chore(deps): update dependency gitlab-com/gl-infra/common-ci-tasks to v3

[renovate-rancher]

This PR contains the following updates:

Package	Type	Update	Change	Pending
gitlab-com/gl-infra/common-ci-tasks	repository	major	v2.93.0 → v3.4.1	v3.4.3 (+1)

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

gitlab-com/gl-infra/common-ci-tasks (gitlab-com/gl-infra/common-ci-tasks)

v3.4.1

Compare Source

3.4.1 (2026-01-12)

Fixes

• allow decomposition of chef tasks (a0624da)

Docs

• migrate to component syntax and update documentation URLs (75087fc)

Dependencies

• deps: update dependency bridgecrewio/checkov to v3.2.497 (598dd95)
• deps: update dependency docker/cli to v29 (18fef71)
• deps: update dependency docker/cli to v29.1.4 (beef4fe)
• deps: update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.12 (ce5703a)
• deps: update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.13 (a892d3e)
• deps: update dependency helm/helm to v3.19.4 (9642e5c)
• deps: update dependency jdx/mise to v2025.12.13 (202cd2b)
• deps: update dependency jdx/mise to v2026 (0fe79e3)
• deps: update dependency mikefarah/yq to v4.50.1 (3ef8f04)
• deps: update dependency open-policy-agent/conftest to v0.66.0 (0ef91f8)
• deps: update dependency open-policy-agent/opa to v1.12.2 (985c12f)
• deps: update dependency pre-commit/pre-commit to v4.5.1 (74ec1a8)
• deps: update dependency python/cpython to v3.14.2 (11f8c15)
• deps: update dependency ruby/ruby to v3.4.8 (e200ac6)
• deps: update dependency terraform-docs/terraform-docs to v0.21.0 (6f6fcd6)
• deps: update ghcr.io/containerbase/base docker tag to v13.25.22 (e3b2f33)
• deps: update golang-patch to v1.25.5 (3e161b8)
• deps: update node.js to v24.12.0 (b8df079)
• deps: update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v3.4 (0fd85e0)
• deps: update python docker tag to v3.14 (55685ca)

v3.4.0

Compare Source

3.4.0 (2025-12-10)

Features

• localstack: add integration test template (a129a3d)

Fixes

• localstack: ensure pipx bin directory is in PATH and suppress apt warnings (44749ea)

v3.4

Compare Source

v3.3.1

Compare Source

3.3.1 (2025-12-03)

Fixes

• gitlint: re-enable repository cloning in gitlint task (3b9c37c)

Others

• ci: fix scheduled pipeline exclusion rules in CI (47a3137)

Dependencies

• deps: update common-ci-tasks to v3.3 (4d4a5f5)
• deps: update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.38.0 (8d0a9fd)
• deps: update dependency jdx/mise to v2025.11.11 (aff7f76)
• deps: update ghcr.io/containerbase/base docker tag to v13.25.5 (e046ba0)

v3.3.0

Compare Source

3.3.0 (2025-11-28)

Features

• mise: drop support for scripts/install-asdf-plugins.sh and run mise install directly instead (d565a05)

Dependencies

• deps: update common-ci-tasks to v3.2 (8ccd6de)
• deps: update dependency git/git to v2.52.0 (5d63422)
• deps: update dependency https://gitlab.com/gitlab-com/gl-infra/common-template-copier.git to v1.37.1 (2f62289)
• deps: update dependency jdx/mise to v2025.11.10 (ffc1320)
• deps: update dependency mikefarah/yq to v4.49.2 (083f049)
• deps: update dependency open-policy-agent/conftest to v0.65.0 (6214500)
• deps: update dependency open-policy-agent/opa to v1.11.0 (3928499)
• deps: update dependency pre-commit/pre-commit to v4.5.0 (05ffc7b)
• deps: update dependency zricethezav/gitleaks to v8.30.0 (f1b0b9f)
• deps: update ghcr.io/containerbase/base docker tag to v13.25.4 (7ddff5a)

v3.3

Compare Source

v3.2.0

Compare Source

3.2.0 (2025-11-26)

Features

• remove asdf from Renovate image (bab7876)

v3.2

Compare Source

v3.1.2

Compare Source

3.1.2 (2025-11-26)

Fixes

• disable minimal clone for Danger jobs (4b1c636)

Others

• don't check for final newline in .tool-versions (8e6c3fd)

Dependencies

• deps: update common-ci-tasks to v3.1 (aa921e3)
• deps: update dependency bridgecrewio/checkov to v3.2.495 (96a0be3)
• deps: update dependency jdx/mise to v2025.11.7 (2d987da)
• deps: update dependency mikefarah/yq to v4.49.1 (8aefcbd)

v3.1.1

Compare Source

3.1.1 (2025-11-24)

Fixes

• rename docker to docker-cli in .tool-versions (ac84940)

v3.1.0

Compare Source

3.1.0 (2025-11-21)

Features

• reduce clone size for common-ci-tasks (4d0e20c)

Others

• allow unstable upgrades for tflint (0ecd810)

v3.1

Compare Source

v3.0.4

Compare Source

3.0.4 (2025-11-21)

Fixes

• add common-ci-tasks-images and jq images to truncated version rules in Renovate (3f2519f)

v3.0.3

Compare Source

3.0.3 (2025-11-20)

Fixes

• allow loose versioning for X.Y semver in Renovate (a1b437b)

v3.0.2

Compare Source

3.0.2 (2025-11-20)

