chore(deps): update all dependencies (#1002)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| actions/github-script | action | digest | `6f00a0b` -> `1f16022` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/actions%2fgithub-script/?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/actions%2fgithub-script/?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/actions%2fgithub-script//?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/actions%2fgithub-script//?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [boto3](https://togithub.com/boto/boto3) | | patch | `==1.28.57` ->
`==1.28.60` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.28.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/boto3/1.28.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/boto3/1.28.57/1.28.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.28.57/1.28.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [botocore](https://togithub.com/boto/botocore) | | patch | `==1.31.57`
-> `==1.31.60` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.31.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/botocore/1.31.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/botocore/1.31.57/1.31.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.31.57/1.31.60?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| checkmarx/kics | container | patch | `v1.7.8-debian` ->
`v1.7.9-debian` |
[![age](https://developer.mend.io/api/mc/badges/age/docker/checkmarx%2fkics/v1.7.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/docker/checkmarx%2fkics/v1.7.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/docker/checkmarx%2fkics/v1.7.8/v1.7.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/docker/checkmarx%2fkics/v1.7.8/v1.7.9?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[github.com/gruntwork-io/terratest](https://togithub.com/gruntwork-io/terratest)
| require | minor | `v0.44.0` -> `v0.45.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgruntwork-io%2fterratest/v0.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fgruntwork-io%2fterratest/v0.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fgruntwork-io%2fterratest/v0.44.0/v0.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgruntwork-io%2fterratest/v0.44.0/v0.45.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| google-github-actions/release-please-action | action | digest |
`4c5670f` -> `2921787` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/google-github-actions%2frelease-please-action/?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/google-github-actions%2frelease-please-action/?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/google-github-actions%2frelease-please-action//?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/google-github-actions%2frelease-please-action//?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| peter-evans/slash-command-dispatch | action | digest | `60f9e79` ->
`c5d899d` |
[![age](https://developer.mend.io/api/mc/badges/age/github-tags/peter-evans%2fslash-command-dispatch/?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/github-tags/peter-evans%2fslash-command-dispatch/?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/github-tags/peter-evans%2fslash-command-dispatch//?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/github-tags/peter-evans%2fslash-command-dispatch//?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>boto/boto3 (boto3)</summary>

###
[`v1.28.60`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12860)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.28.59...1.28.60)

\=======

- api-change:`appconfig`: \[`botocore`] AWS AppConfig introduces KMS
customer-managed key (CMK) encryption support for data saved to
AppConfig's hosted configuration store.
- api-change:`datazone`: \[`botocore`] Initial release of Amazon
DataZone
- api-change:`mediatailor`: \[`botocore`] Updates DescribeVodSource to
include a list of ad break opportunities in the response
- api-change:`mgn`: \[`botocore`] This release includes the following
new APIs: ListConnectors, CreateConnector, UpdateConnector,
DeleteConnector and UpdateSourceServer to support the source action
framework feature.
- api-change:`sagemaker`: \[`botocore`] Adding support for
AdditionalS3DataSource, a data source used for training or inference
that is in addition to the input dataset or model data.

###
[`v1.28.59`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12859)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.28.58...1.28.59)

\=======

- api-change:`connect`: \[`botocore`] GetMetricDataV2 API: Update to
include new metrics CONTACTS_RESOLVED_IN_X , AVG_HOLD_TIME_ALL_CONTACTS
, AVG_RESOLUTION_TIME , ABANDONMENT_RATE ,
AGENT_NON_RESPONSE_WITHOUT_CUSTOMER_ABANDONS with added features:
Interval Period, TimeZone, Negate MetricFilters, Extended date time
range.
- api-change:`location`: \[`botocore`] Amazon Location Service adds
support for bounding polygon queries. Additionally, the GeofenceCount
field has been added to the DescribeGeofenceCollection API response.
- api-change:`mediaconvert`: \[`botocore`] This release adds the ability
to replace video frames without modifying the audio essence.
- api-change:`oam`: \[`botocore`] This release adds support for sharing
AWS::ApplicationInsights::Application resources.
- api-change:`sagemaker`: \[`botocore`] This release allows users to run
Selective Execution in SageMaker Pipelines without
SourcePipelineExecutionArn if selected steps do not have any dependent
steps.
- api-change:`wellarchitected`: \[`botocore`] AWS Well-Architected now
supports Review Templates that allows you to create templates with
pre-filled answers for Well-Architected and Custom Lens best practices.

