Dependency updates for Nov/Dec 2024 (#3435)

* Bump actions/dependency-review-action from 4.3.4 to 4.5.0 * Bump actions/setup-node from 4.0.4 to 4.1.0 * Bump actions/setup-python from 5.2.0 to 5.3.0 * Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 * Bump sillsdev/FieldWorks * Bump mongo from 7.0.14-jammy to mongo:7.0.15-jammy in /database * Bump dotnet/sdk from 8.0.402-jammy to 8.0.404-jammy in /Backend * Bump dotnet/aspnet from 8.0.8-jammy to 8.0.11-jammy in /Backend * Bump OpenTelemetry.Exporter.Console from 1.8.1 to 1.10.0 in /Backend * Bump OpenTelemetry.Exporter.OpenTelemetryProtocol from 1.8.1 to 1.10.0 in /Backend * Bump OpenTelemetry.Extensions.Hosting from 1.8.1 to 1.10.0 in /Backend * Bump OpenTelemetry.Instrumentation.AspNetCore from 1.8.1 to 1.10.0 in /Backend * Bump Swashbuckle.AspNetCore from 6.8.1 to 6.9.0 in /Backend * Bump cookie from 0.6.0 to 0.7.1 * Bump express from 4.21.0 to 4.21.1 * Bump @types/jest from 29.5.12 to 29.5.14 * Bump eslint-plugin-import from 2.29.1 to 2.31.0 * Bump node from 20.17.0-bookworm-slim to 20.18.1-bookworm-slim * Bump node version in package.json to 20.17 (@types/node not available for 20.18 yet) * Bump python from 3.12.5-slim-bookworm to 3.12.7-slim-bookworm * Update all python dependencies * Update license reports --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
sillsdev · Dec 10, 2024 · 0ea1184 · 0ea1184
1 parent 1fed334
commit 0ea1184
Show file tree

Hide file tree

Showing 17 changed files with 172 additions and 161 deletions.
diff --git a/.github/workflows/combine_deploy_image.yml b/.github/workflows/combine_deploy_image.yml
@@ -40,7 +40,7 @@ jobs:
       - name: Set up QEMU
         uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
+        uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
         with:

diff --git a/.github/workflows/commit_message_check.yml b/.github/workflows/commit_message_check.yml
@@ -10,4 +10,4 @@ permissions: # added using https://github.com/step-security/secure-workflows
 
 jobs:
   commit-message-lint:
-    uses: sillsdev/FieldWorks/.github/workflows/CommitMessage.yml@ba50e637df9593a2a972b29bf670226e89c0a21b
+    uses: sillsdev/FieldWorks/.github/workflows/CommitMessage.yml@22859ef68af99ffbd016eca4e503278db8007913
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
@@ -24,4 +24,4 @@ jobs:
       - name: "Checkout Repository"
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: "Dependency Review"
-        uses: actions/dependency-review-action@5a2ce3f5b92ee19cbb1541a4984c76d921601d7c # v4.3.4
+        uses: actions/dependency-review-action@3b139cfc5fae8b618d3eae3675e383bb1769c019 # v4.5.0
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci
@@ -60,7 +60,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
+        uses: actions/setup-node@39370e3970a6d050c480ffad4ff0ed4d3fdee5af # v4.1.0
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci

diff --git a/.github/workflows/pages.yml b/.github/workflows/pages.yml
@@ -26,7 +26,7 @@ jobs:
             github.com:443
             pypi.org:443
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
-      - uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+      - uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: 3.12
       - name: Install dependencies

diff --git a/.github/workflows/python.yml b/.github/workflows/python.yml
@@ -30,7 +30,7 @@ jobs:
             pypi.org:443
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Set up Python ${{ matrix.python-version }}
-        uses: actions/setup-python@f677139bbe7f9c59b41e40162b753c062f5d49a3 # v5.2.0
+        uses: actions/setup-python@0b93645e9fea7318ecaed2b359559ac225c90a2b # v5.3.0
         with:
           python-version: ${{ matrix.python-version }}
       - name: Install dependencies

diff --git a/Backend/BackendFramework.csproj b/Backend/BackendFramework.csproj
@@ -11,10 +11,10 @@
   </PropertyGroup>
   <ItemGroup>
     <PackageReference Include="Microsoft.Extensions.Caching.Memory" Version="8.0.1" />
-    <PackageReference Include="OpenTelemetry.Exporter.Console" Version="1.8.1" />
-    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.8.1" />
-    <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.8.1" />
-    <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.8.1" />
+    <PackageReference Include="OpenTelemetry.Exporter.Console" Version="1.10.0" />
+    <PackageReference Include="OpenTelemetry.Exporter.OpenTelemetryProtocol" Version="1.10.0" />
+    <PackageReference Include="OpenTelemetry.Extensions.Hosting" Version="1.10.0" />
+    <PackageReference Include="OpenTelemetry.Instrumentation.AspNetCore" Version="1.9.0" />
     <PackageReference Include="OpenTelemetry.Instrumentation.Http" Version="1.8.1" />
     <PackageReference Include="RelaxNG" Version="3.2.3">
       <NoWarn>NU1701</NoWarn>
@@ -24,7 +24,7 @@
     <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="7.5.1" />
     <PackageReference Include="MailKit" Version="4.8.0" />
     <PackageReference Include="MongoDB.Driver" Version="2.29.0" />
-    <PackageReference Include="Swashbuckle.AspNetCore" Version="6.8.1" />
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="6.9.0" />
     <PackageReference Include="Xabe.FFmpeg" Version="5.2.6"/>
 
