chore(deps): update sonarqube support dependencies (#103)

renovate[bot] · web-flow · commit ee1c4484f636 · 2024-07-30T17:27:50.000-06:00
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [defenseunicorns/zarf](https://togithub.com/defenseunicorns/zarf) | | minor | `v0.36.1` -> `v0.37.0` | | [github/codeql-action](https://togithub.com/github/codeql-action) | action | patch | `v3.25.14` -> `v3.25.15` | | [ossf/scorecard-action](https://togithub.com/ossf/scorecard-action) | action | minor | `v2.3.3` -> `v2.4.0` | | [python-jsonschema/check-jsonschema](https://togithub.com/python-jsonschema/check-jsonschema) | repository | patch | `0.29.0` -> `0.29.1` | | [renovatebot/pre-commit-hooks](https://togithub.com/renovatebot/pre-commit-hooks) | repository | minor | `38.5.0` -> `38.13.0` | Note: The `pre-commit` manager in Renovate is not supported by the `pre-commit` maintainers or community. Please do not report any problems there, instead [create a Discussion in the Renovate repository](https://togithub.com/renovatebot/renovate/discussions/new) if you have any questions. --- ### Release Notes <details> <summary>defenseunicorns/zarf (defenseunicorns/zarf)</summary> ### [`v0.37.0`](https://togithub.com/zarf-dev/zarf/releases/tag/v0.37.0) [Compare Source](https://togithub.com/defenseunicorns/zarf/compare/v0.36.1...v0.37.0) #### What's Changed - chore: update s3 injector by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2730](https://togithub.com/zarf-dev/zarf/pull/2730) - docs: fix codeowners file by [@&#8203;salaxander](https://togithub.com/salaxander) in [https://github.com/zarf-dev/zarf/pull/2736](https://togithub.com/zarf-dev/zarf/pull/2736) - refactor: rename image references by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2733](https://togithub.com/zarf-dev/zarf/pull/2733) - chore: move public test repo by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2739](https://togithub.com/zarf-dev/zarf/pull/2739) - fix: update README.md by [@&#8203;schristoff-du](https://togithub.com/schristoff-du) in [https://github.com/zarf-dev/zarf/pull/2729](https://togithub.com/zarf-dev/zarf/pull/2729) - docs: update to openssf code of conduct by [@&#8203;salaxander](https://togithub.com/salaxander) in [https://github.com/zarf-dev/zarf/pull/2734](https://togithub.com/zarf-dev/zarf/pull/2734) - chore: update project name references by [@&#8203;lucasrod16](https://togithub.com/lucasrod16) in [https://github.com/zarf-dev/zarf/pull/2741](https://togithub.com/zarf-dev/zarf/pull/2741) - chore: move context.TODO to context.Background() by [@&#8203;schristoff](https://togithub.com/schristoff) in [https://github.com/zarf-dev/zarf/pull/2742](https://togithub.com/zarf-dev/zarf/pull/2742) - docs: charter update by [@&#8203;KennyPaul](https://togithub.com/KennyPaul) in [https://github.com/zarf-dev/zarf/pull/2731](https://togithub.com/zarf-dev/zarf/pull/2731) - chore: update CODEOWNERS to protect TSC files by [@&#8203;schristoff](https://togithub.com/schristoff) in [https://github.com/zarf-dev/zarf/pull/2744](https://togithub.com/zarf-dev/zarf/pull/2744) - fix: replace debug logs with returning errors by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2719](https://togithub.com/zarf-dev/zarf/pull/2719) - fix: data injection to return errors by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2720](https://togithub.com/zarf-dev/zarf/pull/2720) - feat: revert "feat: remove .metadata.image from schema ([#&#8203;2606](https://togithub.com/defenseunicorns/zarf/issues/2606))" by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2618](https://togithub.com/zarf-dev/zarf/pull/2618) - chore: update permissions for eks & ecr nightly tests by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2745](https://togithub.com/zarf-dev/zarf/pull/2745) - refactor: move setup CLI to only run once in root command by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2722](https://togithub.com/zarf-dev/zarf/pull/2722) - chore: move context.TODO to context.Background() (3) by [@&#8203;schristoff](https://togithub.com/schristoff) in [https://github.com/zarf-dev/zarf/pull/2747](https://togithub.com/zarf-dev/zarf/pull/2747) - fix(deps): update github.com/anchore/clio digest to [`ac88e09`](https://togithub.com/defenseunicorns/zarf/commit/ac88e09) by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/zarf-dev/zarf/pull/2527](https://togithub.com/zarf-dev/zarf/pull/2527) - refactor: add error handling to view SBOM files by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2752](https://togithub.com/zarf-dev/zarf/pull/2752) - feat: annotate image mutation by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2755](https://togithub.com/zarf-dev/zarf/pull/2755) - chore: move context.TODO to context.Background() (2) by [@&#8203;schristoff](https://togithub.com/schristoff) in [https://github.com/zarf-dev/zarf/pull/2746](https://togithub.com/zarf-dev/zarf/pull/2746) - docs: update repo name across docs by [@&#8203;salaxander](https://togithub.com/salaxander) in [https://github.com/zarf-dev/zarf/pull/2735](https://togithub.com/zarf-dev/zarf/pull/2735) - fix: add whitespace linter and fix all warnings by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2764](https://togithub.com/zarf-dev/zarf/pull/2764) - chore: move