Dependabot updates for week of 5 June 2023 (#2244)

* Bump actions/setup-dotnet from 3.1.0 to 3.2.0 * Bump @mui/material from 5.13.2 to 5.13.3 * Bump Microsoft.NET.Test.Sdk from 17.6.0 to 17.6.1 in /Backend.Tests * Bump NUnit3TestAdapter from 4.4.2 to 4.5.0 in /Backend.Tests * Bump typescript from 4.4.4 to 4.9.5 * Bump aws-actions/configure-aws-credentials from 1.pre.node16 to 2.1.0 * Bump github/codeql-action from 2.3.5 to 2.3.6 * Bump react-i18next from 12.1.4 to 12.3.1 * Bump @emotion/styled from 11.10.6 to 11.11.0 * Update Python dependencies * Update ansible scripts to match new ansible revision * Update mongo image * Update node type definitions for Typescript 4.9.5 --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
sillsdev · Jun 6, 2023 · 73a47cf · 73a47cf
1 parent d9ea38c
commit 73a47cf
Show file tree

Hide file tree

Showing 14 changed files with 121 additions and 118 deletions.
diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
@@ -39,7 +39,7 @@ jobs:
             uploader.codecov.io:443
       - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       - name: Setup dotnet
-        uses: actions/setup-dotnet@aa983c550dfda0d1722b6ac6aed55724ffacc6d3 # v3.1.0
+        uses: actions/setup-dotnet@3447fd6a9f9e57506b15f895c5b76d3b197dc7c2 # v3.2.0
         with:
           dotnet-version: ${{ matrix.dotnet }}
       - name: Install ffmpeg
@@ -96,23 +96,23 @@ jobs:
       # Manually install .NET to work around:
       # https://github.com/github/codeql-action/issues/757
       - name: Setup .NET
-        uses: actions/setup-dotnet@aa983c550dfda0d1722b6ac6aed55724ffacc6d3 # v3.1.0
+        uses: actions/setup-dotnet@3447fd6a9f9e57506b15f895c5b76d3b197dc7c2 # v3.2.0
         with:
           dotnet-version: "6.0.x"
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/init@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
         with:
           languages: csharp
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/autobuild@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
       - name: Upload artifacts if build failed
         uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2
         if: ${{ failure() }}
         with:
           name: tracer-logs
           path: ${{ runner.temp }}/*.log
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/analyze@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
 
   docker_build:
     runs-on: ubuntu-22.04

diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
@@ -62,7 +62,7 @@ jobs:
 
       # Initializes the CodeQL tools for scanning.
       - name: Initialize CodeQL
-        uses: github/codeql-action/init@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/init@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
         with:
           languages: ${{ matrix.language }}
           # If you wish to specify custom queries, you can do so here or in a config file.
@@ -75,7 +75,7 @@ jobs:
       # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
       # If this step fails, then you should remove it and run the build manually (see below)
       - name: Autobuild
-        uses: github/codeql-action/autobuild@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/autobuild@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
 
       # Command-line programs to run using the OS shell.
       # See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -88,6 +88,6 @@ jobs:
       #   ./location_of_script_within_repo/buildscript.sh
 
       - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/analyze@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
         with:
           category: "/language:${{matrix.language}}"
diff --git a/.github/workflows/combine_deploy_image.yml b/.github/workflows/combine_deploy_image.yml
@@ -25,7 +25,7 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@4b4e9c3e2d4531116a6f8ba8e71fc6e2cb6e6c8c # v2.5.0
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v1-node16
+        uses: aws-actions/configure-aws-credentials@v2.1.0
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

diff --git a/.github/workflows/deploy_qa.yml b/.github/workflows/deploy_qa.yml
@@ -83,7 +83,7 @@ jobs:
             sts.${{ secrets.AWS_DEFAULT_REGION }}.amazonaws.com:443
       - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2
       - name: Configure AWS credentials
-        uses: aws-actions/configure-aws-credentials@v1-node16
+        uses: aws-actions/configure-aws-credentials@v2.1.0
         with:
           aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }}
           aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }}

diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
@@ -88,6 +88,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@0225834cc549ee0ca93cb085b92954821a145866 # v2.3.5
+        uses: github/codeql-action/upload-sarif@83f0fe6c4988d98a455712a27f0255212bba9bd4 # v2.3.6
         with:
           sarif_file: results.sarif
diff --git a/Backend.Tests/Backend.Tests.csproj b/Backend.Tests/Backend.Tests.csproj
@@ -12,9 +12,9 @@
     <NoWarn>$(NoWarn);CA1305;CA1816;CS1591</NoWarn>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.6.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.6.1" />
     <PackageReference Include="NUnit" Version="3.13.3" />
-    <PackageReference Include="NUnit3TestAdapter" Version="4.4.2" />
+    <PackageReference Include="NUnit3TestAdapter" Version="4.5.0" />
     <PackageReference Include="coverlet.collector" Version="6.0.0"/>
     <PackageReference Include="coverlet.msbuild" Version="6.0.0"/>
   </ItemGroup>

