chore(deps): update all dependencies (#1131)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
digest | `0ad4b8f` -> `a5ac7e5` | | | | |
| [aws](https://registry.terraform.io/providers/hashicorp/aws)
([source](https://togithub.com/hashicorp/terraform-provider-aws)) |
required_provider | minor | `5.50.0` -> `5.51.1` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/aws/5.51.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/terraform-provider/aws/5.51.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/terraform-provider/aws/5.50.0/5.51.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/aws/5.50.0/5.51.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [boto3](https://togithub.com/boto/boto3) | | patch | `==1.34.108` ->
`==1.34.114` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/boto3/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/boto3/1.34.108/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.34.108/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [botocore](https://togithub.com/boto/botocore) | | patch |
`==1.34.108` -> `==1.34.114` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/botocore/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/botocore/1.34.108/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.34.108/1.34.114?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [random](https://registry.terraform.io/providers/hashicorp/random)
([source](https://togithub.com/hashicorp/terraform-provider-random)) |
required_provider | patch | `3.6.1` -> `3.6.2` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/random/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/terraform-provider/random/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/terraform-provider/random/3.6.1/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/random/3.6.1/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [random](https://registry.terraform.io/providers/hashicorp/random)
([source](https://togithub.com/hashicorp/terraform-provider-random)) |
required_provider | patch | `3.6.1` -> `3.6.2` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/random/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/terraform-provider/random/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/terraform-provider/random/3.6.0/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/random/3.6.0/3.6.2?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>hashicorp/terraform-provider-aws (aws)</summary>

###
[`v5.51.1`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5511-May-24-2024)

[Compare
Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.51.0...v5.51.1)

ENHANCEMENTS:

- resource/aws_ecs_service: Add `volume_configuration` argument
([#&#8203;37019](https://togithub.com/hashicorp/terraform-provider-aws/issues/37019))
- resource/aws_ecs_task_definition: Add `configure_at_launch` parameter
in `volume` argument
([#&#8203;37019](https://togithub.com/hashicorp/terraform-provider-aws/issues/37019))

BUG FIXES:

- data-source/aws_route53\_zone: Fix incorrect `name_servers` values
([#&#8203;37685](https://togithub.com/hashicorp/terraform-provider-aws/issues/37685))
- data-source/aws_route53\_zone: Permit both `name` and `zone_id`
arguments when one is an empty string
([#&#8203;37686](https://togithub.com/hashicorp/terraform-provider-aws/issues/37686))
- resource/aws_route53\_zone: Fix incorrect `name_servers` values
([#&#8203;37685](https://togithub.com/hashicorp/terraform-provider-aws/issues/37685))

###
[`v5.51.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5510-May-23-2024)

[Compare
Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.50.0...v5.51.0)

NOTES:

- data-source/aws_lambda_function: `source_code_hash` attribute has been
deprecated in favor of `code_sha256`. Will be removed in a future major
version
([#&#8203;37669](https://togithub.com/hashicorp/terraform-provider-aws/issues/37669))
- data-source/aws_lambda_layer_version: `source_code_hash` attribute has
been deprecated in favor of `code_sha256`. Will be removed in a future
major version
([#&#8203;37646](https://togithub.com/hashicorp/terraform-provider-aws/issues/37646))

FEATURES:

- **New Data Source:** `aws_chatbot_slack_workspace`
([#&#8203;37218](https://togithub.com/hashicorp/terraform-provider-aws/issues/37218))
- **New Resource:** `aws_lambda_runtime_management_config`
([#&#8203;37643](https://togithub.com/hashicorp/terraform-provider-aws/issues/37643))
- **New Resource:** `aws_vpc_endpoint_private_dns`
([#&#8203;37628](https://togithub.com/hashicorp/terraform-provider-aws/issues/37628))
- **New Resource:** `aws_vpc_endpoint_service_private_dns_verification`
([#&#8203;37176](https://togithub.com/hashicorp/terraform-provider-aws/issues/37176))

ENHANCEMENTS:

