Bump github.com/cloudposse/atmos from 1.70.0 to 1.78.0

[dependabot]

Bumps github.com/cloudposse/atmos from 1.70.0 to 1.78.0.

Release notes

Sourced from github.com/cloudposse/atmos's releases.

v1.78.0

what

• Update atmos vendor pull command
• Update atmos validate stacks command
• Add --include-dependents flag to atmos describe affected command
• Update docs
  • https://atmos.tools/cli/commands/describe/affected/

why

• When executing atmos vendor pull, Atmos creates a temp directory to clone the remote repo into. Atmos uses go-getter to download the sources into the temp directory. When cloning from the root of a repo w/o using modules (sub-paths), go-getter does the following:

  • If the destination directory does not exist, it creates it and runs git init
  • If the destination directory exists, it should be an already initialized Git repository (otherwise an error will be thrown)

  For more details, refer to

  • hashicorp/go-getter#114
  • https://github.com/hashicorp/go-getter?tab=readme-ov-file#subdirectories

• Don't check for duplicate abstract components in the same stack from different stack manifests. Abstract components are never provisioned and serve as blueprints for real components. This is an update (follow up) to the previous PRs:

  • cloudposse/atmos#608
  • cloudposse/atmos#611

• The --include-dependents flag allows including dependencies for the affected components

If the command-line flag --include-dependents=true is passed to the atmos describe affected command, and there are other components that depend on the affected components in the stack, the command will include a dependents property (list) for each affected component. The dependents property is hierarchical - each component in the list will also contain a dependents property if that component has dependent components as well.

For example, suppose that we have the following configuration for the Atmos components component-1, component-2 and component-3 in the stack plat-ue2-dev:

  components:
    terraform:
      component-1:
        metadata:
          component: "terraform-component-1"
        vars: {}
  component-2:
    metadata:
      component: "terraform-component-2"
    vars: {}
    settings:
      depends_on:
        1:
          component: "component-1"

</tr></table>

... (truncated)

Commits

• 16cc5f9 Update Goreleaser pipeline options to eliminate deprecation notices (#579)
• bd451f6 update goreleaser (#618)
• ad47418 Update atmos vendor pull and atmos validate stacks commands. Add `--inclu...
• 6f7a5dd Update atmos validate stacks command (#611)
• 3e0983a Add Atmos manifest lists merge strategies (#609)
• d00aa78 Improve atmos validate stacks and atmos describe affected commands (#608)
• 85d7c15 Use Darker Theme, Add File Component (#607)
• df1c9bb Update Atmos logs. Update docs (#605)
• f7aa382 Allow Go templates in metadata.component section. Add `components.terrafo...
• 774d30d chore: Updated Tips for Creating GitHub App for Component Updater (#593)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like github.com/cloudposse/atmos is up-to-date now, so this is no longer needed.