chore(deps): update terraform github.com/cds-snc/terraform-modules to v9.6.5

[renovate-cds]

This PR contains the following updates:

Package	Type	Update	Change	Pending
github.com/cds-snc/terraform-modules	module	patch	v9.6.4 -> v9.6.5	v9.6.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Review

• Updates have been tested and work
• If updates are AWS related, versions match the infrastructure (e.g. Lambda runtime, database, etc.)

---

Release Notes

cds-snc/terraform-modules (github.com/cds-snc/terraform-modules)

v9.6.5

Compare Source

What's Changed

• chore(deps): update terraform aws to v5.64.0 by @​renovate in https://github.com/cds-snc/terraform-modules/pull/553
• chore(deps): update actions/setup-python action to v5.2.0 by @​renovate in https://github.com/cds-snc/terraform-modules/pull/552
• chore(deps): lock file maintenance by @​renovate in https://github.com/cds-snc/terraform-modules/pull/548
• chore(deps): update all patch dependencies by @​renovate in https://github.com/cds-snc/terraform-modules/pull/551
• chore(deps): update all patch dependencies by @​renovate in https://github.com/cds-snc/terraform-modules/pull/554
• chore(deps): lock file maintenance by @​renovate in https://github.com/cds-snc/terraform-modules/pull/556
• fix: ignore RDS security group name/desc changes by @​patheard in https://github.com/cds-snc/terraform-modules/pull/555

Full Changelog: cds-snc/terraform-modules@v9.6.4...v9.6.5

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone America/Montreal, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Staging: database

✅   Terraform Init: success
✅   Terraform Validate: success
✅   Terraform Format: success
✅   Terraform Plan: success
✅   Conftest: success

Plan: 0 to add, 1 to change, 0 to destroy

Show summary

CHANGE	NAME
update	aws_rds_cluster_parameter_group.enable_audit_logging_v8

Show plan

Resource actions are indicated with the following symbols:
  ~ update in-place

Terraform will perform the following actions:

  # aws_rds_cluster_parameter_group.enable_audit_logging_v8 will be updated in-place
  ~ resource "aws_rds_cluster_parameter_group" "enable_audit_logging_v8" {
        id          = "wordpress-aurora-mysql8"
        name        = "wordpress-aurora-mysql8"
        tags        = {}
        # (5 unchanged attributes hidden)

      - parameter {
          - apply_method = "pending-reboot" -> null
          - name         = "server_audit_events" -> null
          - value        = "CONNECT,QUERY_DCL,QUERY_DDL,QUERY_DML" -> null
        }
      - parameter {
          - apply_method = "pending-reboot" -> null
          - name         = "server_audit_logging" -> null
          - value        = "1" -> null
        }
      + parameter {
          + apply_method = "immediate"
          + name         = "server_audit_events"
          + value        = "CONNECT,QUERY_DCL,QUERY_DDL,QUERY_DML"
        }
      + parameter {
          + apply_method = "immediate"
          + name         = "server_audit_logging"
          + value        = "1"
        }

        # (1 unchanged block hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: plan.tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "plan.tfplan"

Show Conftest results

WARN - plan.json - main - Missing Common Tags: ["aws_rds_cluster_parameter_group.enable_audit_logging_v8"]
WARN - plan.json - main - Missing Common Tags: ["aws_secretsmanager_secret.database_host"]
WARN - plan.json - main - Missing Common Tags: ["aws_secretsmanager_secret.database_name"]
WARN - plan.json - main - Missing Common Tags: ["aws_secretsmanager_secret.database_password"]
WARN - plan.json - main - Missing Common Tags: ["aws_secretsmanager_secret.database_username"]

24 tests, 19 passed, 5 warnings, 0 failures, 0 exceptions

[renovate-cds]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.