chore(deps): update dependency uis/devops/continuous-delivery/ci-templates to v7

This MR contains the following updates:

Package	Type	Update	Change
uis/devops/continuous-delivery/ci-templates	repository	major	v3.0.0 -> v7.13.0

---

Release Notes

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

v7.13.0: 7.13.0

Compare Source

7.13.0 (2025-08-27)

Features

• add detect-non-utf-files job (f629243)

v7.12.0: 7.12.0

Compare Source

7.12.0 (2025-08-27)

Features

• terraform-pipeline: remove duplicate kics job (354c3cc)

v7.11.1: 7.11.1

Compare Source

7.11.1 (2025-08-21)

v7.11.0: 7.11.0

Compare Source

7.11.0 (2025-08-21)

Features

• trivy job now to use logan-terrafrom image and run terraform init in before_script (b03b3e4)

v7.10.4: 7.10.4

Compare Source

7.10.4 (2025-08-14)

v7.10.3: 7.10.3

Compare Source

7.10.3 (2025-08-14)

v7.10.2: 7.10.2

Compare Source

7.10.2 (2025-08-14)

v7.10.1: 7.10.1

Compare Source

7.10.1 (2025-08-14)

v7.10.0: 7.10.0

Compare Source

7.10.0 (2025-08-14)

Features

• auto-devops: remove mandatory jobs from auto-devops template (5f7de9c)

v7.9.1: 7.9.1

Compare Source

7.9.1 (2025-08-13)

v7.9.0: 7.9.0

Compare Source

7.9.0 (2025-08-13)

Features

• mandatory-jobs: provide AST-related CI/CD variable defaults (3421a2e)

v7.8.0: 7.8.0

Compare Source

7.8.0 (2025-08-13)

Features

• add mandatory jobs template (975f4aa)

v7.7.0: 7.7.0

Compare Source

7.7.0 (2025-08-07)

Features

• add dind support to terraform-test (a17505d)

v7.6.4: 7.6.4

Compare Source

7.6.4 (2025-08-07)

Reverts

• Revert "fix(common-pipeline): pin secret detector image version" (b62bc91)

v7.6.3: 7.6.3

Compare Source

7.6.3 (2025-08-06)

Bug Fixes

• common-pipeline: pin secret detector image version (8109734)

v7.6.2: 7.6.2

Compare Source

7.6.2 (2025-07-22)

Bug Fixes

• handling having set CI_APPLICATION_REPOSITORY with multi target docker builds (1dc6987)

v7.6.1: 7.6.1

Compare Source

7.6.1 (2025-07-16)

Bug Fixes

• pin trivy to 0.54.0 (c4368bc), closes #​128

v7.6.0: 7.6.0

Compare Source

7.6.0 (2025-07-10)

Features

• terraform: add tfplan.json to artefact list (710623f)

Bug Fixes

• terraform: restrict plan artefact access (723e094)

v7.5.3: 7.5.3

Compare Source

7.5.3 (2025-07-10)

v7.5.2: 7.5.2

Compare Source

7.5.2 (2025-07-10)

v7.5.1: 7.5.1

Compare Source

7.5.1 (2025-07-10)

Bug Fixes

• maven.gitlab-ci.yml: added missing GKE_RUNNER_TAG for cache-debug job (22df4e5)

v7.5.0: 7.5.0

Compare Source

7.5.0 (2025-07-03)

Features

• add compile_vulnerability_allowlist as a pre-req for the container_scanning job (94ae968)

v7.4.0: 7.4.0

Compare Source

7.4.0 (2025-07-01)

Features

• keep trivy output in fixed directory (5ce35ee)

v7.3.2: 7.3.2

Compare Source

7.3.2 (2025-06-26)

v7.3.1: 7.3.1

Compare Source

7.3.1 (2025-06-26)

v7.3.0: 7.3.0

Compare Source

7.3.0 (2025-06-26)

Features

• renovate: add all YAML files to gitlabci manager (1dc5db5)

v7.2.2: 7.2.2

Compare Source

7.2.2 (2025-06-26)

Bug Fixes

• trivy: pin to version 0.54.0 (6c62401), closes #​128

v7.2.1: 7.2.1

Compare Source

7.2.1 (2025-06-26)

Bug Fixes

• trigger-renovatebot: pin httpie image (b4e2c7f), closes #​129 #​129

v7.2.0: 7.2.0

Compare Source

7.2.0 (2025-06-23)

Features

• enable "advanced" SAST scanning for common pipeline projects (c3c3356), closes #​126

v7.1.0: 7.1.0

Compare Source

7.1.0 (2025-06-19)

Features

• add workflow-prefer-mr-pipelines.gitlab-ci.yml (bee3dbc), closes #​125

v7.0.2: 7.0.2

Compare Source

7.0.2 (2025-06-17)

v7.0.1: 7.0.1

Compare Source

7.0.1 (2025-06-17)

Bug Fixes

• remove use of deprecated workflow rules templates (c1e9531), closes #​124

v7.0.0: 7.0.0

Compare Source

7.0.0 (2025-06-17)

⚠️ BREAKING CHANGES

• add the common-pipeline, commitlint, and release-it

Features

• add the common-pipeline, commitlint, and release-it (8fbf3a9)

v6.15.0

Compare Source

Changed

• terraform-module.yml: Add support for Terraform testing with additional cleanup scripts.

