diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index 659c5580..9dc42124 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -22,13 +22,13 @@ repos:
     - id: actionlint-docker
 
 - repo: https://github.com/renovatebot/pre-commit-hooks
-  rev: 38.8.5
+  rev: 38.18.12
   hooks:
     - id: renovate-config-validator
       args: ["--strict"]
 
 - repo: https://github.com/compilerla/conventional-pre-commit
-  rev: v3.3.0 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
+  rev: v3.4.0 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
   hooks:
     - id: conventional-pre-commit
       stages: [commit-msg]
diff --git a/.tool-versions b/.tool-versions
index 8e94b705..91c7c703 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -16,13 +16,13 @@
 awscli 2.17.18
 
 # renovate: datasource=github-tags depName=eksctl-io/eksctl
-eksctl 0.187.0
+eksctl 0.188.0
 
 golang 1.22.5
 
-just 1.32.0
+just 1.34.0
 
-opentofu 1.7.3
+opentofu 1.8.0
 
 pre-commit 3.8.0
 
diff --git a/modules/eks-cluster/iam.tf b/modules/eks-cluster/iam.tf
index 099387b7..e4d77da6 100644
--- a/modules/eks-cluster/iam.tf
+++ b/modules/eks-cluster/iam.tf
@@ -5,7 +5,7 @@
 
 module "ebs_cs_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.41.0"
+  version = "5.42.0"
 
   role_name = "${var.name}-ebs-cs-role"
 
@@ -25,7 +25,7 @@ module "ebs_cs_role" {
 # Following role allows cert-manager to do the DNS01 challenge
 module "cert_manager_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.41.0"
+  version = "5.42.0"
 
   role_name = "${var.name}-cert-manager-role"
 
@@ -44,7 +44,7 @@ module "cert_manager_role" {
 # Following role allows external-dns to adjust values in hosted zones
 module "external_dns_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.41.0"
+  version = "5.42.0"
 
   role_name = "${var.name}-external-dns-role"
 
diff --git a/modules/eks-cluster/vpc.tf b/modules/eks-cluster/vpc.tf
index 08a44a08..79823454 100644
--- a/modules/eks-cluster/vpc.tf
+++ b/modules/eks-cluster/vpc.tf
@@ -4,7 +4,7 @@ locals {
 
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.9.0"
+  version = "5.12.0"
 
   name = local.vpc_name
   # requires a /16 range, resulting in 2 leftover subnets, which can be used for DBs