From c6e1da9390c029d0dd0c83a512ec3218306608bf Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 22 Apr 2026 18:02:36 +0000
Subject: [PATCH 1/4] chore(docker): update debian base image to
 bookworm-20260421-slim and unpin apt packages

Updated ARG DEBIAN_VERSION from bookworm-20231120-slim to bookworm-20260421-slim.
Removed version pins on APT packages (ca-certificates, curl, gnupg, unzip, git, jq)
and added # pinned by Renovate comment for future automated updates.

https://claude.ai/code/session_01RsmDFm6w4jVXwvzmRd9BCv
---
 Dockerfile | 22 +++++++++++-----------
 1 file changed, 11 insertions(+), 11 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 2af6f55..d64107c 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # Setup build arguments
 ARG AWS_CLI_VERSION
 ARG TERRAFORM_VERSION
-ARG DEBIAN_VERSION=bookworm-20231120-slim
+ARG DEBIAN_VERSION=bookworm-20260421-slim
 ARG DEBIAN_FRONTEND=noninteractive
 
 # Download Terraform binary
@@ -10,10 +10,10 @@ ARG TARGETARCH
 ARG TERRAFORM_VERSION
 RUN apt-get update
 # RUN apt-get install --no-install-recommends -y libcurl4=7.74.0-1.3+deb11u7
-RUN apt-get install --no-install-recommends -y ca-certificates=20230311
-RUN apt-get install --no-install-recommends -y curl=7.88.1-10+deb12u4
-RUN apt-get install --no-install-recommends -y gnupg=2.2.40-1.1
-RUN apt-get install --no-install-recommends -y unzip=6.0-28
+RUN apt-get install --no-install-recommends -y ca-certificates # pinned by Renovate
+RUN apt-get install --no-install-recommends -y curl # pinned by Renovate
+RUN apt-get install --no-install-recommends -y gnupg # pinned by Renovate
+RUN apt-get install --no-install-recommends -y unzip # pinned by Renovate
 WORKDIR /workspace
 RUN curl --silent --show-error --fail --remote-name https://releases.hashicorp.com/terraform/${TERRAFORM_VERSION}/terraform_${TERRAFORM_VERSION}_linux_${TARGETARCH}.zip
 COPY security/hashicorp.asc ./
@@ -27,12 +27,12 @@ RUN unzip -j terraform_${TERRAFORM_VERSION}_linux_${TARGETARCH}.zip
 FROM debian:${DEBIAN_VERSION} as aws-cli
 ARG AWS_CLI_VERSION
 RUN apt-get update
-RUN apt-get install -y --no-install-recommends ca-certificates=20230311
-RUN apt-get install -y --no-install-recommends curl=7.88.1-10+deb12u4
-RUN apt-get install -y --no-install-recommends gnupg=2.2.40-1.1
-RUN apt-get install -y --no-install-recommends unzip=6.0-28
-RUN apt-get install -y --no-install-recommends git=1:2.39.2-1.1
-RUN apt-get install -y --no-install-recommends jq=1.6-2.1
+RUN apt-get install -y --no-install-recommends ca-certificates # pinned by Renovate
+RUN apt-get install -y --no-install-recommends curl # pinned by Renovate
+RUN apt-get install -y --no-install-recommends gnupg # pinned by Renovate
+RUN apt-get install -y --no-install-recommends unzip # pinned by Renovate
+RUN apt-get install -y --no-install-recommends git # pinned by Renovate
+RUN apt-get install -y --no-install-recommends jq # pinned by Renovate
 WORKDIR /workspace
 RUN curl --show-error --fail --output "awscliv2.zip" --remote-name "https://awscli.amazonaws.com/awscli-exe-linux-x86_64-${AWS_CLI_VERSION}.zip"
 COPY security/awscliv2.asc ./

From 33ee83237bab9bf6e063fd615ff427aabbab80ca Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 22 Apr 2026 18:02:42 +0000
Subject: [PATCH 2/4] chore(deps): remove EOL terraform versions, add
 1.7.x-1.11.x and new awscli versions

Removed EOL Terraform versions: 0.11.15, 0.12.31, 0.13.7, 0.14.11.
Added latest Terraform patch versions: 1.7.5, 1.8.5, 1.9.8, 1.10.5, 1.11.4.
Added AWS CLI versions: 2.22.35, 2.27.50, 2.34.34.

Closes #98

https://claude.ai/code/session_01RsmDFm6w4jVXwvzmRd9BCv
---
 supported_versions.json | 19 ++-----------------
 1 file changed, 2 insertions(+), 17 deletions(-)

diff --git a/supported_versions.json b/supported_versions.json
index 0f73716..e0f230b 100644
--- a/supported_versions.json
+++ b/supported_versions.json
@@ -1,19 +1,4 @@
 {
-  "tf_versions": [
-    "0.11.15",
-    "0.12.31",
-    "0.13.7",
-    "0.14.11",
-    "0.15.5",
-    "1.0.11",
-    "1.1.9",
-    "1.2.9",
-    "1.3.9",
-    "1.4.6",
-    "1.5.7",
-    "1.6.5"
-  ],
-  "awscli_versions": [
-    "2.14.5"
-  ]
+  "tf_versions": ["0.15.5","1.0.11","1.1.9","1.2.9","1.3.9","1.4.6","1.5.7","1.6.5","1.7.5","1.8.5","1.9.8","1.10.5","1.11.4"],
+  "awscli_versions": ["2.14.5","2.22.35","2.27.50","2.34.34"]
 }