diff --git a/database/Dockerfile b/database/Dockerfile
@@ -1,5 +1,5 @@
 # Use mongo:6.0.6-jammy for linux/amd64
-FROM mongo@sha256:028650e24cdc662da15e11809d63b4f2a0b7eb782f3ca4f80a303a4c255fab89
+FROM mongo@sha256:d0e90b851330d0e8e3c17767d1f3152c452ed549cf0c61d80c945cc883c1ce79
 
 WORKDIR /
 

diff --git a/deploy/ansible/roles/k8s_install/tasks/k3s.yml b/deploy/ansible/roles/k8s_install/tasks/k3s.yml
@@ -7,7 +7,6 @@
 - name: Install k3s
   shell:
     cmd: curl -sfL https://get.k3s.io | sh -s - {{ k3s_options | join(' ') }}
-    warn: no
     creates: /usr/local/bin/k3s
 
 # Change KillMode from "process" to "mixed" to eliminate 90 wait for k3s containers

diff --git a/deploy/ansible/roles/k8s_install/tasks/main.yml b/deploy/ansible/roles/k8s_install/tasks/main.yml
@@ -10,13 +10,15 @@
   when: k8s_engine != "none"
 
 - name: Download the Google Cloud public signing key
-  get_url:
-    dest: /usr/share/keyrings/kubernetes-archive-keyring.gpg
-    url: https://packages.cloud.google.com/apt/doc/apt-key.gpg
+  shell:
+    cmd: >
+      curl -fsSL https://packages.cloud.google.com/apt/doc/apt-key.gpg
+      | gpg --dearmor -o /etc/apt/keyrings/kubernetes-archive-keyring.gpg
+    creates: /etc/apt/keyrings/kubernetes-archive-keyring.gpg
 
 - name: Add repository
   apt_repository:
-    repo: "deb [signed-by=/usr/share/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main"
+    repo: "deb [signed-by=/etc/apt/keyrings/kubernetes-archive-keyring.gpg] https://apt.kubernetes.io/ kubernetes-xenial main"
     filename: kubernetes
 
 - name: Install kubectl

diff --git a/deploy/requirements.txt b/deploy/requirements.txt
@@ -4,11 +4,11 @@
 #
 #    pip-compile --resolver=backtracking requirements.in
 #
-ansible==7.6.0
+ansible==8.0.0
     # via -r requirements.in
-ansible-core==2.14.6
+ansible-core==2.15.0
     # via ansible
-cachetools==5.3.0
+cachetools==5.3.1
     # via google-auth
 certifi==2023.5.7
     # via
@@ -18,11 +18,11 @@ cffi==1.15.1
     # via cryptography
 charset-normalizer==3.1.0
     # via requests
-cryptography==40.0.2
+cryptography==41.0.1
     # via
     #   ansible-core
     #   pyopenssl
-google-auth==2.18.1
+google-auth==2.19.1
     # via kubernetes
 idna==3.4
     # via requests
@@ -35,7 +35,7 @@ jinja2-base64-filters==0.1.4
     # via -r requirements.in
 kubernetes==26.1.0
     # via -r requirements.in
-markupsafe==2.1.2
+markupsafe==2.1.3
     # via jinja2
 oauthlib==3.2.2
     # via requests-oauthlib
@@ -49,7 +49,7 @@ pyasn1-modules==0.3.0
     # via google-auth
 pycparser==2.21
     # via cffi
-pyopenssl==23.1.1
+pyopenssl==23.2.0
     # via -r requirements.in
 python-dateutil==2.8.2
     # via kubernetes
@@ -64,7 +64,7 @@ requests==2.31.0
     #   requests-oauthlib
 requests-oauthlib==1.3.1
     # via kubernetes
-resolvelib==0.8.1
+resolvelib==1.0.1
     # via ansible-core
 rsa==4.9
     # via google-auth

