Update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
actions/cache	action	major	v3 -> v4
actions/checkout	action	major	v3 -> v4
actions/github-script	action	major	v6 -> v7
actions/labeler	action	major	v4 -> v5
amazon-eks		minor	1.26 -> 1.31
antonbabenko/pre-commit-terraform	repository	minor	v1.81.0 -> v1.96.2
archive (source)	required_provider	minor	2.4.0 -> 2.6.0
aws-actions/configure-aws-credentials	action	major	v2 -> v4
awscli		minor	2.13.0 -> 2.19.1
checkov		major	2.3.234 -> 3.2.277
defenseunicorns/build-harness		major	1.7.0 -> 2.0.43
defenseunicorns/zarf		minor	0.26.3 -> 0.42.1
defenseunicorns/zarf		minor	0.28.1 -> 0.42.1
github.com/aws/aws-sdk-go	require	minor	v1.44.299 -> v1.55.5
github.com/gruntwork-io/terratest	require	minor	v0.43.8 -> v0.47.2
github.com/stretchr/testify	require	minor	v1.8.4 -> v1.9.0
github.com/terraform-aws-modules/terraform-aws-lambda	module	major	v5.0.0 -> v7.14.0
golang		minor	1.20.5 -> 1.23.2
golangci-lint		minor	1.53.3 -> 1.61.0
k8s.io/api	require	minor	v0.27.3 -> v0.31.2
k8s.io/apimachinery	require	minor	v0.27.3 -> v0.31.2
k8s.io/client-go	require	minor	v0.27.3 -> v0.31.2
kubernetes-sigs/metrics-server		minor	3.10.0 -> 3.12.2
kubernetes/autoscaler		minor	1.27.1 -> 1.31.0
kubernetes/autoscaler		minor	9.28.0 -> 9.43.1
peter-evans/create-or-update-comment	action	major	v3 -> v4
peter-evans/slash-command-dispatch	action	major	v3 -> v4
pre-commit		major	3.3.3 -> 4.0.1
pre-commit/pre-commit-hooks	repository	major	v4.4.0 -> v5.0.0
projectcalico/calico		minor	3.25.1 -> 3.29.0
public.ecr.aws/aws-ec2/helm/aws-node-termination-handler		minor	0.21.0 -> 0.24.1
renovatebot/pre-commit-hooks	repository	major	36.7.0 -> 38.142.5
sigs.k8s.io/aws-iam-authenticator	require	patch	v0.6.10 -> v0.6.27
stefanzweifel/git-auto-commit-action	action	major	v4 -> v5
terraform		minor	1.5.2 -> 1.9.8
terraform-aws-modules/kms/aws (source)	module	major	~> 1.5 -> ~> 3.0
terraform-aws-modules/s3-bucket/aws (source)	module	major	v3.14.0 -> v4.2.1
terraform-docs		minor	0.16.0 -> 0.19.0
tflint		minor	0.47.0 -> 0.53.0
tfsec		patch	1.28.1 -> 1.28.11

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

• ⚠️ The E2E tests need to be run, they have a manual trigger. To start them add a comment to this PR that says /test all

Note: The pre-commit manager in Renovate is not supported by the pre-commit maintainers or community. Please do not report any problems there, instead create a Discussion in the Renovate repository if you have any questions.

---

Release Notes

actions/cache (actions/cache)

v4

Compare Source

actions/checkout (actions/checkout)

v4

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in https://github.com/actions/checkout/pull/1924

actions/github-script (actions/github-script)

v7

Compare Source

actions/labeler (actions/labeler)

v5

Compare Source

antonbabenko/pre-commit-terraform (antonbabenko/pre-commit-terraform)

v1.96.2

Compare Source

Bug Fixes

• WSL: Make parallelism work appropriately (#​728) (e87ee43)

v1.96.1

Compare Source

Bug Fixes

• terraform_docs: Fix issue with processing multiply files without terraform-docs markers. Issue introduced in v1.95.0 (#​720) (2b1aec8),

v1.96.0

Compare Source

Features

• Expand environment variables in --args= which contains lowercase symbols, like ${TF_VAR_lowercase} (#​719) (bf156b4)

v1.95.0

Compare Source

Features

• terraform_docs: Drop support for terraform-docs <0.12.0 (#​717) (81e4572)

v1.94.3

Compare Source

Bug Fixes

• terraform_docs: Restore --hook-config=--add-to-existing-file default behavior. Regression from 1.94.0. (#​716) (315342e)

v1.94.2

Compare Source

Bug Fixes

• Support custom TF paths which contains spaces (#​714) (2bca410)

v1.94.1

Compare Source

Bug Fixes

• terraform_docs: Fix non-GNU sed issues, introduced in v1.93.0, as previous fix doesn't work correctly (#​708) (c986c5e)

v1.94.0

Compare Source

Features

• terraform-docs: Add support for replace mode for TF 0.12+; Use native saving to file for TF 0.12+. Both requires terraform-docs v0.12.0+ which released in 2021. (#​705) (1a1b4a3)

v1.93.1

Compare Source

Bug Fixes

• terraform_docs: Fix non-GNU sed issues, introduced in v1.93.0 (#​704) (3c8734d)

v1.93.0

Compare Source

Features

• terraform_docs: Start seamless migration to terraform-docs markers (#​701) (d03f44f)

v1.92.3

Compare Source

Bug Fixes

• terraform_docs: Suppress redundant warnings pop-ups introduced in v1.92.2 (#​700) (59b2454)

v1.92.2

Compare Source

Bug Fixes

• terraform_docs: Fix issue and prioritize output.file setting from .terraform-docs.yml config over --hook-config=--path-to-file= (#​698) (9d6a22b)