From c6e92a5e9b098f80baf9a5e81aac53d294df9dbb Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 22 Apr 2026 18:02:46 +0000
Subject: [PATCH 3/4] chore(security): add verification files for new terraform
 and awscli versions

Added SHA256SUMS and .sig files for Terraform versions: 1.7.5, 1.8.5, 1.9.8, 1.10.5, 1.11.4.
Added .zip.sig files for AWS CLI versions: 2.22.35, 2.27.50, 2.34.34.

https://claude.ai/code/session_01RsmDFm6w4jVXwvzmRd9BCv
---
 security/awscli-exe-linux-x86_64-2.22.35.zip.sig | Bin 0 -> 566 bytes
 security/awscli-exe-linux-x86_64-2.27.50.zip.sig | Bin 0 -> 566 bytes
 security/awscli-exe-linux-x86_64-2.34.34.zip.sig | Bin 0 -> 566 bytes
 security/terraform_1.10.5_SHA256SUMS             |  14 ++++++++++++++
 security/terraform_1.10.5_SHA256SUMS.sig         | Bin 0 -> 566 bytes
 security/terraform_1.11.4_SHA256SUMS             |  14 ++++++++++++++
 security/terraform_1.11.4_SHA256SUMS.sig         | Bin 0 -> 566 bytes
 security/terraform_1.7.5_SHA256SUMS              |  14 ++++++++++++++
 security/terraform_1.7.5_SHA256SUMS.sig          | Bin 0 -> 566 bytes
 security/terraform_1.8.5_SHA256SUMS              |  14 ++++++++++++++
 security/terraform_1.8.5_SHA256SUMS.sig          | Bin 0 -> 566 bytes
 security/terraform_1.9.8_SHA256SUMS              |  14 ++++++++++++++
 security/terraform_1.9.8_SHA256SUMS.sig          | Bin 0 -> 566 bytes
 13 files changed, 70 insertions(+)
 create mode 100644 security/awscli-exe-linux-x86_64-2.22.35.zip.sig
 create mode 100644 security/awscli-exe-linux-x86_64-2.27.50.zip.sig
 create mode 100644 security/awscli-exe-linux-x86_64-2.34.34.zip.sig
 create mode 100644 security/terraform_1.10.5_SHA256SUMS
 create mode 100644 security/terraform_1.10.5_SHA256SUMS.sig
 create mode 100644 security/terraform_1.11.4_SHA256SUMS
 create mode 100644 security/terraform_1.11.4_SHA256SUMS.sig
 create mode 100644 security/terraform_1.7.5_SHA256SUMS
 create mode 100644 security/terraform_1.7.5_SHA256SUMS.sig
 create mode 100644 security/terraform_1.8.5_SHA256SUMS
 create mode 100644 security/terraform_1.8.5_SHA256SUMS.sig
 create mode 100644 security/terraform_1.9.8_SHA256SUMS
 create mode 100644 security/terraform_1.9.8_SHA256SUMS.sig

diff --git a/security/awscli-exe-linux-x86_64-2.22.35.zip.sig b/security/awscli-exe-linux-x86_64-2.22.35.zip.sig
new file mode 100644
index 0000000000000000000000000000000000000000..1525615a9b643f223f8ff0ec0f64f84844bb782d
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j-tUAKSL!5Fv&5v{1EF$&B^az|VR0%wNE7yt?h5T-E-
z%tmrYTyL)s0LUuW+`1FL_V8tW5n|v$+*h^GP#p=0@Ur~b#<}L83!bHPE+b5{%ljmC
zY4h^tm`BaI_H+daic1TTG)ej7iW1_6zU?FN`jQd9EGw<Ic7Px8g~9o?FALeifr^bH
z?m&6{-!-J9G|vXHh8@C1X||rw=p`&q-NgU?6}s5BuY;g`G2(v6X_2@b{T+X?qoS5u
z2MRV|xaH$MoN_f1q@g+z4y~Ba|1R5zP&u?C!XZ|K9qAVWX!$gZtNq@mkQojq63R8o
zeHktIg?3Cqm2MasaZX~zdU1g^?fMTCgLE5LFNUsW&(r>wrhGo`<!42&15o`Mi%$)H
z9M5IG!QXW!vGADXDJ9^8+tA4}ZoIf&tZ|Bg^jGRm7M9UP%=T`(QX86X$uaD?g>f^O
z18bM|2R4>>#Doq}K8Qv=7nttib2P6Oe4sO`*A&~)54ak0dXFB9&TX5h{i1GIqaC5D
zpdE)&*s5Mx@-*TVO$f~96IJlks0byzj4gF4Ce5HETtrSZH)aR)eCUV|8eFhqp`Z-V
zKa-mGUzuHPixMEOL&j}}i$G<3zTabZolKDT!}>^ShJ$;cf?g>}l*}s>kc8KHF*|~t
ztgHh}&t^#-1HnW!f@EIHH}c6D%2V@B2pHQ`<6A>-S%%tY7Db@&o5l}9bJCSxcFCRx
E1oD*-LI3~&

