chore(deps): update all dependencies

[platform-engineering-bot]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	6.0.0 -> 6.2.0
gitlab (source)	required_provider	minor	18.0.0 -> 18.1.1
gitlab-org/gitlab-runner		minor	18.0.3 -> 18.1.1
terraform-aws-modules/vpc/aws (source)	module	major	5.21.0 -> 6.0.1

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.2.0

Compare Source

ENHANCEMENTS:

• data-source/aws_kinesis_stream_consumer: Add tags attribute. This functionality requires the kinesis:ListTagsForResource IAM permission (#​43173)
• resource/aws_amplify_branch: Add enable_skew_protection argument (#​43218)
• resource/aws_kinesis_stream_consumer: Add tags argument and tags_all attribute. This functionality requires the kinesis:ListTagsForResource, kinesis:TagResource, and kinesis:UntagResource IAM permissions (#​43173)
• resource/aws_rbin_rule: Add exclude_resource_tags argument (#​43189)
• resource/aws_s3_directory_bucket: Add tags argument and tags_all attribute. This functionality requires the s3express:ListTagsForResource, s3express:TagResource, and s3express:UntagResource IAM permissions (#​43256)

BUG FIXES:

• provider: Fix Unexpected Identity Change errors for numerous resource types when refreshing resources created or refreshed by Terraform AWS Provider v6.0.0 (#​43221)
• resource/aws_appflow_connector_profile: Fixes error refreshing resource state. (#​43221)
• resource/aws_cloudwatch_query_definition: Support ARNs as valid values for log_group_names (#​43183)

gitlabhq/terraform-provider-gitlab (gitlab)

v18.1.1

Compare Source

BUG FIXES (1 change)

• resource/gitlab_group_service_account_access_token: Fix a bug when using scopes with an unknown set, resulting in an error message about the provider by @​heidi.berry (merge request)

v18.1.0

Compare Source

FEATURES (3 changes)

• resource/gitlab_project_merge_request_note: New resource allows creating merge request notes by @​heidi.berry (merge request)
• resource/gitlab_application_appearance: New resource allows managing instance-wide application appearance by @​heidi.berry (merge request)
• datasource/gitlab_project_merge_requests: New datasource allows listing project merge requests by @​heidi.berry (merge request)

IMPROVEMENTS (15 changes)

• resource/gitlab_project: Add support for ci_forward_deployment_rollback_allowed by @​paroose (merge request)
• resource/gitlab_project: Add support for auto_duo_code_review_enabled by @​mness (merge request)
• resource/gitlab_project: Add branches option to project resource when forking by @​Taucher2003 (merge request)
• resource/gitlab_group_saml_link: Update group access level list for SAML group links to include planner by @​heidi.berry (merge request)
• resource/gitlab_deploy_key: Add support for expires_at, allowing expiring project deploy keys by @​heidi.berry (merge request)
• resource/gitlab_project_integration_mattermost: Rename mattermost integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_emails_on_push: Rename emails on push integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_external_wiki: Rename external wiki integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_custom_issue_tracker: Rename custom issue tracker integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_jenkins: Rename jenkins integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_harbor: Rename harbor integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_group_service_account_access_token: Add support creating service account tokens with no expiry by @​heidi.berry (merge request)
• resource/gitlab_project_job_token_scopes: The enabled attribute will now attempt to check the instance enforce_ci_inbound_job_token_scope_enabled prior to allowing a user to set the value to false, and will fail at plan time instead of apply time if the enabled setting conflicts with instance settings. by @​PatrickRice (merge request)
• datasource/gitlab_user: Add experimental support for email_exact_match, which will always return an exact match on the email. This will override the fuzzy matching of the GitLab search API when no users match the given email. by @​ricardo.bartels (merge request)
• multiple resources: Add missing examples to resources by @​heidi.berry (merge request)

BUG FIXES (3 changes)

• resource/gitlab_branch: Add warning to use lifecycle ignore_changes for gitlab_branch.ref by @​heidi.berry (merge request)
• resource/gitlab_project: If a project import fails, the specific import error will now be surfaces to the user by @​heidi.berry (merge request)
• multiple label resources: Fixed an issue where using label color names would cause an error by @​heidi.berry (merge request)

gitlab-org/gitlab-runner (gitlab-org/gitlab-runner)

v18.1.1

Compare Source

See the changelog 🚀

GitLab Runner documentation can be found at https://docs.gitlab.com/runner/.

