chore(deps): update all dependencies (#1121)

[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change | Age | Adoption | Passing |
Confidence |
|---|---|---|---|---|---|---|---|
| [actions/checkout](https://togithub.com/actions/checkout) | action |
digest | `1d96c77` -> `0ad4b8f` | | | | |
| [aws](https://registry.terraform.io/providers/hashicorp/aws)
([source](https://togithub.com/hashicorp/terraform-provider-aws)) |
required_provider | minor | `5.46.0` -> `5.47.0` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/aws/5.47.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/terraform-provider/aws/5.47.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/terraform-provider/aws/5.46.0/5.47.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/aws/5.46.0/5.47.0?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [boto3](https://togithub.com/boto/boto3) | | patch | `==1.34.91` ->
`==1.34.95` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/boto3/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/boto3/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/boto3/1.34.91/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/boto3/1.34.91/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [botocore](https://togithub.com/boto/botocore) | | patch | `==1.34.91`
-> `==1.34.95` |
[![age](https://developer.mend.io/api/mc/badges/age/pypi/botocore/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/pypi/botocore/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/pypi/botocore/1.34.91/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/botocore/1.34.91/1.34.95?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
| [random](https://registry.terraform.io/providers/hashicorp/random)
([source](https://togithub.com/hashicorp/terraform-provider-random)) |
required_provider | patch | `3.6.0` -> `3.6.1` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-provider/random/3.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/terraform-provider/random/3.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/terraform-provider/random/3.6.0/3.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-provider/random/3.6.0/3.6.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
|
[terraform-aws-modules/vpc/aws](https://registry.terraform.io/modules/terraform-aws-modules/vpc/aws)
([source](https://togithub.com/terraform-aws-modules/terraform-aws-vpc))
| module | minor | `5.7.1` -> `5.8.1` |
[![age](https://developer.mend.io/api/mc/badges/age/terraform-module/terraform-aws-modules%2fvpc%2faws/5.8.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/terraform-module/terraform-aws-modules%2fvpc%2faws/5.8.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/terraform-module/terraform-aws-modules%2fvpc%2faws/5.7.1/5.8.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/terraform-module/terraform-aws-modules%2fvpc%2faws/5.7.1/5.8.1?slim=true)](https://docs.renovatebot.com/merge-confidence/)
|

---

### Release Notes

<details>
<summary>hashicorp/terraform-provider-aws (aws)</summary>

###
[`v5.47.0`](https://togithub.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#5470-April-26-2024)

[Compare
Source](https://togithub.com/hashicorp/terraform-provider-aws/compare/v5.46.0...v5.47.0)

NOTES:

- provider: Updates to Go 1.22. This is the last Go release that will
run on macOS 10.15 Catalina
([#&#8203;36996](https://togithub.com/hashicorp/terraform-provider-aws/issues/36996))
- resource/aws_bedrockagent_knowledge_base: Because we cannot easily
test this functionality, it is best effort and we ask for community help
in testing
([#&#8203;36783](https://togithub.com/hashicorp/terraform-provider-aws/issues/36783))

FEATURES:

- **New Data Source:** `aws_identitystore_groups`
([#&#8203;36993](https://togithub.com/hashicorp/terraform-provider-aws/issues/36993))
- **New Resource:** `aws_bcmdataexports_export`
([#&#8203;36847](https://togithub.com/hashicorp/terraform-provider-aws/issues/36847))
- **New Resource:** `aws_bedrockagent_agent`
([#&#8203;36851](https://togithub.com/hashicorp/terraform-provider-aws/issues/36851))
- **New Resource:** `aws_bedrockagent_agent_action_group`
([#&#8203;36935](https://togithub.com/hashicorp/terraform-provider-aws/issues/36935))
- **New Resource:** `aws_bedrockagent_agent_alias`
([#&#8203;36905](https://togithub.com/hashicorp/terraform-provider-aws/issues/36905))
- **New Resource:** `aws_bedrockagent_knowledge_base`
([#&#8203;36783](https://togithub.com/hashicorp/terraform-provider-aws/issues/36783))
- **New Resource:** `aws_globalaccelerator_cross_account_attachment`
([#&#8203;35991](https://togithub.com/hashicorp/terraform-provider-aws/issues/35991))
- **New Resource:** `aws_verifiedpermissions_policy`
([#&#8203;35413](https://togithub.com/hashicorp/terraform-provider-aws/issues/35413))