literal 0
HcmV?d00001

diff --git a/security/awscli-exe-linux-x86_64-2.27.50.zip.sig b/security/awscli-exe-linux-x86_64-2.27.50.zip.sig
new file mode 100644
index 0000000000000000000000000000000000000000..36fc1ca32d912462b9b8e1bd7649ea15493f23cc
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j-tUAKSL!5Fv&5v{1EF$&B^az|VR0%&fsoB#?55T-E-
z%tmrYTx{46{y#t&!V`I+Y-W6g^F+45=%5rx0jSLzb;WXE0c4A0b$sxH+9bAgchQjF
zlFboU$8V{Xt5D;Q3^U}g$b;<;hdob|*&^)ICFu;o^&)*Fww=!XrA6oTm*&#!3gHI;
z`0!ll%f)P!DqU-S?0H@PogN2!#fdL9?xwB%Fd{hUKh=Ms(+ckk+2S%Y)NB0(MT<-I
z<l^r(?HJyL3a(XKtQ?kzo>@T4*=irw0fRFVgu14a>Gb9)xu}6_9!I7}h$Y1Z^xK1P
z(^n-r7f0^Wr$|Xhby2pv;svOEH$FAS?ztBNL_fQ<ZX;t+q2dTiLsd>x#>5;N+i2Ct
zK)>%#?$j4CZhy7)scjc^%}Iu-YEqh~20T+)XlHS^Ax6r>{xqr>g_cl4WG*e-scSti
z<YM&^T^;{}O8>7%XjVb?1rPnto*i<OWL`gW)w{z4%H8Td$|M^WFq~PIhh-Uw_k1VR
zkD}1uF4c&(@4VFmRfPSsK}UiOd|hg0l58c4UpM80Vz7aoF4K$S3Nkk9f1<Tz?fB5j
z*<bva>uLX&9?1P7!2Np&y0!*yYwoS>`D9}H>cih7taUP=fqJfVA<_QW!}{seR*xq2
z&A_~c`Bt7iD#Q{0vr`<OnfHn;)@>3hCR=9<b2g7g;o7}4<fsQ23WlF*;1GU0IxZN>
Ebhp|WjsO4v

literal 0
HcmV?d00001

diff --git a/security/awscli-exe-linux-x86_64-2.34.34.zip.sig b/security/awscli-exe-linux-x86_64-2.34.34.zip.sig
new file mode 100644
index 0000000000000000000000000000000000000000..bc7c9d948a6850505894787018ffc3ba6ed8b30c
GIT binary patch
literal 566
zcmV-60?GY}0y6{v0SW*e79j-tUAKSL!5Fv&5v{1EF$&B^az|VR0%_;jzW@pe5T-E-
z%tmrYTsWo=|3az&;hnF^KH{vgaMDDgIPik;&!djml;>8Ddx^q&SA_Eb`k#pgmg)=z
zpPK3*2E>ffX<YY1uD}V)|3d3NPg7_g>Z7qzu0Fslo6>&GLDB$2G9~Q~>=0kRU@bUU
z(PLzn4S~Pormu7Srq;<Y8B0c0x<SoH_z1I&!OD+1$mAPJM>j8H%{Y8qpb}<t<ji&A
zi5h{_Vgr)O0uR+#*Nrtci+TQ4koLD`c3?_Ga`nJ*vx#h7MD*yOCa4=cHk>wSetAjI
zh4zw03$J$O$R3|NW0;0Uclzdnu-=k`0S`5n$Dmq{5~M1lxBjuke1f$ir*dpNn*CZB
zpt2leCMwE(&TZlhjRt1#eVWtL3tGIRERkBA1deRTgRPgdIHWogj-w6^IrUDBT^}58
zMg3lCK!RCEmc?Q={0Vi~1M8aQs1Mw6y><T;^7QaJsIA#g1-r&~JKiP|AaTq_>eOSs
zBt?lrHvhuf$KovO`MS1YLpNX8hs3Hd-0LM-+RO=;Fp_b?Gq?YEOFven4do8Z3}DHM
z>8yS!bm>CQgrlQisu7s**oo9Z6>P&@L>XJTRv1AK_Li?lHq!9h11Zy47kg+y(Q`A7
zVKwITUe~xs+=2fRZi52lEXZ|b(Q)BE*(olRJVh;D4*i8GfSICbAlTg6@G-*2vh0X0
EK7pJTRsaA1

