diff --git a/renovate.json b/.github/renovate.json
similarity index 100%
rename from renovate.json
rename to .github/renovate.json
diff --git a/README.md b/README.md
index 7b9ad62f..e1647728 100644
--- a/README.md
+++ b/README.md
@@ -3,7 +3,6 @@
 [![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 [![Go Report Card](https://goreportcard.com/badge/github.com/busser/whisper)](https://goreportcard.com/report/github.com/busser/whisper)
 ![tests-passing](https://github.com/busser/whisper/actions/workflows/ci.yml/badge.svg)
-![go-version](https://img.shields.io/badge/Go-v1.18-29beb0)
 
 Plug-and-play entrypoint to inject secrets directly into your application's
 environment variables.
diff --git a/go.mod b/go.mod
index dc4c433b..0fe6207c 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/busser/whisper
 
-go 1.18
+go 1.19
 
 require (
 	cloud.google.com/go/secretmanager v1.5.0
diff --git a/go.sum b/go.sum
index 798af504..94540aae 100644
--- a/go.sum
+++ b/go.sum
@@ -339,7 +339,6 @@ golang.org/x/net v0.0.0-20220325170049-de3da57026de/go.mod h1:CfG3xpIq0wQ8r1q4Su
 golang.org/x/net v0.0.0-20220412020605-290c469a71a5/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220425223048-2871e0cb64e4/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
 golang.org/x/net v0.0.0-20220607020251-c690dde0001d/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
-golang.org/x/net v0.0.0-20220617184016-355a448f1bc9 h1:Yqz/iviulwKwAREEeUd3nbBFn0XuyJqkoft2IlrvOhc=
 golang.org/x/net v0.0.0-20220617184016-355a448f1bc9/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c=
 golang.org/x/net v0.0.0-20220805013720-a33c5aa5df48 h1:N9Vc/rorQUDes6B9CNdIxAn5jODGj2wzfrei2x4wNj4=
 golang.org/x/net v0.0.0-20220805013720-a33c5aa5df48/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk=
@@ -435,7 +434,6 @@ golang.org/x/sys v0.0.0-20220502124256-b6088ccd6cba/go.mod h1:oPkhp1MJrh7nUepCBc
 golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220610221304-9f5ed59c137d/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.0.0-20220615213510-4f61da869c0c h1:aFV+BgZ4svzjfabn8ERpuB4JI4N6/rdy1iusx77G3oU=
 golang.org/x/sys v0.0.0-20220615213510-4f61da869c0c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10 h1:WIoqL4EROvwiPdUtaip4VcDdpZ4kha7wBWZrbVKCIZg=
 golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
@@ -639,7 +637,6 @@ google.golang.org/genproto v0.0.0-20220518221133-4f43b3371335/go.mod h1:RAyBrSAP
 google.golang.org/genproto v0.0.0-20220523171625-347a074981d8/go.mod h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4=
 google.golang.org/genproto v0.0.0-20220608133413-ed9918b62aac/go.mod h1:KEWEmljWE5zPzLBa/oHl6DaEt9LmfH6WtH1OHIvleBA=
 google.golang.org/genproto v0.0.0-20220616135557-88e70c0c3a90/go.mod h1:KEWEmljWE5zPzLBa/oHl6DaEt9LmfH6WtH1OHIvleBA=
-google.golang.org/genproto v0.0.0-20220617124728-180714bec0ad h1:kqrS+lhvaMHCxul6sKQvKJ8nAAhlVItmZV822hYFH/U=
 google.golang.org/genproto v0.0.0-20220617124728-180714bec0ad/go.mod h1:KEWEmljWE5zPzLBa/oHl6DaEt9LmfH6WtH1OHIvleBA=
 google.golang.org/genproto v0.0.0-20220805133916-01dd62135a58 h1:sRT5xdTkj1Kbk30qbYC7VyMj73N5pZYsw6v+Nrzdhno=
 google.golang.org/genproto v0.0.0-20220805133916-01dd62135a58/go.mod h1:iHe1svFLAZg9VWz891+QbRMwUv9O/1Ww+/mngYeThbc=
@@ -673,7 +670,6 @@ google.golang.org/grpc v1.44.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ5
 google.golang.org/grpc v1.45.0/go.mod h1:lN7owxKUQEqMfSyQikvvk5tf/6zMPsrK+ONuO11+0rQ=
 google.golang.org/grpc v1.46.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
 google.golang.org/grpc v1.46.2/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
-google.golang.org/grpc v1.47.0 h1:9n77onPX5F3qfFCqjy9dhn8PbNQsIKeVU04J9G7umt8=
 google.golang.org/grpc v1.47.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
 google.golang.org/grpc v1.48.0 h1:rQOsyJ/8+ufEDJd/Gdsz7HG220Mh9HAhFHRGnIjda0w=
 google.golang.org/grpc v1.48.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
diff --git a/terraform/layers/aws-secrets-manager/_settings.tf b/terraform/layers/aws-secrets-manager/_settings.tf
index 798519a9..8d2a9305 100644
--- a/terraform/layers/aws-secrets-manager/_settings.tf
+++ b/terraform/layers/aws-secrets-manager/_settings.tf
@@ -9,7 +9,7 @@ terraform {
   # all 1.0.x versions.
   #
   # For more information: https://www.terraform.io/docs/language/settings/index.html#specifying-a-required-terraform-version
-  required_version = "= 1.1.9"
+  required_version = "= 1.2.6"
 
