Dependency updates for October 2024 (#3388)

* Bump node from 20.14.0-bookworm-slim to 20.17.0-bookworm-slim * Bump serve-static, body-parser, send, express * Bump dset from 3.1.3 to 3.1.4 * Bump rollup from 2.79.1 to 2.79.2 * Bump Microsoft.NET.Test.Sdk from 17.11.0 to 17.11.1 in /Backend.Tests * Bump MongoDB.Driver from 2.28.0 to 2.29.0 in /Backend * Bump dotnet/sdk from 8.0.401-jammy to 8.0.402-jammy in /Backend * Bump MailKit from 4.7.1.1 to 4.8.0 in /Backend * Bump Swashbuckle.AspNetCore from 6.7.3 to 6.8.1 in /Backend * Bump sillsdev/FieldWorks * Bump ansible from 10.3.0 to 10.4.0 in /deploy * Bump kubernetes from 30.1.0 to 31.0.0 in /deploy and /maintenance * Bump pymongo from 4.8.0 to 4.10.0 in /maintenance * Bump actions/setup-node from 4.0.2 to 4.0.4 * Bump actions/setup-dotnet from 4.0.0 to 4.0.1 * Bump docker/setup-buildx-action from 3.3.0 to 3.6.1 * Bump docker/setup-qemu-action from 3.0.0 to 3.2.0 * Update frontend license report (backend already updated) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
sillsdev · Oct 8, 2024 · 0dc83d0 · 0dc83d0
1 parent 508758a
commit 0dc83d0
Show file tree

Hide file tree

Showing 11 changed files with 81 additions and 65 deletions.
diff --git a/.github/workflows/backend.yml b/.github/workflows/backend.yml
@@ -37,7 +37,7 @@ jobs:
             objects.githubusercontent.com:443
       - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Setup dotnet
-        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
+        uses: actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
         with:
           dotnet-version: ${{ matrix.dotnet }}
       - name: Install ffmpeg
@@ -128,7 +128,7 @@ jobs:
       # Manually install .NET to work around:
       # https://github.com/github/codeql-action/issues/757
       - name: Setup .NET
-        uses: actions/setup-dotnet@4d6c8fcf3c8f7a60068d26b594648e99df24cee3 # v4.0.0
+        uses: actions/setup-dotnet@6bd8b7f7774af54e05809fcc5431931b3eb1ddee # v4.0.1
         with:
           dotnet-version: "8.0.x"
       - name: Initialize CodeQL

diff --git a/.github/workflows/combine_deploy_image.yml b/.github/workflows/combine_deploy_image.yml
@@ -38,9 +38,9 @@ jobs:
             security.ubuntu.com:80
             sts.us-east-1.amazonaws.com:443
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@68827325e0b33c7199eb31dd4e31fbe9023e06e3 # v3.0.0
+        uses: docker/setup-qemu-action@49b3bc8e6bdd4a60e6116a5414239cba5943d3cf # v3.2.0
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@d70bba72b1f3fd22344832f00baa16ece964efeb # v3.3.0
+        uses: docker/setup-buildx-action@988b5a0280414f521da01fcc63a27aeeb4b104db # v3.6.1
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4.0.2
         with:

diff --git a/.github/workflows/commit_message_check.yml b/.github/workflows/commit_message_check.yml
@@ -10,4 +10,4 @@ permissions: # added using https://github.com/step-security/secure-workflows
 
 jobs:
   commit-message-lint:
-    uses: sillsdev/FieldWorks/.github/workflows/CommitMessage.yml@9972c2aa3ad9fa768bd82714208152c4b6ce6b2c
+    uses: sillsdev/FieldWorks/.github/workflows/CommitMessage.yml@ba50e637df9593a2a972b29bf670226e89c0a21b
diff --git a/.github/workflows/frontend.yml b/.github/workflows/frontend.yml
@@ -31,7 +31,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci
@@ -60,7 +60,7 @@ jobs:
       - name: Checkout repository
         uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       - name: Use Node.js ${{ matrix.node-version }}
-        uses: actions/setup-node@60edb5dd545a775178f52524783378180af0d1f8 # v4.0.2
+        uses: actions/setup-node@0a44ba7841725637a19e28fa30b79a866c81b0a6 # v4.0.4
         with:
           node-version: ${{ matrix.node-version }}
       - run: npm ci