ENHANCEMENTS:

- data-source/aws_eip: Add `arn` attribute
([#&#8203;35991](https://togithub.com/hashicorp/terraform-provider-aws/issues/35991))
- resource/aws_api_gateway_rest_api: Correctly set `root_resource_id` on
resource Read
([#&#8203;37040](https://togithub.com/hashicorp/terraform-provider-aws/issues/37040))
- resource/aws_appmesh_mesh: Add `spec.service_discovery` argument
([#&#8203;37042](https://togithub.com/hashicorp/terraform-provider-aws/issues/37042))
- resource/aws_cloudformation_stack_set: Adds guidance on permissions
when using delegated administrator account
([#&#8203;37069](https://togithub.com/hashicorp/terraform-provider-aws/issues/37069))
- resource/aws_db_instance: Add `dedicated_log_volume` argument
([#&#8203;36503](https://togithub.com/hashicorp/terraform-provider-aws/issues/36503))
- resource/aws_eip: Add `arn` attribute
([#&#8203;35991](https://togithub.com/hashicorp/terraform-provider-aws/issues/35991))
- resource/aws_elasticache_replication_group: Add
`transit_encryption_mode` argument
([#&#8203;30403](https://togithub.com/hashicorp/terraform-provider-aws/issues/30403))
- resource/aws_elasticache_replication_group: Changes to the
`transit_encryption_enabled` argument can now be done in-place for
engine versions > `7.0.5`
([#&#8203;30403](https://togithub.com/hashicorp/terraform-provider-aws/issues/30403))
- resource/aws_kinesis_firehose_delivery_stream: Add
`snowflake_configuration` argument
([#&#8203;36646](https://togithub.com/hashicorp/terraform-provider-aws/issues/36646))
- resource/aws_memorydb_user: Support IAM authentication mode
([#&#8203;32027](https://togithub.com/hashicorp/terraform-provider-aws/issues/32027))
- resource/aws_sagemaker_app_image_config: Add
`code_editor_app_image_config` and
`jupyter_lab_image_config.jupyter_lab_image_config` arguments
([#&#8203;37059](https://togithub.com/hashicorp/terraform-provider-aws/issues/37059))
- resource/aws_sagemaker_app_image_config: Change
`kernel_gateway_image_config.kernel_spec` MaxItems to 5
([#&#8203;37059](https://togithub.com/hashicorp/terraform-provider-aws/issues/37059))
- resource/aws_transfer_server: Add `sftp_authentication_methods`
argument
([#&#8203;37015](https://togithub.com/hashicorp/terraform-provider-aws/issues/37015))

BUG FIXES:

- resource/aws_batch_job_definition: Fix issues where changes causing a
new `revision` do not trigger changes in dependent resources and/or
cause an error, "Provider produced inconsistent final plan"
([#&#8203;37111](https://togithub.com/hashicorp/terraform-provider-aws/issues/37111))
- resource/aws_ce_cost_category: Allow up to 3 levels of `and`, `not`
and `or` operand nesting for the `rule` argument
([#&#8203;30862](https://togithub.com/hashicorp/terraform-provider-aws/issues/30862))
- resource/aws_elasticache_replication_group: Fix excessive delay on
read
([#&#8203;30403](https://togithub.com/hashicorp/terraform-provider-aws/issues/30403))
- resource/aws_servicecatalog_portfolio: Fixes error where deletion
fails if resource was deleted out of band.
([#&#8203;37066](https://togithub.com/hashicorp/terraform-provider-aws/issues/37066))
- resource/aws_servicecatalog_provisioned_product: Fixes error where tag
values are not applied to products when tag values don't change.
([#&#8203;37066](https://togithub.com/hashicorp/terraform-provider-aws/issues/37066))

</details>

<details>
<summary>boto/boto3 (boto3)</summary>

###
[`v1.34.95`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13495)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.94...1.34.95)