- data-source/aws_lambda_function: Add `code_sha256` attribute
([#&#8203;37669](https://togithub.com/hashicorp/terraform-provider-aws/issues/37669))
- data-source/aws_lambda_layer_version: Add `code_sha256` attribute
([#&#8203;37646](https://togithub.com/hashicorp/terraform-provider-aws/issues/37646))
- data-source/aws_route53\_traffic_policy_document: Add support for
`application-load-balancer`, `elastic-beanstalk` and
`network-load-balancer` `endpoint.type` values
([#&#8203;37618](https://togithub.com/hashicorp/terraform-provider-aws/issues/37618))
- resource/aws_api_gateway_deployment: Add `canary_settings` attribute
([#&#8203;37573](https://togithub.com/hashicorp/terraform-provider-aws/issues/37573))
- resource/aws_iam_openid_connect_provider: Allow `client_id_list` to be
updated in-place
([#&#8203;37612](https://togithub.com/hashicorp/terraform-provider-aws/issues/37612))
- resource/aws_lambda_function: Add `code_sha256` attribute
([#&#8203;37669](https://togithub.com/hashicorp/terraform-provider-aws/issues/37669))
- resource/aws_lambda_function: Remove
`replace_security_group_on_destroy` and `replacement_security_group_ids`
deprecations, re-implement with alternate workflow
([#&#8203;37624](https://togithub.com/hashicorp/terraform-provider-aws/issues/37624))
- resource/aws_lambda_layer_version: Add `code_sha256` attribute
([#&#8203;37646](https://togithub.com/hashicorp/terraform-provider-aws/issues/37646))
- resource/aws_route53\_health_check: Add plan-time validation of
`cloudwatch_alarm_region`
([#&#8203;37510](https://togithub.com/hashicorp/terraform-provider-aws/issues/37510))
- resource/aws_route53\_record: Add plan-time validation of
`latency_routing_policy.region`
([#&#8203;37510](https://togithub.com/hashicorp/terraform-provider-aws/issues/37510))
- resource/aws_route53\_vpc_association_authorization: Add plan-time
validation of `vpc_region`
([#&#8203;37510](https://togithub.com/hashicorp/terraform-provider-aws/issues/37510))
- resource/aws_route53\_zone_association: Add plan-time validation of
`vpc_region`
([#&#8203;37510](https://togithub.com/hashicorp/terraform-provider-aws/issues/37510))
- resource/aws_wafv2\_web_acl: Add `api_gateway`, `app_runner_service`,
`cognito_user_pool`, and `verified_access_instance` configuration blocks
to `association_config.request_body`
([#&#8203;37588](https://togithub.com/hashicorp/terraform-provider-aws/issues/37588))

BUG FIXES:

- resource/aws_dynamodb_table_replica: Correctly set `kms_key_arn` on
Read
([#&#8203;37570](https://togithub.com/hashicorp/terraform-provider-aws/issues/37570))
- resource/aws_kms_grant: Change `grant_token` to
[`Sensitive`](https://developer.hashicorp.com/terraform/plugin/best-practices/sensitive-state#using-sensitive-flag-functionality)
([#&#8203;37593](https://togithub.com/hashicorp/terraform-provider-aws/issues/37593))
- resource/aws_lambda_function: Fix issue when `source_code_hash` causes
drift even if source code has not changed
([#&#8203;37669](https://togithub.com/hashicorp/terraform-provider-aws/issues/37669))
- resource/aws_lambda_layer_version: Fix issue when `source_code_hash`
forces a replacement even if source code has not changed
([#&#8203;37646](https://togithub.com/hashicorp/terraform-provider-aws/issues/37646))
- resource/aws_m2\_deployment: Fix `state` error on `deployment_id`
during start/stop update
([#&#8203;37581](https://togithub.com/hashicorp/terraform-provider-aws/issues/37581))
- resource/aws_storagegateway_smb_file_share: Fix crash when
`cache_attributes` is removed on update
([#&#8203;37611](https://togithub.com/hashicorp/terraform-provider-aws/issues/37611))