literal 0
HcmV?d00001

diff --git a/security/terraform_1.10.5_SHA256SUMS b/security/terraform_1.10.5_SHA256SUMS
new file mode 100644
index 0000000..faf31f7
--- /dev/null
+++ b/security/terraform_1.10.5_SHA256SUMS
@@ -0,0 +1,14 @@
+4164db242076c7e99ac6aec67bc42b366925b97267e3883edaca4e4e408b082e  terraform_1.10.5_darwin_amd64.zip
+51910553dae21dab7f5f55912129602fd902e68a6b6d84b326a556a3e140b98b  terraform_1.10.5_darwin_arm64.zip
+6f26239a2c81d01f7b8a1fb800cfc7f87c0e3602cc4f0ab1a86b34fd19bd98d2  terraform_1.10.5_freebsd_386.zip
+169cd9f061862b7c6c37235837c3ba8037db84e6e5fb6383761059b68456ebe1  terraform_1.10.5_freebsd_amd64.zip
+2a49074caf5eb607a7ed6fdee10e0a54cf35223e5887809296f3c1671793553d  terraform_1.10.5_freebsd_arm.zip
+b88293a2ee2ee2aa805fb216229ab06ecd3485cf783dd525379af0faa3ab0789  terraform_1.10.5_linux_386.zip
+0566a24f5332098b15716ebc394be503f4094acba5ba529bf5eb0698ed5e2a90  terraform_1.10.5_linux_amd64.zip
+c446cbafed29342c9d7d71b8ce977cfc8be45352d9172dab50abac1da3cf0b89  terraform_1.10.5_linux_arm.zip
+0ca5d6977c7c46bfa4bbe030030b911e897cf0cb72bff5525fb76c10f1c3409a  terraform_1.10.5_linux_arm64.zip
+0d2b4e80d5985696daa092150bba8ba147c0af34e5d2655ff766d74cd3aa3f4e  terraform_1.10.5_openbsd_386.zip
+cf4b25129a8489a483d3eda842c3c3123666ee5c46152f565a595ac95b6a3165  terraform_1.10.5_openbsd_amd64.zip
+d07e4e3e3920d562a242f19705ee828bf37cbb336f195ca54dd4eb078875ce2e  terraform_1.10.5_solaris_amd64.zip
+e4bb69b7e9b4af2b5d2ad0a5a3943c7af2dfdf29c0982d86e12e086d6b730c66  terraform_1.10.5_windows_386.zip
+4e2c6b7232aa30026baf9fe575f1bf4006c2a0cbbcdcbd244573dc188b439239  terraform_1.10.5_windows_amd64.zip
diff --git a/security/terraform_1.10.5_SHA256SUMS.sig b/security/terraform_1.10.5_SHA256SUMS.sig
new file mode 100644
index 0000000000000000000000000000000000000000..f3a64aa9eec1c5516a494929e35539d3198db5f7
GIT binary patch
literal 566
zcmV-60?GZt!E*!v0SEvm1p;T0CF%(f$RNhm%_pme79j*TPRCnFSrcGNgB-`mAjZ|r
zC##150M|kf|7}e9Io6<RRKWOj(_J{C@R7uT_%lROE^aM`G=Q9s=(eQMb}+iwjEt+c
z?(Y-T$4?=9YMOaZ?1N?m32hN?%1k_*9T{sjW4@#H^LQy%{+Y9?xR*LG5v^@U<zLU9
z9sOLT`9iKjPBQKyL%0(^^{oE7@_;xlA-(;5*xS>X{)B&fwvOFAvxJ*yKS3j}<}}oy
zQ!TAkCirWY?*<S%0-gZc9Br*qT6T7LTSNlzzIXf5(atY*dn7`gLIMO)4)NeQ2eG;9
zsG4$qV2?EoYDS;hL$RO7cLM)dnf{=S6@gFe%4zXxpB+Y|K5#1#c$fbNHSjfvf4Kr{
zHJR#10E*rt7ViV*5mOBB-bH%JX|R$wjjnpuPTtQso9L<lXqEIj6Bm<ma8f{odh3}F
zfO%8aovVn~>y3%$sbJr%+DwUQ6tPMb9e8I<HzsS2#|>CiP1z^`fZz{X+^uv*?}Kda
zyg4Q$FMnkgY!lXj5Jre771eQ&*w&g+nr|4tlcy1~{A)7R?M6w(^4E3w|LM3#u#$d(
zOwpO&*bsLgG=V6sXNiu#rL^3;mHpK8&zL>ZfnyW75k)4sM!(AXG1r^ouxrx-jns09
zS%M=m?lIScs4;P1gan#}^uzbY%!ja4Kw6MRwC4AM$lXWL8w93NIzWa#DR~dKkoI+m
EQJC=;djJ3c