\=======

- api-change:`chime-sdk-voice`: \[`botocore`] Due to changes made by the
Amazon Alexa service, GetSipMediaApplicationAlexaSkillConfiguration and
PutSipMediaApplicationAlexaSkillConfiguration APIs are no longer
available for use. For more information, refer to the Alexa Smart
Properties page.
- api-change:`codeartifact`: \[`botocore`] Add support for the Ruby
package format.
- api-change:`fms`: \[`botocore`] AWS Firewall Manager now supports the
network firewall service stream exception policy feature for accounts
within your organization.
- api-change:`omics`: \[`botocore`] Add support for workflow sharing and
dynamic run storage
- api-change:`opensearch`: \[`botocore`] This release enables customers
to create Route53 A and AAAA alias record types to point custom endpoint
domain to OpenSearch domain's dualstack search endpoint.
- api-change:`pinpoint-sms-voice-v2`: \[`botocore`] Amazon Pinpoint has
added two new features Multimedia services (MMS) and protect
configurations. Use the three new MMS APIs to send media messages to a
mobile phone which includes image, audio, text, or video files. Use the
ten new protect configurations APIs to block messages to specific
countries.
- api-change:`qbusiness`: \[`botocore`] This is a general availability
(GA) release of Amazon Q Business. Q Business enables employees in an
enterprise to get comprehensive answers to complex questions and take
actions through a unified, intuitive web-based chat experience - using
an enterprise's existing content, data, and systems.
- api-change:`quicksight`: \[`botocore`] New Q embedding supporting
Generative Q\&A
- api-change:`route53resolver`: \[`botocore`] Release of
FirewallDomainRedirectionAction parameter on the Route 53 DNS Firewall
Rule. This allows customers to configure a DNS Firewall rule to inspect
all the domains in the DNS redirection chain (default) , such as CNAME,
ALIAS, DNAME, etc., or just the first domain and trust the rest.
- api-change:`sagemaker`: \[`botocore`] Amazon SageMaker Training now
supports the use of attribute-based access control (ABAC) roles for
training job execution roles. Amazon SageMaker Inference now supports G6
instance types.
- api-change:`signer`: \[`botocore`] Documentation updates for AWS
Signer. Adds cross-account signing constraint and definitions for
cross-account actions.

###
[`v1.34.94`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13494)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.93...1.34.94)

\=======

- api-change:`amplify`: \[`botocore`] Updating max results limit for
listing any resources (Job, Artifacts, Branch, BackendResources,
DomainAssociation) to 50 with the exception of list apps that where max
results can be up to 100.
- api-change:`connectcases`: \[`botocore`] This feature releases
DeleteField, DeletedLayout, and DeleteTemplate API's
- api-change:`inspector2`: \[`botocore`] Update Inspector2 to include
new Agentless API parameters.
- api-change:`timestream-query`: \[`botocore`] This change allows users
to update and describe account settings associated with their accounts.
- api-change:`transcribe`: \[`botocore`] This update provides error
messaging for generative call summarization in Transcribe Call Analytics
- api-change:`trustedadvisor`: \[`botocore`] This release adds the
BatchUpdateRecommendationResourceExclusion API to support batch updates
of Recommendation Resource exclusion statuses and introduces a new
exclusion status filter to the ListRecommendationResources and
ListOrganizationRecommendationResources APIs.

###
[`v1.34.93`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13493)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.92...1.34.93)

\=======

- api-change:`codepipeline`: \[`botocore`] Add ability to manually and
automatically roll back a pipeline stage to a previously successful
execution.
- api-change:`cognito-idp`: \[`botocore`] Add LimitExceededException to
SignUp errors
- api-change:`connectcampaigns`: \[`botocore`] This release adds support
for specifying if Answering Machine should wait for prompt sound.
- api-change:`marketplace-entitlement`: \[`botocore`] Releasing minor
endpoint updates.
- api-change:`oam`: \[`botocore`] This release introduces support for
Source Accounts to define which Metrics and Logs to share with the
Monitoring Account
- api-change:`rds`: \[`botocore`] SupportsLimitlessDatabase field added
to describe-db-engine-versions to indicate whether the DB engine version
supports Aurora Limitless Database.
- api-change:`support`: \[`botocore`] Releasing minor endpoint updates.

