build(deps): bump taskcluster from 34.0.1 to 35.0.0 in /tools

[dependabot]

⚠️ Dependabot is rebasing this PR ⚠️

If you make any changes to it yourself then they will take precedence over the rebase.

---

Bumps taskcluster from 34.0.1 to 35.0.0.

Release notes

Sourced from taskcluster's releases.

v35.0.0

The database upgrade for this version may take about 15 minutes for a deployment with millions of tasks, during which time creation and resolution of tasks will fail. This version also drops support for verifying signatures in the auth, secrets, and hooks services. The next major version (v36.0.0) will drop support for generating those signatures. To avoid an outage of those services, upgrade any deployment completely to v35.0.0 before beginning the upgrade to v36.0.0.

GENERAL

▶ [patch] #2887 Generic-worker now supports reporting runtime errors to worker-manager via worker-runner.

DEPLOYERS

▶ [MAJOR] #3148 The web-server service now stores Github access tokens in a dedicated table and accesses them directly, rather than via taskcluster-lib-entities. This upgrade drops existing tokens, meaning that users will need to sign in again after the upgrade is applied. This migration is very fast.

▶ [MAJOR] With this version, the auth, hooks, and secrets services no longer verify signatures on rows read from database tables. This is in preparation for a future version where these tables will no longer contain signatures.

▶ [minor] #2937 Github builds are now stored in a table called github_builds, and accessed directly rather than via taskcluster-lib-entities. This migration can process at least 40,000 rows in no more than a few seconds. For a table larger than that, deleting the table contents before running the migration is an option. This table backs the "status" and "badge" endpoints, so missing data is of minor consequence.

▶ [minor] #2938 The auth service's roles are now stored in a normal database table and accessed directly. This is a quick migration.

▶ [minor] #2935 The index service now uses its tables directly, rather than via taskcluster-lib-entities. This is step 2, a continuation of taskcluster/taskcluster#3141. Step 2 involved creating new DB functions and refactoring the service itself to use the new functions. The db upgrade should be very fast.

▶ [minor] #3112 The queue service now uses its artifact-related database tables directly, rather than via taskcluster-lib-entities.

▶ [minor] #2932 The queue service now uses its task- and task-group-related database tables directly, rather than via taskcluster-lib-entities.

▶ [minor] #3030 The worker manager's worker pool errors are now stored in a normal database table. This should be a small migration.

▶ [minor] #3240 Worker pool errors are now properly listable by workerPoolId.

▶ [patch] #3222 The persistent errors about missing function digest(text, unknown) logged by the database are now fixed.

USERS

▶ [patch] #3191 The task.extra.github.customCheckRun.annotationsArtifactName property is now correctly consulted for the name of the annotations artifact, as documented.

DEVELOPERS

▶ [patch] The taskcluster-lib-postgres library now allows any Postgres collation that sorts ASCII characters correctly.

Changelog

Sourced from taskcluster's changelog.

v35.0.0

GENERAL

▶ [patch] #2887 Generic-worker now supports reporting runtime errors to worker-manager via worker-runner.

DEPLOYERS

▶ [MAJOR] #3148 The web-server service now stores Github access tokens in a dedicated table and accesses them directly, rather than via taskcluster-lib-entities. This upgrade drops existing tokens, meaning that users will need to sign in again after the upgrade is applied. This migration is very fast.

▶ [MAJOR] With this version, the auth, hooks, and secrets services no longer verify signatures on rows read from database tables. This is in preparation for a future version where these tables will no longer contain signatures.

▶ [minor] #2937 Github builds are now stored in a table called github_builds, and accessed directly rather than via taskcluster-lib-entities. This migration can process at least 40,000 rows in no more than a few seconds. For a table larger than that, deleting the table contents before running the migration is an option. This table backs the "status" and "badge" endpoints, so missing data is of minor consequence.

▶ [minor] #2938 The auth service's roles are now stored in a normal database table and accessed directly. This is a quick migration.

▶ [minor] #2935 The index service now uses its tables directly, rather than via taskcluster-lib-entities. This is step 2, a continuation of taskcluster/taskcluster#3141. Step 2 involved creating new DB functions and refactoring the service itself to use the new functions. The db upgrade should be very fast.

▶ [minor] #3112 The queue service now uses its artifact-related database tables directly, rather than via taskcluster-lib-entities.

▶ [minor] #2932 The queue service now uses its task- and task-group-related database tables directly, rather than via taskcluster-lib-entities.

▶ [minor] #3030 The worker manager's worker pool errors are now stored in a normal database table. This should be a small migration.

▶ [minor] #3240 Worker pool errors are now properly listable by workerPoolId.

▶ [patch] #3222 The persistent errors about missing function digest(text, unknown) logged by the database are now fixed.

USERS

▶ [patch] #3191 The task.extra.github.customCheckRun.annotationsArtifactName property is now correctly consulted for the name of the annotations artifact, as documented.

DEVELOPERS

▶ [patch] The taskcluster-lib-postgres library now allows any Postgres collation that sorts ASCII characters correctly.

OTHER

Commits

• 83a7c30 v35.0.0
• cd5b374 changelog tweaks
• e254966 Merge pull request #3246 from milescrabill/issue-3240-listworkerpoolerrors-by...
• f7cac0f issue 3240: support listing workerPoolErrors by workerPoolId
• c403d9d Merge pull request #3243 from djmitche/stop-signing
• dd5ce01 Stop signing entities
• 3fac7b3 Revert "Merge pull request #3179 from helfi92/port_hooks_table"
• 56df690 Revert "Merge pull request #3201 from helfi92/migrate_hooks_table"
• 6759fd3 Merge pull request #3228 from renovate-bot/renovate/babel-monorepo
• 9ab88af Merge pull request #3232 from renovate-bot/renovate/graphql-14.x-lockfile
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)