From dace8d29652ae14308f442630cb51003727044ea Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Tue, 12 Dec 2023 22:11:30 +0000
Subject: [PATCH] chore(deps): update tf modules

---
 0-bootstrap/cb.tf                                    |  2 +-
 0-bootstrap/modules/cb-private-pool/network.tf       |  4 ++--
 0-bootstrap/modules/cb-private-pool/vpn_ha.tf        |  2 +-
 0-bootstrap/modules/jenkins-agent/vpn_ha.tf          |  2 +-
 1-org/modules/cai-monitoring/main.tf                 |  4 ++--
 3-networks-dual-svpc/envs/shared/dns-hub.tf          | 10 +++++-----
 3-networks-dual-svpc/modules/base_shared_vpc/main.tf | 10 +++++-----
 .../base_shared_vpc/private_service_connect.tf       |  2 +-
 .../modules/dedicated_interconnect/main.tf           |  8 ++++----
 .../modules/restricted_shared_vpc/main.tf            | 10 +++++-----
 .../restricted_shared_vpc/private_service_connect.tf |  2 +-
 .../modules/restricted_shared_vpc/service_control.tf |  4 ++--
 3-networks-dual-svpc/modules/vpn-ha/main.tf          |  8 ++++----
 3-networks-hub-and-spoke/envs/shared/dns-hub.tf      | 10 +++++-----
 .../modules/base_shared_vpc/main.tf                  | 12 ++++++------
 .../base_shared_vpc/private_service_connect.tf       |  2 +-
 .../modules/dedicated_interconnect/main.tf           |  8 ++++----
 .../modules/restricted_shared_vpc/main.tf            | 12 ++++++------
 .../restricted_shared_vpc/private_service_connect.tf |  2 +-
 .../modules/restricted_shared_vpc/service_control.tf |  4 ++--
 .../modules/transitivity/main.tf                     |  4 ++--
 3-networks-hub-and-spoke/modules/vpn-ha/main.tf      |  8 ++++----
 .../modules/base_env/example_peering_project.tf      |  4 ++--
 4-projects/modules/base_env/example_storage_cmek.tf  |  2 +-
 5-app-infra/modules/env_base/main.tf                 |  2 +-
 25 files changed, 69 insertions(+), 69 deletions(-)

diff --git a/0-bootstrap/cb.tf b/0-bootstrap/cb.tf
index 326677a5aa..66bb5669a1 100644
--- a/0-bootstrap/cb.tf
+++ b/0-bootstrap/cb.tf
@@ -70,7 +70,7 @@ resource "random_string" "suffix" {
 
 module "gcp_projects_state_bucket" {
   source  = "terraform-google-modules/cloud-storage/google//modules/simple_bucket"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   name          = "${var.bucket_prefix}-${module.seed_bootstrap.seed_project_id}-gcp-projects-tfstate"
   project_id    = module.seed_bootstrap.seed_project_id
diff --git a/0-bootstrap/modules/cb-private-pool/network.tf b/0-bootstrap/modules/cb-private-pool/network.tf
index 44acca4fcc..511f8496b2 100644
--- a/0-bootstrap/modules/cb-private-pool/network.tf
+++ b/0-bootstrap/modules/cb-private-pool/network.tf
@@ -20,7 +20,7 @@ locals {
 
 module "peered_network" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
   count   = var.private_worker_pool.create_peered_network ? 1 : 0
 
   project_id                             = var.project_id
@@ -85,7 +85,7 @@ resource "google_compute_network_peering_routes_config" "peering_routes" {
 
 module "firewall_rules" {
   source  = "terraform-google-modules/network/google//modules/firewall-rules"
-  version = "~> 7.0"
+  version = "~> 8.0"
   count   = var.private_worker_pool.enable_network_peering ? 1 : 0
 
   project_id   = var.project_id
diff --git a/0-bootstrap/modules/cb-private-pool/vpn_ha.tf b/0-bootstrap/modules/cb-private-pool/vpn_ha.tf
index d08a481324..540659dc44 100644
--- a/0-bootstrap/modules/cb-private-pool/vpn_ha.tf
+++ b/0-bootstrap/modules/cb-private-pool/vpn_ha.tf
@@ -28,7 +28,7 @@ data "google_secret_manager_secret_version" "psk" {
 
 module "vpn_ha_cb_to_onprem" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
   count   = var.vpn_configuration.enable_vpn ? 1 : 0
 
