chore(deps): update stable

[renovate]

This PR contains the following updates:

Package	Update	Change
awscli	patch	2.15.27 -> 2.15.28
checkov	patch	3.2.34 -> 3.2.36
defenseunicorns/zarf	patch	0.32.4 -> 0.32.5
https://github.com/bridgecrewio/checkov.git	patch	3.2.34 -> 3.2.36

---

Release Notes

aws/aws-cli (awscli)

v2.15.28

Compare Source

bridgecrewio/checkov (checkov)

v3.2.36

Compare Source

v3.2.35

Compare Source

Feature

• general: add policy name and guidelines to CSV output - #​6082

Bug Fix

• sast: add attribute verification - #​6078

defenseunicorns/zarf (defenseunicorns/zarf)

v0.32.5

Compare Source

[0.32.5] - 2024-03-11

trying out some different release note generators, formatting may vary for a few releases while we figure out what works best ~@​Noxsios

🚀 Features

• feat: add missing vendored tool version commands by @​eddiezane in #​2232
• feat: add --why flag for zarf dev find-images by @​waveywaves in #​2309
• feat: set variables on find images by @​AustinAbro321 in #​2282
• feat: add configurable backoff and retries for Zarf operations by @​Racer159 in #​2345

🐛 Bug Fixes

• (deps): update github.com/anchore/clio digest to abcb719 by @​renovate[bot] in #​2347
• (ci): change ECR image to docker.io image by @​AustinAbro321 in #​2353
• fix: added OCI Image Index mediaType by @​mdaizcorbe in #​2352
• fix: package publish progress bar frozen at zero by @​Noxsios in #​2367
• (release) hotfix publish not respecting source package architecture by @​Noxsios in #​2376

📚 Documentation

• chore: fix spelling by @​AustinAbro321 in #​2333
• docs: formatting and grammar by @​beholdenkey in #​2350

⚙️ Miscellaneous Tasks

• chore: sorted go imports by @​naveensrinivasan in #​2349
• chore: fix bb test by @​AustinAbro321 in #​2340
• chore: update CODEOWNERS with @​AustinAbro321 by @​Racer159 in #​2354
• chore: refactor and purify the OCI library within Zarf by @​AustinAbro321 in #​2235
• chore: default to temp zarf cache in e2e tests by @​AustinAbro321 in #​2355

🛡️ Security

• chore: configure agent server to avoid slowloris attack by @​naveensrinivasan in #​2342
• chore: fix implicit memory aliasing in for loop by @​naveensrinivasan in #​2341
• (release): update release workflow to use token from gh app by @​Noxsios in #​2368
• (release): use release environment secrets by @​Noxsios in #​2374

First Time Contributors

• @​eddiezane made their first contribution in #​2232
• @​beholdenkey made their first contribution in #​2350
• @​mdaizcorbe made their first contribution in #​2352

Full Changelog: defenseunicorns/zarf@v0.32.4...v0.32.5

---

Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Never, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.