Fixed

• terraform-module.yml: Override the tflint job so that the terraform_standard_module_structure rule is applied.
• terraform-module.yml: Override the pre-commit job to avoid duplication of our terraform-fmt, tflint, and trivy jobs.

v6.14.2

Compare Source

v6.14.1

Compare Source

v6.14.0

Compare Source

v6.13.0

Compare Source

v6.12.3

Compare Source

v6.12.2

Compare Source

Fixed

• terraform-module: override .test-job-rules from terraform-lint.yml as the terraform-module.yml template needs to support Auto-DevOps.

v6.12.1

Compare Source

v6.12.0

Compare Source

v6.11.0

Compare Source

Changed

• terraform-lint: use custom tflint docker image for the tflint job. This image includes the UIS DevOps custom tflint ruleset.
• terraform-lint: move default tflint arguments to a $TFLINT_ARGS variable to allow repositories to override if required.
• terraform-module: enable tflint in our Terraform reusable module pipeline.

v6.10.0

Compare Source

Fixed

• terraform-pipeline: Partially revert changes made in v5.1.0.
  • Plan jobs for branch push pipelines will be reverted.
  • Manual apply jobs for the development environment will remain in the merge request pipelines.

v6.9.0

Compare Source

v6.8.1

Compare Source

v6.8.0

Compare Source

v6.7.3

Compare Source

v6.7.2

Compare Source

v6.7.1

Compare Source

v6.7.0

Compare Source

v6.6.1

Compare Source

v6.6.0

Compare Source

v6.5.0

Compare Source

v6.4.4

Compare Source

v6.4.3

Compare Source

v6.4.2

Compare Source

v6.4.1

Compare Source

v6.4.0

Compare Source

v6.3.0

Compare Source

v6.2.0

Compare Source

v6.1.1

Compare Source

v6.1.0

Compare Source

v6.0.4

Compare Source

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.2.1

Compare Source

v5.2.0

Compare Source

v5.1.0

Compare Source

v5.0.0

Compare Source

v4.6.0

Compare Source

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.0

Compare Source

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.0

Compare Source

Changed

• Remove allow_failure: true from commitlint and commitlint-hotfix jobs. This behaviour is no longer desirable as we've built our whole release-it process around the conventionalcommits specification. It's now more beneficial for these jobs to fail by default.

v4.1.0

Compare Source

Added

• A generic get-gcp-secrets fragment to retrieve one or more Google Secret Manager secrets in a CI job.

v4.0.0

Compare Source

Changed

• BREAKING CHANGE: removed legacy /auto-devops/terraform-deployment.yml and /auto-devops/terraform-lint.yml templates as these should not be being used any more.

• Refactored /auto-devops/terraform-pipeline.yml template so that the hidden "template" jobs are now in their own /terraform-pipeline-base.yml template file. This allows more flexibility for some projects which do not/cannot follow the standard three-environment deployment defined in the /auto-devops/terraform-pipeline.yml template.

• Refactored the Terraform testing/linting jobs into their own /terraform-lint.yml template. This is useful for projects which are not being deployed via CI/CD but which we do want to test in a pipeline.

v3.8.2

Compare Source

Fixed

• terraform-pipeline.yml: tflint rule terraform_standard_module_structure is now disabled.

v3.8.1

Compare Source

Fixed

• terraform-pipeline.yml: tflint job updated and now compatible with tflint v0.40.0+

v3.8.0

Compare Source

Changed

• terraform-pipeline.yml: tfsec job replaced with trivy as tfsec is now deprecated.

v3.7.1

Compare Source

Fixed

• artifact-registry.yml: added before_script to fix "docker in docker" service startup.

v3.7.0

Compare Source

Added

• artifact-registry.yml: add support for code repositories with multiple apps.

v3.6.1

Compare Source

Fixed

• check_latest_tag_in_changelog now correctly identifies the latest tag in the CHANGELOG, when there isn't a space after the closing square bracket.

v3.6.0

Compare Source

v3.5.0

Compare Source

v3.4.0

Compare Source

v3.3.0

Compare Source

Fixed

• terraform-pipeline.yml: allow plan and apply jobs to run on git tag actions.

Added

• terraform-pipeline.yml: add TF_PLAN_TARGET variable to allow targeted plan actions.

v3.2.0

Compare Source

v3.1.1

Compare Source

v3.1.0

Compare Source

Added

• commitlint.yml template to ensure the Conventional Commits standard is adhered to for projects who wish to use it.

---

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.