diff --git a/MODULE.bazel.lock b/MODULE.bazel.lock
index 48b7081a..636418e8 100644
--- a/MODULE.bazel.lock
+++ b/MODULE.bazel.lock
@@ -152,7 +152,7 @@
   "moduleExtensions": {
     "//:non_module_deps.bzl%non_module_deps": {
       "general": {
-        "bzlTransitiveDigest": "ubElDSa5ndCiQaKouep5e8cFs02OL2gZa6XcaFn8LMA=",
+        "bzlTransitiveDigest": "R2I0G7VpA/JD7pO6tH12hw00F91iINkJfRn3vrDE2so=",
         "usagesDigest": "zfnL/SmA7XDGXo53LgkU5djkne78t1HNugCpAtbfc84=",
         "recordedFileInputs": {},
         "recordedDirentsInputs": {},
@@ -209,9 +209,9 @@
             "ruleClassName": "http_archive",
             "attributes": {
               "urls": [
-                "https://releases.hashicorp.com/terraform/0.12.31/terraform_0.12.31_linux_amd64.zip"
+                "https://releases.hashicorp.com/terraform/0.13.7/terraform_0.13.7_linux_amd64.zip"
               ],
-              "sha256": "e5eeba803bc7d8d0cae7ef04ba7c3541c0abd8f9e934a5e3297bf738b31c5c6d",
+              "sha256": "4a52886e019b4fdad2439da5ff43388bbcc6cce9784fde32c53dcd0e28ca9957",
               "build_file": "@@//third_party:terraform.BUILD"
             }
           },
diff --git a/deploy.sh b/deploy.sh
index e103f331..2bfc8e11 100755
--- a/deploy.sh
+++ b/deploy.sh
@@ -209,7 +209,6 @@ terraform {
     bucket = "${TERRAFORM_GCS_BUCKET}"
     prefix = "${TERRAFORM_GCS_PREFIX}"
   }
-  experiments = [variable_validation]
 }
 EOF
   else
diff --git a/non_module_deps.bzl b/non_module_deps.bzl
index f1bb55ea..e24a6cfc 100644
--- a/non_module_deps.bzl
+++ b/non_module_deps.bzl
@@ -47,9 +47,9 @@ def _non_module_deps_impl(ctx):
     http_archive(
         name = "hashicorp_terraform",
         urls = [
-            "https://releases.hashicorp.com/terraform/0.12.31/terraform_0.12.31_linux_amd64.zip",
+            "https://releases.hashicorp.com/terraform/0.13.7/terraform_0.13.7_linux_amd64.zip",
         ],
-        sha256 = "e5eeba803bc7d8d0cae7ef04ba7c3541c0abd8f9e934a5e3297bf738b31c5c6d",
+        sha256 = "4a52886e019b4fdad2439da5ff43388bbcc6cce9784fde32c53dcd0e28ca9957",
         build_file = "//third_party:terraform.BUILD",
     )
     http_archive(
diff --git a/src/bootstrap/cloud/terraform/versions.tf b/src/bootstrap/cloud/terraform/versions.tf
new file mode 100644
index 00000000..695f070e
--- /dev/null
+++ b/src/bootstrap/cloud/terraform/versions.tf
@@ -0,0 +1,8 @@
+terraform {
+  required_providers {
+    google = {
+      source = "hashicorp/google"
+    }
+  }
+  required_version = ">= 0.13"
+}