   project_id = var.project_id
diff --git a/0-bootstrap/modules/jenkins-agent/vpn_ha.tf b/0-bootstrap/modules/jenkins-agent/vpn_ha.tf
index cd05f36e5c..01bf5c5a1e 100644
--- a/0-bootstrap/modules/jenkins-agent/vpn_ha.tf
+++ b/0-bootstrap/modules/jenkins-agent/vpn_ha.tf
@@ -16,7 +16,7 @@
 
 module "vpn_ha_agent_to_onprem" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.0"
+  version = "~> 4.0"
 
   project_id = module.cicd_project.project_id
   region     = var.default_region
diff --git a/1-org/modules/cai-monitoring/main.tf b/1-org/modules/cai-monitoring/main.tf
index b31da358e6..5518b66d7c 100644
--- a/1-org/modules/cai-monitoring/main.tf
+++ b/1-org/modules/cai-monitoring/main.tf
@@ -71,7 +71,7 @@ data "archive_file" "function_source_zip" {
 
 module "cloudfunction_source_bucket" {
   source  = "terraform-google-modules/cloud-storage/google//modules/simple_bucket"
-  version = "~>3.4"
+  version = "~> 5.0"
 
   project_id    = var.project_id
   name          = "bkt-cai-monitoring-${random_id.suffix.hex}-sources-${data.google_project.project.number}-${var.location}"
@@ -121,7 +121,7 @@ resource "google_cloud_asset_organization_feed" "organization_feed" {
 
 module "pubsub_cai_feed" {
   source  = "terraform-google-modules/pubsub/google"
-  version = "~> 5.0"
+  version = "~> 6.0"
 
   topic              = "top-cai-monitoring-${random_id.suffix.hex}-event"
   project_id         = var.project_id
diff --git a/3-networks-dual-svpc/envs/shared/dns-hub.tf b/3-networks-dual-svpc/envs/shared/dns-hub.tf
index 2003af12e9..7580afe1e2 100644
--- a/3-networks-dual-svpc/envs/shared/dns-hub.tf
+++ b/3-networks-dual-svpc/envs/shared/dns-hub.tf
@@ -20,7 +20,7 @@
 
 module "dns_hub_vpc" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = local.dns_hub_project_id
   network_name                           = "vpc-c-dns-hub"
@@ -91,7 +91,7 @@ module "dns-forwarding-zone" {
 
 module "dns_hub_region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region1}-cr1"
   project = local.dns_hub_project_id
@@ -105,7 +105,7 @@ module "dns_hub_region1_router1" {
 
 module "dns_hub_region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region1}-cr2"
   project = local.dns_hub_project_id
@@ -119,7 +119,7 @@ module "dns_hub_region1_router2" {
 
 module "dns_hub_region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region2}-cr3"
   project = local.dns_hub_project_id
@@ -133,7 +133,7 @@ module "dns_hub_region2_router1" {
 
 module "dns_hub_region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region2}-cr4"
   project = local.dns_hub_project_id
diff --git a/3-networks-dual-svpc/modules/base_shared_vpc/main.tf b/3-networks-dual-svpc/modules/base_shared_vpc/main.tf
index c10e255e47..b59af58776 100644
--- a/3-networks-dual-svpc/modules/base_shared_vpc/main.tf
+++ b/3-networks-dual-svpc/modules/base_shared_vpc/main.tf
@@ -26,7 +26,7 @@ locals {
 
 module "main" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = var.project_id
   network_name                           = local.network_name
@@ -92,7 +92,7 @@ resource "google_service_networking_connection" "private_vpc_connection" {
 
 module "region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr1"
   project = var.project_id
@@ -107,7 +107,7 @@ module "region1_router1" {
 
 module "region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr2"
   project = var.project_id
@@ -122,7 +122,7 @@ module "region1_router2" {
 
 module "region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr3"
   project = var.project_id
@@ -137,7 +137,7 @@ module "region2_router1" {
 
 module "region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr4"
   project = var.project_id
diff --git a/3-networks-dual-svpc/modules/base_shared_vpc/private_service_connect.tf b/3-networks-dual-svpc/modules/base_shared_vpc/private_service_connect.tf
index 937330cd63..867ab32afb 100644
--- a/3-networks-dual-svpc/modules/base_shared_vpc/private_service_connect.tf
+++ b/3-networks-dual-svpc/modules/base_shared_vpc/private_service_connect.tf
@@ -17,7 +17,7 @@
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${var.environment_code}-shared-base"
diff --git a/3-networks-dual-svpc/modules/dedicated_interconnect/main.tf b/3-networks-dual-svpc/modules/dedicated_interconnect/main.tf
index add0af28da..6f28b91d53 100644
--- a/3-networks-dual-svpc/modules/dedicated_interconnect/main.tf
+++ b/3-networks-dual-svpc/modules/dedicated_interconnect/main.tf
@@ -23,7 +23,7 @@ locals {
 
