diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 623ccf7d..919507b4 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -17,12 +17,12 @@ repos:
   - id: detect-private-key
 
 - repo: https://github.com/rhysd/actionlint
-  rev: v1.6.27
+  rev: v1.7.0
   hooks:
     - id: actionlint-docker
 
 - repo: https://github.com/renovatebot/pre-commit-hooks
-  rev: 37.278.0
+  rev: 37.355.1
   hooks:
     - id: renovate-config-validator
       args: ["--strict"]
@@ -41,7 +41,7 @@ repos:
       args: [-q, -c .github/markdown-links.json]
 
 - repo: https://github.com/antonbabenko/pre-commit-terraform
-  rev: v1.88.4
+  rev: v1.89.1
   hooks:
   - id: terraform_fmt
   - id: terraform_tflint
diff --git a/.tool-versions b/.tool-versions
index 9c9bcc89..3523661d 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -18,16 +18,16 @@ just 1.25.2
 opentofu 1.6.2
 
 # renovate: datasource=github-releases depName=pre-commit/pre-commit
-pre-commit 3.7.0
+pre-commit 3.7.1
 
 # renovate: datasource=github-releases depName=hashicorp/terraform
-terraform 1.8.2
+terraform 1.8.3
 
 # renovate: datasource=github-releases depName=terraform-docs/terraform-docs
 terraform-docs 0.17.0
 
 # renovate: datasource=github-releases depName=terraform-linters/tflint
-tflint 0.50.3
+tflint 0.51.1
 
 # renovate: datasource=github-releases depName=aquasecurity/tfsec
-tfsec 1.28.5
+tfsec 1.28.6
diff --git a/modules/eks-cluster/cluster.tf b/modules/eks-cluster/cluster.tf
index 1a7ee6c7..8088abe8 100644
--- a/modules/eks-cluster/cluster.tf
+++ b/modules/eks-cluster/cluster.tf
@@ -33,7 +33,7 @@ provider "kubernetes" {
 # https://github.com/terraform-aws-modules/terraform-aws-eks
 module "eks" {
   source  = "terraform-aws-modules/eks/aws"
-  version = "19.21.0"
+  version = "20.10.0"
 
   cluster_name                    = var.name
   cluster_version                 = var.kubernetes_version
diff --git a/modules/eks-cluster/iam.tf b/modules/eks-cluster/iam.tf
index eab12690..13902faf 100644
--- a/modules/eks-cluster/iam.tf
+++ b/modules/eks-cluster/iam.tf
@@ -5,7 +5,7 @@
 
 module "ebs_cs_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.0"
 
   role_name = "${var.name}-ebs-cs-role"
 
@@ -25,7 +25,7 @@ module "ebs_cs_role" {
 # Following role allows cert-manager to do the DNS01 challenge
 module "cert_manager_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.0"
 
   role_name = "${var.name}-cert-manager-role"
 
@@ -44,7 +44,7 @@ module "cert_manager_role" {
 # Following role allows external-dns to adjust values in hosted zones
 module "external_dns_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.34.0"
+  version = "5.39.0"
 
   role_name = "${var.name}-external-dns-role"
 
diff --git a/modules/eks-cluster/vpc.tf b/modules/eks-cluster/vpc.tf
index f937c178..221ca300 100644
--- a/modules/eks-cluster/vpc.tf
+++ b/modules/eks-cluster/vpc.tf
@@ -4,7 +4,7 @@ locals {
 
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.5.2"
+  version = "5.8.1"
 
   name = local.vpc_name
   # requires a /16 range, resulting in 2 leftover subnets, which can be used for DBs