v1.92.1

Compare Source

Bug Fixes

• terraform_docs: Suppress "terraform command not found" error message in case binary does not exist (#​693) (6ff3572)

v1.92.0

Compare Source

Features

• Add terragrunt_validate_inputs hook to check unused and undefined inputs (#​677) (a139b71)

v1.91.0

Compare Source

Features

• Added Terramate as sponsor (#​676) (dae1a48)

v1.90.0

Compare Source

Features

• Support set custom TF/OpenTofu binary. | If you use a custom Docker image build, please note that TERRAFORM_VERSION now must be provided (#​670) (c7011c0)

v1.89.1

Compare Source

Bug Fixes

• docker: Prevent all possible "silent errors" during docker build (#​644) (0340c8d)

v1.89.0

Compare Source

Features

• Hook terraform_wrapper_module_for_each should use versions.tf from the module if it exists (#​657) (b127601)

v1.88.4

Compare Source

Bug Fixes

• Improve README and drop quotes from hook env vars (#​651) (daec682)

v1.88.3

Compare Source

Bug Fixes

• terraform_providers_lock: Require terraform init (and terraform_validate hook) run when only lockfile changed (#​649) (02c1935)

v1.88.2

Compare Source

Bug Fixes

• non-linux: Bash environment variables in arguments not expanded + Add trace log level (#​645) (a2a2990)

v1.88.1

Compare Source

Bug Fixes

• docker: Checkov installation silently fails on docker build in arm64. Workaround till issue will be fixed in checkov itself (#​635) (f255b05)

v1.88.0

Compare Source

Features

• Add terragrunt_providers_lock hook (#​632) (77940fd)

v1.87.1

Compare Source

Bug Fixes

• Replace mapfile to support Bash 3.2.57 pre-installed in macOS (#​628) (01ab3f0)

v1.87.0

Compare Source

Features

• Add parallelism to major chunk of hooks. Check Parallelism section in README (#​620) (6c6eca4)

v1.86.1

Compare Source

Bug Fixes

• grep: warning: stray \ before / which pop-up in grep 3.8 (#​625) (e1a93b2)

v1.86.0

Compare Source

Features

• terraform_docs: Add terraform-docs default markers support and describe how to migrate to them (#​609) (4a0e1fe)

v1.85.0

Compare Source

Features

• trivy: Add terraform_trivy hook and deprecate terraform_tfsec (#​606) (f3c819a)

v1.84.0

Compare Source

Features

• deps: Bump Python version in docker image from 3.11.5 to v3.12.0 (#​597) (28e3cde)

v1.83.6

Compare Source

Bug Fixes

• terraform_validate: Run terraform init on "Missing required provider" error (#​586) (6e2bb2e)

v1.83.5

Compare Source

Bug Fixes

• Suppress duplicate error messages in terraform_validate (#​577) (4ea6b14)

v1.83.4

Compare Source

Bug Fixes

• Fix terraform_wrapper_module_for_each for when resource name contains 'variable' (#​573) (941177e)

v1.83.3

Compare Source

Bug Fixes

• Run terraform_tfsec only on terraform code changes (#​571) (4253162)

v1.83.2

Compare Source

Bug Fixes

• Extend terraform_validate --retry-once-with-cleanup errors list (#​566) (19188e5)

v1.83.1

Compare Source

Bug Fixes

• Fixed ordering issue in terraform_wrapper_module_for_each hook (#​565) (dc12be1)

v1.83.0

Compare Source

Features

• Skip legacy modules (with provider block) in terraform_wrapper_module_for_each hook (#​560) (456cc76)

v1.82.0

Compare Source

Features

• docker: Add ssh-client to Docker image to access private modules via ssh (#​553) (1d76157)

v1.81.2

Compare Source

Bug Fixes

• Fix terraform_wrapper_module_for_each hook heredoc vars defaults (#​554) (6fd4263)

v1.81.1

Compare Source

Bug Fixes

• Fix the terraform_wrapper_module_for_each hook for modules without outputs or variables (#​552) (f24b3fa)

hashicorp/terraform-provider-archive (archive)

v2.6.0

Compare Source

FEATURES:

• data-source/archive_file: Add support for creating tar.gz archive files. (#​277)
• resource/archive_file: Add support for creating tar.gz archive files. (#​277)

v2.5.0

Compare Source

ENHANCEMENTS:

• data-source/archive_file: Add glob pattern matching support to the excludes attribute. (#​354)
• resource/archive_file: Add glob pattern matching support to the excludes attribute. (#​354)

v2.4.2

Compare Source

BUG FIXES:

• data-source/archive_file: Prevent error when generating archive from source containing symbolically linked directories, and exclude_symlink_directories is set to true (#​298)
• resource/archive_file: Prevent error when generating archive from source containing symbolically linked directories, and exclude_symlink_directories is set to true (#​298)
• resource/archive_file: Return error when generated archive would be empty (#​298)
• data-source/archive_file: Return error when generated archive would be empty (#​298)

v2.4.1

Compare Source

NOTES:

• This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#​287)

aws-actions/configure-aws-credentials (aws-actions/configure-aws-credentials)

v4

Compare Source

This tag tracks the latest v4.x.x release

v3

Compare Source

This tag tracks the latest v3.x.x release

aws/aws-cli (awscli)

v2.19.1

Compare Source

v2.19.0

Compare Source

v2.18.18

Compare Source

v2.18.17

Compare Source

v2.18.16

Compare Source

v2.18.15

Compare Source

[`v2.1

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 9am every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.