feat: Bump default versions of Python, Node, Ruff, Terraform, Terragrunt

chore: Update README

The default versions of many of the tools used have started to lag,
so this update just bumps the versions of those tools where
appropriate. They should all still be adjustable on the users'
side if needed. Puppet and Ruby versions were not changed to closer
align to BITS' current Puppet environment.

Author: coreone

.github/workflows/ansible-lint.yaml

@@ -16,7 +16,7 @@ name: python-linting
         type: string
       python_version:
         description: The version of Python to use for the run.
-        default: '3.11'
+        default: '3.12'
         required: false
         type: string
       timeout_minutes:

.github/workflows/conventional-commit.yaml

@@ -45,7 +45,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-node@v4
         with:
-          node-version: 18
+          node-version: 23
       - name: Install commitlint
         run: |
           npm install --save-dev @commitlint/{cli,config-conventional}

.github/workflows/python-deploy-to-pypi.yaml

@@ -20,7 +20,7 @@ name: pypi_deploy
         required: false
         type: string
       python_version:
-        default: '3.11'
+        default: '3.12'
         description: The version of Python to use for the run.
         required: false
         type: string

.github/workflows/python-lint.yaml

@@ -20,12 +20,12 @@ name: python-linting
         required: false
         type: string
       python_version:
-        default: '3.11'
+        default: '3.12'
         description: The version of Python to use for the run.
         required: false
         type: string
       ruff_version:
-        default: '0.1.0'
+        default: '0.8.1'
         description: The version of ruff to run.
         required: false
         type: string

.github/workflows/python-test-deploy-to-pypi.yaml

@@ -21,7 +21,7 @@ name: pypi_test_deploy
         type: string
       python_version:
         description: The version of Python to use for the run.
-        default: '3.11'
+        default: '3.12'
         required: false
         type: string
       timeout_minutes:

.github/workflows/python-unit-test.yaml

@@ -20,7 +20,7 @@ name: Python Checks
         required: false
         type: string
       python_versions:
-        default: '{ "versions": [ "3.9", "3.10", "3.11" ] }'
+        default: '{ "versions": [ "3.9", "3.10", "3.11", "3.12" ] }'
         description: The versions of Python on which the unit tests should run.
         required: false
         type: string

.github/workflows/terraform-validate.yaml

@@ -8,7 +8,7 @@
         required: false
         type: string
       terraform_version:
-        default: '1.5.5'
+        default: '1.10.0'
         description: The version of Terraform to use when validating.
         required: false
         type: string
@@ -18,7 +18,7 @@
         required: false
         type: string
       terragrunt_version:
-        default: '0.48.7'
+        default: '0.69.3'
         description: The version of Terragrunt to use when validating.
         required: false
         type: string

docs/README.md

@@ -24,7 +24,7 @@ command as part of their commits.
 
 ### ansible-lint.yaml
 
-This workflow will setup [Python][5] (`3.11`) and lint the repository using both
+This workflow will setup [Python][5] (`3.12`) and lint the repository using both
 [yamllint][13] and [ansible-lint](https://github.com/ansible/ansible-lint). [Poetry][3]
 is used to install the [Python][5] dependencies. Both [yamllint][13] and
 [ansible-lint](https://github.com/ansible/ansible-lint) are expected to be installed by
@@ -34,21 +34,13 @@ the [Poetry][3] configuration in the repository using this workflow.
 
 * `additional_packages`: String of additional packages that should be
   installed. Default: ``
-* `python_version`: The version of [Python][5] to use. Default: `3.11`
+* `python_version`: The version of [Python][5] to use. Default: `3.12`
 
-### conventional-commit.yaml
+### close-stale.yaml
 
-This workflow will run the[commitlint](https://commitlint.js.org/)
-By default it only checks that PR titles follow [Conventional Commits][1].
-In addition the 'subject-case' and 'body-max-line-length' checks are disabled.
-
-* `validate_pr_title`: Validate PR title. Default: true
-* `validate_current_commit`: Validate current commit (last commit). Default: false
-* validate_pr_commits: Validate PR commits. Default: false
-
-### Close Stale Issues and PRs
-
-This workflow will close any issues or PRs that have been inactive for a certain amount of time. By default, this is set to 30 days. This workflow is based on the `actions/stale`.
+This workflow will close any issues or PRs that have been inactive for a
+certain amount of time. By default, this is set to 30 days. This workflow is
+based on the `actions/stale`.
 
 ```yaml
 ---
@@ -62,6 +54,17 @@ jobs:
   stale:
     uses: broadinstitute/shared-workflows/.github/workflows/close-stale.yaml
 ```
+
+### conventional-commit.yaml
+
+This workflow will run the[commitlint](https://commitlint.js.org/)
+By default it only checks that PR titles follow [Conventional Commits][1].
+In addition the 'subject-case' and 'body-max-line-length' checks are disabled.
+
+* `validate_pr_title`: Validate PR title. Default: true
+* `validate_current_commit`: Validate current commit (last commit). Default: false
+* validate_pr_commits: Validate PR commits. Default: false
+
 ### local-checks.yaml
 
 These are local Actions that run for this repository. This workflow is not
@@ -125,7 +128,7 @@ This workflow will setup [Puppet][7] using
 `3.2`). The linting and dependency installations will all happen using
 [PDK][9].
 