literal 0
HcmV?d00001

diff --git a/security/terraform_1.11.4_SHA256SUMS b/security/terraform_1.11.4_SHA256SUMS
new file mode 100644
index 0000000..f9acd36
--- /dev/null
+++ b/security/terraform_1.11.4_SHA256SUMS
@@ -0,0 +1,14 @@
+a56d5002b9f7647291faccc3dd1a70350e60fb61e4c45037629508b8fdc2575b  terraform_1.11.4_darwin_amd64.zip
+867e0808fa971217043e25b7a792b10720c79b1546f8a68479b74f138be73e18  terraform_1.11.4_darwin_arm64.zip
+eb3a9e0e2b5284a2775d4abe29400bac6414aaf37ef5f08550ba79215327b5ff  terraform_1.11.4_freebsd_386.zip
+79ac23f3620d1ca689480c915ec4fedc1bfad55293df97a040725f081079df33  terraform_1.11.4_freebsd_amd64.zip
+148a21a7e1a875e22487ac17d838bb830b56a0e86b5a0249e5b58f0ecdf2750b  terraform_1.11.4_freebsd_arm.zip
+8e4bd232ce8b0cde2a90132a9c4d25665791c7a48bbb159f5cd4988265d10372  terraform_1.11.4_linux_386.zip
+1ce994251c00281d6845f0f268637ba50c0005657eb3cf096b92f753b42ef4dc  terraform_1.11.4_linux_amd64.zip
+3cf072a049ab0178e9cbec47a14712ba7f38cc8ef061f3a7c0ff57b83d320edd  terraform_1.11.4_linux_arm.zip
+a43d1d0da9b9bab214a8305a39db0e40869572594ccf50c416a7756499143633  terraform_1.11.4_linux_arm64.zip
+daa779fa52e964ca8cc4fdc5800aab73b51733a8717e7d6fc9365f38294b6a87  terraform_1.11.4_openbsd_386.zip
+ae84a6ac484fdbb37fc4f2e19c310625c66d99a55b331d385ffd2ff956c1438c  terraform_1.11.4_openbsd_amd64.zip
+ed89570c92f6a308e4fa0269cc93edd4e5c8ab176193234b018fb293f504b139  terraform_1.11.4_solaris_amd64.zip
+61da1ff3dc081fbaa9a032327dafebc311df55f04ad5f8749d92a9b6c1790f40  terraform_1.11.4_windows_386.zip
+4e1dc85419dda723f2bb3afdf63a0d282a2de858588d56dd57d2e4e4c4c83f2b  terraform_1.11.4_windows_amd64.zip
diff --git a/security/terraform_1.11.4_SHA256SUMS.sig b/security/terraform_1.11.4_SHA256SUMS.sig
new file mode 100644
index 0000000000000000000000000000000000000000..d3bcfbba67c5f789d8e6aa546494ce01909e8e13
GIT binary patch
literal 566
zcmV-60?GZt!E*!v0SEvm1p;UGcdH2y$RNhm%_pme79j*TPRCnFSrcGNgB-`mAjZ|r
zC##15045d?0MC|(81c@c10deKd2d8nJ53jv6v55S_vkG)`l06sjy})!d|H<D2!1Y5
z{{~`H6?4xl-gQ?K6vCC4<gfa?MiR*R2JClU-^nbmPrX99rYtf;47BpIj_WtU2+)A&
z3->6pFo2jQz=^-ghG@9_egy;V`jQmEW#D=R$5|XpvIWwyJ2wel!3~vSGI+2*`PIEP
zT{6!HR$$@Wzec9~$z%skwA%{;ybPUIu{Y59LipDPsDEfaqx7-@>uVAJ?I9}dYACcU
zJ-hZv@gGl9IXekS%=HV?75pTqrV0JUcW)*1zy0fmE0LN0#mU&>N!|BDt{8To2}tK6
z|99EpZCPqLEl~Rn(Fb}_Ix@~{Z2Vv0OSP+oJEDS{t`a_Hub~qxwR%=atsL60m&-;r
ztA^()rQT+J8p_=Q<^wvJG22*u*Al`Qr>L)TKp2)d!VGBtlmdls)>IJNqoa82trJ+-
zNClmBso^TP?^UlDFBykchSMvR$t1(Uv5l}7gCGip*%Q&oMs2WN<8vutA@%xiEb2j8
zVi+#psx*2$9&QBK&(nfvlSWS#VgZ484ujjehx>W%Rl0L9?8A`_R(>1ht4rW;j^2$T
z6P=*~8R_0jg6-OC%Z@C??U6!`z>P!ZMaRzc-KL##V3KsFI^t$4ujsWK_)#!Bs_r`9
EpZ5_KE&u=k

literal 0
HcmV?d00001

diff --git a/security/terraform_1.7.5_SHA256SUMS b/security/terraform_1.7.5_SHA256SUMS
new file mode 100644
index 0000000..d0e0d00
--- /dev/null
+++ b/security/terraform_1.7.5_SHA256SUMS
@@ -0,0 +1,14 @@
+0eaf64e28f82e2defd06f7a6f3187d8cea03d5d9fcd2af54f549a6c32d6833f7  terraform_1.7.5_darwin_amd64.zip
+99c4d4feafb0183af2f7fbe07beeea6f83e5f5a29ae29fee3168b6810e37ff98  terraform_1.7.5_darwin_arm64.zip
+3885fd4ce29788e040cfb350db88c6c1f3e34491c3f89f7a36ff8476f6c03959  terraform_1.7.5_freebsd_386.zip
+3846d408255336460f40d7f5eeb7e987936f0359c9f45d1eb659a09f3d8893ab  terraform_1.7.5_freebsd_amd64.zip
+b02aa14ecb4052482bf4e64fca7de7a743fce691511f96b4cd58610350886c9e  terraform_1.7.5_freebsd_arm.zip
+e188ce5b45c9d10fa9a5a118438add2eab056d16587f774ecab93e3ca39e1bca  terraform_1.7.5_linux_386.zip
+3ff056b5e8259003f67fd0f0ed7229499cfb0b41f3ff55cc184088589994f7a5  terraform_1.7.5_linux_amd64.zip
+4e74db9394d5cdf0f91cf8fecd290216edf6cf06273eb8f55e35f26eac4a936a  terraform_1.7.5_linux_arm.zip
+08631c385667dd28f03b3a3f77cb980393af4a2fcfc2236c148a678ad9150c8c  terraform_1.7.5_linux_arm64.zip
+c0416b6b9fe0155bb3377e39a3f584b9f7b9a11a1236b9ea8cf7c074a804a513  terraform_1.7.5_openbsd_386.zip
+3bd02023764365b7ae7ee3e597a6258e896049e3fd115896bc01113384864cba  terraform_1.7.5_openbsd_amd64.zip
+385af229bd76a058c221b9c0be56f02a7d0fa2535620040c9c895df00e0f09ee  terraform_1.7.5_solaris_amd64.zip
+2639c9444c6091fd5ad76f112040d592e99931489582ada4d485c12a64a79052  terraform_1.7.5_windows_386.zip
+9b7be6ae159191ec1f4b5b9d27529ae5243e41020fb545c0041235bec8d92269  terraform_1.7.5_windows_amd64.zip
diff --git a/security/terraform_1.7.5_SHA256SUMS.sig b/security/terraform_1.7.5_SHA256SUMS.sig
new file mode 100644
index 0000000000000000000000000000000000000000..1b5ba45354011e7beae16197acd7e87524738ec4
GIT binary patch
literal 566
zcmV-60?GZt!E*!v0SEvm1p;OACRYg%$RNhm%_pme79j*TPRCnFSrcGNgB-`mAjZ|r
zC##150O}$S{yD-NKNg0|QASLus#}BD`+N^((@QnBzjjjsz-f}7r}w8b1xpQGM_R&9
zdlrZe=}&BAW?^nTWtoAb_H4RI-Fx#6H@t2NNhH;vg-=7JBltW+DRDiZ5;~;(%S>Xh
zKVpM$t`MoK$ABid5jE;vUCXS${n&9>R_zLxIuiKBffLN*)}@3&{Q#5i!;I4e`&4Mu
z3HK_Y{t!Xncq3#<9)Lwq{mQK?wC{(vyB?&;-5VKA6RP$bFo_SRw(5z2F*Uuv>59Fk
zI@Q@lR@%tf<WNV$==8<)%x~=$<Q{YTPa=}=;uR)&Eg8gk^^or&FNsB0Q$%&v`-SSm
zmFMjN)qK6s>pThgJ4q&wA9hk6l4jBzO(-1Rr(C0;c*e+515nLZxdEXoA>zL%XgXG=
z^F6k`n>^w_r87xPDc}e1cLcG0oP)p3hWnlQEyW1Fo)m49&2KE^=3t`B6lcW{i&idz
z6`mi>htUf{cQm-J<t*E)2@GB66yL+*JU#?H4)jcZaS_uti?yHL>C0Ec!gSDU2j9X{
zmwWg}khD%h@gBm0Z624eahEI6ETQ{nWHY^rlGNqy;@<Svb`R4k<4+uBBNC)igs-L_
zdk_KOVN(STLnSu;tHTL8dUkZ-0!9t93}MMdJ>=n+N}l2vaeZeY>FP$v<kQ=iGfiKq
E6%NxASO5S3

