`botocore`] Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. - api-change:`inspector2`: \[`botocore`] Extend usage to include agentless hours and add CODE\_REPOSITORY to aggregation resource type - api-change:`iot`: \[`botocore`] This release allows AWS IoT Core users to use their own AWS KMS keys for data protection - api-change:`opensearch`: \[`botocore`] Granular access control support for NEO-SAML with IAMFederation for AOS data source - api-change:`quicksight`: \[`botocore`] Added Impala connector support - api-change:`s3control`: \[`botocore`] Add Tags field to CreateAccessPoint - api-change:`sesv2`: \[`botocore`] This release introduces support for Multi-tenant management - api-change:`workspaces-web`: \[`botocore`] Added ability to log session activity on a portal to an S3 bucket. - feature:`sts`: \[`botocore`] Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. ### [`v1.39.17`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13917) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.39.16...1.39.17) \======= - api-change:`cloudfront`: \[`botocore`] This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) - api-change:`docdb`: \[`botocore`] Add support for setting Serverless Scaling Configuration on clusters. - api-change:`ds`: \[`botocore`] This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. - api-change:`ec2`: \[`botocore`] Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. - api-change:`iotwireless`: \[`botocore`] Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. ### [`v1.39.16`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13916) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.39.15...1.39.16) \======= - api-change:`batch`: \[`botocore`] AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. - api-change:`cleanrooms`: \[`botocore`] This feature provides the ability to update the table reference and allowed columns on an existing configured table. - api-change:`deadline`: \[`botocore`] Adds support for tag management on monitors. - api-change:`location`: \[`botocore`] This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. - api-change:`opensearchserverless`: \[`botocore`] This is to support Granular access control support for SAML with IAMFedraton in AOSS ### [`v1.39.15`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13915) [Compare Source](https://redirect.github.com/boto/boto3/compare/1.39.14...1.39.15) \======= - api-change:`directconnect`: \[`botocore`] Enable MACSec support and features on Interconnects. - api-change:`iotsitewise`: \[`botocore`] Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs - api-change:`osis`: \[`botocore`] Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body - enhancement:`sso`: \[`botocore`] Updates legacy token auth flow to check if cached legacy tokens are expired according to the local clock. If expired, it will raise an `UnauthorizedSSOTokenError` instead of sending an expired token to Identity Center's `GetRoleCredentials` API. </details> <details> <summary>boto/botocore (botocore)</summary> ### [`v1.40.1`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1401) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.40.0...1.40.1) \====== - api-change:`acm-pca`: Doc-only update to add more information to GetCertificate action. - api-change:`aiops`: This release includes fix for InvestigationGroup timestamp conversion issue. - api-change:`arc-region-switch`: This is the initial SDK release for Region switch - api-change:`auditmanager`: Added a note to Framework APIs (CreateAssessmentFramework, GetAssessmentFramework, UpdateAssessmentFramework) clarifying that the Controls object returns a partial response when called through Framework APIs. Added documentation that the Framework's controlSources parameter is no longer supported. - api-change:`lightsail`: This release adds support for the Asia Pacific (Jakarta) (ap-southeast-3) Region. - api-change:`observabilityadmin`: CloudWatch Observability Admin adds the ability to enable telemetry on AWS resources such as Amazon VPCs (Flow Logs) in customers AWS Accounts and Organizations. The release introduces new APIs to manage telemetry rules, which define telemetry settings to be applied on AWS resources. - api-change:`pcs`: Add support for IPv6 Networking for Clusters. - api-change:`securityhub`: Release new resource detail type CodeRepository - api-change:`sns`: Amazon SNS support for Amazon SQS fair queues ### [`v1.40.0`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#1400) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.39.17...1.40.0) \====== - api-change:`customer-profiles`: The release updates standard profile with 2 new fields that supports account-level engagement. Updated APIs include CreateProfile, UpdateProfile, MergeProfiles, SearchProfiles, BatchGetProfile, GetSegmentMembership, CreateSegmentDefinition, CreateSegmentEstimate. - api-change:`ec2`: Added support for the force option for the EC2 instance terminate command. This feature enables customers to recover resources associated with an instance stuck in the shutting-down state as a result of rare issues caused by a frozen operating system or an underlying hardware problem. - api-change:`elbv2`: This release enables secondary IP addresses for Network Load Balancers. - api-change:`entityresolution`: Add support for creating advanced rule-based matching workflows in AWS Entity Resolution. - api-change:`glue`: Added support for Route node, S3 Iceberg sources/targets, catalog Iceberg sources, DynamoDB ELT connector, AutoDataQuality evaluation, enhanced PII detection with redaction, Kinesis fan-out support, and new R-series worker types. - api-change:`inspector2`: Extend usage to include agentless hours and add CODE\_REPOSITORY to aggregation resource type - api-change:`iot`: This release allows AWS IoT Core users to use their own AWS KMS keys for data protection - api-change:`opensearch`: Granular access control support for NEO-SAML with IAMFederation for AOS data source - api-change:`quicksight`: Added Impala connector support - api-change:`s3control`: Add Tags field to CreateAccessPoint - api-change:`sesv2`: This release introduces support for Multi-tenant management - api-change:`workspaces-web`: Added ability to log session activity on a portal to an S3 bucket. - feature:`sts`: Updated the default sts service endpoint from `legacy` to `regional`. This behavior can be overridden using the `sts_regional_endpoints` setting in the shared AWS config file or the `AWS_STS_REGIONAL_ENDPOINTS` environment variable. ### [`v1.39.17`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13917) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.39.16...1.39.17) \======= - api-change:`cloudfront`: This release adds new origin timeout options: 1) ResponseCompletionTimeout and 2) OriginReadTimeout (for S3 origins) - api-change:`docdb`: Add support for setting Serverless Scaling Configuration on clusters. - api-change:`ds`: This release adds support for AWS Managed Microsoft AD Hybrid Edition, introducing new operations: StartADAssessment, DescribeADAssessment, ListADAssessments, DeleteADAssessment, CreateHybridAD, UpdateHybridAD, and DescribeHybridADUpdate; and updated existing operation: DescribeDirectories. - api-change:`ec2`: Release to show the next hop IP address for routes propagated by VPC Route Server into VPC route tables. - api-change:`iotwireless`: Added TxPowerIndexMin, TxPowerIndexMax, NbTransMin and NbTransMax params to ServiceProfile. ### [`v1.39.16`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13916) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.39.15...1.39.16) \======= - api-change:`batch`: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs. - api-change:`cleanrooms`: This feature provides the ability to update the table reference and allowed columns on an existing configured table. - api-change:`deadline`: Adds support for tag management on monitors. - api-change:`location`: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries. - api-change:`opensearchserverless`: This is to support Granular access control support for SAML with IAMFedraton in AOSS ### [`v1.39.15`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13915) [Compare Source](https://redirect.github.com/boto/botocore/compare/1.39.14...1.39.15) \======= - api-change:`directconnect`: Enable MACSec support and features on Interconnects. - api-change:`iotsitewise`: Add support for native anomaly detection in IoT SiteWise using new Computation Model APIs - api-change:`osis`: Add Pipeline Role Arn as an optional parameter to the create / update pipeline APIs as an alternative to passing in the pipeline configuration body - enhancement:`sso`: Updates legacy token auth flow to check if cached legacy tokens are expired according to the local clock. If expired, it will raise an `UnauthorizedSSOTokenError` instead of sending an expired token to Identity Center's `GetRoleCredentials` API. </details> <details> <summary>Checkmarx/kics (checkmarx/kics)</summary> ### [`v2.1.12`](https://redirect.github.com/Checkmarx/kics/releases/tag/v2.1.12) [Compare Source](https://redirect.github.com/Checkmarx/kics/compare/v2.1.11...v2.1.12) #### What's Changed - ci(deps): bump the all group across 1 directory with 7 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/Checkmarx/kics/pull/7505](https://redirect.github.com/Checkmarx/kics/pull/7505)5 - build(deps): bump helm.sh/helm/v3 from 3.18.2 to 3.18.4 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/Checkmarx/kics/pull/7528](https://redirect.github.com/Checkmarx/kics/pull/7528)8 - fix(parser): add type assertion verification to certificate elements process by [@&#8203;cx-artur-ribeiro](https://redirect.github.com/cx-artur-ribeiro) in [https://github.com/Checkmarx/kics/pull/7526](https://redirect.github.com/Checkmarx/kics/pull/7526) - fix(dockerfile): update debian dockerfile image with stable-slim version by [@&#8203;cx-artur-ribeiro](https://redirect.github.com/cx-artur-ribeiro) in [https://github.com/Checkmarx/kics/pull/7540](https://redirect.github.com/Checkmarx/kics/pull/7540) - fix(query): fix fn for s3\_bucket\_without\_restriction\_of\_public\_bucket by [@&#8203;cx-romeu-silva](https://redirect.github.com/cx-romeu-silva) in [https://github.com/Checkmarx/kics/pull/7506](https://redirect.github.com/Checkmarx/kics/pull/7506) - fix(query): fix fp for web app not using tls last version by [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) in [https://github.com/Checkmarx/kics/pull/7556](https://redirect.github.com/Checkmarx/kics/pull/7556) - fix(query): fix fp for api\_gateway\_method\_does\_not\_contains\_an\_api\_key by [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) in [https://github.com/Checkmarx/kics/pull/7557](https://redirect.github.com/Checkmarx/kics/pull/7557) - fix(symlink): add return statements for early exit in checkSymLink by [@&#8203;cx-artur-ribeiro](https://redirect.github.com/cx-artur-ribeiro) in [https://github.com/Checkmarx/kics/pull/7532](https://redirect.github.com/Checkmarx/kics/pull/7532) - fix(query): fix fp for image\_version\_not\_explicit by [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) in [https://github.com/Checkmarx/kics/pull/7561](https://redirect.github.com/Checkmarx/kics/pull/7561) - fix(query): fix fn for cloudTrail\_multi\_region\_disabled by [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) in [https://github.com/Checkmarx/kics/pull/7558](https://redirect.github.com/Checkmarx/kics/pull/7558) - fix(query): fix fn for ssh\_is\_exposed\_to\_the\_internet and rdp\_is\_exposed\_to\_the\_internet by [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) in [https://github.com/Checkmarx/kics/pull/7560](https://redirect.github.com/Checkmarx/kics/pull/7560) - fix(query): fix fp for s3\_bucket\_logging\_disabled by [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) in [https://github.com/Checkmarx/kics/pull/7559](https://redirect.github.com/Checkmarx/kics/pull/7559) - fix(progressbar): fix flaky TestCounter\_Start unit test by [@&#8203;cx-artur-ribeiro](https://redirect.github.com/cx-artur-ribeiro) in [https://github.com/Checkmarx/kics/pull/7573](https://redirect.github.com/Checkmarx/kics/pull/7573) - fix(vulnerabilities): update go version to fix grype vulnerabilities by [@&#8203;cx-artur-ribeiro](https://redirect.github.com/cx-artur-ribeiro) in [https://github.com/Checkmarx/kics/pull/7589](https://redirect.github.com/Checkmarx/kics/pull/7589) - docs(queries): update queries catalog by [@&#8203;kicsbot](https://redirect.github.com/kicsbot) in [https://github.com/Checkmarx/kics/pull/7553](https://redirect.github.com/Checkmarx/kics/pull/7553) - docs(kicsbot): preparing for release 2.1.12 by [@&#8203;kicsbot](https://redirect.github.com/kicsbot) in [https://github.com/Checkmarx/kics/pull/7593](https://redirect.github.com/Checkmarx/kics/pull/7593) #### New Contributors - [@&#8203;cx-andre-pereira](https://redirect.github.com/cx-andre-pereira) made their first contribution in [https://github.com/Checkmarx/kics/pull/7556](https://redirect.github.com/Checkmarx/kics/pull/7556) **Full Changelog**: https://github.com/Checkmarx/kics/compare/v2.1.11...v2.1.12 </details> <details> <summary>terraform-linters/tflint-ruleset-aws (terraform-linters/tflint-ruleset-aws)</summary> ### [`v0.41.0`](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/releases/tag/v0.41.0) [Compare Source](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/compare/v0.40.0...v0.41.0) #### What's Changed ##### Breaking Changes - fix: update mappings for AWS Provider v6 compatibility by [@&#8203;bendrucker](https://redirect.github.com/bendrucker) in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/902](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/902) ##### Enhancements - Update AWS provider/module and generated content by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/888](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/888)8 - Update AWS provider/module and generated content by [@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/919](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/919)9 ##### Chores - Bump the aws-sdk group with 2 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/887](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/887)7 - Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.222.0 to 1.224.0 in the aws-sdk group by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/889](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/889)9 - Bump golang.org/x/net from 0.40.0 to 0.41.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/891](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/891)1 - Bump the aws-sdk group with 6 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/892](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/892)2 - Bump github.com/hashicorp/aws-sdk-go-base/v2 from 2.0.0-beta.64 to 2.0.0-beta.65 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/890](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/890)0 - Bump actions/attest-build-provenance from 2.3.0 to 2.4.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/894](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/894)4 - Bump the aws-sdk group with 7 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/895](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/895)5 - Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/896](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/896)6 - Bump the aws-sdk group with 7 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/897](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/897)7 - Bump the aws-sdk group with 4 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/905](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/905)5 - Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/906](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/906)6 - Clarify README by [@&#8203;excavator-matt](https://redirect.github.com/excavator-matt) in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/907](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/907) - Bump the aws-sdk group with 3 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/908](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/908)8 - Bump golang.org/x/net from 0.41.0 to 0.42.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/909](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/909)9 - Bump github.com/hashicorp/hcl/v2 from 2.23.0 to 2.24.0 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/910](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/910)0 - Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.230.0 to 1.231.0 in the aws-sdk group by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/911](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/911)1 - Bump the aws-sdk group with 7 updates by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/914](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/914)4 - Bump sigstore/cosign-installer from 3.9.1 to 3.9.2 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/915](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/915)5 - Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.233.1 to 1.236.0 in the aws-sdk group by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/916](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/916)6 - Bump github.com/aws/smithy-go from 1.22.4 to 1.22.5 by [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in[https://github.com/terraform-linters/tflint-ruleset-aws/pull/917](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/917)7 - Draw attention to rules disabled by default by [@&#8203;excavator-matt](https://redirect.github.com/excavator-matt) in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/918](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/918) - Remove unneeded repository info from goreleaser.yml by [@&#8203;wata727](https://redirect.github.com/wata727) in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/920](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/920) #### New Contributors - [@&#8203;excavator-matt](https://redirect.github.com/excavator-matt) made their first contribution in [https://github.com/terraform-linters/tflint-ruleset-aws/pull/907](https://redirect.github.com/terraform-linters/tflint-ruleset-aws/pull/907) **Full Changelog**: https://github.com/terraform-linters/tflint-ruleset-aws/compare/v0.40.0...v0.41.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS41MS4xIiwidXBkYXRlZEluVmVyIjoiNDEuNTEuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
1 parent 62bab5a commit 4b170bc

