Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency hashicorp/terraform to v1.9.7 #7480

Merged
merged 1 commit into from
Oct 3, 2024

Conversation

uniget-bot
Copy link

This PR contains the following updates:

Package Update Change
hashicorp/terraform patch 1.9.6 -> 1.9.7

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

hashicorp/terraform (hashicorp/terraform)

v1.9.7

Compare Source

1.9.7 (October 2, 2024)

BUG FIXES:

  • config generation: escape map keys with whitespaces (#​35754)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Copy link

@nicholasdille-bot nicholasdille-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved because label type/renovate is present.

Copy link

github-actions bot commented Oct 3, 2024

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/terraform:1.9.7

📦 Image Reference ghcr.io/uniget-org/tools/terraform:1.9.7
digestsha256:7e12f20c0d3f1fa91351e0e7c1560f8325424d2b3d73e4a84d23fd706afeb436
vulnerabilitiescritical: 0 high: 0 medium: 1 low: 1
platformlinux/amd64
size27 MB
packages219
critical: 0 high: 0 medium: 1 low: 1 github.com/aws/aws-sdk-go 1.44.122 (golang)

pkg:golang/github.com/aws/[email protected]

medium : CVE--2020--8911

Affected range>=0
Fixed versionNot Fixed
Description

The Go AWS S3 Crypto SDK contains vulnerabilities that can permit an attacker with write access to a bucket to decrypt files in that bucket.

Files encrypted by the V1 EncryptionClient using either the AES-CBC content cipher or the KMS key wrap algorithm are vulnerable. Users should migrate to the V1 EncryptionClientV2 API, which will not create vulnerable files. Old files will remain vulnerable until re-encrypted with the new client.

low : CVE--2020--8912

Affected range>=0
Fixed versionNot Fixed
Description

The Go AWS S3 Crypto SDK contains vulnerabilities that can permit an attacker with write access to a bucket to decrypt files in that bucket.

Files encrypted by the V1 EncryptionClient using either the AES-CBC content cipher or the KMS key wrap algorithm are vulnerable. Users should migrate to the V1 EncryptionClientV2 API, which will not create vulnerable files. Old files will remain vulnerable until re-encrypted with the new client.

Copy link

github-actions bot commented Oct 3, 2024

Copy link

github-actions bot commented Oct 3, 2024

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/11154546560.

@github-actions github-actions bot merged commit 8fe43c1 into main Oct 3, 2024
9 of 10 checks passed
@github-actions github-actions bot deleted the renovate/hashicorp-terraform-1.9.x branch October 3, 2024 01:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants