v1.3.8

What's Changed

• release: infrastructure v1.3.7 by @patheard in #410
• feat: code scanning config initialization by @ascheid in #379
• chore(deps): pin dependencies by @renovate in #412
• chore(deps): update all patch dependencies by @renovate in #414
• chore(deps): update all minor dependencies by @renovate in #413
• chore(deps): update cds-snc/security-tools digest to da072a7 by @renovate in #415
• chore(deps): update localstack/localstack docker digest to dcaa868 by @renovate in #416
• fix: set security events to allow SBOM publish by @patheard in #391
• chore(deps): update all patch dependencies by @renovate in #419
• chore(deps): update cds-snc/security-tools digest to e8bfe28 by @renovate in #421
• chore(deps): update localstack/localstack docker digest to 778a25c by @renovate in #422
• chore(deps): update postgres:14.6 docker digest to cfd6203 by @renovate in #423
• chore(deps): update python:3.9-slim-buster docker digest to c528200 by @renovate in #424
• chore(deps): update all minor dependencies by @renovate in #420
• feat: add resolver DNS firewall by @patheard in #426
• fix: DNS firewall VPC association priority by @patheard in #427
• fix: use .amazonaws.com. domain in domain list by @patheard in #428
• feat: Send scan verdict output to Sentinel by @maxneuvians in #429
• fix: warn when non-clean scan verdicts by @patheard in #431
• release: latest lambda docker images by @patheard in #432
• chore: switch to resolver DNS Terraform module by @patheard in #433

New Contributors

• @ascheid made their first contribution in #379

Full Changelog: v1.3.7...v1.3.8

v1.3.7

What's Changed

• release: infrastructure v1.3.6 by @patheard in #404
• fix: remove all CORS configuration by @patheard in #407
• chore(deps): update all patch dependencies by @renovate in #405
• chore(deps): update cds-snc/security-tools digest to ed1f03e by @renovate in #408
• chore(deps): update localstack/localstack docker digest to 6b6ac49 by @renovate in #409
• chore(deps): update all minor dependencies by @renovate in #406

Full Changelog: v1.3.6...v1.3.7

v1.3.6

What's Changed

• release: infrastructure v1.3.5 by @patheard in #395
• feat: add DAST vulnerability scan by @patheard in #396
• fix: tighten CORS headers by @patheard in #397
• fix: CORS allowed methods by @patheard in #398
• fix: replace unsupported method by @patheard in #399
• feat: add CORS configuration to CloudFront by @patheard in #401
• fix: update CloudFront CORS to include headers by @patheard in #403

Full Changelog: v1.3.5...v1.3.6

v1.3.5

What's Changed

• release: single connection database pool by @patheard in #369
• chore(deps): update jtalk/url-health-check-action digest to 61a0e49 by @renovate in #377
• chore(deps): update cds-snc/security-tools digest to 0d48a90 by @renovate in #375
• chore(deps): update localstack/localstack docker digest to 877be66 by @renovate in #376
• chore(deps): update all patch dependencies by @renovate in #371
• chore(deps): update dependency jest to v29.2.0 by @renovate in #372
• chore(deps): lock file maintenance by @renovate in #378
• chore: use a single NAT gateway by @patheard in #374
• chore(deps): update all patch dependencies by @renovate in #380
• chore(deps): update all minor dependencies by @renovate in #381
• chore(deps): update cds-snc/security-tools digest to 1a30001 by @renovate in #382
• chore(deps): update localstack/localstack docker digest to f80bd8f by @renovate in #383
• chore(deps): update node.js to b953f75 by @renovate in #384
• chore(deps): update python:3.9-slim-buster docker digest to 9e014f3 by @renovate in #385
• chore(deps): update postgres:14.5 docker digest to 135c62a by @renovate in #386
• chore(deps): update dependency aws-lambda-powertools to v2 by @renovate in #387
• feat: docker dependency scan using Trivy by @patheard in #389
• fix: reference to Docker image to scan by @patheard in #390
• fix: add IP allowlist to WAF ACL by @patheard in #393
• fix: IP set region for CloudFront by @patheard in #394

