Skip to content

Update dependency gitlab-ci-utils/gitlab-ci-templates to v18

This MR contains the following updates:

Package Type Update Change
gitlab-ci-utils/gitlab-ci-templates repository major 17.0.1 -> 18.0.1

Release Notes

gitlab-ci-utils/gitlab-ci-templates

v18.0.1

Compare Source

Fixed
  • Updated dependency vulnerability scanning metrics reports for release evidence collection. The osv_scanner job is now kept in release evidence. (#​247)
  • Reverted lint_nunjucks job and .djlint template to djlint@1.27.2 due to a formatting issue. (#​246)

v18.0.0

Compare Source

Changed
  • BREAKING: Removed Node 19 tests from Node-Version-Tests collection, which went end-of-life 2023-06-01. (#​238)
  • Added pmd_cpd_* jobs to detect duplicate code. Includes pmd_cpd_js job for JavaScript and pmd_cpd_ts job for TypeScript. (#​243)
  • BREAKING: Replaced GitLab's code_quality template with pmd_cpd_* jobs in all-projects collection. (#​243)
  • BREAKING: Updated dependency vulnerability scanning in collections for pipeline efficiency. This leaves the GitLab dependency_scanning template and osv_scanner jobs running on all pipelines, and the owasp_dependency_check job only running on schedule pipelines. (#​242)
    • Added osv_scanner job to Gitlab-Security-Scans collection.
    • Updated Gitlab-Security-Scans collection to only run owasp_dependency_check job on schedule pipelines.
    • Updated Gitlab-Security-Scans-Schedules-Fail collection to not allow failure for osv_scanner job on schedule pipelines.
Fixed
  • Updated GitLab job template overrides for changes in GitLab v16.0. (#​245)
  • Updated lint_lockfile job to lockfile-lint@4.10.5.
  • Updated lint_yaml job to yamllint==1.32.0.
  • Updated node_sbom job to cyclonedx-npm@1.12.0.
  • Updated osv_scanner job to OSV Scanner v1.3.3.
  • Updated lint_nunjucks job and .djlint template to djlint@1.29.0.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by GoldenBot

Merge request reports