chore: Bump terraform and provider versions, update pre-commit conf

.github/workflows/static_analysis.yml

@@ -45,5 +45,5 @@ jobs:
 
       - name: run_pre_commit_terraform
         run: |
-          TAG="v1.77.0@sha256:64ce1e4b99d85497fe646db0724669039b079b45fa8cd503b4dc23dbdca490ae"
+          TAG="v1.96.1@sha256:9aea677ac51d67eb96b3bbb4cf93b16afdde5476f984e75e87888850d18146c9"
           docker run -v $(pwd):/lint -w /lint ghcr.io/antonbabenko/pre-commit-terraform:$TAG run -a

.pre-commit-config.yaml

@@ -1,10 +1,13 @@
 repos:
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.77.0
+    rev: 89f45610a846f56273a6c4290b3c42534175949e # v1.96.1
     hooks:
       - id: terraform_fmt
       - id: terraform_docs
-      - id: terraform_tfsec
+      - id: terraform_trivy
+        # decomment to skip ./terraform
+        # args:
+        # - --args=--skip-dirs="**/.terraform"
       - id: terraform_validate
         args:
           - --init-args=-lockfile=readonly

.terraform-version

@@ -1 +1 @@
-1.3.7
+1.9.6

src/core/99_locals.tf

@@ -0,0 +1,3 @@
+locals {
+  project = "${var.prefix}-${var.env_short}"
+}

src/core/99_main.tf

@@ -1,17 +1,17 @@
 terraform {
-  required_version = ">=1.3.0"
+  required_version = ">=1.9.6"
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "<= 3.40.0"
+      version = "<= 3.116.0"
     }
     azuread = {
       source  = "hashicorp/azuread"
-      version = "<= 2.33.0"
+      version = "<= 2.53.1"
     }
     null = {
       source  = "hashicorp/null"
-      version = "<= 3.2.1"
+      version = "<= 3.2.3"
     }
   }
 

src/core/99_variables.tf

@@ -1,7 +1,7 @@
 # general
 
 variable "prefix" {
-  type    = string
+  type = string
   validation {
     condition = (
       length(var.prefix) <= 6