-#### puppet-linting Inputs
+#### puppet-lint Inputs
 
 * `puppet_version`: The version of [Puppet][7] to use in [PDK][9]. Default: `7`
 * `ruby_version`: The version of [Ruby][8] to use. Default: `3.2`
@@ -150,7 +153,7 @@ tests will all happen using [PDK][9].
 
 ### python-deploy-to-pypi.yaml
 
-This workflow will setup [Python][5] (`3.11`) and do a build and deploy of the
+This workflow will setup [Python][5] (`3.12`) and do a build and deploy of the
 [Python][5] package to [PyPi][2] using [Poetry][3].
 
 #### python-deploy-to-pypi Inputs
@@ -159,7 +162,7 @@ This workflow will setup [Python][5] (`3.11`) and do a build and deploy of the
   Default: ``
 * `poetry_install_options`: Extra options to pass to Poetry when doing an install.
   Default: `--no-root`
-* `python_version`: The version of [Python][5] to use. Default: `3.11`
+* `python_version`: The version of [Python][5] to use. Default: `3.12`
 
 #### python-deploy-to-pypi Secrets
 
@@ -168,7 +171,7 @@ This workflow will setup [Python][5] (`3.11`) and do a build and deploy of the
 
 ### python-lint.yaml
 
-This workflow will setup [Python][5] (`3.11`) and lint the repository.
+This workflow will setup [Python][5] (`3.12`) and lint the repository.
 [Poetry][3] is used to install any [Python][5] dependencies. By default the
 linters run are [yamllint][13], and
 [pylama](https://github.com/AtomLinter/linter-pylama). As of August 2023,
@@ -182,9 +185,9 @@ by setting the `use_ruff` input to `true`.
   Default: ``
 * `poetry_install_options`: Extra options to pass to Poetry when doing an install.
   Default: `--no-root`
-* `python_version`: The version of [Python][5] to use. Default: `3.11`
+* `python_version`: The version of [Python][5] to use. Default: `3.12`
 * `ruff_version`: The version of [Ruff](https://github.com/astral-sh/ruff) to
-  run. Default: `0.1.0`
+  run. Default: `0.8.1`
 * `use_pylama`: If true, use
   [pylama](https://github.com/AtomLinter/linter-pylama) to lint the repository.
   Default: `true`
@@ -207,7 +210,7 @@ use `ubuntu-latest` for the base image.
 
 ### python-test-deploy-to-pypi.yaml
 
-This workflow will setup [Python][5] (`3.11`) and do a build and deploy of the
+This workflow will setup [Python][5] (`3.12`) and do a build and deploy of the
 [Python][5] package to [Test PyPi][6] using [Poetry][3].
 
 #### python-test-deploy-to-pypi Inputs
@@ -216,7 +219,7 @@ This workflow will setup [Python][5] (`3.11`) and do a build and deploy of the
   Default: ``
 * `poetry_install_options`: Extra options to pass to Poetry when doing an install.
   Default: `--no-root`
-* `python_version`: The version of [Python][5] to use. Default: `3.11`
+* `python_version`: The version of [Python][5] to use. Default: `3.12`
 
 #### python-test-deploy-to-pypi Secrets
 
@@ -239,7 +242,7 @@ install any [Python][5] dependencies.
   create. Default: ``
 * `python_versions`: The versions of [Python][5] to use in the unit tests, passed as a
   string in JSON format with `versions` as the key. Default:
-  `'{ "versions": [ "3.7", "3.8", "3.9", "3.10", "3.11" ] }'`
+  `'{ "versions": [ "3.9", "3.10", "3.11", "3.12" ] }'`
   * **Note: Make sure to enclose the JSON string in single quotes!!**
 * `run_coverage`: Boolean to determine whether coverage should be run or not. Default:
 `true`
@@ -315,11 +318,11 @@ check `terragrunt hclfmt` will also be run.
 #### terraform-validate Inputs
 
 * `terraform_version`: The version of Terraform to use when validating.
-  Default: `1.5.5`
+  Default: `1.10.0`
 * `terragrunt_directory`: The environment directory from which Terragrunt
   should run. Default: `prod`
 * `terragrunt_version`: The version of Terragrunt to use when validating.
-  Default: `0.48.7`
+  Default: `0.69.3`
 * `use_terragrunt`: If set to true, use Terragrunt instead of Terraform.
   Default: `false`