context.TODO to context.Background() (5) by [@&#8203;schristoff](https://togithub.com/schristoff) in [https://github.com/zarf-dev/zarf/pull/2750](https://togithub.com/zarf-dev/zarf/pull/2750) - feat: run schema validation on create by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2585](https://togithub.com/zarf-dev/zarf/pull/2585) - refactor: remove overly verbose debug logs by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2751](https://togithub.com/zarf-dev/zarf/pull/2751) - ci: improve nightly eks test by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2759](https://togithub.com/zarf-dev/zarf/pull/2759) - chore: logging ADR by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2588](https://togithub.com/zarf-dev/zarf/pull/2588) - test: decrease reliance on dockerhub by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2766](https://togithub.com/zarf-dev/zarf/pull/2766) - refactor: replace warning logs with returning errors by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2762](https://togithub.com/zarf-dev/zarf/pull/2762) - fix: type assertion error checking and enforce linter by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2770](https://togithub.com/zarf-dev/zarf/pull/2770) - chore: fix string formatting for several debug statements by [@&#8203;YrrepNoj](https://togithub.com/YrrepNoj) in [https://github.com/zarf-dev/zarf/pull/2769](https://togithub.com/zarf-dev/zarf/pull/2769) - chore: stop releasing to s3 by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2774](https://togithub.com/zarf-dev/zarf/pull/2774) - fix: error formatting and comparison and enable errorlint by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2771](https://togithub.com/zarf-dev/zarf/pull/2771) - fix(deps): update module github.com/fluxcd/helm-controller/api to v1 by [@&#8203;renovate](https://togithub.com/renovate) in [https://github.com/zarf-dev/zarf/pull/2487](https://togithub.com/zarf-dev/zarf/pull/2487) - refactor: load state to return error if loading fails by [@&#8203;phillebaba](https://togithub.com/phillebaba) in [https://github.com/zarf-dev/zarf/pull/2763](https://togithub.com/zarf-dev/zarf/pull/2763) - fix: zarf dev instead of zerf-dev by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2779](https://togithub.com/zarf-dev/zarf/pull/2779) - fix: goreleaser by [@&#8203;AustinAbro321](https://togithub.com/AustinAbro321) in [https://github.com/zarf-dev/zarf/pull/2782](https://togithub.com/zarf-dev/zarf/pull/2782) #### New Contributors - [@&#8203;KennyPaul](https://togithub.com/KennyPaul) made their first contribution in [https://github.com/zarf-dev/zarf/pull/2731](https://togithub.com/zarf-dev/zarf/pull/2731) **Full Changelog**: zarf-dev/zarf@v0.36.1...v0.37.0 </details> <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v3.25.15`](https://togithub.com/github/codeql-action/compare/v3.25.14...v3.25.15) [Compare Source](https://togithub.com/github/codeql-action/compare/v3.25.14...v3.25.15) </details> <details> <summary>ossf/scorecard-action (ossf/scorecard-action)</summary> ### [`v2.4.0`](https://togithub.com/ossf/scorecard-action/releases/tag/v2.4.0) [Compare Source](https://togithub.com/ossf/scorecard-action/compare/v2.3.3...v2.4.0) #### What's Changed This update bumps the Scorecard version to the v5 release. For a complete list of changes, please refer to the [v5.0.0 release notes](https://togithub.com/ossf/scorecard/releases/tag/v5.0.0). Of special note to Scorecard Action is the Maintainer Annotation feature, which can be used to suppress some Code Scanning false positives. Alerts will not be generated for any Scorecard Check with an annotation. - 🌱 Bump github.com/ossf/scorecard/v5 from v5.0.0-rc2 to v5.0.0 by [@&#8203;spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1410](https://togithub.com/ossf/scorecard-action/pull/1410) - 🐛 lower license sarif alert threshold to 9 by [@&#8203;spencerschrock](https://togithub.com/spencerschrock) in [https://github.com/ossf/scorecard-action/pull/1411](https://togithub.com/ossf/scorecard-action/pull/1411) ##### Documentation - docs: dogfooding badge by [@&#8203;jkowalleck](https://togithub.com/jkowalleck) in [https://github.com/ossf/scorecard-action/pull/1399](https://togithub.com/ossf/scorecard-action/pull/1399) #### New Contributors - [@&#8203;jkowalleck](https://togithub.com/jkowalleck) made their first contribution in [https://github.com/ossf/scorecard-action/pull/1399](https://togithub.com/ossf/scorecard-action/pull/1399) **Full Changelog**: ossf/scorecard-action@v2.3.3...v2.4.0 </details> <details> <summary>python-jsonschema/check-jsonschema (python-jsonschema/check-jsonschema)</summary> ### [`v0.29.1`](https://togithub.com/python-jsonschema/check-jsonschema/blob/HEAD/CHANGELOG.rst#0291) [Compare Source](https://togithub.com/python-jsonschema/check-jsonschema/compare/0.29.0...0.29.1) - Update vendored schemas: circle-ci, dependabot, gitlab-ci, renovate, woodpecker-ci (2024-07-21) - Fix a bug which could result in local file URI resolution failing on non-Windows platforms in certain cases. Thanks :user:`bukzor`! (:pr:`465`) - Fix caching behaviors to ensure that caches are correctly preserved across instancefiles during `--schemafile` evaluation. This also fixes a bug in the remote `$ref` cache. Thanks :user:`alex1701c` for reporting! (:issue:`463`, :pr:`466`) </details> <details> <summary>renovatebot/pre-commit-hooks (renovatebot/pre-commit-hooks)</summary> ### [`v38.13.