</details>

<details>
<summary>boto/boto3 (boto3)</summary>

###
[`v1.34.114`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#134114)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.113...1.34.114)

\========

- api-change:`dynamodb`: \[`botocore`] Doc-only update for DynamoDB.
Specified the IAM actions needed to authorize a user to create a table
with a resource-based policy.
- api-change:`ec2`: \[`botocore`] Providing support to accept
BgpAsnExtended attribute
- api-change:`kafka`: \[`botocore`] Adds ControllerNodeInfo in ListNodes
response to support Raft mode for MSK
- api-change:`swf`: \[`botocore`] This release adds new APIs for
deleting activity type and workflow type resources.

###
[`v1.34.113`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#134113)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.112...1.34.113)

\========

- api-change:`dynamodb`: \[`botocore`] Documentation only updates for
DynamoDB.
- api-change:`iotfleetwise`: \[`botocore`] AWS IoT FleetWise now
supports listing vehicles with attributes filter, ListVehicles API is
updated to support additional attributes filter.
- api-change:`managedblockchain`: \[`botocore`] This is a minor
documentation update to address the impact of the shut down of the
Goerli and Polygon networks.

###
[`v1.34.112`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#134112)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.111...1.34.112)

\========

- api-change:`emr-serverless`: \[`botocore`] This release adds the
capability to run interactive workloads using Apache Livy Endpoint.
- api-change:`opsworks`: \[`botocore`] Documentation-only update for
OpsWorks Stacks.

###
[`v1.34.111`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#134111)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.110...1.34.111)

\========

- api-change:`chatbot`: \[`botocore`] This change adds support for
tagging Chatbot configurations.
- api-change:`cloudformation`: \[`botocore`] Added DeletionMode
FORCE_DELETE_STACK for deleting a stack that is stuck in DELETE_FAILED
state due to resource deletion failure.
- api-change:`kms`: \[`botocore`] This release includes feature to
import customer's asymmetric (RSA, ECC and SM2) and HMAC keys into KMS
in China.
- api-change:`opensearch`: \[`botocore`] This release adds support for
enabling or disabling a data source configured as part of Zero-ETL
integration with Amazon S3, by setting its status.
- api-change:`wafv2`: \[`botocore`] You can now use Security Lake to
collect web ACL traffic data.

###
[`v1.34.110`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#134110)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.109...1.34.110)

\========

- api-change:`cloudfront`: \[`botocore`] Model update; no change to SDK
functionality.
- api-change:`glue`: \[`botocore`] Add Maintenance window to CreateJob
and UpdateJob APIs and JobRun response. Add a new Job Run State for
EXPIRED.
- api-change:`lightsail`: \[`botocore`] This release adds support for
Amazon Lightsail instances to switch between dual-stack or IPv4 only and
IPv6-only public IP address types.
- api-change:`mailmanager`: \[`botocore`] This release includes a new
Amazon SES feature called Mail Manager, which is a set of email gateway
capabilities designed to help customers strengthen their organization's
email infrastructure, simplify email workflow management, and streamline
email compliance control.
- api-change:`pi`: \[`botocore`] Performance Insights added a new input
parameter called AuthorizedActions to support the fine-grained access
feature. Performance Insights also restricted the acceptable input
characters.
- api-change:`rds`: \[`botocore`] Updates Amazon RDS documentation for
Db2 license through AWS Marketplace.
- api-change:`storagegateway`: \[`botocore`] Added new
SMBSecurityStrategy enum named MandatoryEncryptionNoAes128, new mode
enforces encryption and disables AES 128-bit algorithums.