literal 0
HcmV?d00001

diff --git a/security/terraform_1.8.5_SHA256SUMS b/security/terraform_1.8.5_SHA256SUMS
new file mode 100644
index 0000000..a4c096f
--- /dev/null
+++ b/security/terraform_1.8.5_SHA256SUMS
@@ -0,0 +1,14 @@
+051c702e156a4d1a1c628783cf2ca0e1db8cca7b4c0f1686ea623558ed5560f9  terraform_1.8.5_darwin_amd64.zip
+627c5005ab4a2bee36316f4967a41f16d55f79ea737f78b6bb34325c728c73e1  terraform_1.8.5_darwin_arm64.zip
+4ad9453c00fadf63e525cf8548e710ca37d60b41c3b67f7cc03835c22cb91951  terraform_1.8.5_freebsd_386.zip
+b0f6552a0286ebaba15ed3a7ecb10fde64fa554fa810819730bc25a2b9fdcddd  terraform_1.8.5_freebsd_amd64.zip
+15ab124fe4280137af7b819567e80507342ffbae35f12b306fc578cf187b5ca0  terraform_1.8.5_freebsd_arm.zip
+3d3bda809de29295f7b208c12432eb147ea50186b0e1da9082c2db2a3708415b  terraform_1.8.5_linux_386.zip
+bb1ee3e8314da76658002e2e584f2d8854b6def50b7f124e27b957a42ddacfea  terraform_1.8.5_linux_amd64.zip
+2cd8cf46c46041c5f46766ec5e96728905df60ef92fd32d9889033ef8c305f46  terraform_1.8.5_linux_arm.zip
+17b3a243ea24003a58ab324c197da8609fccae136bcb8a424bf61ec475b3a203  terraform_1.8.5_linux_arm64.zip
+3fe034acf89a2b113fc37f46125bf805891e3f378bd8c14465515de2297423e8  terraform_1.8.5_openbsd_386.zip
+5424a6435fd241774efdfc12f1e72eda0cdd276c6e3c9cf8f98fe094b4afb53f  terraform_1.8.5_openbsd_amd64.zip
+be5bd53fb7ea6dffd8febffdffd886cbd1af11114b90b519e569eda0419bc4a5  terraform_1.8.5_solaris_amd64.zip
+6aae02b5d4386a6821f344c4aebb3902c032d1d4027e1b634533dc4151e80b78  terraform_1.8.5_windows_386.zip
+17f93df5a4021a415f3fd50d2b55c0d093b42c64ea9957ceda55be3aaa91b0e5  terraform_1.8.5_windows_amd64.zip
diff --git a/security/terraform_1.8.5_SHA256SUMS.sig b/security/terraform_1.8.5_SHA256SUMS.sig
new file mode 100644
index 0000000000000000000000000000000000000000..93d647e8ce3892686709ea450d370a24ea046a8f
GIT binary patch
literal 566
zcmV-60?GZt!E*!v0SEvm1p;PZC=Ce^$RNhm%_pme79j*TPRCnFSrcGNgB-`mAjZ|r
zC##150CWBi{w~2|+li3D>ALL5T!D18hg{D82`et4KJYuf7$g^LGRmMQWeNyhp<5UT
zhhVLH*xwR4O#V1(r%vRNk1Y1~Z#0$n`GO)aH?6M3L>z;qpUpj+A%c*SZz3gmV>P(_
z!4l%gbZpNzjA=4jJ=MzPH{~u$c<9F3Kq69lOmA37x|#i)PqL_zanU*BWL+942Vd%+
zjQ~OPrKACJ51QhG@g(>C+y|GoZ5!}Vk5Du6l*8g~p#TA@z!6lC?+2ZDH*NbsC%zXq
z`obJP-l^6zLV8{}ZgfyQ3lNZRP38SXB1sss=uk*ZlvxpC?7rNd*;it3#oy*X9t;3h
z^0(PZyr#{PUY_oH*Wp~^T?m6!ZL+=d&HNBCOG(B#ic!MinLE6O{o9dGiRZOoY;duM
z#v7Lj4Gq#gzy{Ho(A0H;X!$(%P|W9E5C$SB^LvTB)WG|1VWGxc#+TTJ-eU@dZF2jV
zbBZ#*zCNuU#j(qj#@-46*~kE~z6!(w4r5L_?PzDJr<w`2D1@d>DX7Y&wJkz*oJI3o
zg9dzKu4$oPQ_T%sx44^^SUTfMp*EHi9LJ91bYYh*Z5B=i{C`wSzOtCs`d<F!0htcS
z@ff=EO`Iz!d3=ew*1x44S0~<99_u4Jx@i)BzwWiAo3qTv3e`;(K-w&Z^xPphLn&U0
Ef+Uv|00000

