build(deps): bump taskcluster from 44.4.0 to 44.17.2 in /report

[dependabot]

Bumps taskcluster from 44.4.0 to 44.17.2.

Release notes

Sourced from taskcluster's releases.

v44.17.2

GENERAL

▶ [patch] Go update from 1.18.3 to 1.18.4. Also updates the git version for generic worker decision tasks from git2.24.0.2 to git2.37.1.

DEPLOYERS

▶ [patch] bug 1633440 Spread cron task times that started at 00:00 to minimize CPU spikes and DB loads.

USERS

▶ [patch] Set the key field on the login window to a password field instead of a text one

DEVELOPERS

▶ [patch] Fix docker compose sometimes not starting the ingress container

▶ [patch] #5553 This change adds continuous deployment support to the cloudbuild.yaml file so that each change to main results in a new deployment to https://dev.alpha.taskcluster-dev.net/.

▶ [patch] #5554 This patch splits the docker compose file into separate dev and prod configuration files. For prod-like deployments, where you want to use the latest taskcluster/taskcluster docker image, use the command docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d. For development deployments, where local source code mounts as volumes for testing/debugging purposes, use the command docker compose -f docker-compose.yml -f docker-compose.dev.yml up -d.

This change also switches docker-compose (v1) references over to docker compose (v2). See here for more details.

v44.17.1

GENERAL

▶ [patch] Remove unused config value auditLog

▶ [patch] This patch addresses the following vuln in passport https://security.snyk.io/vuln/SNYK-JS-PASSPORT-2840631. This also upgrades express to the latest stable release.

▶ [patch] #5557 This patch upgrades to Debian 10 docker images, as Debian 9 hit EOL.

▶ [patch] Upgrade node to the latest LTS release, v16.16.0. This is a security release. More info can be found here.

DEVELOPERS

▶ [patch] Remove node-fetch dependency from ui/ as it was only used in abandoned queryServer.js script to cache possible graphql types.

... (truncated)

Changelog

Sourced from taskcluster's changelog.

v44.17.2

GENERAL

▶ [patch] Go update from 1.18.3 to 1.18.4. Also updates the git version for generic worker decision tasks from git2.24.0.2 to git2.37.1.

DEPLOYERS

▶ [patch] bug 1633440 Spread cron task times that started at 00:00 to minimize CPU spikes and DB loads.

USERS

▶ [patch] Set the key field on the login window to a password field instead of a text one

DEVELOPERS

▶ [patch] Fix docker compose sometimes not starting the ingress container

▶ [patch] #5553 This change adds continuous deployment support to the cloudbuild.yaml file so that each change to main results in a new deployment to https://dev.alpha.taskcluster-dev.net/.

▶ [patch] #5554 This patch splits the docker compose file into separate dev and prod configuration files. For prod-like deployments, where you want to use the latest taskcluster/taskcluster docker image, use the command docker compose -f docker-compose.yml -f docker-compose.prod.yml up -d. For development deployments, where local source code mounts as volumes for testing/debugging purposes, use the command docker compose -f docker-compose.yml -f docker-compose.dev.yml up -d.

This change also switches docker-compose (v1) references over to docker compose (v2). See here for more details.

v44.17.1

GENERAL

▶ [patch] Remove unused config value auditLog

▶ [patch] This patch addresses the following vuln in passport https://security.snyk.io/vuln/SNYK-JS-PASSPORT-2840631. This also upgrades express to the latest stable release.

▶ [patch] #5557 This patch upgrades to Debian 10 docker images, as Debian 9 hit EOL.

▶ [patch] Upgrade node to the latest LTS release, v16.16.0. This is a security release. More info can be found here.

DEVELOPERS

▶ [patch]

... (truncated)

Commits

• ec37932 v44.17.2
• 7f49f49 Merge pull request #5578 from taskcluster/matt-boris/cloudBuildCD
• 95c0e5e Merge pull request #5579 from ahal/doc_fix
• 645651e docs: fix typo in escape sequence in Github integration deployment
• fd47dc0 Use commit sha for version and add some docs about
• 5d4a602 feat(cd): use cloudbuild for CD to a dev env
• d64f673 Merge pull request #5564 from taskcluster/matt-boris/dockerComposeDevProd
• 2a8582e feat: split out dev/prod docker compose files
• 274bb49 Merge pull request #5568 from Eijebong/nginx-fix
• d559a19 Merge pull request #5571 from taskcluster/chore/spread-cron-times
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[marco-c]

@dependabot rebase