chore(deps): update helm release redis from 19.6.4 to v20 (helm/defectdojo/chart.yaml)

[renovate]

This PR contains the following updates:

Package	Update	Change
redis (source)	major	~19.6.0 -> ~20.6.0

---

Release Notes

bitnami/charts (redis)

v20.6.0

• [bitname/redis] Add support for master and replicas resources to be annotated (#​31034)

v20.5.0

• [bitnami/redis] Detect non-standard images (#​30942)

v20.4.1

• [bitnami/redis] CA shouldn't be mandatory when TLS is enabled (#​30520) (85219eb), closes #​30520

v20.4.0

• [bitnami/*] docs: 📝 Add "Prometheus metrics" (batch 5) (#​30674) (ed2a546), closes #​30674
• [bitnami/redis] add extraPortsEnabled (#​30607) (77a98fa), closes #​30607

v20.3.0

• [bitnami/redis] feat: ✨ Allow updating credentials via values.yaml (#​30452) (d6a3118), closes #​30452

v20.2.2

• [bitnami/*] Remove wrong comment about imagePullPolicy (#​30107) (a51f9e4), closes #​30107
• [bitnami/redis] Release 20.2.2 (#​30407) (ae54e98), closes #​30407
• Update documentation links to techdocs.broadcom.com (#​29931) (f0d9ad7), closes #​29931

v20.2.1

• [bitnami/redis] Fix preExecCmds parameter (#​29898) (6db8a2e), closes #​29898

v20.2.0

• [bitnami/redis] add extraPodSpec (#​29725)

v20.1.7

• [bitnami/redis] Release 20.1.7 (#​29756)

v20.1.6

• [bitnami/redis] adds kind & apiVersion for pvc template in statefulset (#​29678) (13212d2), closes #​29678

v20.1.5

• [bitnami/redis] - fix additionalEndpoints in servicemonitor (#​29595) (6e674ff), closes #​29595

v20.1.4

• [bitnami/redis] Release 20.1.4 (#​29530) (8053b1a), closes #​29530

v20.1.3

• [bitnami/redis] Release 20.1.3 (#​29411) (b0b5c88), closes #​29411

v20.1.2

• [bitnami/redis] Use common password manager to handle password (#​29376) (6ec3657), closes #​29376

v20.1.1

• [bitnami/redis] fix: move variable from annotation to label (#​29209) (396fa01), closes #​29209

v20.1.0

• [bitnami/redis] Support extraEnvVars on volume-permissions for dynamic subfolders (#​29195) (b33ff20), closes #​29195

v20.0.5

• [bitnami/redis] label slave pod using sentinel masterService (#​29121) (6ae397f), closes #​29121

v20.0.4

• [bitnami/redis] update values.schema.json (#​29106) (8a2fea3), closes #​29106

v20.0.3

• [bitnami/redis] Release 20.0.3 (#​28941) (d2a1abb), closes #​28941

v20.0.2

• [bitnami/redis] Release 20.0.2 (#​28881) (582b058), closes #​28881
• [bitnami/redis] Update README after major update (#​28848) (a96205b), closes #​28848

v20.0.1

• [bitnami/redis] fix: Use rollout restart in ginkgo tests (#​28813) (1d8cb54), closes #​28813

v20.0.0

• [bitnami/redis] Release 20.0.0 (#​28810) (9e08d34), closes #​28810

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[dryrunsecurity]

DryRun Security Summary

The pull request updates the Redis and PostgreSQL Helm chart dependencies in the DefectDojo application from older to newer versions, which can provide security patches and improvements, while maintaining a cautious approach to dependency management.

Expand for full summary

Summary:

The changes in this pull request are focused on updating the versions of the Redis and PostgreSQL Helm chart dependencies used by the DefectDojo application. Specifically, the Redis chart version has been updated from ~19.6.0 to ~20.6.0, and the PostgreSQL chart version has been updated from 16.3.0 to 16.3.2.

From an application security perspective, these changes are generally positive, as updating dependencies to newer versions can provide security patches, bug fixes, and feature improvements. However, it's important to thoroughly test the changes to ensure that there are no regressions or compatibility issues introduced by the updates.

The version constraints used in the changes (e.g., ~20.6.0 for Redis) are a common way to manage dependency updates, as they allow for security and bug fix updates while avoiding potentially breaking changes. Overall, these changes appear to be routine updates to Helm chart dependencies and do not raise any immediate application security concerns, provided that the necessary testing and review have been completed.

Files Changed:

1. helm/defectdojo/Chart.yaml: This file has been updated to change the version of the Redis Helm chart dependency from ~19.6.0 to ~20.6.0.
2. helm/defectdojo/Chart.lock: This file has been updated to reflect the changes in the Helm chart dependencies, with the PostgreSQL chart version being updated from 16.3.0 to 16.3.2 and the Redis chart version being updated from 19.6.4 to 20.6.0.

Code Analysis

We ran 9 analyzers against 2 files and 0 analyzers had findings. 9 analyzers had no findings.

View PR in the DryRun Dashboard.

[cneill]

Looks like this version of the chart is using Redis 7.4.0, which we've held off on elsewhere:

❯ helm search repo bitnami/redis -l
NAME                    CHART VERSION   APP VERSION     DESCRIPTION
bitnami/redis           20.0.1          7.4.0           Redis(R) is an open source, advanced key-value ...
bitnami/redis           20.0.0          7.4.0           Redis(R) is an open source, advanced key-value ...

[mtesauro]

@cneill Good catch - that licensing change would likely not be expected by those using the helm chart in this repo beyond it not matching the upstream version

Let's sit on this for now 👍

Problematic bump of Redis version