Full Changelog: v1.3.4...v1.3.5

v1.3.4

What's Changed

• release: infrastructure v1.3.3 by @patheard in #361
• test: single pool connection by @patheard in #362
• chore(deps): update all patch dependencies by @renovate in #363
• chore(deps): update cds-snc/security-tools digest to 40216f2 by @renovate in #364
• chore(deps): update postgres:14.5 docker digest to 742d819 by @renovate in #367
• chore(deps): update dorny/paths-filter digest to 4512585 by @renovate in #365
• chore(deps): update localstack/localstack docker digest to abe5d8e by @renovate in #366
• chore(deps): update python:3.9-slim-buster docker digest to f67facc by @renovate in #368

Full Changelog: v1.3.3...v1.3.4

v1.3.3

What's Changed

• release: infrastructure v1.3.2 by @patheard in #356
• chore: change logging level to error by @patheard in #357
• fix: allow warning logs as well by @patheard in #358
• fix: pino logging level by @patheard in #359

Full Changelog: v1.3.2...v1.3.3

v1.3.2

What's Changed

• release: infrastructure v1.3.1 by @patheard in #352
• feat: add Route53 dns query logging by @patheard in #353
• fix: add SNS and STS VPC private endpoints by @patheard in #355

Full Changelog: v1.3.1...v1.3.2

v1.3.1

What's Changed

• release: infrastructure v1.3.0 by @patheard in #318
• test: renovate schedule PRs at any time by @patheard in #319
• chore: revert schedule test by @patheard in #320
• chore(deps): update all patch dependencies by @renovate in #321
• chore(deps): update dependency boto3 to v1.24.80 by @renovate in #326
• chore(deps): update all minor dependencies by @renovate in #327
• chore(deps): update cds-snc/security-tools digest to f142920 by @renovate in #328
• chore(deps): update postgres:14.5 docker digest to b0ee049 by @renovate in #329
• chore(deps): update python:3.9-slim-buster docker digest to 320b1dc by @renovate in #330
• chore(deps): update dependency coverage to v6 by @renovate in #334
• chore(deps): update dependency flake8 to v5 by @renovate in #335
• chore(deps): update dependency pytest to v7 by @renovate in #336
• fix(deps): update dependency axios to v1 by @renovate in #337
• chore(deps): update all minor dependencies by @renovate in #338
• chore(deps): update all patch dependencies by @renovate in #339
• chore(deps): update cds-snc/security-tools digest to 9f408df by @renovate in #341
• chore(deps): update localstack/localstack docker digest to a7e584d by @renovate in #342
• chore(deps): update postgres:14.5 docker digest to 640fa55 by @renovate in #344
• chore(deps): update node.js to 50808db by @renovate in #343
• chore(deps): update python:3.9-slim-buster docker digest to 073491c by @renovate in #345
• chore(deps): update cds-snc/terraform-plan action to v2.3.1 by @renovate in #340
• chore(deps): update dependency pytz to v2022.4 by @renovate in #346
• release: latest images to prod by @patheard in #347
• feat: add VPC private endpoints by @patheard in #349
• chore(deps): update all minor dependencies by @renovate in #350

Full Changelog: v1.3.0...v1.3.1

v1.3.0

What's Changed

• release: infrastructure v1.2.3 by @patheard in #314
• chore(deps): update all patch dependencies by @renovate in #316
• chore(deps): update all minor dependencies by @renovate in #317
• feat: create API config environment variables by @patheard in #312

Full Changelog: v1.2.3...v1.3.0

v1.2.3

What's Changed

• release: infrastructure v1.2.2 by @patheard in #301
• chore(deps): update all patch dependencies by @renovate in #298
• test: renovate config settings by @patheard in #302
• fix: formatting of PR body notes by @patheard in #304
• fix: update prBodyNotes to use newline by @patheard in #306
• chore: remove prBodyNotes by @patheard in #307
• chore: update checkov skip comment by @patheard in #308
• chore(deps): update localstack/localstack docker digest to a7d4498 by @renovate in #303
• chore(deps): update cds-snc/security-tools digest to b8b6f81 by @renovate in #309
• chore(deps): update localstack/localstack docker digest to a332992 by @renovate in #310
• fix: set prod OIDC provider to exists by @patheard in #313

Full Changelog: v1.2.2...v1.2.3