###
[`v1.34.109`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#134109)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.108...1.34.109)

\========

- api-change:`bedrock-agent`: \[`botocore`] This release adds support
for using Guardrails with Bedrock Agents.
- api-change:`bedrock-agent-runtime`: \[`botocore`] This release adds
support for using Guardrails with Bedrock Agents.
- api-change:`controltower`: \[`botocore`] Added ListControlOperations
API and filtering support for ListEnabledControls API. Updates also
includes added metadata for enabled controls and control operations.
- api-change:`osis`: \[`botocore`] Add support for creating an
OpenSearch Ingestion pipeline that is attached to a provided VPC. Add
information about the destinations of an OpenSearch Ingestion pipeline
to the GetPipeline and ListPipelines APIs.
- api-change:`rds`: \[`botocore`] This release adds support for
EngineLifecycleSupport on DBInstances, DBClusters, and GlobalClusters.
- api-change:`secretsmanager`: \[`botocore`] add v2 smoke tests and
smithy smokeTests trait for SDK testing

</details>

<details>
<summary>boto/botocore (botocore)</summary>

###
[`v1.34.114`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#134114)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.113...1.34.114)

\========

- api-change:`dynamodb`: Doc-only update for DynamoDB. Specified the IAM
actions needed to authorize a user to create a table with a
resource-based policy.
- api-change:`ec2`: Providing support to accept BgpAsnExtended attribute
- api-change:`kafka`: Adds ControllerNodeInfo in ListNodes response to
support Raft mode for MSK
- api-change:`swf`: This release adds new APIs for deleting activity
type and workflow type resources.

###
[`v1.34.113`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#134113)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.112...1.34.113)

\========

-   api-change:`dynamodb`: Documentation only updates for DynamoDB.
- api-change:`iotfleetwise`: AWS IoT FleetWise now supports listing
vehicles with attributes filter, ListVehicles API is updated to support
additional attributes filter.
- api-change:`managedblockchain`: This is a minor documentation update
to address the impact of the shut down of the Goerli and Polygon
networks.

###
[`v1.34.112`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#134112)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.111...1.34.112)

\========

- api-change:`emr-serverless`: This release adds the capability to run
interactive workloads using Apache Livy Endpoint.
- api-change:`opsworks`: Documentation-only update for OpsWorks Stacks.

###
[`v1.34.111`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#134111)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.110...1.34.111)

\========

- api-change:`chatbot`: This change adds support for tagging Chatbot
configurations.
- api-change:`cloudformation`: Added DeletionMode FORCE_DELETE_STACK for
deleting a stack that is stuck in DELETE_FAILED state due to resource
deletion failure.
- api-change:`kms`: This release includes feature to import customer's
asymmetric (RSA, ECC and SM2) and HMAC keys into KMS in China.
- api-change:`opensearch`: This release adds support for enabling or
disabling a data source configured as part of Zero-ETL integration with
Amazon S3, by setting its status.
- api-change:`wafv2`: You can now use Security Lake to collect web ACL
traffic data.

###
[`v1.34.110`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#134110)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.109...1.34.110)

\========

- api-change:`cloudfront`: Model update; no change to SDK functionality.
- api-change:`glue`: Add Maintenance window to CreateJob and UpdateJob
APIs and JobRun response. Add a new Job Run State for EXPIRED.
- api-change:`lightsail`: This release adds support for Amazon Lightsail
instances to switch between dual-stack or IPv4 only and IPv6-only public
IP address types.
- api-change:`mailmanager`: This release includes a new Amazon SES
feature called Mail Manager, which is a set of email gateway
capabilities designed to help customers strengthen their organization's
email infrastructure, simplify email workflow management, and streamline
email compliance control.
- api-change:`pi`: Performance Insights added a new input parameter
called AuthorizedActions to support the fine-grained access feature.
Performance Insights also restricted the acceptable input characters.
- api-change:`rds`: Updates Amazon RDS documentation for Db2 license
through AWS Marketplace.
- api-change:`storagegateway`: Added new SMBSecurityStrategy enum named
MandatoryEncryptionNoAes128, new mode enforces encryption and disables
AES 128-bit algorithums.