 module "interconnect_attachment1_region1" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region1_interconnect1_onprem_dc}-${var.region1_interconnect1_location}-${var.vpc_name}-${var.region1}-${local.suffix1}"
   project = var.interconnect_project_id
@@ -46,7 +46,7 @@ module "interconnect_attachment1_region1" {
 
 module "interconnect_attachment2_region1" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region1_interconnect2_onprem_dc}-${var.region1_interconnect2_location}-${var.vpc_name}-${var.region1}-${local.suffix2}"
   project = var.interconnect_project_id
@@ -69,7 +69,7 @@ module "interconnect_attachment2_region1" {
 
 module "interconnect_attachment1_region2" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region2_interconnect1_onprem_dc}-${var.region2_interconnect1_location}-${var.vpc_name}-${var.region2}-${local.suffix3}"
   project = var.interconnect_project_id
@@ -92,7 +92,7 @@ module "interconnect_attachment1_region2" {
 
 module "interconnect_attachment2_region2" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region2_interconnect2_onprem_dc}-${var.region2_interconnect2_location}-${var.vpc_name}-${var.region2}-${local.suffix4}"
   project = var.interconnect_project_id
diff --git a/3-networks-dual-svpc/modules/restricted_shared_vpc/main.tf b/3-networks-dual-svpc/modules/restricted_shared_vpc/main.tf
index ee31c424e4..ca2f280b9c 100644
--- a/3-networks-dual-svpc/modules/restricted_shared_vpc/main.tf
+++ b/3-networks-dual-svpc/modules/restricted_shared_vpc/main.tf
@@ -26,7 +26,7 @@ locals {
 
 module "main" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = var.project_id
   network_name                           = local.network_name
@@ -96,7 +96,7 @@ resource "google_service_networking_connection" "private_vpc_connection" {
 
 module "region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr5"
   project = var.project_id
@@ -111,7 +111,7 @@ module "region1_router1" {
 
 module "region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr6"
   project = var.project_id
@@ -126,7 +126,7 @@ module "region1_router2" {
 
 module "region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr7"
   project = var.project_id
@@ -141,7 +141,7 @@ module "region2_router1" {
 
 module "region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr8"
   project = var.project_id
diff --git a/3-networks-dual-svpc/modules/restricted_shared_vpc/private_service_connect.tf b/3-networks-dual-svpc/modules/restricted_shared_vpc/private_service_connect.tf
index 9bfc9f738e..7a9832f16a 100644
--- a/3-networks-dual-svpc/modules/restricted_shared_vpc/private_service_connect.tf
+++ b/3-networks-dual-svpc/modules/restricted_shared_vpc/private_service_connect.tf
@@ -17,7 +17,7 @@
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${var.environment_code}-shared-restricted"
diff --git a/3-networks-dual-svpc/modules/restricted_shared_vpc/service_control.tf b/3-networks-dual-svpc/modules/restricted_shared_vpc/service_control.tf
index 194c21f1e1..a64c5e4cfb 100644
--- a/3-networks-dual-svpc/modules/restricted_shared_vpc/service_control.tf
+++ b/3-networks-dual-svpc/modules/restricted_shared_vpc/service_control.tf
@@ -26,7 +26,7 @@ resource "random_id" "random_access_level_suffix" {
 
 module "access_level_members" {
   source  = "terraform-google-modules/vpc-service-controls/google//modules/access_level"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   description = "${local.prefix} Access Level"
   policy      = var.access_context_manager_policy_id
@@ -64,7 +64,7 @@ resource "time_sleep" "wait_vpc_sc_propagation" {
 
 module "regular_service_perimeter" {
   source  = "terraform-google-modules/vpc-service-controls/google//modules/regular_service_perimeter"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   policy         = var.access_context_manager_policy_id
   perimeter_name = local.perimeter_name
diff --git a/3-networks-dual-svpc/modules/vpn-ha/main.tf b/3-networks-dual-svpc/modules/vpn-ha/main.tf
index 2b962f6255..2f93ad2872 100755
--- a/3-networks-dual-svpc/modules/vpn-ha/main.tf
+++ b/3-networks-dual-svpc/modules/vpn-ha/main.tf
@@ -30,7 +30,7 @@ data "google_secret_manager_secret_version" "psk" {
 