literal 0
HcmV?d00001

diff --git a/security/terraform_1.9.8_SHA256SUMS b/security/terraform_1.9.8_SHA256SUMS
new file mode 100644
index 0000000..c901f5d
--- /dev/null
+++ b/security/terraform_1.9.8_SHA256SUMS
@@ -0,0 +1,14 @@
+be591e8c59c49d0cfbc7664d24910a4b43840b89d0a4bbca662149bbf0397e91  terraform_1.9.8_darwin_amd64.zip
+873d7b925d08578fb6bb9c12c7cd92ae73e289e07c360f2fdd69f9036b7baaab  terraform_1.9.8_darwin_arm64.zip
+b1b56dbaa0ddda52a42b4398a1cebfd4ebc175391ef64b14747c65fa6debe072  terraform_1.9.8_freebsd_386.zip
+aa7a936aeb5254abd1761282f4f0b2850b7507166f0344683f37a1e82da23f46  terraform_1.9.8_freebsd_amd64.zip
+bdef3da36aa736bcc14767bd353667773d46aaf562b1d85dfa66e5266290247d  terraform_1.9.8_freebsd_arm.zip
+aa85bb2e0c68f2ee148d1ea854ee0aa78086017cbda9058371be8be2f4c18d10  terraform_1.9.8_linux_386.zip
+186e0145f5e5f2eb97cbd785bc78f21bae4ef15119349f6ad4fa535b83b10df8  terraform_1.9.8_linux_amd64.zip
+cb6db8471e361bb9ad6bbd43d9c780d37208e6dbe416900fdc8999af9e459b77  terraform_1.9.8_linux_arm.zip
+f85868798834558239f6148834884008f2722548f84034c9b0f62934b2d73ebb  terraform_1.9.8_linux_arm64.zip
+851fa5b84efb78c31491f364ac1cdd6ea8e013ba04f9657acacc9401cfd479db  terraform_1.9.8_openbsd_386.zip
+e9311ffaa728c31a40493e6de35c13e1f7879468dd568d32ace2458725fb02d0  terraform_1.9.8_openbsd_amd64.zip
+a8eaecd78c68e2b748fd5d6e2cf1a1e97ad891aa36d53509c7ad04bb86bd24cc  terraform_1.9.8_solaris_amd64.zip
+b9c5a8c3b4a91b89b67f8f58a84b27d0ad423f0286df959176691e077d9f6966  terraform_1.9.8_windows_386.zip
+2667de56106bc6707968286357e29c20f8dbbb2f429ef57099b04994f82d9684  terraform_1.9.8_windows_amd64.zip
diff --git a/security/terraform_1.9.8_SHA256SUMS.sig b/security/terraform_1.9.8_SHA256SUMS.sig
new file mode 100644
index 0000000000000000000000000000000000000000..e591a43fea97adbfd62952928c7e73db57140fe6
GIT binary patch
literal 566
zcmV-60?GZt!E*!v0SEvm1p;Rex~d5f$RNhm%_pme79j*TPRCnFSrcGNgB-`mAjZ|r
zC##150BiIQ|9nLTmag4dt}`nJUkc~38k3K;dYenDAN-bm*LvRF$HO-d@7xCIm3v<K
zNB}41mPI@D$9NjEvj65+=<np*!z^sz8JG0CzFl1t7`wOHy%TukagMuFwyI#@8B5a*
zpnS9*q=WrH*@$5JzZE9m-^$3rtE&>A>Q;BOoeV@{D9Ex$jV){-Wx$5j^L8aoD0VXp
zCKD%e73DWk-y>fs#Wmu^xUF6EHKb6sIv$`)!|cBUfYmN-$?7jz{}hDL*m>bae}xHy
zy%?EN)aT3Y>D|at*8gTvCp=T#f_ikpsk%73N+unK4KbN?6p%346a$Ta|GJSkSK==i
zRH=g3vuq5M6SCWulS<E0cmLiD9YW9gf}JMyqU{Y0&G^j<@NmMLx5!{~Kt@7k=<s`z
zhr=a&O!%A%d=j#KB@vg}{a{e^31PVS3_lT6{NwlarM23esi7$EMi7i4M2%-ew;t_*
zb4e8UuAB5;Ae(A#$&chsz0}QwSBu+b-8poE2s9k_E3IOI61r^Mm4dHSTsR`#G<#ys
zGKDrHE$zc2+=@KFp6&)O7t3>h6qAeTPNiZb1V|l|yzBJ0?}R*bQFJ-3idMM$x_>UX
zxD}@ea?u9}CAaquad0H!pr*L}>fAqAjkmpT9XuM|sl4GB(eFdsp4X!qY7ee>gd<8l
E>H8QOe*gdg

literal 0
HcmV?d00001


From ce409eb13d4bc7b724afa1bf319c4368eafc208e Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 22 Apr 2026 18:02:51 +0000
Subject: [PATCH 4/4] chore(ci): update github actions to latest versions and
 hadolint