diff --git a/dev-requirements.txt b/dev-requirements.txt
@@ -12,7 +12,7 @@ beautifulsoup4==4.12.2
     # via mkdocs-htmlproofer-plugin
 black==23.3.0
     # via -r dev-requirements.in
-cachetools==5.3.0
+cachetools==5.3.1
     # via
     #   google-auth
     #   tox
@@ -35,7 +35,7 @@ colorama==0.4.6
     #   -r dev-requirements.in
     #   mkdocs-material
     #   tox
-cryptography==40.0.2
+cryptography==41.0.1
     # via
     #   pyopenssl
     #   types-pyopenssl
@@ -49,25 +49,25 @@ filelock==3.12.0
     # via
     #   tox
     #   virtualenv
-flake8==5.0.4
+flake8==6.0.0
     # via
     #   -r dev-requirements.in
     #   flake8-broken-line
     #   flake8-bugbear
     #   flake8-comprehensions
     #   flake8-eradicate
     #   pep8-naming
-flake8-broken-line==0.6.0
+flake8-broken-line==1.0.0
     # via -r dev-requirements.in
-flake8-bugbear==23.3.12
+flake8-bugbear==23.5.9
     # via -r dev-requirements.in
 flake8-comprehensions==3.12.0
     # via -r dev-requirements.in
-flake8-eradicate==1.4.0
+flake8-eradicate==1.5.0
     # via -r dev-requirements.in
 ghp-import==2.1.0
     # via mkdocs
-google-auth==2.18.1
+google-auth==2.19.1
     # via kubernetes
 humanfriendly==10.0
     # via -r dev-requirements.in
@@ -91,7 +91,7 @@ markdown==3.3.7
     #   mkdocs-htmlproofer-plugin
     #   mkdocs-material
     #   pymdown-extensions
-markupsafe==2.1.2
+markupsafe==2.1.3
     # via jinja2
 mccabe==0.7.0
     # via flake8
@@ -103,7 +103,7 @@ mkdocs==1.4.3
     #   mkdocs-material
 mkdocs-htmlproofer-plugin==0.13.1
     # via -r dev-requirements.in
-mkdocs-material==9.1.14
+mkdocs-material==9.1.15
     # via -r dev-requirements.in
 mkdocs-material-extensions==1.1.1
     # via mkdocs-material
@@ -138,19 +138,19 @@ pyasn1==0.5.0
     #   rsa
 pyasn1-modules==0.3.0
     # via google-auth
-pycodestyle==2.9.1
+pycodestyle==2.10.0
     # via flake8
 pycparser==2.21
     # via cffi
-pyflakes==2.5.0
+pyflakes==3.0.1
     # via flake8
 pygments==2.15.1
     # via mkdocs-material
 pymdown-extensions==10.0.1
     # via mkdocs-material
 pymongo==4.3.3
     # via -r dev-requirements.in
-pyopenssl==23.1.1
+pyopenssl==23.2.0
     # via -r dev-requirements.in
 pyproject-api==1.5.1
     # via tox
@@ -169,7 +169,7 @@ pyyaml==6.0
     #   pyyaml-env-tag
 pyyaml-env-tag==0.1
     # via mkdocs
-regex==2023.5.5
+regex==2023.6.3
     # via mkdocs-material
 requests==2.31.0
     # via
@@ -194,19 +194,19 @@ tomli==2.0.1
     #   mypy
     #   pyproject-api
     #   tox
-tox==4.5.1
+tox==4.5.2
     # via -r dev-requirements.in
-types-pyopenssl==23.1.0.3
+types-pyopenssl==23.2.0.0
     # via -r dev-requirements.in
 types-python-dateutil==2.8.19.13
     # via -r dev-requirements.in
 types-pyyaml==6.0.12.10
     # via -r dev-requirements.in
-types-requests==2.31.0.0
+types-requests==2.31.0.1
     # via -r dev-requirements.in
 types-urllib3==1.26.25.13
     # via types-requests
-typing-extensions==4.6.0
+typing-extensions==4.6.3
     # via mypy
 urllib3==1.26.16
     # via

diff --git a/maintenance/requirements.txt b/maintenance/requirements.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile --resolver=backtracking requirements.in
 #
-cachetools==5.3.0
+cachetools==5.3.1
     # via google-auth
 certifi==2023.5.7
     # via
@@ -14,11 +14,11 @@ cffi==1.15.1
     # via cryptography
 charset-normalizer==3.1.0
     # via requests
-cryptography==40.0.2
+cryptography==41.0.1
     # via pyopenssl
 dnspython==2.3.0
     # via pymongo
-google-auth==2.18.1
+google-auth==2.19.1
     # via kubernetes
 humanfriendly==10.0
     # via -r requirements.in
@@ -38,7 +38,7 @@ pycparser==2.21
     # via cffi
 pymongo==4.3.3
     # via -r requirements.in
-pyopenssl==23.1.1
+pyopenssl==23.2.0
     # via -r requirements.in
 python-dateutil==2.8.2
     # via kubernetes