 module "vpn_ha_region1_router1" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region1
@@ -78,7 +78,7 @@ module "vpn_ha_region1_router1" {
 
 module "vpn_ha_region1_router2" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region1
@@ -126,7 +126,7 @@ module "vpn_ha_region1_router2" {
 
 module "vpn_ha_region2_router1" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region2
@@ -174,7 +174,7 @@ module "vpn_ha_region2_router1" {
 
 module "vpn_ha_region2_router2" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region2
diff --git a/3-networks-hub-and-spoke/envs/shared/dns-hub.tf b/3-networks-hub-and-spoke/envs/shared/dns-hub.tf
index 2782ae277a..954899acef 100644
--- a/3-networks-hub-and-spoke/envs/shared/dns-hub.tf
+++ b/3-networks-hub-and-spoke/envs/shared/dns-hub.tf
@@ -20,7 +20,7 @@
 
 module "dns_hub_vpc" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = local.dns_hub_project_id
   network_name                           = "vpc-c-dns-hub"
@@ -91,7 +91,7 @@ module "dns-forwarding-zone" {
 
 module "dns_hub_region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region1}-cr1"
   project = local.dns_hub_project_id
@@ -105,7 +105,7 @@ module "dns_hub_region1_router1" {
 
 module "dns_hub_region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region1}-cr2"
   project = local.dns_hub_project_id
@@ -119,7 +119,7 @@ module "dns_hub_region1_router2" {
 
 module "dns_hub_region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region2}-cr3"
   project = local.dns_hub_project_id
@@ -133,7 +133,7 @@ module "dns_hub_region2_router1" {
 
 module "dns_hub_region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "cr-c-dns-hub-${local.default_region2}-cr4"
   project = local.dns_hub_project_id
diff --git a/3-networks-hub-and-spoke/modules/base_shared_vpc/main.tf b/3-networks-hub-and-spoke/modules/base_shared_vpc/main.tf
index 220901027b..40c0468cdd 100644
--- a/3-networks-hub-and-spoke/modules/base_shared_vpc/main.tf
+++ b/3-networks-hub-and-spoke/modules/base_shared_vpc/main.tf
@@ -27,7 +27,7 @@ locals {
 
 module "main" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = var.project_id
   network_name                           = local.network_name
@@ -74,7 +74,7 @@ data "google_compute_network" "vpc_base_net_hub" {
 
 module "peering" {
   source  = "terraform-google-modules/network/google//modules/network-peering"
-  version = "~> 7.0"
+  version = "~> 8.0"
   count   = var.mode == "spoke" ? 1 : 0
 
   prefix                    = "np"
@@ -116,7 +116,7 @@ resource "google_service_networking_connection" "private_vpc_connection" {
 
 module "region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr1"
@@ -132,7 +132,7 @@ module "region1_router1" {
 
 module "region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr2"
@@ -148,7 +148,7 @@ module "region1_router2" {
 
 module "region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr3"
@@ -164,7 +164,7 @@ module "region2_router1" {
 
 module "region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr4"
diff --git a/3-networks-hub-and-spoke/modules/base_shared_vpc/private_service_connect.tf b/3-networks-hub-and-spoke/modules/base_shared_vpc/private_service_connect.tf
index 937330cd63..867ab32afb 100644
--- a/3-networks-hub-and-spoke/modules/base_shared_vpc/private_service_connect.tf
+++ b/3-networks-hub-and-spoke/modules/base_shared_vpc/private_service_connect.tf
@@ -17,7 +17,7 @@
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${var.environment_code}-shared-base"
diff --git a/3-networks-hub-and-spoke/modules/dedicated_interconnect/main.tf b/3-networks-hub-and-spoke/modules/dedicated_interconnect/main.tf
index db99c7045b..90124c1bd8 100644
--- a/3-networks-hub-and-spoke/modules/dedicated_interconnect/main.tf
+++ b/3-networks-hub-and-spoke/modules/dedicated_interconnect/main.tf
@@ -23,7 +23,7 @@ locals {
 
 module "interconnect_attachment1_region1" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region1_interconnect1_onprem_dc}-${var.region1_interconnect1_location}-${var.vpc_name}-${var.region1}-${local.suffix1}"
   project = var.interconnect_project_id
@@ -46,7 +46,7 @@ module "interconnect_attachment1_region1" {
 
 module "interconnect_attachment2_region1" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region1_interconnect2_onprem_dc}-${var.region1_interconnect2_location}-${var.vpc_name}-${var.region1}-${local.suffix2}"
   project = var.interconnect_project_id
@@ -69,7 +69,7 @@ module "interconnect_attachment2_region1" {
 
 module "interconnect_attachment1_region2" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region2_interconnect1_onprem_dc}-${var.region2_interconnect1_location}-${var.vpc_name}-${var.region2}-${local.suffix3}"
   project = var.interconnect_project_id
@@ -92,7 +92,7 @@ module "interconnect_attachment1_region2" {
 
 module "interconnect_attachment2_region2" {
   source  = "terraform-google-modules/cloud-router/google//modules/interconnect_attachment"
-  version = "~> 4.0"
+  version = "~> 6.0"
 
   name    = "vl-${var.region2_interconnect2_onprem_dc}-${var.region2_interconnect2_location}-${var.vpc_name}-${var.region2}-${local.suffix4}"
   project = var.interconnect_project_id
diff --git a/3-networks-hub-and-spoke/modules/restricted_shared_vpc/main.tf b/3-networks-hub-and-spoke/modules/restricted_shared_vpc/main.tf
index 34d60a5930..192438793d 100644
--- a/3-networks-hub-and-spoke/modules/restricted_shared_vpc/main.tf
+++ b/3-networks-hub-and-spoke/modules/restricted_shared_vpc/main.tf
@@ -27,7 +27,7 @@ locals {
 
 module "main" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = var.project_id
   network_name                           = local.network_name
@@ -76,7 +76,7 @@ data "google_compute_network" "vpc_restricted_net_hub" {
 
 module "peering" {
   source  = "terraform-google-modules/network/google//modules/network-peering"
-  version = "~> 7.0"
+  version = "~> 8.0"
   count   = var.mode == "spoke" ? 1 : 0
 
   prefix                    = "np"
@@ -120,7 +120,7 @@ resource "google_service_networking_connection" "private_vpc_connection" {
 
 module "region1_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr5"
@@ -136,7 +136,7 @@ module "region1_router1" {
 
 module "region1_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region1}-cr6"
@@ -152,7 +152,7 @@ module "region1_router2" {
 
 module "region2_router1" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr7"
@@ -168,7 +168,7 @@ module "region2_router1" {
 
 module "region2_router2" {
   source  = "terraform-google-modules/cloud-router/google"
-  version = "~> 4.0"
+  version = "~> 6.0"
   count   = var.mode != "spoke" ? 1 : 0
 
   name    = "cr-${local.vpc_name}-${var.default_region2}-cr8"
diff --git a/3-networks-hub-and-spoke/modules/restricted_shared_vpc/private_service_connect.tf b/3-networks-hub-and-spoke/modules/restricted_shared_vpc/private_service_connect.tf
index 9bfc9f738e..7a9832f16a 100644
--- a/3-networks-hub-and-spoke/modules/restricted_shared_vpc/private_service_connect.tf
+++ b/3-networks-hub-and-spoke/modules/restricted_shared_vpc/private_service_connect.tf
@@ -17,7 +17,7 @@
 
 module "private_service_connect" {
   source  = "terraform-google-modules/network/google//modules/private-service-connect"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                 = var.project_id
   dns_code                   = "dz-${var.environment_code}-shared-restricted"
diff --git a/3-networks-hub-and-spoke/modules/restricted_shared_vpc/service_control.tf b/3-networks-hub-and-spoke/modules/restricted_shared_vpc/service_control.tf
index 89ac51d580..1485fdfa9a 100644
--- a/3-networks-hub-and-spoke/modules/restricted_shared_vpc/service_control.tf
+++ b/3-networks-hub-and-spoke/modules/restricted_shared_vpc/service_control.tf
@@ -27,7 +27,7 @@ resource "random_id" "random_access_level_suffix" {
 
 module "access_level_members" {
   source  = "terraform-google-modules/vpc-service-controls/google//modules/access_level"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   description = "${local.prefix} Access Level"
   policy      = var.access_context_manager_policy_id
@@ -66,7 +66,7 @@ resource "time_sleep" "wait_vpc_sc_propagation" {
 