Updated actions/checkout v3 -> v4 in all workflows.
Updated docker/setup-qemu-action v2 -> v3 in all workflows.
Updated docker/setup-buildx-action v2 -> v3 in all workflows.
Updated docker/build-push-action v4 -> v6 in all workflows.
Updated peter-evans/dockerhub-description v3 -> v4.
Updated hadolint/hadolint 2.12.0-alpine -> 2.14.0-alpine in dev.sh.

https://claude.ai/code/session_01RsmDFm6w4jVXwvzmRd9BCv
---
 .github/workflows/build-test.yml                   | 12 ++++++------
 .github/workflows/dockerhub-description-update.yml |  4 ++--
 .github/workflows/lint-dockerfile.yml              |  2 +-
 .github/workflows/push-latest.yml                  |  8 ++++----
 .github/workflows/release.yml                      | 10 +++++-----
 dev.sh                                             |  2 +-
 6 files changed, 19 insertions(+), 19 deletions(-)

diff --git a/.github/workflows/build-test.yml b/.github/workflows/build-test.yml
index c14160d..966b54d 100644
--- a/.github/workflows/build-test.yml
+++ b/.github/workflows/build-test.yml
@@ -31,7 +31,7 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Save supported versions as output
         id: set-matrix
@@ -47,7 +47,7 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Save branch name as env var
         run: echo "BRANCH=${GITHUB_REF##*/}" >> $GITHUB_ENV
@@ -56,13 +56,13 @@ jobs:
         run: echo "IMAGE_TAG=${BRANCH}_terraform-${{ matrix.tf_versions }}_awscli-${{ matrix.awscli_versions }}" >> $GITHUB_ENV
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Build and export container image
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64
@@ -88,7 +88,7 @@ jobs:
           config: tests/container-structure-tests.yml
 
       - name: Build container image for all platforms
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/386
diff --git a/.github/workflows/dockerhub-description-update.yml b/.github/workflows/dockerhub-description-update.yml
index 6e3fc2c..f2f00ab 100644
--- a/.github/workflows/dockerhub-description-update.yml
+++ b/.github/workflows/dockerhub-description-update.yml
@@ -13,10 +13,10 @@ jobs:
   dockerHubDescription:
     runs-on: ubuntu-22.04
     steps:
-      - uses: actions/checkout@v3
+      - uses: actions/checkout@v4
 
       - name: Update Docker Hub Description
-        uses: peter-evans/dockerhub-description@v3
+        uses: peter-evans/dockerhub-description@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_PAT }}
diff --git a/.github/workflows/lint-dockerfile.yml b/.github/workflows/lint-dockerfile.yml
index 020a694..31e3e37 100644
--- a/.github/workflows/lint-dockerfile.yml
+++ b/.github/workflows/lint-dockerfile.yml
@@ -20,7 +20,7 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Lint Dockerfile
         uses: hadolint/hadolint-action@v3.1.0
diff --git a/.github/workflows/push-latest.yml b/.github/workflows/push-latest.yml
index eda62d0..1582994 100644
--- a/.github/workflows/push-latest.yml
+++ b/.github/workflows/push-latest.yml
@@ -22,7 +22,7 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Retrieve latest suported versions
         run: |
@@ -33,14 +33,14 @@ jobs:
         run: echo '${{ secrets.DOCKERHUB_PAT }}' | docker login -u ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Buildx
         id: buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Build and push container images
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/386
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 494c841..9828a7e 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -14,7 +14,7 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Save supported versions as output
         id: set-matrix
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Check out the repo
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Get and save the release tag
         run: echo "RELEASE_TAG=${GITHUB_REF##*/}" >> $GITHUB_ENV
@@ -44,13 +44,13 @@ jobs:
         run: echo '${{ secrets.DOCKERHUB_PAT }}' | docker login -u ${{ secrets.DOCKERHUB_USERNAME }} --password-stdin
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v2
+        uses: docker/setup-qemu-action@v3
 
       - name: Set up Buildx
-        uses: docker/setup-buildx-action@v2
+        uses: docker/setup-buildx-action@v3
 
       - name: Build and push container images
-        uses: docker/build-push-action@v4
+        uses: docker/build-push-action@v6
         with:
           context: .
           platforms: linux/amd64,linux/arm64,linux/arm/v7,linux/386
diff --git a/dev.sh b/dev.sh
index c9f83f4..427e2ee 100755
--- a/dev.sh
+++ b/dev.sh
@@ -22,7 +22,7 @@ docker container run --rm --interactive \
   --volume "${PWD}":/data \
   --workdir /data \
   --platform "${PLATEFORM}" \
-  hadolint/hadolint:2.12.0-alpine /bin/hadolint \
+  hadolint/hadolint:2.14.0-alpine /bin/hadolint \
   --config hadolint.yaml Dockerfile
 echo "Lint Successful!"