chore(deps): update patch-grouped

.github/actions/rosa-create-cluster/README.md

@@ -18,7 +18,7 @@ The kube context will be set on the created cluster.
 | `aws-region` | <p>AWS region where the ROSA cluster will be deployed</p> | `true` | `""` |
 | `rosa-cli-version` | <p>Version of the ROSA CLI to use</p> | `true` | `latest` |
 | `awscli-version` | <p>Version of the aws cli to use</p> | `true` | `2.15.52` |
-| `openshift-version` | <p>Version of the OpenShift to install</p> | `true` | `4.16.13` |
+| `openshift-version` | <p>Version of the OpenShift to install</p> | `true` | `4.16.14` |
 | `replicas` | <p>Number of replicas for the ROSA cluster</p> | `true` | `2` |
 | `s3-backend-bucket` | <p>Name of the S3 bucket to store Terraform state</p> | `true` | `""` |
 | `s3-bucket-region` | <p>Region of the bucket containing the resources states, if not set, will fallback on aws-region</p> | `false` | `""` |
@@ -95,7 +95,7 @@ This action is a `composite` action.
     # Version of the OpenShift to install
     #
     # Required: true
-    # Default: 4.16.13
+    # Default: 4.16.14
 
     replicas:
     # Number of replicas for the ROSA cluster

.github/actions/rosa-create-cluster/action.yml

@@ -36,7 +36,7 @@ inputs:
         description: Version of the OpenShift to install
         required: true
         # renovate: datasource=custom.rosa-camunda depName=red-hat-openshift versioning=semver
-        default: 4.16.13
+        default: 4.16.14
     replicas:
         description: Number of replicas for the ROSA cluster
         required: true

.github/workflows/artifact-rosa-versions.yml

@@ -60,7 +60,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@fd70dca436c5764e6e90fa6613e7f0adebb83b6d # main
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@7e7ae626961c7766d7612620374b7c4944f420db # main
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}

.github/workflows/daily-cleanup.yml

@@ -93,7 +93,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule' && steps.retry_delete_clusters.outcome == 'failure'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@fd70dca436c5764e6e90fa6613e7f0adebb83b6d # main
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@7e7ae626961c7766d7612620374b7c4944f420db # main
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}

.github/workflows/labeler.yml

@@ -20,7 +20,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@fd70dca436c5764e6e90fa6613e7f0adebb83b6d # main
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@7e7ae626961c7766d7612620374b7c4944f420db # main
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}

.github/workflows/links.yml

@@ -46,7 +46,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@fd70dca436c5764e6e90fa6613e7f0adebb83b6d # main
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@7e7ae626961c7766d7612620374b7c4944f420db # main
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}

.github/workflows/lint.yml

@@ -9,5 +9,5 @@ on:
 
 jobs:
     lint:
-        uses: camunda/infraex-common-config/.github/workflows/lint-global.yml@102b2d46c2c3961ee04eb78fcf00f150d938422e # 1.2.2
+        uses: camunda/infraex-common-config/.github/workflows/lint-global.yml@7e7ae626961c7766d7612620374b7c4944f420db # 1.2.3
         secrets: inherit

.github/workflows/tests.yml

@@ -126,7 +126,7 @@ jobs:
             - name: Notify in Slack in case of failure
               id: slack-notification
               if: failure() && github.event_name == 'schedule'
-              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@fd70dca436c5764e6e90fa6613e7f0adebb83b6d # main
+              uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@7e7ae626961c7766d7612620374b7c4944f420db # main
               with:
                   vault_addr: ${{ secrets.VAULT_ADDR }}
                   vault_role_id: ${{ secrets.VAULT_ROLE_ID }}

.pre-commit-config.yaml

@@ -4,7 +4,7 @@
 repos:
 
     - repo: https://github.com/camunda/infraex-common-config
-      rev: 1.2.2 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
+      rev: 1.2.3 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
       hooks:
           - id: update-action-readmes-docker
 

.tool-versions

@@ -5,16 +5,16 @@
 
 awscli 2.17.61
 
-golang 1.23.1
+golang 1.23.2
 
 just 1.35.0
 
 pre-commit 3.8.0
 
-terraform 1.9.6
+terraform 1.9.7
 
 terraform-docs 0.19.0
 
 tflint 0.53.0
 
-tfsec 1.28.10
+tfsec 1.28.11

modules/rosa-hcp/README.md

@@ -25,7 +25,7 @@
 | <a name="input_htpasswd_username"></a> [htpasswd\_username](#input\_htpasswd\_username) | htpasswd username | `string` | `"kubeadmin"` | no |
 | <a name="input_machine_cidr_block"></a> [machine\_cidr\_block](#input\_machine\_cidr\_block) | value of the CIDR block to use for the machine | `string` | `"10.0.0.0/18"` | no |
 | <a name="input_offline_access_token"></a> [offline\_access\_token](#input\_offline\_access\_token) | The Red Hat OCM API access token for your account | `string` | n/a | yes |
-| <a name="input_openshift_version"></a> [openshift\_version](#input\_openshift\_version) | The version of ROSA to be deployed | `string` | `"4.16.13"` | no |
+| <a name="input_openshift_version"></a> [openshift\_version](#input\_openshift\_version) | The version of ROSA to be deployed | `string` | `"4.16.14"` | no |
 | <a name="input_pod_cidr_block"></a> [pod\_cidr\_block](#input\_pod\_cidr\_block) | value of the CIDR block to use for the pods | `string` | `"10.0.64.0/18"` | no |
 | <a name="input_replicas"></a> [replicas](#input\_replicas) | The number of computer nodes to create. Must be a minimum of 2 for a single-AZ cluster, 3 for multi-AZ. | `string` | `"2"` | no |
 | <a name="input_service_cidr_block"></a> [service\_cidr\_block](#input\_service\_cidr\_block) | value of the CIDR block to use for the services | `string` | `"10.0.128.0/18"` | no |

modules/rosa-hcp/vars.tf

@@ -9,7 +9,7 @@ variable "openshift_version" {
   type        = string
   description = "The version of ROSA to be deployed"
   # renovate: datasource=custom.rosa-camunda depName=red-hat-openshift versioning=semver
-  default = "4.16.13"
+  default = "4.16.14"
   validation {
     condition     = can(regex("^[0-9]*[0-9]+.[0-9]*[0-9]+.[0-9]*[0-9]+$", var.openshift_version))
     error_message = "openshift_version must be with structure <major>.<minor>.<patch> (for example 4.13.6)."