chore(deps): update minor-grouped

| datasource       | package                            | from    | to       |
| ---------------- | ---------------------------------- | ------- | -------- |
| github-tags      | compilerla/conventional-pre-commit | v3.3.0  | v3.4.0   |
| github-tags      | eksctl-io/eksctl                   | 0.187.0 | 0.188.0  |
| github-releases  | casey/just                         | 1.32.0  | 1.34.0   |
| github-releases  | opentofu/opentofu                  | 1.7.3   | 1.8.0    |
| github-tags      | renovatebot/pre-commit-hooks       | 38.8.5  | 38.18.12 |
| terraform-module | terraform-aws-modules/iam/aws      | 5.41.0  | 5.42.0   |
| terraform-module | terraform-aws-modules/vpc/aws      | 5.9.0   | 5.12.0   |

.pre-commit-config.yaml

@@ -22,13 +22,13 @@ repos:
     - id: actionlint-docker
 
 - repo: https://github.com/renovatebot/pre-commit-hooks
-  rev: 38.8.5
+  rev: 38.18.12
   hooks:
     - id: renovate-config-validator
       args: ["--strict"]
 
 - repo: https://github.com/compilerla/conventional-pre-commit
-  rev: v3.3.0 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
+  rev: v3.4.0 # use tags until renovate supports sha: https://github.com/renovatebot/renovate/issues/22567
   hooks:
     - id: conventional-pre-commit
       stages: [commit-msg]

.tool-versions

@@ -16,13 +16,13 @@
 awscli 2.17.22
 
 # renovate: datasource=github-tags depName=eksctl-io/eksctl
-eksctl 0.187.0
+eksctl 0.188.0
 
 golang 1.22.5
 
-just 1.32.0
+just 1.34.0
 
-opentofu 1.7.3
+opentofu 1.8.0
 
 pre-commit 3.8.0
 

modules/eks-cluster/iam.tf

@@ -5,7 +5,7 @@
 
 module "ebs_cs_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.41.0"
+  version = "5.42.0"
 
   role_name = "${var.name}-ebs-cs-role"
 
@@ -25,7 +25,7 @@ module "ebs_cs_role" {
 # Following role allows cert-manager to do the DNS01 challenge
 module "cert_manager_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.41.0"
+  version = "5.42.0"
 
   role_name = "${var.name}-cert-manager-role"
 
@@ -44,7 +44,7 @@ module "cert_manager_role" {
 # Following role allows external-dns to adjust values in hosted zones
 module "external_dns_role" {
   source  = "terraform-aws-modules/iam/aws//modules/iam-role-for-service-accounts-eks"
-  version = "5.41.0"
+  version = "5.42.0"
 
   role_name = "${var.name}-external-dns-role"
 

modules/eks-cluster/vpc.tf

@@ -4,7 +4,7 @@ locals {
 
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.9.0"
+  version = "5.12.0"
 
   name = local.vpc_name
   # requires a /16 range, resulting in 2 leftover subnets, which can be used for DBs