File tree

4 files changed

+33
-33
lines changed

4 files changed

+33
-33
lines changed

‎.github/workflows/ci.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
kics:
6060
runs-on: ubuntu-latest
6161
container:
62-
image: checkmarx/kics:v2.1.11-debian@sha256:9014387b9e19c702a9f6ac5a63aff48499ba2a3af090a76056bff8fe5396ef08
62+
image: checkmarx/kics:v2.1.12-debian@sha256:188693ca62a8e17d4e209ccbe126db70289e1dd97668d709f6e69c4fe12ba87f
6363
steps:
6464
- uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4
6565
# ignore: "tags not used", "access analyzer not used", "shield advanced not used"

‎.terraform.lock.hcl‎

Lines changed: 29 additions & 29 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎.tflint.hcl‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,6 @@ plugin "terraform" {
55

66
plugin "aws" {
77
enabled = true
8-
version = "0.40.0"
8+
version = "0.41.0"
99
source = "github.com/terraform-linters/tflint-ruleset-aws"
1010
}

‎modules/terminate-agent-hook/lambda/requirements.txt‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,2 +1,2 @@
1-
boto3 ==1.39.14
2-
botocore ==1.39.14
1+
boto3 ==1.40.1
2+
botocore ==1.40.1

0 commit comments

Comments
 (0)