Merge branch 'main' into renovate/main-amannn-action-semantic-pull-request-digest

.github/workflows/codeql.yml

@@ -87,7 +87,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
+      uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -101,7 +101,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, Go, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
+      uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -114,7 +114,7 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@ce28f5bb42b7a9f2c824e633a3f6ee835bab6858 # v3
+      uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3
       with:
         category: "/language:${{matrix.language}}"
 

.github/workflows/release.yml

@@ -24,7 +24,7 @@ jobs:
         go-version-file: go.mod
 
     - name: Run GoReleaser for stable release
-      uses: goreleaser/goreleaser-action@9c156ee8a17a598857849441385a2041ef570552 # v6
+      uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6
       if: (!contains(github.ref, 'pre'))
       with:
         # You can pass flags to goreleaser via GORELEASER_ARGS

.github/workflows/test.yml

@@ -53,7 +53,7 @@ jobs:
     if: needs.changes.outputs.should-run-tests == 'true'
     name: Tests
     runs-on: ubuntu-24.04
-    container: ghcr.io/runatlantis/testing-env:latest@sha256:143a71dd97160495dbcaa30601f0868123672f207d8a78894ea7b36b946e23f9
+    container: ghcr.io/runatlantis/testing-env:latest@sha256:725981e9090c977f8055f5ec5ba7a63430a8f0337ab955978e6b8cc2cd0236c3
     steps:
       - name: Harden Runner
         uses: step-security/harden-runner@c6295a65d1254861815972266d5933fd6e532bdf # v2.11.1

docker-compose.yml

@@ -1,7 +1,7 @@
 # Note: This file is only used for Atlantis local development
 services:
   ngrok:
-    image: ngrok/ngrok:latest@sha256:0dbf30ec036f2369d3b9018a8287aa2414deb90ccf44536cb2fcfd238b3d4f70
+    image: ngrok/ngrok:latest@sha256:1dae5be9a74825c44ab9c89be047e18b7b71ce5ce4453cabfcfec2e541e67b14
     ports:
       - 4040:4040
     command:

runatlantis.io/docs/repo-level-atlantis-yaml.md

@@ -53,40 +53,40 @@ manually configured project, the manually configured project will take precedenc
 ## Example Using All Keys
 
 ```yaml
-version: 3 <Badge text="v0.1.0+" type="info"/>
-automerge: true <Badge text="v0.15.0+" type="info"/>
-autodiscover: <Badge text="v0.18.0+" type="info"/>
+version: 3 # Available since v0.1.0
+automerge: true # Available since v0.15.0
+autodiscover: # Available since v0.18.0
   mode: auto
   ignore_paths:
   - some/path
-delete_source_branch_on_merge: true <Badge text="v0.15.0+" type="info"/>
-parallel_plan: true <Badge text="v0.17.0+" type="info"/>
-parallel_apply: true <Badge text="v0.17.0+" type="info"/>
-abort_on_execution_order_fail: true <Badge text="v0.17.0+" type="info"/>
+delete_source_branch_on_merge: true # Available since v0.15.0
+parallel_plan: true # Available since v0.17.0
+parallel_apply: true # Available since v0.17.0
+abort_on_execution_order_fail: true # Available since v0.17.0
 projects:
-- name: my-project-name <Badge text="v0.1.0+" type="info"/>
-  branch: /main/ <Badge text="v0.20.0+" type="info"/>
-  dir: . <Badge text="v0.1.0+" type="info"/>
-  workspace: default <Badge text="v0.1.0+" type="info"/>
-  terraform_distribution: terraform <Badge text="v0.25.0+" type="info"/>
-  terraform_version: v0.11.0 <Badge text="v0.1.0+" type="info"/>
-  delete_source_branch_on_merge: true <Badge text="v0.17.0+" type="info"/>
-  repo_locking: true # deprecated: use repo_locks instead <Badge text="v0.17.0+" type="info"/>
-  repo_locks: <Badge text="v0.17.0+" type="info"/>
+- name: my-project-name # Available since v0.1.0
+  branch: /main/ # Available since v0.20.0
+  dir: . # Available since v0.1.0
+  workspace: default # Available since v0.1.0
+  terraform_distribution: terraform # Available since v0.25.0
+  terraform_version: v0.11.0 # Available since v0.1.0
+  delete_source_branch_on_merge: true # Available since v0.17.0
+  repo_locking: true # deprecated: use repo_locks instead, Available since v0.17.0
+  repo_locks: # Available since v0.17.0
     mode: on_plan
-  custom_policy_check: false <Badge text="v0.17.0+" type="info"/>
-  autoplan: <Badge text="v0.1.0+" type="info"/>
+  custom_policy_check: false # Available since v0.17.0
+  autoplan: # Available since v0.1.0
     when_modified: ["*.tf", "../modules/**/*.tf", ".terraform.lock.hcl"]
     enabled: true
-  plan_requirements: [mergeable, approved, undiverged] <Badge text="v0.17.0+" type="info"/>
-  apply_requirements: [mergeable, approved, undiverged] <Badge text="v0.17.0+" type="info"/>
-  import_requirements: [mergeable, approved, undiverged] <Badge text="v0.17.0+" type="info"/>
-  silence_pr_comments: ["apply"] <Badge text="v0.17.0+" type="info"/>
-  execution_order_group: 1 <Badge text="v0.17.0+" type="info"/>
-  depends_on: <Badge text="v0.20.0+" type="info"/>
+  plan_requirements: [mergeable, approved, undiverged] # Available since v0.17.0
+  apply_requirements: [mergeable, approved, undiverged] # Available since v0.17.0
+  import_requirements: [mergeable, approved, undiverged] # Available since v0.17.0
+  silence_pr_comments: ["apply"] # Available since v0.17.0
+  execution_order_group: 1 # Available since v0.17.0
+  depends_on: # Available since v0.20.0
     - project-1
-  workflow: myworkflow <Badge text="v0.17.0+" type="info"/>
-workflows: <Badge text="v0.1.0+" type="info"/>
+  workflow: myworkflow # Available since v0.17.0
+workflows: # Available since v0.1.0
   myworkflow:
     plan:
       steps:
@@ -102,7 +102,7 @@ workflows: <Badge text="v0.1.0+" type="info"/>
       steps:
       - run: echo hi
       - apply
-allowed_regexp_prefixes: <Badge text="v0.19.0+" type="info"/>
+allowed_regexp_prefixes: # Available since v0.19.0
 - dev/
 - staging/
 ```