v18.1.0

Compare Source

New features

• Added safety checks for nil sessions and empty endpoints !5515 (Zubeen @​syedzubeen)
• Log a different message for policy jobs with highest precedence !5628
• Add adaptive request concurrency !5546
• Allow to install/manipulate the gitlab-runner service as a user service (systemd) !5534 (Tiago Teixeira @​tiago.teixeira.erx)
• Bump base images to allow native clone to work !5561
• Support user as integer for Docker/Kubernetes executor_opts !5552
• Thread job request correlation ID to git operations !5653
• make preemptive mode configurable !5565 (Pascal Sochacki @​pascal.sochacki)
• Add queue_size and queue_depth metrics !5592
• Log policy job information !5591
• Add more request_concurrency related metrics !5558
• Enable powershell native clone !5577 (Guillaume Chauvel @​guillaume.chauvel)
• Add support for Overlay Volume Mounts when Podman is used with Docker Executor !5522 (Napuu @​napuu)

Bug fixes

• Stop following symlinks when archiving documents !5543
• Docker+autoscaler: Properly clean up when a job times out or is cancelled !5593
• Fix AWS GovCloud with AWS S3 cache !5613
• Fix final job duration handling !5583
• Document DinD DNS behavior with network-per-build feature !5611
• Run git config cleanup before creating the template dir !5598
• Fix authentication towards HTTP docker registries !5329 (François HORTA @​fhorta1)
• Switch the default for FF_GIT_URLS_WITHOUT_TOKENS back to false !5572
• Handle the new glrtr- prefix !5580

Maintenance

• Update golang.org/x/net to fix CVE-2025-22872 !5594
• Added missing commas !5579
• Docker executor image clarification and macOS virtualization info !5571 (Charles Uneze @​network-charles)
• Fix rules for the unit test job !5618
• Tidy runner_wrapper/api !5604
• Limit Unit test job to only MR pipelines for forks !5608
• Making timeout to acquire a new instance configurable within gitlab-runner !5563 (Moritz Scheve @​schevmo)
• Remove outdated information !5620
• Add correlation_id to request logs !5615
• Bump base-images to 0.0.18 !5633
• Fix pipelines for forks !5607
• Update redirected links !5605
• Improve pipelines for community, fork, docs MRs !5576
• Fix protoc binary download for macos !5570
• Document how to install GitLab Runner on z/OS manually !5641
• Upgrade Go to v1.24.3 !5562
• Clean up stray whitespace !5585
• Remove kaniko references in GitLab Runner docs !5560
• Update step-runner dependency version to 0.11.0 !5645
• Update dates in examples !5621
• Clean up tables in misc runner docs !5589
• Docs: more bold cleanup !5586
• Document how to set environment variables in GitLab Runner Helm chart !5559
• Restrict danger-review to canonical GitLab forks !5640
• Push GitLab Documentation Translations Upstream [2025-06-09] !5630
• docs: Add custom executor "shell" property !5578 (Guillaume Chauvel @​guillaume.chauvel)
• Remove randomness of TestProcessRunner_BuildLimit failures !5588
• Run Hugo build test on the correct Docs branch !5545
• Install local dev tools and dependency binaries in on go !5632
• chore: install tool binaries in tmp bin !5629
• docs: Remove a line that is not accurate to the current usages of GRIT !5601
• Config options refactor !5373
• Move internal docs into development directory !5595
• Update CHANGELOG to take in account 17.10.x to 18.0.x releases !5643
• Update docker machine in docs !5603
• Remove outdated mention !5582
• Added Experimental Status !5602
• Remove outdated content !5597
• Use mockery constructors in tests !5581
• Auto-format all remaining runner tables !5584
• Update the cntlm link to the new fork !5556 (Dan Fredell @​DFredell)
• Update docker-machine version in docs !5617

terraform-aws-modules/terraform-aws-vpc (terraform-aws-modules/vpc/aws)

v6.0.1

Compare Source

Bug Fixes

• Bump AWS provider requirement to v6 everywhere (#​1208) (26c99a5)

v6.0.0

Compare Source

⚠ BREAKING CHANGES

• Bump AWS provider requirement to v6 (#​1205)

Features

• Bump AWS provider requirement to v6 (#​1205) (4483701)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.