###
[`v1.34.92`](https://togithub.com/boto/boto3/blob/HEAD/CHANGELOG.rst#13492)

[Compare
Source](https://togithub.com/boto/boto3/compare/1.34.91...1.34.92)

\=======

- api-change:`appsync`: \[`botocore`] UpdateGraphQLAPI documentation
update and datasource introspection secret arn update
- api-change:`fms`: \[`botocore`] AWS Firewall Manager adds support for
network ACL policies to manage Amazon Virtual Private Cloud (VPC)
network access control lists (ACLs) for accounts in your organization.
- api-change:`ivs`: \[`botocore`] Bug Fix: IVS does not support arns
with the `svs` prefix
- api-change:`ivs-realtime`: \[`botocore`] Bug Fix: IVS Real Time does
not support ARNs using the `svs` prefix.
- api-change:`rds`: \[`botocore`] Updates Amazon RDS documentation for
setting local time zones for RDS for Db2 DB instances.
- api-change:`stepfunctions`: \[`botocore`] Add new
ValidateStateMachineDefinition operation, which performs syntax checking
on the definition of a Amazon States Language (ASL) state machine.

</details>

<details>
<summary>boto/botocore (botocore)</summary>

###
[`v1.34.95`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13495)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.94...1.34.95)

\=======

- api-change:`chime-sdk-voice`: Due to changes made by the Amazon Alexa
service, GetSipMediaApplicationAlexaSkillConfiguration and
PutSipMediaApplicationAlexaSkillConfiguration APIs are no longer
available for use. For more information, refer to the Alexa Smart
Properties page.
-   api-change:`codeartifact`: Add support for the Ruby package format.
- api-change:`fms`: AWS Firewall Manager now supports the network
firewall service stream exception policy feature for accounts within
your organization.
- api-change:`omics`: Add support for workflow sharing and dynamic run
storage
- api-change:`opensearch`: This release enables customers to create
Route53 A and AAAA alias record types to point custom endpoint domain to
OpenSearch domain's dualstack search endpoint.
- api-change:`pinpoint-sms-voice-v2`: Amazon Pinpoint has added two new
features Multimedia services (MMS) and protect configurations. Use the
three new MMS APIs to send media messages to a mobile phone which
includes image, audio, text, or video files. Use the ten new protect
configurations APIs to block messages to specific countries.
- api-change:`qbusiness`: This is a general availability (GA) release of
Amazon Q Business. Q Business enables employees in an enterprise to get
comprehensive answers to complex questions and take actions through a
unified, intuitive web-based chat experience - using an enterprise's
existing content, data, and systems.
-   api-change:`quicksight`: New Q embedding supporting Generative Q\&A
- api-change:`route53resolver`: Release of
FirewallDomainRedirectionAction parameter on the Route 53 DNS Firewall
Rule. This allows customers to configure a DNS Firewall rule to inspect
all the domains in the DNS redirection chain (default) , such as CNAME,
ALIAS, DNAME, etc., or just the first domain and trust the rest.
- api-change:`sagemaker`: Amazon SageMaker Training now supports the use
of attribute-based access control (ABAC) roles for training job
execution roles. Amazon SageMaker Inference now supports G6 instance
types.
- api-change:`signer`: Documentation updates for AWS Signer. Adds
cross-account signing constraint and definitions for cross-account
actions.

###
[`v1.34.94`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13494)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.93...1.34.94)

\=======

- api-change:`amplify`: Updating max results limit for listing any
resources (Job, Artifacts, Branch, BackendResources, DomainAssociation)
to 50 with the exception of list apps that where max results can be up
to 100.
- api-change:`connectcases`: This feature releases DeleteField,
DeletedLayout, and DeleteTemplate API's
- api-change:`inspector2`: Update Inspector2 to include new Agentless
API parameters.
- api-change:`timestream-query`: This change allows users to update and
describe account settings associated with their accounts.
- api-change:`transcribe`: This update provides error messaging for
generative call summarization in Transcribe Call Analytics
- api-change:`trustedadvisor`: This release adds the
BatchUpdateRecommendationResourceExclusion API to support batch updates
of Recommendation Resource exclusion statuses and introduces a new
exclusion status filter to the ListRecommendationResources and
ListOrganizationRecommendationResources APIs.

###
[`v1.34.93`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13493)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.92...1.34.93)

\=======

- api-change:`codepipeline`: Add ability to manually and automatically
roll back a pipeline stage to a previously successful execution.
- api-change:`cognito-idp`: Add LimitExceededException to SignUp errors
- api-change:`connectcampaigns`: This release adds support for
specifying if Answering Machine should wait for prompt sound.
- api-change:`marketplace-entitlement`: Releasing minor endpoint
updates.
- api-change:`oam`: This release introduces support for Source Accounts
to define which Metrics and Logs to share with the Monitoring Account
- api-change:`rds`: SupportsLimitlessDatabase field added to
describe-db-engine-versions to indicate whether the DB engine version
supports Aurora Limitless Database.
-   api-change:`support`: Releasing minor endpoint updates.