diff --git a/Backend.Tests/Backend.Tests.csproj b/Backend.Tests/Backend.Tests.csproj
@@ -12,7 +12,7 @@
     <NoWarn>$(NoWarn);CA1305;CA1859;CS1591</NoWarn>
   </PropertyGroup>
   <ItemGroup>
-    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.0" />
+    <PackageReference Include="Microsoft.NET.Test.Sdk" Version="17.11.1" />
     <PackageReference Include="NUnit" Version="4.2.2" />
     <PackageReference Include="NUnit3TestAdapter" Version="4.6.0" />
     <PackageReference Include="coverlet.collector" Version="6.0.2"/>

diff --git a/Backend/BackendFramework.csproj b/Backend/BackendFramework.csproj
@@ -16,9 +16,9 @@
     <PackageReference Include="Microsoft.AspNetCore.Authentication.JwtBearer" Version="8.0.3" />
     <PackageReference Include="Microsoft.IdentityModel.Tokens" Version="7.5.1" />
     <PackageReference Include="System.IdentityModel.Tokens.Jwt" Version="7.5.1" />
-    <PackageReference Include="MailKit" Version="4.7.1.1" />
-    <PackageReference Include="MongoDB.Driver" Version="2.28.0" />
-    <PackageReference Include="Swashbuckle.AspNetCore" Version="6.7.3" />
+    <PackageReference Include="MailKit" Version="4.8.0" />
+    <PackageReference Include="MongoDB.Driver" Version="2.29.0" />
+    <PackageReference Include="Swashbuckle.AspNetCore" Version="6.8.1" />
     <PackageReference Include="Xabe.FFmpeg" Version="5.2.6"/>
 
     <!-- SIL Maintained Dependencies. -->

diff --git a/Backend/Dockerfile b/Backend/Dockerfile
@@ -7,7 +7,7 @@
 ############################################################
 
 # Docker multi-stage build
-FROM mcr.microsoft.com/dotnet/sdk:8.0.401-jammy AS builder
+FROM mcr.microsoft.com/dotnet/sdk:8.0.402-jammy AS builder
 WORKDIR /app
 
 # Copy csproj and restore (fetch dependencies) as distinct layers.

diff --git a/deploy/requirements.txt b/deploy/requirements.txt
@@ -4,9 +4,9 @@
 #
 #    pip-compile requirements.in
 #
-ansible==10.3.0
+ansible==10.4.0
     # via -r requirements.in
-ansible-core==2.17.3
+ansible-core==2.17.4
     # via ansible
 cachetools==5.5.0
     # via google-auth
@@ -22,6 +22,8 @@ cryptography==43.0.1
     # via
     #   ansible-core
     #   pyopenssl
+durationpy==0.8
+    # via kubernetes
 google-auth==2.34.0
     # via kubernetes
 idna==3.8
@@ -33,7 +35,7 @@ jinja2==3.1.4
     #   jinja2-base64-filters
 jinja2-base64-filters==0.1.4
     # via -r requirements.in
-kubernetes==30.1.0
+kubernetes==31.0.0
     # via -r requirements.in
 markupsafe==2.1.5
     # via jinja2

diff --git a/docs/user_guide/assets/licenses/frontend_licenses.txt b/docs/user_guide/assets/licenses/frontend_licenses.txt
@@ -41476,7 +41476,7 @@ LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
-dset 3.1.3
+dset 3.1.4
 MIT
 The MIT License (MIT)
 

diff --git a/maintenance/requirements.txt b/maintenance/requirements.txt
@@ -18,13 +18,15 @@ cryptography==43.0.1
     # via pyopenssl
 dnspython==2.6.1
     # via pymongo
+durationpy==0.8
+    # via kubernetes
 google-auth==2.34.0
     # via kubernetes
 humanfriendly==10.0
     # via -r requirements.in
 idna==3.8
     # via requests
-kubernetes==30.1.0
+kubernetes==31.0.0
     # via -r requirements.in
 oauthlib==3.2.2
     # via
@@ -38,7 +40,7 @@ pyasn1-modules==0.4.0
     # via google-auth
 pycparser==2.22
     # via cffi
-pymongo==4.8.0
+pymongo==4.10.0
     # via -r requirements.in
 pyopenssl==24.2.1
     # via -r requirements.in

diff --git a/package-lock.json b/package-lock.json