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.13.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.12.0...38.13.0) See https://github.com/renovatebot/renovate/releases/tag/38.13.0 for more changes ### [`v38.12.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.12.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.11.1...38.12.0) See https://github.com/renovatebot/renovate/releases/tag/38.12.0 for more changes ### [`v38.11.1`](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.11.0...38.11.1) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.11.0...38.11.1) ### [`v38.11.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.11.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.10.0...38.11.0) See https://github.com/renovatebot/renovate/releases/tag/38.11.0 for more changes ### [`v38.10.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.10.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.9.3...38.10.0) See https://github.com/renovatebot/renovate/releases/tag/38.10.0 for more changes ### [`v38.9.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.9.3) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.9.0...38.9.3) See https://github.com/renovatebot/renovate/releases/tag/38.9.3 for more changes ### [`v38.9.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.9.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.8.5...38.9.0) See https://github.com/renovatebot/renovate/releases/tag/38.9.0 for more changes ### [`v38.8.5`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.8.5) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.8.4...38.8.5) See https://github.com/renovatebot/renovate/releases/tag/38.8.5 for more changes ### [`v38.8.4`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.8.4) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.8.3...38.8.4) See https://github.com/renovatebot/renovate/releases/tag/38.8.4 for more changes ### [`v38.8.3`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.8.3) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.8.2...38.8.3) See https://github.com/renovatebot/renovate/releases/tag/38.8.3 for more changes ### [`v38.8.2`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.8.2) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.8.1...38.8.2) See https://github.com/renovatebot/renovate/releases/tag/38.8.2 for more changes ### [`v38.8.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.8.1) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.8.0...38.8.1) See https://github.com/renovatebot/renovate/releases/tag/38.8.1 for more changes ### [`v38.8.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.8.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.7.1...38.8.0) See https://github.com/renovatebot/renovate/releases/tag/38.8.0 for more changes ### [`v38.7.1`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.7.1) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.7.0...38.7.1) See https://github.com/renovatebot/renovate/releases/tag/38.7.1 for more changes ### [`v38.7.0`](https://togithub.com/renovatebot/pre-commit-hooks/releases/tag/38.7.0) [Compare Source](https://togithub.com/renovatebot/pre-commit-hooks/compare/38.5.0...38.7.0) See https://github.com/renovatebot/renovate/releases/tag/38.7.0 for more changes </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [x] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View the [repository job log](https://developer.mend.io/github/defenseunicorns/uds-package-sonarqube).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
diff --git a/.github/workflows/scorecard.yaml b/.github/workflows/scorecard.yaml
@@ -27,7 +27,7 @@ jobs:
           persist-credentials: false
 
       - name: "Run analysis"
-        uses: ossf/scorecard-action@dc50aa9510b46c811795eb24b2f1ba02a914e534 # v2.3.3
+        uses: ossf/scorecard-action@62b2cac7ed8198b15735ed49ab1e5cf35480ba46 # v2.4.0
         with:
           results_file: results.sarif
           results_format: sarif
@@ -45,6 +45,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@5cf07d8b700b67e235fbb65cbc84f69c0cf10464 # v3.25.14
+        uses: github/codeql-action/upload-sarif@afb54ba388a7dca6ecae48f608c4ff05ff4cc77a # v3.25.15
         with:
           sarif_file: results.sarif
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
@@ -31,7 +31,7 @@ repos:
     hooks:
       - id: fix-smartquotes
   - repo: https://github.com/python-jsonschema/check-jsonschema
-    rev: 0.29.0
+    rev: 0.29.1
     hooks:
       - id: check-jsonschema
         name: "Validate Zarf Configs Against Schema"
@@ -40,14 +40,14 @@ repos:
         args:
           [
             "--schemafile",
-            "https://raw.githubusercontent.com/defenseunicorns/zarf/v0.36.1/zarf.schema.json",
+            "https://raw.githubusercontent.com/defenseunicorns/zarf/v0.37.0/zarf.schema.json",
             "--no-cache"
           ]
   - repo: https://github.com/golangci/golangci-lint
     rev: v1.59.1
     hooks:
       - id: golangci-lint
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 38.5.0
+    rev: 38.13.0
     hooks:
       - id: renovate-config-validator