###
[`v1.34.92`](https://togithub.com/boto/botocore/blob/HEAD/CHANGELOG.rst#13492)

[Compare
Source](https://togithub.com/boto/botocore/compare/1.34.91...1.34.92)

\=======

- api-change:`appsync`: UpdateGraphQLAPI documentation update and
datasource introspection secret arn update
- api-change:`fms`: AWS Firewall Manager adds support for network ACL
policies to manage Amazon Virtual Private Cloud (VPC) network access
control lists (ACLs) for accounts in your organization.
- api-change:`ivs`: Bug Fix: IVS does not support arns with the `svs`
prefix
- api-change:`ivs-realtime`: Bug Fix: IVS Real Time does not support
ARNs using the `svs` prefix.
- api-change:`rds`: Updates Amazon RDS documentation for setting local
time zones for RDS for Db2 DB instances.
- api-change:`stepfunctions`: Add new ValidateStateMachineDefinition
operation, which performs syntax checking on the definition of a Amazon
States Language (ASL) state machine.

</details>

<details>
<summary>hashicorp/terraform-provider-random (random)</summary>

###
[`v3.6.1`](https://togithub.com/hashicorp/terraform-provider-random/blob/HEAD/CHANGELOG.md#361-April-16-2024)

[Compare
Source](https://togithub.com/hashicorp/terraform-provider-random/compare/v3.6.0...v3.6.1)

BUG FIXES:

- all: Prevent `keepers` from triggering an in-place update following
import
([#&#8203;385](https://togithub.com/hashicorp/terraform-provider-random/issues/385))
- resource/random_shuffle: Prevent inconsistent result after apply when
result_count is set to 0
([#&#8203;409](https://togithub.com/hashicorp/terraform-provider-random/issues/409))
- provider/random_password: Fix bug which causes panic when special,
upper, lower and number/numeric are all false
([#&#8203;551](https://togithub.com/hashicorp/terraform-provider-random/issues/551))
- provider/random_string: Fix bug which causes panic when special,
upper, lower and number/numeric are all false
([#&#8203;551](https://togithub.com/hashicorp/terraform-provider-random/issues/551))

</details>

<details>
<summary>terraform-aws-modules/terraform-aws-vpc
(terraform-aws-modules/vpc/aws)</summary>

###
[`v5.8.1`](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/blob/HEAD/CHANGELOG.md#581-2024-04-26)

[Compare
Source](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/compare/v5.8.0...v5.8.1)

##### Bug Fixes

- Do not replace NAT gateways when additional subnets are added
([#&#8203;1055](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/issues/1055))
([cf18c37](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/commit/cf18c37591f860908e2223b4f488787e8a5f74f3))

###
[`v5.8.0`](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/blob/HEAD/CHANGELOG.md#580-2024-04-25)

[Compare
Source](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/compare/v5.7.2...v5.8.0)

##### Features

- Add support for multiple route tables to public and intra subnets
([#&#8203;1051](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/issues/1051))
([da05f24](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/commit/da05f24c5c603a31d320d5ad92493bb39fea9f3d))

###
[`v5.7.2`](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/blob/HEAD/CHANGELOG.md#572-2024-04-24)

[Compare
Source](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/compare/v5.7.1...v5.7.2)

##### Bug Fixes

- Create private_ipv6\_egress routes only when having at least one
private subnet
([#&#8203;1062](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/issues/1062))
([8701204](https://togithub.com/terraform-aws-modules/terraform-aws-vpc/commit/8701204c28a0ff984c5ade71400c6208c6953bfc))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMjEuMiIsInVwZGF0ZWRJblZlciI6IjM3LjMyMS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

Author: renovate[bot]

.github/workflows/ci.yml

@@ -25,7 +25,7 @@ jobs:
     container:
       image: hashicorp/terraform:${{ matrix.terraform }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - run: terraform init -get -backend=false -input=false
       - run: terraform fmt -recursive -check=true -write=false
 