 module "regular_service_perimeter" {
   source  = "terraform-google-modules/vpc-service-controls/google//modules/regular_service_perimeter"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   policy         = var.access_context_manager_policy_id
   perimeter_name = local.perimeter_name
diff --git a/3-networks-hub-and-spoke/modules/transitivity/main.tf b/3-networks-hub-and-spoke/modules/transitivity/main.tf
index 95f74693e1..2391e06202 100644
--- a/3-networks-hub-and-spoke/modules/transitivity/main.tf
+++ b/3-networks-hub-and-spoke/modules/transitivity/main.tf
@@ -36,7 +36,7 @@ module "service_account" {
 
 module "templates" {
   source   = "terraform-google-modules/vm/google//modules/instance_template"
-  version  = "~> 8.0"
+  version  = "~> 10.0"
   for_each = toset(var.regions)
 
   can_ip_forward = true
@@ -64,7 +64,7 @@ module "templates" {
 
 module "migs" {
   source   = "terraform-google-modules/vm/google//modules/mig"
-  version  = "~> 8.0"
+  version  = "~> 10.0"
   for_each = toset(var.regions)
 
   project_id        = var.project_id
diff --git a/3-networks-hub-and-spoke/modules/vpn-ha/main.tf b/3-networks-hub-and-spoke/modules/vpn-ha/main.tf
index 9d94673bcb..47a46f4d4d 100755
--- a/3-networks-hub-and-spoke/modules/vpn-ha/main.tf
+++ b/3-networks-hub-and-spoke/modules/vpn-ha/main.tf
@@ -30,7 +30,7 @@ data "google_secret_manager_secret_version" "psk" {
 
 module "vpn_ha_region1_router1" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region1
@@ -78,7 +78,7 @@ module "vpn_ha_region1_router1" {
 
 module "vpn_ha_region1_router2" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region1
@@ -126,7 +126,7 @@ module "vpn_ha_region1_router2" {
 
 module "vpn_ha_region2_router1" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region2
@@ -174,7 +174,7 @@ module "vpn_ha_region2_router1" {
 
 module "vpn_ha_region2_router2" {
   source  = "terraform-google-modules/vpn/google//modules/vpn_ha"
-  version = "~> 2.3"
+  version = "~> 4.0"
 
   project_id = var.project_id
   region     = var.default_region2
diff --git a/4-projects/modules/base_env/example_peering_project.tf b/4-projects/modules/base_env/example_peering_project.tf
index 0c10e2283c..60fe46b5b7 100644
--- a/4-projects/modules/base_env/example_peering_project.tf
+++ b/4-projects/modules/base_env/example_peering_project.tf
@@ -74,7 +74,7 @@ module "peering_project" {
 
 module "peering_network" {
   source  = "terraform-google-modules/network/google"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   project_id                             = module.peering_project.project_id
   network_name                           = "vpc-${local.env_code}-peering-base"
@@ -105,7 +105,7 @@ resource "google_dns_policy" "default_policy" {
 
 module "peering" {
   source  = "terraform-google-modules/network/google//modules/network-peering"
-  version = "~> 7.0"
+  version = "~> 8.0"
 
   prefix            = "${var.business_code}-${local.env_code}"
   local_network     = module.peering_network.network_self_link
diff --git a/4-projects/modules/base_env/example_storage_cmek.tf b/4-projects/modules/base_env/example_storage_cmek.tf
index cd87423533..cd94e16ae8 100644
--- a/4-projects/modules/base_env/example_storage_cmek.tf
+++ b/4-projects/modules/base_env/example_storage_cmek.tf
@@ -65,7 +65,7 @@ resource "random_string" "bucket_name" {
 
 module "gcs_buckets" {
   source  = "terraform-google-modules/cloud-storage/google//modules/simple_bucket"
-  version = "~> 4.0"
+  version = "~> 5.0"
 
   project_id         = module.base_shared_vpc_project.project_id
   location           = var.location_gcs
diff --git a/5-app-infra/modules/env_base/main.tf b/5-app-infra/modules/env_base/main.tf
index fccb0d6b6e..360a08cdf5 100644
--- a/5-app-infra/modules/env_base/main.tf
+++ b/5-app-infra/modules/env_base/main.tf
@@ -60,7 +60,7 @@ resource "google_service_account" "compute_engine_service_account" {
 
 module "instance_template" {
   source  = "terraform-google-modules/vm/google//modules/instance_template"
-  version = "~> 8.0"
+  version = "~> 10.0"
 
   machine_type = var.machine_type
   region       = var.region