###
[`v1.34.109`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#134109)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.108...1.34.109)

\========

- api-change:`bedrock-agent`: This release adds support for using
Guardrails with Bedrock Agents.
- api-change:`bedrock-agent-runtime`: This release adds support for
using Guardrails with Bedrock Agents.
- api-change:`controltower`: Added ListControlOperations API and
filtering support for ListEnabledControls API. Updates also includes
added metadata for enabled controls and control operations.
- api-change:`osis`: Add support for creating an OpenSearch Ingestion
pipeline that is attached to a provided VPC. Add information about the
destinations of an OpenSearch Ingestion pipeline to the GetPipeline and
ListPipelines APIs.
- api-change:`rds`: This release adds support for EngineLifecycleSupport
on DBInstances, DBClusters, and GlobalClusters.
- api-change:`secretsmanager`: add v2 smoke tests and smithy smokeTests
trait for SDK testing

</details>

<details>
<summary>hashicorp/terraform-provider-random (random)</summary>

###
[`v3.6.2`](https://togithub.com/hashicorp/terraform-provider-random/blob/HEAD/CHANGELOG.md#362-May-21-2024)

[Compare
Source](https://togithub.com/hashicorp/terraform-provider-random/compare/v3.6.1...v3.6.2)

NOTES:

- resource/random_pet: Results have been updated to the latest upstream
petname data
([#&#8203;581](https://togithub.com/hashicorp/terraform-provider-random/issues/581))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNjguMTAiLCJ1cGRhdGVkSW5WZXIiOiIzNy4zNzcuOCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
     container:
       image: hashicorp/terraform:${{ matrix.terraform }}
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - run: terraform init -get -backend=false -input=false
       - run: terraform fmt -recursive -check=true -write=false
 
@@ -50,7 +50,7 @@ jobs:
     container:
       image: hashicorp/terraform:${{ matrix.terraform }}
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - run: terraform init -get -backend=false -input=false
       - if: contains(matrix.terraform, '1.3.')
         run: terraform fmt -recursive -check=true -write=false
@@ -62,7 +62,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
@@ -108,15 +108,15 @@ jobs:
     container:
       image: checkmarx/kics:v2.0.1-debian@sha256:ff5a5e927b4d68f60c5a9a9d130a21d509037a55f85895a75539154e1bed0105
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       # ignore: "tags not used", "access analyzer not used", "shield advanced not used"
       - run: kics scan -p . -o . --config .kics.yml --exclude-queries e38a8e0a-b88b-4902-b3fe-b0fcb17d5c10,e592a0c5-5bdb-414c-9066-5dba7cdea370,084c6686-2a70-4710-91b1-000393e54c12
 
   tflint:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
         name: Checkout source code
 
       - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
@@ -148,7 +148,7 @@ jobs:
 
     steps:
       - name: Clone repo
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
 
       - name: tfsec
         uses: aquasecurity/tfsec-pr-commenter-action@7a44c5dcde5dfab737363e391800629e27b6376b # v1.3.1
@@ -163,7 +163,7 @@ jobs:
       contents: read
     if: ${{ !github.event.pull_request.head.repo.fork }}
     steps:
-      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
+      - uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4
       - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         name: Cache plugin dir
         with:

.github/workflows/update_docs.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout branch
-        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 # ratchet:actions/checkout@v3
+        uses: actions/checkout@a5ac7e51b41094c92402da3b24376905380afc29 # v4 # ratchet:actions/checkout@v3
       - name: Generate TF docs
         uses: terraform-docs/gh-actions@7a62208a0090636af2df1b739da46d27fd90bdc6 # v1.1.0
         with:

.terraform.lock.hcl

@@ -5,7 +5,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.50.0"
+      version = "5.51.1"
     }
     local = {
       source  = "hashicorp/local"
@@ -21,7 +21,7 @@ terraform {
     }
     random = {
       source  = "hashicorp/random"
-      version = "3.6.1"
+      version = "3.6.2"
     }
   }
 }

examples/runner-certificates/versions.tf

@@ -5,7 +5,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.50.0"
+      version = "5.51.1"
     }
     local = {
       source  = "hashicorp/local"
@@ -21,7 +21,7 @@ terraform {
     }
     random = {
       source  = "hashicorp/random"
-      version = "3.6.1"
+      version = "3.6.2"
     }
   }
 }