chore(deps): update dependency uis/devops/continuous-delivery/ci-templates to v7 (!21) · Merge requests · Information Services / DevOps / Identity and Access Management / Lookup/Ibis / Lookup API Client

maven.gitlab-ci.yml: moved PUBLISH_NEW_VERSION within .maven:publish script (e02809e)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (b9ad541)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (e8071e1)
maven.gitlab-ci.yml: updated semantic commit message pattern matching and logic (2574c8c)

`v7.15.0`: 7.15.0

Compare Source

7.15.0 (2025-09-08)

Features

add custom configuration for secrets (ef86a30)

`v7.14.1`: 7.14.1

Compare Source

7.14.1 (2025-09-04)

Bug Fixes

maven.gitlab-ci.yml: move services section under maven job (a2c5dca)

`v7.14.0`: 7.14.0

Compare Source

7.14.0 (2025-09-02)

Features

mark SAST jobs as needing no build artefacts (29054df), closes #150 #150

`v7.13.1`: 7.13.1

Compare Source

7.13.1 (2025-09-01)

Bug Fixes

rename detect-non-utf8-files job and make it work with spaces in filenames (4d7ec69)

`v7.13.0`: 7.13.0

Compare Source

7.13.0 (2025-08-27)

Features

add detect-non-utf-files job (f629243)

`v7.12.0`: 7.12.0

Compare Source

7.12.0 (2025-08-27)

Features

terraform-pipeline: remove duplicate kics job (354c3cc)

`v7.11.1`: 7.11.1

Compare Source

7.11.1 (2025-08-21)

`v7.11.0`: 7.11.0

Compare Source

7.11.0 (2025-08-21)

Features

trivy job now to use logan-terrafrom image and run terraform init in before_script (b03b3e4)

`v7.10.4`: 7.10.4

Compare Source

7.10.4 (2025-08-14)

`v7.10.3`: 7.10.3

Compare Source

7.10.3 (2025-08-14)

`v7.10.2`: 7.10.2

Compare Source

7.10.2 (2025-08-14)

`v7.10.1`: 7.10.1

Compare Source

7.10.1 (2025-08-14)

`v7.10.0`: 7.10.0

Compare Source

7.10.0 (2025-08-14)

Features

auto-devops: remove mandatory jobs from auto-devops template (5f7de9c)

`v7.9.1`: 7.9.1

Compare Source

7.9.1 (2025-08-13)

`v7.9.0`: 7.9.0

Compare Source

7.9.0 (2025-08-13)

Features

mandatory-jobs: provide AST-related CI/CD variable defaults (3421a2e)

`v7.8.0`: 7.8.0

Compare Source

7.8.0 (2025-08-13)

Features

add mandatory jobs template (975f4aa)

`v7.7.0`: 7.7.0

Compare Source

7.7.0 (2025-08-07)

Features

add dind support to terraform-test (a17505d)

`v7.6.4`: 7.6.4

Compare Source

7.6.4 (2025-08-07)

Reverts

Revert "fix(common-pipeline): pin secret detector image version" (b62bc91)

`v7.6.3`: 7.6.3

Compare Source

7.6.3 (2025-08-06)

Bug Fixes

common-pipeline: pin secret detector image version (8109734)

`v7.6.2`: 7.6.2

Compare Source

7.6.2 (2025-07-22)

Bug Fixes

handling having set CI_APPLICATION_REPOSITORY with multi target docker builds (1dc6987)

`v7.6.1`: 7.6.1

Compare Source

7.6.1 (2025-07-16)

Bug Fixes

pin trivy to 0.54.0 (c4368bc), closes #128

`v7.6.0`: 7.6.0

Compare Source

7.6.0 (2025-07-10)

Features

terraform: add tfplan.json to artefact list (710623f)

Bug Fixes

terraform: restrict plan artefact access (723e094)

`v7.5.3`: 7.5.3

Compare Source

7.5.3 (2025-07-10)

`v7.5.2`: 7.5.2

Compare Source

7.5.2 (2025-07-10)

`v7.5.1`: 7.5.1

Compare Source

7.5.1 (2025-07-10)

Bug Fixes

maven.gitlab-ci.yml: added missing GKE_RUNNER_TAG for cache-debug job (22df4e5)

`v7.5.0`: 7.5.0

Compare Source

7.5.0 (2025-07-03)

Features

add compile_vulnerability_allowlist as a pre-req for the container_scanning job (94ae968)

`v7.4.0`: 7.4.0

Compare Source

7.4.0 (2025-07-01)

Features

keep trivy output in fixed directory (5ce35ee)

`v7.3.2`: 7.3.2

Compare Source

7.3.2 (2025-06-26)

