chore(release): 2.60.0

## [2.60.0](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/compare/...) (2025-02-20)

### Features

* Adds semantic-release dry-run for .releaserc changes ([592f1d06](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/592f1d06e5e62a56f03b86c32872719fe0feb448))

### Dependencies

* **deps:** update dependency checkov to v3.2.372 ([5413be1a](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/5413be1a3b8f0f1308085bc0c2419f7339cfa4f0))
* **deps:** update dependency zricethezav/gitleaks to v8.24.0 ([19a8be01](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/19a8be0108567ffcc0d49717ad0752d5822173f8))
* **deps:** update ghcr.io/containerbase/base docker tag to v13.7.17 ([c1af03d6](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/c1af03d6bc0a1ef87303d2aec8a54b2acccffdff))
* **deps:** update node.js to v20.18.3 ([f259fbc9](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/f259fbc95518f20ee06324666a22966500e587cd))
* **deps:** update node.js to v22 ([844f322b](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/844f322b4b787ff733de801a12a7e21575669a14))
* **deps:** update pre-commit hook gitlab-com/gl-infra/common-ci-tasks to v2.59 ([e2c2ed75](https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/commit/e2c2ed7569fab80bde50d49d97878c181708a52c))

oidc.md

@@ -15,7 +15,7 @@ include:
   # Includes a base template for oidc authentication
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/oidc.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: 'oidc.yml'
 deploy_to_cloud_provider:
@@ -46,7 +46,7 @@ include:
   # Includes a base template for running kaniko easily
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/kaniko.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: 'oidc.yml'
 oidc_authenticated_job:
@@ -156,7 +156,7 @@ include:
   # Includes a base template for running kaniko easily
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/kaniko.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: 'oidc.yml'
 dual_oidc_authenticated_job:

promlint.md

@@ -23,7 +23,7 @@ include:
   # Ensure that all Prometheus Rules and Alerts are defined correctly
   # Rules defined https://cloudflare.github.io/pint/checks/
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: promlint.yml
 ```

renovate-bot.md

@@ -54,7 +54,7 @@ There are four ways to configure the access token used by Renovate. There are in
    ```yaml
      - project: 'gitlab-com/gl-infra/common-ci-tasks'
-       ref: v2.59.0  # renovate:managed
+       ref: v2.60.0  # renovate:managed
        file: renovate-bot.yml
        inputs:
          vault: "gitlab-com/gitlab-com/gl-infra/renovate/renovate-ci/renovate/gitlab-com/token@ci"
@@ -153,7 +153,7 @@ include:
   # Upgrades dependencies on a schedule
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/renovate-bot.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: renovate-bot.yml
 ```

renovate-bot.yml

@@ -35,7 +35,7 @@ include:
 .base_renovate_bot:
   image:
-    name: ${CI_REGISTRY}/gitlab-com/gl-infra/common-ci-tasks/renovate:v2.59.0
+    name: ${CI_REGISTRY}/gitlab-com/gl-infra/common-ci-tasks/renovate:v2.60.0
     entrypoint: [""]
   stage: $[[ inputs.renovate_bot_stage ]]
   variables:

semantic-release.md

@@ -79,7 +79,7 @@ Done :tada:
       # Analyze commits to determine whether to cut a release
       # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/semantic-release.md
       - project: 'gitlab-com/gl-infra/common-ci-tasks'
-        ref: v2.59.0  # renovate:managed
+        ref: v2.60.0  # renovate:managed
         file: semantic-release.yml
         #inputs:
         #  stage: release
@@ -148,7 +148,7 @@ include:
   # Analyze commits to determine whether to cut a release
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/semantic-release.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: 'semantic-release.yml'
     inputs:
       vault: access_tokens/${VAULT_SECRETS_PATH}/semantic-release/token@ci

shellcheck.md

@@ -26,6 +26,6 @@ include:
   # standard canonical format
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/shellcheck.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: shellcheck.yml
 ```

shfmt.md

@@ -22,6 +22,6 @@ include:
   # Ensure that all shell-scripts are formatted according to a
   # standard canonical format
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: shfmt.yml
 ```

templates/golang.md

@@ -26,7 +26,7 @@ include:
   # Runs golang standard tests, including tests, goreleaser, golangci-lint and go-mod-tidy
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/golang.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: templates/golang.yml
 ```
@@ -42,7 +42,7 @@ include:
   # common to all projects using this template library.
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/standard.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: templates/golang.yml
     inputs:
       validate_stage: test  # stage that validation jobs should run in

templates/standard.md

@@ -29,7 +29,7 @@ include:
   # common to all projects using this template library.
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/standard.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: templates/standard.yml
 ```
@@ -45,7 +45,7 @@ include:
   # common to all projects using this template library.
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/standard.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: templates/standard.yml
     inputs:
       validate_stage: test  # stage that validation jobs should run in

templates/terraform.md

@@ -28,7 +28,7 @@ include:
   # Runs Terraform validations, including tflint, terraform validate and terraform formatting checks
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/terraform.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: templates/terraform.yml
 ```
@@ -44,7 +44,7 @@ include:
   # common to all projects using this template library.
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/templates/standard.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: templates/terraform.yml
     inputs:
       validate_stage: test  # stage that validation jobs should run in

terraform-format.md

@@ -19,6 +19,6 @@ include:
   # Ensures that all terraform files are correctly formatted
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/terraform-format.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: terraform-format.yml
 ```

terraform-module-publish.md

@@ -11,7 +11,7 @@ include:
   # Publish a Terraform Module in the Terraform Module registry
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/terraform-module-publish.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: terraform-module-publish.yml
     inputs:
       module_name: # Defaults to project name

terraform-validate.md

@@ -22,7 +22,7 @@ include:
   # Ensures that all terraform files are syntactically valid
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/terraform-validate.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: terraform-validate.yml
 ```

tflint.md

@@ -30,7 +30,7 @@ include:
   # Runs tflint on all terraform module directories
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/tflint.md
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: tflint.yml
 ```

vendir.md

@@ -16,7 +16,7 @@ variables:
 include:
   # Check that `vendir sync` is up-to-date and the repository matches the expected state
   - project: 'gitlab-com/gl-infra/common-ci-tasks'
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: vendir.yml
 ```

yamlfmt.md

@@ -12,7 +12,7 @@ stages:
 include:
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: yamlfmt.yml
 ```

yamllint.md

@@ -23,6 +23,6 @@ include:
   # Runs yamllint on all terraform module directories
   # see https://gitlab.com/gitlab-com/gl-infra/common-ci-tasks/-/blob/main/yamllint.md
   - project: "gitlab-com/gl-infra/common-ci-tasks"
-    ref: v2.59.0  # renovate:managed
+    ref: v2.60.0  # renovate:managed
     file: yamllint.yml
 ```