chore(deps): update dependency uis/devops/continuous-delivery/ci-templates to v7 - autoclosed

This MR contains the following updates:

Package	Type	Update	Change
uis/devops/continuous-delivery/ci-templates	repository	major	v2.4.0 -> v7.6.1

---

Release Notes

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

v7.6.1: 7.6.1

Compare Source

7.6.1 (2025-07-16)

Bug Fixes

• pin trivy to 0.54.0 (c4368bc), closes #​128

v7.6.0: 7.6.0

Compare Source

7.6.0 (2025-07-10)

Features

• terraform: add tfplan.json to artefact list (710623f)

Bug Fixes

• terraform: restrict plan artefact access (723e094)

v7.5.3: 7.5.3

Compare Source

7.5.3 (2025-07-10)

v7.5.2: 7.5.2

Compare Source

7.5.2 (2025-07-10)

v7.5.1: 7.5.1

Compare Source

7.5.1 (2025-07-10)

Bug Fixes

• maven.gitlab-ci.yml: added missing GKE_RUNNER_TAG for cache-debug job (22df4e5)

v7.5.0: 7.5.0

Compare Source

7.5.0 (2025-07-03)

Features

• add compile_vulnerability_allowlist as a pre-req for the container_scanning job (94ae968)

v7.4.0: 7.4.0

Compare Source

7.4.0 (2025-07-01)

Features

• keep trivy output in fixed directory (5ce35ee)

v7.3.2: 7.3.2

Compare Source

7.3.2 (2025-06-26)

v7.3.1: 7.3.1

Compare Source

7.3.1 (2025-06-26)

v7.3.0: 7.3.0

Compare Source

7.3.0 (2025-06-26)

Features

• renovate: add all YAML files to gitlabci manager (1dc5db5)

v7.2.2: 7.2.2

Compare Source

7.2.2 (2025-06-26)

Bug Fixes

• trivy: pin to version 0.54.0 (6c62401), closes #​128

v7.2.1: 7.2.1

Compare Source

7.2.1 (2025-06-26)

Bug Fixes

• trigger-renovatebot: pin httpie image (b4e2c7f), closes #​129 #​129

v7.2.0: 7.2.0

Compare Source

7.2.0 (2025-06-23)

Features

• enable "advanced" SAST scanning for common pipeline projects (c3c3356), closes #​126

v7.1.0: 7.1.0

Compare Source

7.1.0 (2025-06-19)

Features

• add workflow-prefer-mr-pipelines.gitlab-ci.yml (bee3dbc), closes #​125

v7.0.2: 7.0.2

Compare Source

7.0.2 (2025-06-17)

v7.0.1: 7.0.1

Compare Source

7.0.1 (2025-06-17)

Bug Fixes

• remove use of deprecated workflow rules templates (c1e9531), closes #​124

v7.0.0: 7.0.0

Compare Source

7.0.0 (2025-06-17)

⚠️ BREAKING CHANGES

• add the common-pipeline, commitlint, and release-it

Features

• add the common-pipeline, commitlint, and release-it (8fbf3a9)

v6.15.0

Compare Source

Changed

• terraform-module.yml: Add support for Terraform testing with additional cleanup scripts.

Fixed

• terraform-module.yml: Override the tflint job so that the terraform_standard_module_structure rule is applied.
• terraform-module.yml: Override the pre-commit job to avoid duplication of our terraform-fmt, tflint, and trivy jobs.

v6.14.2

Compare Source

v6.14.1

Compare Source

v6.14.0

Compare Source

v6.13.0

Compare Source

v6.12.3

Compare Source

v6.12.2

Compare Source

Fixed

• terraform-module: override .test-job-rules from terraform-lint.yml as the terraform-module.yml template needs to support Auto-DevOps.

v6.12.1

Compare Source

v6.12.0

Compare Source

v6.11.0

Compare Source

Changed

• terraform-lint: use custom tflint docker image for the tflint job. This image includes the UIS DevOps custom tflint ruleset.
• terraform-lint: move default tflint arguments to a $TFLINT_ARGS variable to allow repositories to override if required.
• terraform-module: enable tflint in our Terraform reusable module pipeline.

v6.10.0

Compare Source

Fixed

• terraform-pipeline: Partially revert changes made in v5.1.0.
  • Plan jobs for branch push pipelines will be reverted.
  • Manual apply jobs for the development environment will remain in the merge request pipelines.

v6.9.0

Compare Source

v6.8.1

Compare Source

v6.8.0

Compare Source

v6.7.3

Compare Source

v6.7.2

Compare Source

v6.7.1

Compare Source

v6.7.0

Compare Source

v6.6.1

Compare Source

v6.6.0

Compare Source

v6.5.0

Compare Source

v6.4.4

Compare Source

v6.4.3

Compare Source

v6.4.2

Compare Source

v6.4.1

Compare Source

v6.4.0

Compare Source

v6.3.0

Compare Source

v6.2.0

Compare Source

v6.1.1

Compare Source

v6.1.0

Compare Source

v6.0.4

Compare Source

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.2.1

Compare Source

v5.2.0

Compare Source

v5.1.0

Compare Source

v5.0.0

Compare Source

v4.6.0

Compare Source

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.0

Compare Source

v4.3.1

Compare Source

v4.3.0

Compare Source

v4.2.0

Compare Source

Changed

• Remove allow_failure: true from commitlint and commitlint-hotfix jobs. This behaviour is no longer desirable as we've built our whole release-it process around the conventionalcommits specification. It's now more beneficial for these jobs to fail by default.

v4.1.0

Compare Source

Added

• A generic get-gcp-secrets fragment to retrieve one or more Google Secret Manager secrets in a CI job.

v4.0.0

Compare Source

Changed

• BREAKING CHANGE: removed legacy /auto-devops/terraform-deployment.yml and /auto-devops/terraform-lint.yml templates as these should not be being used any more.

• Refactored /auto-devops/terraform-pipeline.yml template so that the hidden "template" jobs are now in their own /terraform-pipeline-base.yml template file. This allows more flexibility for some projects which do not/cannot follow the standard three-environment deployment defined in the /auto-devops/terraform-pipeline.yml template.

• Refactored the Terraform testing/linting jobs into their own /terraform-lint.yml template. This is useful for projects which are not being deployed via CI/CD but which we do want to test in a pipeline.

v3.8.2

Compare Source

Fixed

• terraform-pipeline.yml: tflint rule terraform_standard_module_structure is now disabled.

v3.8.1

Compare Source

Fixed

• terraform-pipeline.yml: tflint job updated and now compatible with tflint v0.40.0+

v3.8.0

Compare Source

Changed

• terraform-pipeline.yml: tfsec job replaced with trivy as tfsec is now deprecated.

v3.7.1

Compare Source

Fixed

• artifact-registry.yml: added before_script to fix "docker in docker" service startup.

v3.7.0

Compare Source

Added

• artifact-registry.yml: add support for code repositories with multiple apps.

v3.6.1

Compare Source

Fixed

• check_latest_tag_in_changelog now correctly identifies the latest tag in the CHANGELOG, when there isn't a space after the closing square bracket.

v3.6.0

Compare Source

v3.5.0

Compare Source

v3.4.0

Compare Source

v3.3.0

Compare Source

Fixed

• terraform-pipeline.yml: allow plan and apply jobs to run on git tag actions.

Added

• terraform-pipeline.yml: add TF_PLAN_TARGET variable to allow targeted plan actions.

v3.2.0

Compare Source

v3.1.1

Compare Source

v3.1.0

Compare Source

Added

• commitlint.yml template to ensure the Conventional Commits standard is adhered to for projects who wish to use it.

v3.0.0

Compare Source

v2.7.0

Compare Source

Added

• terraform-module: Extend the GitLab Terraform Module to ensure the tag being used to version the module exists in the CHANGELOG.

v2.6.2

Compare Source

Fixed

• pre-commit.yml: relax pre-commit job rules to enable users to decide when to include the job via workflow rules instead.

v2.6.1

Compare Source

Fixed

• artifact-registry: fix issue with $DOCKER_CERT_PATH containing the $DOCKER_TLS_CERTDIR variable. We've seen multiple issues with this variable expanding as an empty value. Instead, we're simply hard coding it instead which appears to have resolved the issue.

v2.6.0

Compare Source

Added

• terraform-pipeline: Allow the tfsec job to exclude specific checks. This is useful to exclude a default list of checks that we don't follow in the boilerplate.

Fixed

• artifact-registry: Allow manual push to registry for non-default branches. This is useful for testing container images from feature branches. However, to avoid littering the artifact registry with endless feature branch containers, it is configured as a manual job.
• terraform-pipeline: Allow the development apply job to fail. This is currently the only way to allow the whole pipeline to show as succeeded if the (optional) development apply job has not been triggered. Otherwise, the pipeline shows as blocked, which is confusing. See the following issue for context https://gitlab.com/gitlab-org/gitlab/-/issues/249524.

v2.5.0

Compare Source

Added

• terraform-pipeline: Add resource_group to Terraform jobs to avoid concurrent pipelines for each environment.

Fixed

• terraform-pipeline: Add docker-in-docker service now that the GKE runner does not mount docker.sock from the host (see https://gitlab.developers.cam.ac.uk/uis/devops/devhub/gitlab-runner-infrastructure/-/merge\_requests/14).

v2.4.4

Compare Source

Fixed

• artifact-registry: Add docker-in-docker service now that the GKE runner does not mount the docker.sock from the host (see https://gitlab.developers.cam.ac.uk/uis/devops/devhub/gitlab-runner-infrastructure/-/merge\_requests/14).

v2.4.3

Compare Source

v2.4.2

Compare Source

Fixed

• artifact-registry.yml: include latest tag for development environments.

v2.4.1

Compare Source

Fixed

• artifact-registry.yml: remove needs: build to force the job to wait for tests to complete successfully.

---

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.