###
[`v1.28.58`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#12858)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.28.57...1.28.58)

\=======

- api-change:`bedrock-runtime`: \[`botocore`] Add model timeout
exception for InvokeModelWithResponseStream API and update validator for
invoke model identifier.
- api-change:`bedrock`: \[`botocore`] Provisioned throughput feature
with Amazon and third-party base models, and update validators for model
identifier and taggable resource ARNs.
- api-change:`ec2`: \[`botocore`] Introducing Amazon EC2 R7iz instances
with 3.9 GHz sustained all-core turbo frequency and deliver up to 20%
better performance than previous generation z1d instances.
- api-change:`managedblockchain`: \[`botocore`] Remove Rinkeby as option
from Ethereum APIs
- api-change:`rds`: \[`botocore`] Adds DefaultCertificateForNewLaunches
field in the DescribeCertificates API response.
-   api-change:`sso`: \[`botocore`] Fix FIPS Endpoints in aws-us-gov.
-   api-change:`sts`: \[`botocore`] STS API updates for assumeRole
- api-change:`transfer`: \[`botocore`] Documentation updates for AWS
Transfer Family

</details>

<details>
<summary>boto/botocore (botocore)</summary>

###
[`v1.31.60`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13160)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.31.59...1.31.60)

\=======

- api-change:`appconfig`: AWS AppConfig introduces KMS customer-managed
key (CMK) encryption support for data saved to AppConfig's hosted
configuration store.
-   api-change:`datazone`: Initial release of Amazon DataZone
- api-change:`mediatailor`: Updates DescribeVodSource to include a list
of ad break opportunities in the response
- api-change:`mgn`: This release includes the following new APIs:
ListConnectors, CreateConnector, UpdateConnector, DeleteConnector and
UpdateSourceServer to support the source action framework feature.
- api-change:`sagemaker`: Adding support for AdditionalS3DataSource, a
data source used for training or inference that is in addition to the
input dataset or model data.

###
[`v1.31.59`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13159)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.31.58...1.31.59)

\=======

- api-change:`connect`: GetMetricDataV2 API: Update to include new
metrics CONTACTS_RESOLVED_IN_X , AVG_HOLD_TIME_ALL_CONTACTS ,
AVG_RESOLUTION_TIME , ABANDONMENT_RATE ,
AGENT_NON_RESPONSE_WITHOUT_CUSTOMER_ABANDONS with added features:
Interval Period, TimeZone, Negate MetricFilters, Extended date time
range.
- api-change:`location`: Amazon Location Service adds support for
bounding polygon queries. Additionally, the GeofenceCount field has been
added to the DescribeGeofenceCollection API response.
- api-change:`mediaconvert`: This release adds the ability to replace
video frames without modifying the audio essence.
- api-change:`oam`: This release adds support for sharing
AWS::ApplicationInsights::Application resources.
- api-change:`sagemaker`: This release allows users to run Selective
Execution in SageMaker Pipelines without SourcePipelineExecutionArn if
selected steps do not have any dependent steps.
- api-change:`wellarchitected`: AWS Well-Architected now supports Review
Templates that allows you to create templates with pre-filled answers
for Well-Architected and Custom Lens best practices.

###
[`v1.31.58`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13158)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.31.57...1.31.58)

\=======

- api-change:`bedrock`: Provisioned throughput feature with Amazon and
third-party base models, and update validators for model identifier and
taggable resource ARNs.
- api-change:`bedrock-runtime`: Add model timeout exception for
InvokeModelWithResponseStream API and update validator for invoke model
identifier.
- api-change:`ec2`: Introducing Amazon EC2 R7iz instances with 3.9 GHz
sustained all-core turbo frequency and deliver up to 20% better
performance than previous generation z1d instances.
- api-change:`managedblockchain`: Remove Rinkeby as option from Ethereum
APIs
- api-change:`rds`: Adds DefaultCertificateForNewLaunches field in the
DescribeCertificates API response.
-   api-change:`sso`: Fix FIPS Endpoints in aws-us-gov.
-   api-change:`sts`: STS API updates for assumeRole
-   api-change:`transfer`: Documentation updates for AWS Transfer Family

</details>

<details>
<summary>gruntwork-io/terratest
(github.com/gruntwork-io/terratest)</summary>

###
[`v0.45.0`](https://togithub.com/gruntwork-io/terratest/releases/tag/v0.45.0)

[Compare
Source](https://togithub.com/gruntwork-io/terratest/compare/v0.44.1...v0.45.0)

#### Description

-   Removed Go patch version from `go.mod`

#### Related links

<!-- Links to each PR or issue that are being addressed in this release.
The drafter will autoinclude each merged PR. -->

-
[gruntwork-io/terratest#1351

<!-- RELEASE_NOTES_DRAFTER_MARKER_RELATED_LINKS_NEXT -->

###
[`v0.44.1`](https://togithub.com/gruntwork-io/terratest/releases/tag/v0.44.1)

[Compare
Source](https://togithub.com/gruntwork-io/terratest/compare/v0.44.0...v0.44.1)

#### Description

-   Updated AMI module to support Ubuntu 20.04 and 22.04.