`v7.3.1`: 7.3.1

Compare Source

7.3.1 (2025-06-26)

`v7.3.0`: 7.3.0

Compare Source

7.3.0 (2025-06-26)

Features

renovate: add all YAML files to gitlabci manager (1dc5db5)

`v7.2.2`: 7.2.2

Compare Source

7.2.2 (2025-06-26)

Bug Fixes

trivy: pin to version 0.54.0 (6c62401), closes #128

`v7.2.1`: 7.2.1

Compare Source

7.2.1 (2025-06-26)

Bug Fixes

trigger-renovatebot: pin httpie image (b4e2c7f), closes #129 #129

`v7.2.0`: 7.2.0

Compare Source

7.2.0 (2025-06-23)

Features

enable "advanced" SAST scanning for common pipeline projects (c3c3356), closes #126

`v7.1.0`: 7.1.0

Compare Source

7.1.0 (2025-06-19)

Features

add workflow-prefer-mr-pipelines.gitlab-ci.yml (bee3dbc), closes #125

`v7.0.2`: 7.0.2

Compare Source

7.0.2 (2025-06-17)

`v7.0.1`: 7.0.1

Compare Source

7.0.1 (2025-06-17)

Bug Fixes

remove use of deprecated workflow rules templates (c1e9531), closes #124

`v7.0.0`: 7.0.0

Compare Source

7.0.0 (2025-06-17)

⚠️ BREAKING CHANGES

add the common-pipeline, commitlint, and release-it

Features

add the common-pipeline, commitlint, and release-it (8fbf3a9)

`v6.15.0`

Compare Source

Changed

terraform-module.yml: Add support for Terraform testing with additional cleanup scripts.

Fixed

terraform-module.yml: Override the tflint job so that the terraform_standard_module_structure rule is applied.
terraform-module.yml: Override the pre-commit job to avoid duplication of our terraform-fmt, tflint, and trivy jobs.

Fixed

terraform-module: override .test-job-rules from terraform-lint.yml as the terraform-module.yml template needs to support Auto-DevOps.

`v6.12.1`

Compare Source

`v6.12.0`

Compare Source

`v6.11.0`

Compare Source

Changed

terraform-lint: use custom tflint docker image for the tflint job. This image includes the UIS DevOps custom tflint ruleset.
terraform-lint: move default tflint arguments to a $TFLINT_ARGS variable to allow repositories to override if required.
terraform-module: enable tflint in our Terraform reusable module pipeline.

`v6.10.0`

Compare Source

Fixed

terraform-pipeline: Partially revert changes made in v5.1.0.
- Plan jobs for branch push pipelines will be reverted.
- Manual apply jobs for the development environment will remain in the merge request pipelines.

`v6.9.0`

Compare Source

`v6.8.1`

Compare Source

`v6.8.0`

Compare Source

`v6.7.3`

Compare Source

`v6.7.2`

Compare Source

`v6.7.1`

Compare Source

`v6.7.0`

Compare Source

`v6.6.1`

Compare Source

`v6.6.0`

Compare Source

`v6.5.0`

Compare Source

`v6.4.4`

Compare Source

`v6.4.3`

Compare Source

`v6.4.2`

Compare Source

`v6.4.1`

Compare Source

`v6.4.0`

Compare Source

`v6.3.0`

Compare Source

`v6.2.0`

Compare Source

`v6.1.1`

Compare Source

`v6.1.0`

Compare Source

`v6.0.4`

Compare Source

`v6.0.3`

Compare Source

`v6.0.2`

Compare Source

`v6.0.1`

Compare Source

`v6.0.0`

Compare Source

`v5.2.1`

Compare Source

`v5.2.0`

Compare Source

`v5.1.0`

Compare Source

`v5.0.0`

Compare Source

`v4.6.0`

Compare Source

`v4.5.1`

Compare Source

`v4.5.0`

Compare Source

`v4.4.0`

Compare Source

`v4.3.1`

Compare Source

`v4.3.0`

Compare Source

`v4.2.0`

Compare Source

Changed

Remove allow_failure: true from commitlint and commitlint-hotfix jobs. This behaviour is no longer desirable as we've built our whole release-it process around the conventionalcommits specification. It's now more beneficial for these jobs to fail by default.

`v4.1.0`

Compare Source

Added

A generic get-gcp-secrets fragment to retrieve one or more Google Secret Manager secrets in a CI job.

`v4.0.0`

Compare Source

Changed

BREAKING CHANGE: removed legacy /auto-devops/terraform-deployment.yml and /auto-devops/terraform-lint.yml templates as these should not be being used any more.
Refactored /auto-devops/terraform-pipeline.yml template so that the hidden "template" jobs are now in their own /terraform-pipeline-base.yml template file. This allows more flexibility for some projects which do not/cannot follow the standard three-environment deployment defined in the /auto-devops/terraform-pipeline.yml template.
Refactored the Terraform testing/linting jobs into their own /terraform-lint.yml template. This is useful for projects which are not being deployed via CI/CD but which we do want to test in a pipeline.

`v3.8.2`

Compare Source

Fixed

terraform-pipeline.yml: tflint rule terraform_standard_module_structure is now disabled.

`v3.8.1`

Compare Source

Fixed

terraform-pipeline.yml: tflint job updated and now compatible with tflint v0.40.0+

`v3.8.0`

Compare Source

Changed

terraform-pipeline.yml: tfsec job replaced with trivy as tfsec is now deprecated.

`v3.7.1`

Compare Source

Fixed

artifact-registry.yml: added before_script to fix "docker in docker" service startup.

`v3.7.0`

Compare Source

Added

artifact-registry.yml: add support for code repositories with multiple apps.

`v3.6.1`

Compare Source

Fixed

check_latest_tag_in_changelog now correctly identifies the latest tag in the CHANGELOG, when there isn't a space after the closing square bracket.

`v3.6.0`

Compare Source

`v3.5.0`

Compare Source

`v3.4.0`

Compare Source

`v3.3.0`

Compare Source

Fixed

terraform-pipeline.yml: allow plan and apply jobs to run on git tag actions.

Added

terraform-pipeline.yml: add TF_PLAN_TARGET variable to allow targeted plan actions.

`v3.2.0`

Compare Source

`v3.1.1`

Compare Source

`v3.1.0`

Compare Source

Added

commitlint.yml template to ensure the Conventional Commits standard is adhered to for projects who wish to use it.

`v3.0.0`

Compare Source

`v2.7.0`

Compare Source

Added

terraform-module: Extend the GitLab Terraform Module to ensure the tag being used to version the module exists in the CHANGELOG.

`v2.6.2`

Compare Source

Fixed

pre-commit.yml: relax pre-commit job rules to enable users to decide when to include the job via workflow rules instead.

`v2.6.1`

Compare Source

Fixed

artifact-registry: fix issue with $DOCKER_CERT_PATH containing the $DOCKER_TLS_CERTDIR variable. We've seen multiple issues with this variable expanding as an empty value. Instead, we're simply hard coding it instead which appears to have resolved the issue.

`v2.6.0`

Compare Source

Added

terraform-pipeline: Allow the tfsec job to exclude specific checks. This is useful to exclude a default list of checks that we don't follow in the boilerplate.

Fixed

artifact-registry: Allow manual push to registry for non-default branches. This is useful for testing container images from feature branches. However, to avoid littering the artifact registry with endless feature branch containers, it is configured as a manual job.
terraform-pipeline: Allow the development apply job to fail. This is currently the only way to allow the whole pipeline to show as succeeded if the (optional) development apply job has not been triggered. Otherwise, the pipeline shows as blocked, which is confusing. See the following issue for context https://gitlab.com/gitlab-org/gitlab/-/issues/249524.

`v2.5.0`

Compare Source

Added

terraform-pipeline: Add resource_group to Terraform jobs to avoid concurrent pipelines for each environment.

Fixed

terraform-pipeline: Add docker-in-docker service now that the GKE runner does not mount docker.sock from the host (see https://gitlab.developers.cam.ac.uk/uis/devops/devhub/gitlab-runner-infrastructure/-/merge_requests/14).

`v2.4.4`

Compare Source

Fixed

artifact-registry: Add docker-in-docker service now that the GKE runner does not mount the docker.sock from the host (see https://gitlab.developers.cam.ac.uk/uis/devops/devhub/gitlab-runner-infrastructure/-/merge_requests/14).

`v2.4.3`

Compare Source

`v2.4.2`

Compare Source

Fixed

artifact-registry.yml: include latest tag for development environments.

`v2.4.1`

Compare Source

Fixed

artifact-registry.yml: remove needs: build to force the job to wait for tests to complete successfully.

`v2.4.0`

Compare Source

`v2.3.0`

Compare Source

Added

artifact-registry.yml template to push Auto-DevOps built images to an Artifact Registry repository.

`v2.2.2`

Compare Source

Modified

terraform-pipeline.yml: add needs relationships to speed up pipeline.

`v2.2.1`

Compare Source

Modified

terraform-pipeline.yml: remove duplicate jobs between commits and merge requests.

`v2.2.0`

Compare Source

`v2.1.2`

Compare Source

Features

Add initial pre-commit CI template.

