chore(deps): update mono-update-renovate-automerge

| datasource       | package                           | from     | to       |
| ---------------- | --------------------------------- | -------- | -------- |
| github-tags      | antonbabenko/pre-commit-terraform | v1.88.4  | v1.89.1  |
| github-releases  | aquasecurity/tfsec                | v1.28.5  | v1.28.6  |
| github-tags      | pre-commit/pre-commit             | 3.7.0    | 3.7.1    |
| github-releases  | pre-commit/pre-commit             | v3.7.0   | v3.7.1   |
| github-tags      | renovatebot/pre-commit-hooks      | 37.278.0 | 37.355.1 |
| github-tags      | rhysd/actionlint                  | v1.6.27  | v1.7.0   |
| github-releases  | hashicorp/terraform               | 1.8.2    | 1.8.3    |
| terraform-module | terraform-aws-modules/eks/aws     | 19.21.0  | 20.10.0  |
| terraform-module | terraform-aws-modules/iam/aws     | 5.34.0   | 5.39.0   |
| terraform-module | terraform-aws-modules/vpc/aws     | 5.5.2    | 5.8.1    |
| github-releases  | terraform-linters/tflint          | v0.50.3  | v0.51.1  |
| github-tags      | terraform-linters/tflint          | 0.50.3   | 0.51.1   |
| github-tags      | aquasecurity/tfsec                | 1.28.5   | 1.28.6   |

.pre-commit-config.yaml

@@ -17,12 +17,12 @@ repos:
   - id: detect-private-key
 
 - repo: https://github.com/rhysd/actionlint
-  rev: v1.6.27
+  rev: v1.7.0
   hooks:
     - id: actionlint-docker
 
 - repo: https://github.com/renovatebot/pre-commit-hooks
-  rev: 37.278.0
+  rev: 37.355.1
   hooks:
     - id: renovate-config-validator
       args: ["--strict"]
@@ -41,7 +41,7 @@ repos:
       args: [-q, -c .github/markdown-links.json]
 
 - repo: https://github.com/antonbabenko/pre-commit-terraform
-  rev: v1.88.4
+  rev: v1.89.1
   hooks:
   - id: terraform_fmt
   - id: terraform_tflint

.tool-versions

@@ -18,16 +18,16 @@ just 1.25.2
 opentofu 1.6.2
 
 # renovate: datasource=github-releases depName=pre-commit/pre-commit
-pre-commit 3.7.0
+pre-commit 3.7.1
 
 # renovate: datasource=github-releases depName=hashicorp/terraform
-terraform 1.8.2
+terraform 1.8.3
 
 # renovate: datasource=github-releases depName=terraform-docs/terraform-docs
 terraform-docs 0.17.0
 
 # renovate: datasource=github-releases depName=terraform-linters/tflint
-tflint 0.50.3
+tflint 0.51.1
 
 # renovate: datasource=github-releases depName=aquasecurity/tfsec
-tfsec 1.28.5
+tfsec 1.28.6

modules/eks-cluster/cluster.tf

@@ -33,7 +33,7 @@ provider "kubernetes" {
 # https://github.com/terraform-aws-modules/terraform-aws-eks
 module "eks" {
   source  = "terraform-aws-modules/eks/aws"
-  version = "19.21.0"
+  version = "20.10.0"
 
   cluster_name                    = var.name
   cluster_version                 = var.kubernetes_version

modules/eks-cluster/iam.tf

@@ -5,7 +5,7 @@
 
 module "ebs_cs_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.0"
 
   role_name = "${var.name}-ebs-cs-role"
 
@@ -25,7 +25,7 @@ module "ebs_cs_role" {
 # Following role allows cert-manager to do the DNS01 challenge
 module "cert_manager_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.0"
 
   role_name = "${var.name}-cert-manager-role"
 
@@ -44,7 +44,7 @@ module "cert_manager_role" {
 # Following role allows external-dns to adjust values in hosted zones
 module "external_dns_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.0"
 
   role_name = "${var.name}-external-dns-role"
 

modules/eks-cluster/vpc.tf

@@ -4,7 +4,7 @@ locals {
 
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.5.2"
+  version = "5.8.1"
 
   name = local.vpc_name
   # requires a /16 range, resulting in 2 leftover subnets, which can be used for DBs