#### Related links

<!-- Links to each PR or issue that are being addressed in this release.
The drafter will autoinclude each merged PR. -->

-
[gruntwork-io/terratest#1350

<!-- RELEASE_NOTES_DRAFTER_MARKER_RELATED_LINKS_NEXT -->

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4wLjMiLCJ1cGRhdGVkSW5WZXIiOiIzNy4wLjMiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

.github/workflows/ci.yml

@@ -104,7 +104,7 @@ jobs:
   kics:
     runs-on: ubuntu-latest
     container:
-      image: checkmarx/kics:v1.7.8-debian@sha256:646c4e9439dd3c5f8a9081cdc11f003ad988e180f51c1e4280c6c9c164fb9423
+      image: checkmarx/kics:v1.7.9-debian@sha256:fe93d547d4fe1236b81128ef762ff36b0069b6033472df885f902cf0bf720f67
     steps:
       - uses: actions/checkout@8ade135a41bc03ea155e62e844d188df1ea18608 # v4
       # ignore: "tags not used", "access analyzer not used", "shield advanced not used"

.github/workflows/pr-opened.yml

@@ -17,7 +17,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: actions/github-script@6f00a0b667f9463337970371ccda9072ee86fb27 # ratchet:actions/github-script@v6
+      - uses: actions/github-script@1f16022c7518aad314c43abcd029895291be0f52 # ratchet:actions/github-script@v6
         with:
           # yamllint disable rule:line-length
           script: |

.github/workflows/release.yml

@@ -25,7 +25,7 @@ jobs:
           appInstallationValue: ${{ github.repository }}
       # bootstrap-sha and release-as needs to be removed after first release
       - name: Release
-        uses: google-github-actions/release-please-action@4c5670f886fe259db4d11222f7dff41c1382304d # ratchet:google-github-actions/release-please-action@v3
+        uses: google-github-actions/release-please-action@2921787898ea2925c9eec03a32aa7404a75399e5 # ratchet:google-github-actions/release-please-action@v3
         with:
           release-type: terraform-module
           token: ${{ steps.token.outputs.token }}

.github/workflows/slash_ops_commands.yml

@@ -21,7 +21,7 @@ jobs:
           maintainer=$(grep -oE "@[a-zA-Z0-9_-]+" CODEOWNERS | shuf -n 1)
           echo "maintainer=$maintainer" >> "$GITHUB_OUTPUT"
       - name: Create comment
-        uses: actions/github-script@6f00a0b667f9463337970371ccda9072ee86fb27 # ratchet:actions/github-script@v6
+        uses: actions/github-script@1f16022c7518aad314c43abcd029895291be0f52 # ratchet:actions/github-script@v6
         with:
           script: |
             // adds a comment to the PR (there is the issue API, which works work PRs too)

.github/workflows/slash_ops_comment_dispatch.yml

@@ -18,7 +18,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Slash Command Dispatch
-        uses: peter-evans/slash-command-dispatch@60f9e79c7fd43378cf0653f00b0556663cc3044c # ratchet:peter-evans/slash-command-dispatch@v3
+        uses: peter-evans/slash-command-dispatch@c5d899d61979ab022c66e48443e5920dba8ee6c6 # ratchet:peter-evans/slash-command-dispatch@v3
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           issue-type: pull-request

modules/terminate-agent-hook/lambda/requirements.txt

@@ -1,2 +1,2 @@
-boto3 ==1.28.57
-botocore ==1.31.57
+boto3 ==1.28.60
+botocore ==1.31.60

test/go.mod

@@ -3,7 +3,7 @@ module github.com/cattle-ops/terraform-aws-gitlab-runner/test
 go 1.21.1
 
 require (
-	github.com/gruntwork-io/terratest v0.44.0
+	github.com/gruntwork-io/terratest v0.45.0
 	github.com/joho/godotenv v1.5.1
 	github.com/stretchr/testify v1.8.4
 	github.com/xanzy/go-gitlab v0.92.3

test/go.sum

@@ -338,6 +338,8 @@ github.com/googleapis/go-type-adapters v1.0.0/go.mod h1:zHW75FOG2aur7gAO2B+MLby+
 github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw=
 github.com/gruntwork-io/terratest v0.44.0 h1:3k7lglJFAtw77p2HnR5vaZBCBnlHmu3DuLjVyuCZXJ0=
 github.com/gruntwork-io/terratest v0.44.0/go.mod h1:EAEuzSjvxAzQoJCEQ06bJPTmdC9HikzgvhmxnAYuExM=
+github.com/gruntwork-io/terratest v0.45.0 h1:02VuyLRmqOO45TaTH4P4mc44S18er5Rn4CooTUY0uek=
+github.com/gruntwork-io/terratest v0.45.0/go.mod h1:4TWB5SYgATxJFfg+RNpE0gwiUWxtfMLGOXo5gwcGgMs=
 github.com/hashicorp/errwrap v1.0.0 h1:hLrqtEDnRye3+sgx6z4qVLNuviH3MR5aQ0ykNJa/UYA=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ=