chore(deps): update terraform providers and tflint plugins

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azapi (source)	required_provider	minor	~> 2.7.0 -> ~> 2.8.0
azurerm (source)	required_provider	minor	~> 4.54.0 -> ~> 4.55.0
cloudflare (source)	required_provider	minor	~> 5.13.0 -> ~> 5.14.0
time (source)	required_provider	patch	0.13.0 -> 0.13.1

---

Release Notes

Azure/terraform-provider-azapi (azapi)

v2.8.0

Compare Source

FEATURES:

• New Provider Function: snake2camel
• New Action: azapi_resource_action - Perform stateless actions on Azure resources that can be invoked via Terraform action triggers

ENHANCEMENTS:

• azapi_resource resource: Add support for identity-based import, enabling import via resource ID and type from list resource protocol.
• azapi_resource resource: Support listing resources via new ListResource protocol.
• azapi_resource resource: Support listing all resources in a resource group when type is omitted. Uses ARM API /subscriptions/{sub}/resourceGroups/{rg}/resources to enumerate all resources.
• azapi_resource resource: Refactor import logic to support identity block and multiple import scenarios (ID only, ID with API version, ID and type).
• azapi_data_plane_resource resource: Adds a customization layer which allows custom CRUD operations for resources that don't follow standard patterns.
• azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/keys type.
• azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/secrets type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/datasources type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexers type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexes type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/skillsets type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/synonymmaps type.
• Bump Go version to 1.24.6 to address CVEs (GH-992).
• Add more verified azapi examples.
• Update bicep types to ms-henglu/bicep-types-az@c41a40c

BUG FIXES:

• Fix validation logic for properties that are both ReadOnly and Required.
• Fix panic when using sensitive_body_version with empty sensitive_body (GH-999).
• Fix azapi_resource resource move from azurerm_storage_share by converting /fileshares/ to /shares/ in resource ID.

hashicorp/terraform-provider-azurerm (azurerm)

v4.55.0

Compare Source

FEATURES:

• New Data Source: azurerm_api_management_workspace (#​30241)
• New Resource: azurerm_cognitive_account_project (#​30916)
• New Resource: azurerm_log_analytics_workspace_table_custom_log (#​30800)
• New Resource: azurerm_mongo_cluster_user (#​31205)
• New Resource: azurerm_palo_alto_next_generation_firewall_virtual_hub_strata_cloud_manager (#​30613)
• New Resource: azurerm_palo_alto_next_generation_firewall_virtual_network_strata_cloud_manager (#​30613)
• New List Resource: azurerm_private_dns_zone (#​31157)

ENHANCEMENTS:

• dependencies: containerregistry - update to API version 2025-04-01 (#​30205)
• dependencies: go-azure-helpers - update to v0.75.1 (#​31148)
• dependencies: go-azure-sdk - update to v0.20251202.1181053 (#​31253)
• dependencies: managedidentity - upgrade API version to 2024-11-30 (#​30535)
• dependencies: postgres - update to API version 2025-08-01 (#​31162)
• azurerm_cognitive_account - update validation for customer_managed_key.key_vault_key_id to allow managed HSM keys as input (#​31147)
• azurerm_container_app_environment - extend validation for workload_profile_type for additional supported SKUs (#​30738)
• azurerm_container_app_environment_certificate - add support for the certificate_key_vault block (#​30510)
• azurerm_data_factory - update validation for customer_managed_key_id to allow managed HSM keys as input (#​31146)
• azurerm_mongo_cluster - support for new properties customer_managed_key, data_api_mode_enabled, identity, restore, authentication_methods and storage_type (#​31100)
• azurerm_mysql_flexible_server - add support for MySQL version 8.4 (#​31099)
• azurerm_oracle_autonomous_database - the admin_password property is no longer ForceNew (#​30966)
• azurerm_postgresql_flexible_server - update validation for customer_managed_key.key_vault_key_id and customer_managed_key.geo_backup_key_vault_key_id to allow managed HSM keys as input (#​31148)
• azurerm_postgresql_flexible_server - add support for PostgreSQL version 18 (#​31162)
• azurerm_storage_encryption_scope - update validation for key_vault_key_id to allow managed HSM keys as input (#​31145)

BUG FIXES:

• Data Source: azurerm_ssh_public_key - fix normalisation for public_key to avoid removing a literal EOT from the base64 encoded content (#​31249)
• azurerm_data_protection_backup_vault - poll delete request for completion (#​31202)
• azurerm_function_app_hybrid_connection - remove validation preventing resource import when using an elastic service plan SKU (#​31134)
• azurerm_key_vault_key - not_before_date and expiration_date are now set into state when empty, fixing an issue where drift was not detected (#​31192)
• azurerm_key_vault_secret - not_before_date and expiration_date are now set into state when empty, fixing an issue where drift was not detected (#​31192)
• azurerm_kubernetes_cluster - fix drift on azure_policy_enabled when updating cluster (#​30917)
• azurerm_kubernetes_fleet_update_run - fix a nil pointer dereference to prevent panics (#​31213)
• azurerm_lb_nat_rule - fix an issue that prevented changing floating_ip_enabled and tcp_reset_enabled from true to false (#​31244)
• azurerm_lb_outbound_rule - fix an issue that prevented changing tcp_reset_enabled from true to false (#​31244)
• azurerm_lb_rule - fix an issue that prevented changing floating_ip_enabled and tcp_reset_enabled from true to false (#​31244)
• azurerm_private_endpoint - ensure Resource Identity data is set on create to avoid Missing Resource Identity After Create errors (#​31246)
• azurerm_resource_group - fix poller for the prevent_deletion_if_contains_resources feature, resolving an Azure eventual consistency issue (#​31253)
• azurerm_storage_account - ensure Resource Identity data is set on create to avoid Missing Resource Identity After Create errors (#​31246)
• azurerm_traffic_manager_profile - fix an issue that prevented changing traffic_view_enabled from true to false (#​31066)

cloudflare/terraform-provider-cloudflare (cloudflare)

v5.14.0

Compare Source

Full Changelog: v5.13.0...v5.14.0

Features

• add v4->v5 migration tests for pages_project and adjust schema (#​6506) (6de0179)
• chore: point Terraform to Go 'next' (af9a5f8)
• chore: update go sdk to v6.4.0 for provider release (63cb021)
• chore(api_shield_discovery_operation): Deprecate api_shield_discovery_operation (7dc0a63)
• feat: BOTS-7562 add bot management feedback endpoints to stainless config (prod) (f5112e1)
• feat(r2_data_catalog): Configure SDKs/Terraform to use R2 Data Catalog routes (5beb50b)
• feat(radar): Add origins endpoints to public api docs (ee51e5f)
• improve and standardize sweepers (#​6501) (03fb2d2)

Bug Fixes

• account_members: making member policies a set (#​6488) (f3ecaa5)
• decoder and tests (#​6516) (4c3e2db)
• decoder, build (#​6514) (1935459)
• pages_project: non empty refresh plans (#​6515) (bc526ff)
• pages_project: use correct field name in test sweeper (6dc0e53)
• r2 sweeper (#​6512) (fec953c)
• tests: resolve SDK v6 migration test failures (#​6507) (bad9716)
• update import signature to accept account_id/subscription_id in order to import account subscription (#​6510) (c2db582)
• utils: test assertions (4c3e2db)
• workers_kv: ignore value import state verify (#​6521) (c3e3f89)
• workers_script: No longer treating the migrations attribute as WriteOnly (#​6489) (dc60e38)
• workers_script: resource drift when worker has unmanaged secret (#​6504) (505c0fe)
• zero_trust_device_posture_rule: preserve input.version and other fields (#​6500) (4c4e54b)
• zero_trust_device_posture_rule: preserve input.version and other fields (#​6503) (d45be9a)
• zero_trust_dlp_custom_profile: add sweepers for dlp_custom_profile (cbcb325)
• zone_subscription|account_subscription: add partners_ent as valid enum for rate_plan.id (#​6505) (2a70fb4)
• zone: datasource model schema parity (#​6487) (861c68f)

Chores

• account_member: dont run acceptance with env variable (4c3e2db)
• account_member: fix check for env var (#​6517) (07e9aa5)
• account_member: skip until user is dsr enabled (#​6522) (dd7c2fe)
• account_tokens: adding a simple CRUD test (#​6484) (6869538)
• api: update composite API spec (71fc050)
• api: update composite API spec (68d017a)
• cloudflare_api_shield_operation: Add acceptance tests (#​6491) (37e1fdf)
• docs: update documentation (#​6523) (a060e61)
• internal: codegen related update (923ea1d)
• internal: codegen related update (a110cbe)
• internal: codegen related update (7b36c06)
• internal: codegen related update (c789f91)
• internal: codegen related update (a91faa6)
• internal: codegen related update (dfa745a)
• internal: codegen related update (fb3ef1b)
• internal: codegen related update (504e8b6)
• internal: codegen related update (550d77c)
• logpush_job: add v4 to v5 migration tests (#​6483) (2e4b8a0)
• tests: cloud connector rules parity tests and add connectivity_directory_service tests (#​6513) (5341c82)
• update changelog (#​6480) (adba156)
• update changelog (#​6525) (b026b4d)
• zero_trust_device_default_profile_local_domain_fallback: add tests (#​6464) (365cb71)
• zero_trust_device_default|custom_profile: acceptance test coverage (#​6511) (8e4ec1a)
• zero_trust_device_managed_networks: add tests (#​6463) (e9b6783)
• zero_trust_device_posture_integration: update tests for to test with Crowdstrike (#​6470) (e360d6f)
• zone: update migration tests (#​6468) (8ff53df)

hashicorp/terraform-provider-time (time)

v0.13.1

Compare Source

NOTES:

• Update dependencies (#​410)

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Package	Line Rate	Branch Rate	Health
TShort.Api	76%	63%	✔
TShort.Contracts	100%	100%	✔
TShort.ServiceDefaults	89%	88%	✔
Summary	78% (539 / 694)	66% (166 / 252)	✔