Releases: DFE-Digital/schools-experience
Release 3501
Bump Azure/login from 2 to 3
Release 3499
Bump marocchino/sticky-pull-request-comment from 2 to 3
Release 3503
Trello card
Context
Improves security of google apis
Adds a separate API key for geocoding which can then be locked to specific IP addresses
Changes proposed in this pull request
Guidance to review
Release 3500
Context
The terraform-modules repo has been updated to azurerm 4.61.0 so this repository can be repointed to the main, testing and stable modules branches.
Changes proposed in this pull request
Update TERRAFORM_MODULES_TAG in each environment
Guidance to review
make development terraform-plan
make production terraform-plan
make domains-infra-plan
make production domains-plan
All the above have been run and return
Release 3498
Trello card
https://trello.com/c/5mophRLT/2659-add-teams-channel-gh-notifications
Context
Remove slack notifications from workflows
Add any missing teams notifications
Changes proposed in this pull request
Workflow updates
Guidance to review
see successful workflows run by this PR
Release 3496
Bump docker/login-action from 3 to 4
Release 3495
Bump actions/download-artifact from 7 to 8
Release 3494
Bump actions/upload-artifact from 6 to 7
Release 3497
Trello card
https://trello.com/c/gR6Jpcnz/2684-secure-labeller-workflow
Context
Remove the labeller workflow
We don't make use of the custom labels, and it uses the pull_request_target trigger which can be insecure
Changes proposed in this pull request
Remove workflow
Guidance to review
Check correct workflow is deleted
Release 3492
Context
Terraform updates
and a second commit to fix the base image vulnerabilities
- upgrade libpng
- remove libxml2 as fixes are in the base image
Changes proposed in this pull request
- azurerm 4.61.0
- terraform 1.14.5
- update TERRAFORM_MODULES_TAG to use testing-azurerm-v4 and stable-azurerm-v4
Guidance to review
make development terraform-plan
make staging terraform-plan
make production terraform-plan
make domains-infra-plan
make development domains-plan
make staging domains-plan
make production domains-plan