diff --git a/.github/actions/rosa-create-cluster/action.yml b/.github/actions/rosa-create-cluster/action.yml
index 50f26be..4ec815f 100644
--- a/.github/actions/rosa-create-cluster/action.yml
+++ b/.github/actions/rosa-create-cluster/action.yml
@@ -35,7 +35,7 @@ inputs:
     description: 'Version of the OpenShift to install'
     required: true
     # renovate: datasource=endoflife-date depName=red-hat-openshift versioning=semver
-    default: "4.15.18"
+    default: "4.15.21"
   replicas:
     description: 'Number of replicas for the ROSA cluster'
     required: true
diff --git a/.github/workflows/daily-cleanup.yml b/.github/workflows/daily-cleanup.yml
index 0f68188..72a44d4 100644
--- a/.github/workflows/daily-cleanup.yml
+++ b/.github/workflows/daily-cleanup.yml
@@ -77,7 +77,7 @@ jobs:
       - name: Notify in Slack in case of failure
         id: slack-notification
         if: failure() && github.event_name == 'schedule'
-        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@584d5ebc12e23e0c4420860fe4d2575fecf09b94 # main
+        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@c3b53f2d182dbd5c613c779fa543278a6bffcbb1 # main
         with:
           vault_addr: ${{ secrets.VAULT_ADDR }}
           vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/labeler.yml b/.github/workflows/labeler.yml
index d376519..1eb2412 100644
--- a/.github/workflows/labeler.yml
+++ b/.github/workflows/labeler.yml
@@ -19,7 +19,7 @@ jobs:
       - name: Notify in Slack in case of failure
         id: slack-notification
         if: failure() && github.event_name == 'schedule'
-        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@584d5ebc12e23e0c4420860fe4d2575fecf09b94 # main
+        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@c3b53f2d182dbd5c613c779fa543278a6bffcbb1 # main
         with:
           vault_addr: ${{ secrets.VAULT_ADDR }}
           vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/links.yml b/.github/workflows/links.yml
index 2ca4117..12bdcc4 100644
--- a/.github/workflows/links.yml
+++ b/.github/workflows/links.yml
@@ -45,7 +45,7 @@ jobs:
       - name: Notify in Slack in case of failure
         id: slack-notification
         if: failure() && github.event_name == 'schedule'
-        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@584d5ebc12e23e0c4420860fe4d2575fecf09b94 # main
+        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@c3b53f2d182dbd5c613c779fa543278a6bffcbb1 # main
         with:
           vault_addr: ${{ secrets.VAULT_ADDR }}
           vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 830376e..4562657 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -123,7 +123,7 @@ jobs:
       - name: Notify in Slack in case of failure
         id: slack-notification
         if: failure() && github.event_name == 'schedule'
-        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@584d5ebc12e23e0c4420860fe4d2575fecf09b94 # main
+        uses: camunda/infraex-common-config/.github/actions/report-failure-on-slack@c3b53f2d182dbd5c613c779fa543278a6bffcbb1 # main
         with:
           vault_addr: ${{ secrets.VAULT_ADDR }}
           vault_role_id: ${{ secrets.VAULT_ROLE_ID }}
diff --git a/.tool-versions b/.tool-versions
index 8de2b23..7de42a2 100644
--- a/.tool-versions
+++ b/.tool-versions
@@ -3,18 +3,18 @@
 # check it with
 # diff <(sed '/^#/d; /^$/d' .tool-versions | sort) <(sed '/^#/d; /^$/d' .tool-versions) && echo ".tool-versions is sorted correctly" || echo ".tool-versions is not sorted correctly"
 
-awscli 2.17.5
+awscli 2.17.13
 
-golang 1.22.4
+golang 1.22.5
 
 just 1.31.0
 
 pre-commit 3.7.1
 
-terraform 1.9.0
+terraform 1.9.2
 
 terraform-docs 0.18.0
 
 tflint 0.52.0
 
-tfsec 1.28.6
+tfsec 1.28.10
diff --git a/modules/rosa-hcp/vars.tf b/modules/rosa-hcp/vars.tf
index c7f55cb..405479e 100644
--- a/modules/rosa-hcp/vars.tf
+++ b/modules/rosa-hcp/vars.tf
@@ -9,7 +9,7 @@ variable "openshift_version" {
   type        = string
   description = "The version of ROSA to be deployed"
   # renovate: datasource=endoflife-date depName=red-hat-openshift versioning=semver
-  default = "4.15.18"
+  default = "4.15.21"
   validation {
     condition     = can(regex("^[0-9]*[0-9]+.[0-9]*[0-9]+.[0-9]*[0-9]+$", var.openshift_version))
     error_message = "openshift_version must be with structure <major>.<minor>.<patch> (for example 4.13.6)."