`v2.1.1`

Compare Source

Fixes

Set TF_WORKSPACE variable in terraform-pipeline.yml. This is recommended in the docs when automating Terraform operations with multiple workspaces.

`v2.1.0`

Compare Source

Added

Add terraform-pipeline.yml template for deploying Terraform projects via the DevOps GKE Gitlab Runner.

`v2.0.0`

Compare Source

`v1.7.3`

Compare Source

Bugfix

Fix incompatibility with GitLab 15

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited Sep 25, 2025 by uis-devops-renovatebot

chore(deps): update dependency uis/devops/continuous-delivery/ci-templates to v7

Release Notes

v7.17.2: 7.17.2

7.17.2 (2025-09-25)

Bug Fixes

v7.17.1: 7.17.1

7.17.1 (2025-09-25)

Bug Fixes

v7.17.0: 7.17.0

7.17.0 (2025-09-24)

Features

v7.16.0: 7.16.0

7.16.0 (2025-09-19)

Features

v7.15.2: 7.15.2

7.15.2 (2025-09-17)

v7.15.1: 7.15.1

7.15.1 (2025-09-11)

Bug Fixes

v7.15.0: 7.15.0

7.15.0 (2025-09-08)

Features

v7.14.1: 7.14.1

7.14.1 (2025-09-04)

Bug Fixes

v7.14.0: 7.14.0

7.14.0 (2025-09-02)

Features

v7.13.1: 7.13.1

7.13.1 (2025-09-01)

Bug Fixes

v7.13.0: 7.13.0

7.13.0 (2025-08-27)

Features

v7.12.0: 7.12.0

7.12.0 (2025-08-27)

Features

v7.11.1: 7.11.1

7.11.1 (2025-08-21)

v7.11.0: 7.11.0

7.11.0 (2025-08-21)

Features

v7.10.4: 7.10.4

7.10.4 (2025-08-14)

v7.10.3: 7.10.3

7.10.3 (2025-08-14)

v7.10.2: 7.10.2

7.10.2 (2025-08-14)

v7.10.1: 7.10.1

7.10.1 (2025-08-14)

v7.10.0: 7.10.0

7.10.0 (2025-08-14)

Features

v7.9.1: 7.9.1

7.9.1 (2025-08-13)

v7.9.0: 7.9.0

7.9.0 (2025-08-13)

Features

v7.8.0: 7.8.0

7.8.0 (2025-08-13)

Features

v7.7.0: 7.7.0

7.7.0 (2025-08-07)

Features

v7.6.4: 7.6.4

7.6.4 (2025-08-07)

Reverts

v7.6.3: 7.6.3

7.6.3 (2025-08-06)

Bug Fixes

v7.6.2: 7.6.2

7.6.2 (2025-07-22)

Bug Fixes

v7.6.1: 7.6.1

7.6.1 (2025-07-16)

Bug Fixes

v7.6.0: 7.6.0

7.6.0 (2025-07-10)

Features

Bug Fixes

`v7.17.2`: 7.17.2

`v7.17.1`: 7.17.1

`v7.17.0`: 7.17.0

`v7.16.0`: 7.16.0

`v7.15.2`: 7.15.2

`v7.15.1`: 7.15.1

`v7.15.0`: 7.15.0

`v7.14.1`: 7.14.1

`v7.14.0`: 7.14.0

`v7.13.1`: 7.13.1

`v7.13.0`: 7.13.0

`v7.12.0`: 7.12.0

`v7.11.1`: 7.11.1

`v7.11.0`: 7.11.0

`v7.10.4`: 7.10.4

`v7.10.3`: 7.10.3

`v7.10.2`: 7.10.2

`v7.10.1`: 7.10.1

`v7.10.0`: 7.10.0

`v7.9.1`: 7.9.1

`v7.9.0`: 7.9.0

`v7.8.0`: 7.8.0

`v7.7.0`: 7.7.0

`v7.6.4`: 7.6.4

`v7.6.3`: 7.6.3

`v7.6.2`: 7.6.2

`v7.6.1`: 7.6.1

`v7.6.0`: 7.6.0

`v7.5.3`: 7.5.3

`v7.5.2`: 7.5.2

`v7.5.1`: 7.5.1

`v7.5.0`: 7.5.0

`v7.4.0`: 7.4.0

`v7.3.2`: 7.3.2

`v7.3.1`: 7.3.1

`v7.3.0`: 7.3.0

`v7.2.2`: 7.2.2

`v7.2.1`: 7.2.1

`v7.2.0`: 7.2.0

`v7.1.0`: 7.1.0

`v7.0.2`: 7.0.2

`v7.0.1`: 7.0.1

`v7.0.0`: 7.0.0