From 6805358bb27c5ce7ad6c35d39d87eb106776af2c Mon Sep 17 00:00:00 2001 From: Gary <26419401+Gary-H9@users.noreply.github.com> Date: Mon, 12 Feb 2024 15:59:49 +0000 Subject: [PATCH] =?UTF-8?q?:dependabot:=20=F0=9F=94=A7=20=C2=A0JML=20Multi?= =?UTF-8?q?ple=20Dependabots=20(#3291)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit * 🔧 Multiple dependabots * 🔧 Fix issue in workflows * 🚨 Linting * 🚨 Update trivyignore --- .github/.trivyignore.yaml | 1 + .github/workflows/repository-dependabot-docker.yml | 2 +- containers/jml-extract-lambda/CHANGELOG.md | 7 +++++++ containers/jml-extract-lambda/Dockerfile | 2 +- containers/jml-extract-lambda/config.json | 2 +- .../jml-extract-lambda/src/var/task/requirements.txt | 8 ++++---- 6 files changed, 15 insertions(+), 7 deletions(-) diff --git a/.github/.trivyignore.yaml b/.github/.trivyignore.yaml index 462a6fd5c3..1f89da3cfd 100644 --- a/.github/.trivyignore.yaml +++ b/.github/.trivyignore.yaml @@ -2,4 +2,5 @@ misconfigurations: - id: AVD-DS-0002 paths: - "containers/daap-*/Dockerfile" + - "containers/jml-extract-lambda/Dockerfile" statement: Regardless of what is specified in the Dockerfile, AWS lambda will run the function as a non-root user. See https://github.com/aws/aws-lambda-dotnet/discussions/1301 diff --git a/.github/workflows/repository-dependabot-docker.yml b/.github/workflows/repository-dependabot-docker.yml index a21d743990..4407c0877d 100644 --- a/.github/workflows/repository-dependabot-docker.yml +++ b/.github/workflows/repository-dependabot-docker.yml @@ -48,7 +48,7 @@ jobs: script: | const owner = context.repo.owner; const repo = context.repo.repo; - issue_number: context.issue.number, + const issue_number = context.issue.number; await github.rest.issues.createComment({ owner: owner, diff --git a/containers/jml-extract-lambda/CHANGELOG.md b/containers/jml-extract-lambda/CHANGELOG.md index f70ac5daa1..116db0826a 100644 --- a/containers/jml-extract-lambda/CHANGELOG.md +++ b/containers/jml-extract-lambda/CHANGELOG.md @@ -9,6 +9,13 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +## [1.1.0] - 2024-02-12 + +### Changed + +- Dependabots: Updates to `boto`, `botocore`, `pandas` and `awswrangler`. +Additional bump to the Python image. + ## [1.0.3] - 2024-01-31 ### Changed diff --git a/containers/jml-extract-lambda/Dockerfile b/containers/jml-extract-lambda/Dockerfile index 72674b85e2..fb9eb031a1 100644 --- a/containers/jml-extract-lambda/Dockerfile +++ b/containers/jml-extract-lambda/Dockerfile @@ -1,4 +1,4 @@ -FROM public.ecr.aws/lambda/python:3.11 +FROM public.ecr.aws/lambda/python:3.12 ARG VERSION diff --git a/containers/jml-extract-lambda/config.json b/containers/jml-extract-lambda/config.json index d795d1f74c..942322934e 100644 --- a/containers/jml-extract-lambda/config.json +++ b/containers/jml-extract-lambda/config.json @@ -1,6 +1,6 @@ { "name": "jml-extract-lambda", - "version": "1.0.3", + "version": "1.1.0", "registry": "ecr", "ecr": { "role": "arn:aws:iam::013433889002:role/modernisation-platform-oidc-cicd", diff --git a/containers/jml-extract-lambda/src/var/task/requirements.txt b/containers/jml-extract-lambda/src/var/task/requirements.txt index 1eef869111..d5695c3954 100644 --- a/containers/jml-extract-lambda/src/var/task/requirements.txt +++ b/containers/jml-extract-lambda/src/var/task/requirements.txt @@ -1,6 +1,6 @@ -awswrangler==3.5.1 -boto3==1.34.19 -botocore==1.34.19 -pandas==2.1.4 +awswrangler==3.5.2 +boto3==1.34.39 +botocore==1.34.39 +pandas==2.2.0 notifications-python-client==9.0.0 openpyxl==3.1.2