diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml
index 737706344..8c6d99136 100644
--- a/.github/workflows/pre-commit.yml
+++ b/.github/workflows/pre-commit.yml
@@ -7,9 +7,9 @@ on:
   workflow_dispatch:
 
 env:
-  TF_DOCS_VERSION: v0.16.0
-  TFSEC_VERSION: v1.28.6
-  TFLINT_VERSION: v0.47.0
+  TF_DOCS_VERSION: v0.19.0
+  TFSEC_VERSION: v1.28.11
+  TFLINT_VERSION: v0.53.0
 permissions:
   contents: read
 jobs:
@@ -31,8 +31,8 @@ jobs:
           cache: "npm"
       - uses: actions/setup-java@v4
         with:
-          distribution: 'oracle'
-          java-version: '23'
+          distribution: "oracle"
+          java-version: "23"
       - name: Install npm dependencies
         run: npm install
       - uses: actions/cache@v4
diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index fd4fe7587..cf0b380ac 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -9,11 +9,11 @@ ci:
   submodules: false
 repos:
   - repo: https://github.com/renovatebot/pre-commit-hooks
-    rev: 39.7.6
+    rev: 39.8.0
     hooks:
       - id: renovate-config-validator
   - repo: https://github.com/eslint/eslint
-    rev: v9.3.0
+    rev: v9.14.0
     hooks:
       - id: eslint
         args:
@@ -26,7 +26,7 @@ repos:
         exclude: ^(src/test/resources/yourkey.txt|src/test/resources/secondkey.txt)
       - id: trailing-whitespace
   - repo: https://github.com/antonbabenko/pre-commit-terraform
-    rev: v1.89.1
+    rev: v1.96.2
     hooks:
       - id: terraform_fmt
       - id: terraform_tflint
@@ -46,7 +46,7 @@ repos:
           - "--args=--only=terraform_workspace_remote"
       - id: terraform_docs
   - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook
-    rev: v9.16.0
+    rev: v9.18.0
     hooks:
       - id: commitlint
         stages: [commit-msg]
@@ -57,7 +57,7 @@ repos:
         args: ["clean compile"]
       - id: maven-spotless-apply
   - repo: https://github.com/psf/black
-    rev: 24.4.2
+    rev: 24.10.0
     hooks:
       - id: black
         language_version: python3.11
diff --git a/aws/README.md b/aws/README.md
index f6d20ea42..2bd78db66 100644
--- a/aws/README.md
+++ b/aws/README.md
@@ -109,7 +109,7 @@ Want to see if the setup still works? You can use terratest to check if the curr
 ## Terraform documentation
 The documentation below is auto-generated to give insight on what's created via Terraform.
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -168,7 +168,7 @@ The documentation below is auto-generated to give insight on what's created via
 | <a name="input_cluster_name"></a> [cluster\_name](#input\_cluster\_name) | The EKS cluster name | `string` | `"wrongsecrets-exercise-cluster"` | no |
 | <a name="input_cluster_version"></a> [cluster\_version](#input\_cluster\_version) | The EKS cluster version to use | `string` | `"1.30"` | no |
 | <a name="input_region"></a> [region](#input\_region) | The AWS region to use | `string` | `"eu-west-1"` | no |
-| <a name="input_tags"></a> [tags](#input\_tags) | List of tags to apply to resources | `map(string)` | <pre>{<br>  "Application": "wrongsecrets"<br>}</pre> | no |
+| <a name="input_tags"></a> [tags](#input\_tags) | List of tags to apply to resources | `map(string)` | <pre>{<br/>  "Application": "wrongsecrets"<br/>}</pre> | no |
 
 ## Outputs
 
@@ -179,4 +179,4 @@ The documentation below is auto-generated to give insight on what's created via
 | <a name="output_cluster_security_group_id"></a> [cluster\_security\_group\_id](#output\_cluster\_security\_group\_id) | Security group ids attached to the cluster control plane. |
 | <a name="output_irsa_role"></a> [irsa\_role](#output\_irsa\_role) | The role ARN used in the IRSA setup |
 | <a name="output_secrets_manager_secret_name"></a> [secrets\_manager\_secret\_name](#output\_secrets\_manager\_secret\_name) | The name of the secrets manager secret |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/aws/shared-state/README.md b/aws/shared-state/README.md
index 31a7827f9..05af961c8 100644
--- a/aws/shared-state/README.md
+++ b/aws/shared-state/README.md
@@ -1,7 +1,7 @@
 # Terraform documentation
 The documentation below is auto-generated to give insight on what's created via Terraform.
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -37,4 +37,4 @@ No modules.
 | Name | Description |
 |------|-------------|
 | <a name="output_s3_bucket_name"></a> [s3\_bucket\_name](#output\_s3\_bucket\_name) | Name of the terraform state bucket |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/azure/README.md b/azure/README.md
index 600f80593..4d7d275eb 100644
--- a/azure/README.md
+++ b/azure/README.md
@@ -100,7 +100,7 @@ Want to see if the setup still works? You can use terratest to check if the curr
 ## Terraform documentation
 The documentation below is auto-generated to give insight on what's created via Terraform.
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -168,4 +168,4 @@ No modules.
 | <a name="output_tenant_id"></a> [tenant\_id](#output\_tenant\_id) | Azure tenant ID |
 | <a name="output_vault_name"></a> [vault\_name](#output\_vault\_name) | Vault name |
 | <a name="output_vault_uri"></a> [vault\_uri](#output\_vault\_uri) | Vault URI |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/azure/shared-state/README.md b/azure/shared-state/README.md
index c5e26a181..88f6269cf 100644
--- a/azure/shared-state/README.md
+++ b/azure/shared-state/README.md
@@ -1,7 +1,7 @@
 # Terraform documentation
 The documentation below is auto-generated to give insight on what's created via Terraform.
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -42,4 +42,4 @@ No modules.
 | Name | Description |
 |------|-------------|
 | <a name="output_storage_account_name"></a> [storage\_account\_name](#output\_storage\_account\_name) | The generated storage account name |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/gcp/README.md b/gcp/README.md
index f0bd49c0d..4242a466a 100644
--- a/gcp/README.md
+++ b/gcp/README.md
@@ -101,7 +101,7 @@ Want to see if the setup still works? You can use terratest to check if the curr
 
 The documentation below is auto-generated to give insight on what's created via Terraform.
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -168,4 +168,4 @@ No modules.
 | <a name="output_kubernetes_cluster_name"></a> [kubernetes\_cluster\_name](#output\_kubernetes\_cluster\_name) | GKE Cluster Name |
 | <a name="output_project_id"></a> [project\_id](#output\_project\_id) | GCloud Project ID |
 | <a name="output_region"></a> [region](#output\_region) | GCloud Region |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->
diff --git a/gcp/shared-state/README.md b/gcp/shared-state/README.md
index 4ad53a54b..0fdb1589d 100644
--- a/gcp/shared-state/README.md
+++ b/gcp/shared-state/README.md
@@ -1,7 +1,7 @@
 # Terraform documentation
 The documentation below is auto-generated to give insight on what's created via Terraform.
 
-<!-- BEGINNING OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- BEGIN_TF_DOCS -->
 ## Requirements
 
 | Name | Version |
@@ -40,4 +40,4 @@ No modules.
 | Name | Description |
 |------|-------------|
 | <a name="output_bucket"></a> [bucket](#output\_bucket) | Terraform backend storage bucket |
-<!-- END OF PRE-COMMIT-TERRAFORM DOCS HOOK -->
+<!-- END_TF_DOCS -->