     <!-- SIL Maintained Dependencies. -->

diff --git a/Backend/Dockerfile b/Backend/Dockerfile
@@ -7,7 +7,7 @@
 ############################################################
 
 # Docker multi-stage build
-FROM mcr.microsoft.com/dotnet/sdk:8.0.402-jammy AS builder
+FROM mcr.microsoft.com/dotnet/sdk:8.0.404-jammy AS builder
 WORKDIR /app
 
 # Copy csproj and restore (fetch dependencies) as distinct layers.
@@ -19,7 +19,7 @@ COPY . ./
 RUN dotnet publish -c Release -o build
 
 # Build runtime image.
-FROM mcr.microsoft.com/dotnet/aspnet:8.0.8-jammy
+FROM mcr.microsoft.com/dotnet/aspnet:8.0.11-jammy
 
 ENV ASPNETCORE_URLS=http://+:5000
 ENV COMBINE_IS_IN_CONTAINER=1
@@ -43,9 +43,9 @@ RUN mkdir -p $HOME
 # Setup app user and group to known UID/GID; no login.
 RUN groupmod --gid 999 app
 RUN usermod  --uid 999 --gid app \
-      --shell /sbin/nologin \
-      --comment "Docker image user" \
-      app
+  --shell /sbin/nologin \
+  --comment "Docker image user" \
+  app
 
 ## Set up application install directory.
 RUN mkdir $APP_HOME && \

diff --git a/Dockerfile b/Dockerfile
@@ -7,7 +7,7 @@
 ############################################################
 
 # User guide build environment
-FROM python:3.12.5-slim-bookworm AS user_guide_builder
+FROM python:3.12.7-slim-bookworm AS user_guide_builder
 
 ENV PYTHONDONTWRITEBYTECODE=1
 ENV PYTHONUNBUFFERED=1
@@ -24,7 +24,7 @@ COPY docs/user_guide docs/user_guide
 RUN tox -e user-guide
 
 # Frontend build environment.
-FROM node:20.17.0-bookworm-slim AS frontend_builder
+FROM node:20.18.1-bookworm-slim AS frontend_builder
 WORKDIR /app
 
 # Install app dependencies.

diff --git a/database/Dockerfile b/database/Dockerfile
@@ -5,7 +5,7 @@
 #   - Intel/AMD 64-bit
 #   - ARM 64-bit
 ############################################################
-FROM mongo:7.0.14-jammy
+FROM mongo:7.0.15-jammy
 
 WORKDIR /
 

diff --git a/deploy/requirements.txt b/deploy/requirements.txt
@@ -4,9 +4,9 @@
 #
 #    pip-compile requirements.in
 #
-ansible==10.4.0
+ansible==11.1.0
     # via -r requirements.in
-ansible-core==2.17.4
+ansible-core==2.18.1
     # via ansible
 cachetools==5.5.0
     # via google-auth
@@ -16,17 +16,17 @@ certifi==2024.8.30
     #   requests
 cffi==1.17.1
     # via cryptography
-charset-normalizer==3.3.2
+charset-normalizer==3.4.0
     # via requests
-cryptography==43.0.1
+cryptography==44.0.0
     # via
     #   ansible-core
     #   pyopenssl
-durationpy==0.8
+durationpy==0.9
     # via kubernetes
-google-auth==2.34.0
+google-auth==2.36.0
     # via kubernetes
-idna==3.8
+idna==3.10
     # via requests
 jinja2==3.1.4
     # via
@@ -37,23 +37,23 @@ jinja2-base64-filters==0.1.4
     # via -r requirements.in
 kubernetes==31.0.0
     # via -r requirements.in
-markupsafe==2.1.5
+markupsafe==3.0.2
     # via jinja2
 oauthlib==3.2.2
     # via
     #   kubernetes
     #   requests-oauthlib
-packaging==24.1
+packaging==24.2
     # via ansible-core
-pyasn1==0.6.0
+pyasn1==0.6.1
     # via
     #   pyasn1-modules
     #   rsa
-pyasn1-modules==0.4.0
+pyasn1-modules==0.4.1
     # via google-auth
 pycparser==2.22
     # via cffi
-pyopenssl==24.2.1
+pyopenssl==24.3.0
     # via -r requirements.in
 python-dateutil==2.9.0.post0
     # via kubernetes
@@ -72,11 +72,11 @@ resolvelib==1.0.1
     # via ansible-core
 rsa==4.9
     # via google-auth
-six==1.16.0
+six==1.17.0
     # via
     #   kubernetes
     #   python-dateutil
-urllib3==2.2.2
+urllib3==2.2.3
     # via
     #   kubernetes
     #   requests