   # Terraform keeps track of all resources it knows of in its state. This state
   # can be stored remotely in a "backend".
diff --git a/terraform/layers/azure-keyvault/_settings.tf b/terraform/layers/azure-keyvault/_settings.tf
index 91745da0..009f167a 100644
--- a/terraform/layers/azure-keyvault/_settings.tf
+++ b/terraform/layers/azure-keyvault/_settings.tf
@@ -9,7 +9,7 @@ terraform {
   # all 1.0.x versions.
   #
   # For more information: https://www.terraform.io/docs/language/settings/index.html#specifying-a-required-terraform-version
-  required_version = "= 1.1.9"
+  required_version = "= 1.2.6"
 
   # Terraform keeps track of all resources it knows of in its state. This state
   # can be stored remotely in a "backend".
@@ -32,11 +32,11 @@ terraform {
   required_providers {
     azurerm = {
       source  = "hashicorp/azurerm"
-      version = "3.15.0"
+      version = "3.17.0"
     }
     azuread = {
       source  = "hashicorp/azuread"
-      version = "2.26.1"
+      version = "2.27.0"
     }
     github = {
       source  = "integrations/github"
diff --git a/terraform/layers/bootstrap/_settings.tf b/terraform/layers/bootstrap/_settings.tf
index 80ad07cb..65bccc7d 100644
--- a/terraform/layers/bootstrap/_settings.tf
+++ b/terraform/layers/bootstrap/_settings.tf
@@ -9,7 +9,7 @@ terraform {
   # all 1.0.x versions.
   #
   # For more information: https://www.terraform.io/docs/language/settings/index.html#specifying-a-required-terraform-version
-  required_version = "= 1.1.9"
+  required_version = "= 1.2.6"
 
   # This layer's state is stored locally and persisted in the git repository.
   backend "local" {}
@@ -19,7 +19,7 @@ terraform {
   required_providers {
     scaleway = {
       source  = "scaleway/scaleway"
-      version = "2.2.1-rc.3"
+      version = "2.2.7"
     }
   }
 }
diff --git a/terraform/layers/bootstrap/terraform.tfstate b/terraform/layers/bootstrap/terraform.tfstate
index 9863672d..db9391d3 100644
--- a/terraform/layers/bootstrap/terraform.tfstate
+++ b/terraform/layers/bootstrap/terraform.tfstate
@@ -1,7 +1,7 @@
 {
   "version": 4,
-  "terraform_version": "1.1.9",
-  "serial": 4,
+  "terraform_version": "1.2.6",
+  "serial": 5,
   "lineage": "891a092d-d945-9809-28a0-4f40f90dbd55",
   "outputs": {},
   "resources": [
@@ -21,7 +21,7 @@
             "id": "fr-par/b4r-whisper-tfstate",
             "lifecycle_rule": [],
             "name": "b4r-whisper-tfstate",
-            "region": null,
+            "region": "fr-par",
             "tags": {},
             "timeouts": null,
             "versioning": [
diff --git a/terraform/layers/gcp-secret-manager/_settings.tf b/terraform/layers/gcp-secret-manager/_settings.tf
index df1fec47..ee6a14b3 100644
--- a/terraform/layers/gcp-secret-manager/_settings.tf
+++ b/terraform/layers/gcp-secret-manager/_settings.tf
@@ -9,7 +9,7 @@ terraform {
   # all 1.0.x versions.
   #
   # For more information: https://www.terraform.io/docs/language/settings/index.html#specifying-a-required-terraform-version
-  required_version = "= 1.1.9"
+  required_version = "= 1.2.6"
 
   # Terraform keeps track of all resources it knows of in its state. This state
   # can be stored remotely in a "backend".
@@ -34,7 +34,7 @@ terraform {
       source  = "hashicorp/google"
       version = "4.31.0"
     }
-    azuread = {
+    google-beta = {
       source  = "hashicorp/google-beta"
       version = "4.31.0"
     }