Fixes

• add extends to rspec-test-job (d4a04bc)

Others

• add comment as to where its defined (96e4e4d)
• update templates/chef-rspec/template.yml (36d9db8)

Dependencies

• deps: update dependency helm/helm to v3.19.2 (598037a)
• deps: update ghcr.io/containerbase/base docker tag to v13.24.3 (9a57027)
• deps: update node.js to v24.11.1 (8de13ed)

v3.0.1

Compare Source

3.0.1 (2025-11-19)

Fixes

• fix broken chef-kitchen CI task (18eb095)

Dependencies

• deps: update common-ci-tasks to v3 (bd65b01)
• deps: update dependency bridgecrewio/checkov to v3.2.492 (dad181a)
• deps: update dependency docker/cli to v28.5.2 (370b6a1)
• deps: update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.10 (71a150c)
• deps: update dependency open-policy-agent/conftest to v0.64.0 (571a301)
• deps: update dependency open-policy-agent/opa to v1.10.1 (dba7ee0)
• deps: update dependency pre-commit/pre-commit to v4.4.0 (0e23178)
• deps: update dependency zricethezav/gitleaks to v8.29.0 (9822545)
• deps: update ghcr.io/containerbase/base docker tag to v13.24.1 (b7c843b)
• deps: update golang-patch to v1.25.4 (31508c6)
• deps: update node.js to v24 (e5c3f08)

v3.0.0

Compare Source

3.0.0 (2025-11-04)

⚠ BREAKING CHANGES

• the dependency_scanning job was renamed to dependency-scanning, the .ds-analyzer job template has been removed.

Features

• migrate dependency scanning to V2 template (d19a05a)

Dependencies

• deps: update common-ci-tasks to v2.98 (e88b386)
• deps: update dependency bridgecrewio/checkov to v3.2.489 (fd79941)
• deps: update dependency git/git to v2.51.2 (30c5298)
• deps: update dependency open-policy-agent/opa to v1.10.0 (cc7c325)
• deps: update ghcr.io/containerbase/base docker tag to v13.23.17 (387db7c)
• deps: update node.js to v22.21.1 (bac9638)

v3.0

Compare Source

v2.98.1

Compare Source

2.98.1 (2025-10-29)

Fixes

• Update chef markdown files (b9c6f8b)

v2.98.0

Compare Source

2.98.0 (2025-10-27)

Features

• Add Chainguard host rule for Renovate (9e05580)

Dependencies

• deps: update common-ci-tasks to v2.96 (f1228f7)
• deps: update common-ci-tasks to v2.97 (ecd27f0)
• deps: update dependency bridgecrewio/checkov to v3.2.487 (1854e02)
• deps: update ghcr.io/containerbase/base docker tag to v13.23.10 (ec143e3)
• deps: update node.js to v22.21.0 (18a4f23)

v2.98

Compare Source

v2.97.0

Compare Source

2.97.0 (2025-10-23)

Features

• Add environment variables to authenticate to registry.gitlab.com (ca74777)

v2.97

Compare Source

v2.96.0

Compare Source

2.96.0 (2025-10-21)

Features

• jsonnetlint job (99bfa0a)

Dependencies

• deps: update common-ci-tasks to v2.95 (f5de985)
• deps: update dependency bridgecrewio/checkov to v3.2.484 (7222b39)
• deps: update dependency docker/cli to v28.5.1 (220d63c)
• deps: update dependency git/git to v2.51.1 (fa678d0)
• deps: update dependency gitlab-com/gl-infra/jsonnet-tool to v1.17.9 (ed4e304)
• deps: update dependency jdx/mise to v2025.10.11 (3905aef)
• deps: update ghcr.io/containerbase/base docker tag to v13.23.3 (2ba5998)

v2.96

Compare Source

v2.95.0

Compare Source

2.95.0 (2025-10-18)

Features

• go-unittests: Support the GO_UNITTESTS_EXTRA_ARGS variable. (57ef615)

Others

• scripts/generate.sh (b4667d2)
• fix final newline in .tool-versions (d441476)
• renovate: run scripts/generate.sh when md files are updated too (5a9663b)
• templates: generate (d4c2771)

Dependencies

• deps: update common-ci-tasks to v2.94 (17349b5)
• deps: update dependency bridgecrewio/checkov to v3.2.479 (d8e6227)
• deps: update dependency bridgecrewio/checkov to v3.2.483 (597d0b3)
• deps: update dependency jdx/mise to v2025.10.7 (c6b079c)
• deps: update dependency mikefarah/yq to v4.48.1 (fad0cc6)
• deps: update dependency open-policy-agent/conftest to v0.63.0 (f571421)
• deps: update dependency python/cpython to v3.13.8 (6b0abd0)
• deps: update dependency python/cpython to v3.14.0 (1c52673)
• deps: update dependency ruby/ruby to v3.4.7 (52d8363)
• deps: update ghcr.io/containerbase/base docker tag to v13.20.2 (b5e5853)
• deps: update golang-patch to v1.25.2 (4eeaf6f)
• deps: update golang-patch to v1.25.3 (2903218)
• deps: update python docker tag to v3.14 (0c1d0ef)

v2.95

Compare Source

v2.94.0

Compare Source

2.94.0 (2025-10-02)

Features

• autolabels: Add the allow_failure input. (2bf105c)

Others

• scripts/generate.sh (afe6288)

v2.94

Compare Source

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.