@@ -50,7 +50,7 @@ jobs:
     container:
       image: hashicorp/terraform:${{ matrix.terraform }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - run: terraform init -get -backend=false -input=false
       - if: contains(matrix.terraform, '1.3.')
         run: terraform fmt -recursive -check=true -write=false
@@ -62,7 +62,7 @@ jobs:
     steps:
       # Git Checkout
       - name: Checkout Code
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         with:
           token: ${{ secrets.GITHUB_TOKEN }}
           fetch-depth: 0 # If you use VALIDATE_ALL_CODEBASE = true, you can remove this line to improve performances
@@ -108,15 +108,15 @@ jobs:
     container:
       image: checkmarx/kics:v2.0.0-debian@sha256:e2e85cbe859bc0067ed8bbdcfa76496586fbc5d4597de8dd1db60ffd40c4601e
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       # ignore: "tags not used", "access analyzer not used", "shield advanced not used"
       - run: kics scan -p . -o . --config .kics.yml --exclude-queries e38a8e0a-b88b-4902-b3fe-b0fcb17d5c10,e592a0c5-5bdb-414c-9066-5dba7cdea370,084c6686-2a70-4710-91b1-000393e54c12
 
   tflint:
     runs-on: ubuntu-latest
 
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
         name: Checkout source code
 
       - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
@@ -148,7 +148,7 @@ jobs:
 
     steps:
       - name: Clone repo
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
 
       - name: tfsec
         uses: aquasecurity/tfsec-pr-commenter-action@7a44c5dcde5dfab737363e391800629e27b6376b # v1.3.1
@@ -163,7 +163,7 @@ jobs:
       contents: read
     if: ${{ !github.event.pull_request.head.repo.fork }}
     steps:
-      - uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4
+      - uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4
       - uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4
         name: Cache plugin dir
         with:

.github/workflows/update_docs.yml

@@ -17,7 +17,7 @@ jobs:
       contents: write
     steps:
       - name: Checkout branch
-        uses: actions/checkout@1d96c772d19495a3b5c517cd2bc0cb401ea0529f # v4 # ratchet:actions/checkout@v3
+        uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4 # ratchet:actions/checkout@v3
       - name: Generate TF docs
         uses: terraform-docs/gh-actions@7a62208a0090636af2df1b739da46d27fd90bdc6 # v1.1.0
         with:

.terraform.lock.hcl

@@ -6,7 +6,7 @@ data "aws_availability_zones" "available" {
 # kics-scan ignore-line
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.7.1"
+  version = "5.8.1"
 
   name = "vpc-${var.environment}"
   cidr = "10.0.0.0/16"
@@ -26,7 +26,7 @@ module "vpc" {
 
 module "vpc_endpoints" {
   source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
-  version = "5.7.1"
+  version = "5.8.1"
 
   vpc_id = module.vpc.vpc_id
 

examples/runner-certificates/main.tf

@@ -5,7 +5,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.46.0"
+      version = "5.47.0"
     }
     local = {
       source  = "hashicorp/local"

examples/runner-certificates/versions.tf

@@ -11,7 +11,7 @@ data "aws_security_group" "default" {
 # kics-scan ignore-line
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.7.1"
+  version = "5.8.1"
 
   name = "vpc-${var.environment}"
   cidr = "10.0.0.0/16"
@@ -31,7 +31,7 @@ module "vpc" {
 
 module "vpc_endpoints" {
   source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
-  version = "5.7.1"
+  version = "5.8.1"
 
   vpc_id = module.vpc.vpc_id
 

examples/runner-default/.terraform.lock.hcl

@@ -5,7 +5,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.46.0"
+      version = "5.47.0"
     }
     local = {
       source  = "hashicorp/local"

examples/runner-default/main.tf

@@ -6,7 +6,7 @@ data "aws_availability_zones" "available" {
 # kics-scan ignore-line
 module "vpc" {
   source  = "terraform-aws-modules/vpc/aws"
-  version = "5.7.1"
+  version = "5.8.1"
 
   name = "vpc-${var.environment}"
   cidr = "10.1.0.0/16"
@@ -22,7 +22,7 @@ module "vpc" {
 
 module "vpc_endpoints" {
   source  = "terraform-aws-modules/vpc/aws//modules/vpc-endpoints"
-  version = "5.7.1"
+  version = "5.8.1"
 
   vpc_id = module.vpc.vpc_id
 

examples/runner-default/versions.tf

@@ -5,7 +5,7 @@ terraform {
   required_providers {
     aws = {
       source  = "hashicorp/aws"
-      version = "5.46.0"
+      version = "5.47.0"
     }
     local = {
       source  = "hashicorp/local"