Release: Merge release into master from: release/2.41.0

[github-actions]

Release triggered by rossops

[dryrunsecurity]

DryRun Security Summary

The pull request includes various updates to the DefectDojo application's infrastructure, dependencies, and configuration, focusing on maintaining the security and stability of the application.

Expand for full summary

Summary:

The code changes in this pull request cover a variety of updates, including changes to the .gitignore file, Dockerfiles, GitHub Actions workflows, and package dependencies. Overall, these changes appear to be focused on maintaining the security and stability of the DefectDojo application's infrastructure and dependencies.

The key security-related aspects of these changes include:

1. Dependency Updates: The updates to the OpenAPI Generator CLI, Python base image, NGINX base image, PostgreSQL Docker image, and frontend dependencies (pdfmake, pdfkit) are positive steps towards keeping the application's dependencies up-to-date and secure.

2. Configuration and Workflow Improvements: The changes to the GitHub Actions workflow for building and deploying the documentation, as well as the updates to the Dockerfiles, demonstrate a focus on maintaining a secure and reliable infrastructure.

3. Secure Practices: The use of specific version tags, secure base images (e.g., Alpine Linux), and the implementation of least-privileged permissions are all good security practices observed in the changes.

While there are no immediate security concerns raised by these changes, it is important to continue monitoring the application's dependencies and infrastructure for any potential vulnerabilities that may arise in the future. Additionally, thorough testing of the application after these changes is recommended to ensure that there are no regressions or unintended consequences.

Files Changed:

1. .gitignore: Updates to exclude various documentation-related files and directories from the Git repository.
2. Dockerfile.integration-tests-debian: Updates to the OpenAPI Generator CLI and Python base image versions, as well as the installation of additional testing-related packages.
3. .github/workflows/gh-pages.yml: Updates to the Hugo and Node.js versions used in the GitHub Pages deployment workflow, as well as simplifications to the build and deployment process.
4. Dockerfile.nginx-debian: Update to the NGINX base image version.
5. components/package.json: Update to the application version and the pdfmake dependency version.
6. docker-compose.yml: Update to the PostgreSQL Docker image version.
7. Dockerfile.nginx-alpine: Update to the NGINX base image version and configuration changes.
8. components/yarn.lock: Updates to the pdfmake and @foliojs-fork/pdfkit dependencies.

Code Analysis

We ran 9 analyzers against 30 files and 1 analyzer had findings. 8 analyzers had no findings.

Analyzer	Findings
Sensitive Files Analyzer	1 finding

View PR in the DryRun Dashboard.