⬆️[Terraform] Update Terraform providers

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	5.99.1 → 5.100.0
azuread (source)	required_provider	minor	3.4.0 → 3.8.0
azurerm (source)	required_provider	minor	4.32.0 → 4.66.0
github (source)	required_provider	minor	6.6.0 → 6.11.1
google (source)	required_provider	minor	6.38.0 → 6.50.0
google-beta (source)	required_provider	minor	6.38.0 → 6.50.0
scaleway (source)	required_provider	minor	2.55.0 → 2.71.0

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.100.0

Compare Source

NOTES:

• resource/aws_route53_vpc_association_authorization: Because we cannot easily replicate the highly concurrent environments in which these errors have been observed, this fix is best effort and we ask for community help in verifying the reported issues are resolved by this change (#​42948)

FEATURES:

• New Resource: aws_dsql_cluster (#​41868)
• New Resource: aws_dsql_cluster_peering (#​41868)
• New Resource: aws_prometheus_workspace_configuration (#​42478)
• New Resource: aws_s3control_directory_bucket_access_point_scope (#​42338)
• New Resource: aws_vpc_route_server (#​42392)
• New Resource: aws_vpc_route_server_endpoint (#​42392)
• New Resource: aws_vpc_route_server_peer (#​42392)
• New Resource: aws_vpc_route_server_propagation (#​42392)
• New Resource: aws_vpc_route_server_vpc_association (#​42392)
• New Resource: aws_workspacesweb_data_protection_settings (#​42852)
• New Resource: aws_workspacesweb_ip_access_settings (#​42863)
• New Resource: aws_workspacesweb_user_access_logging_settings (#​42868)

ENHANCEMENTS:

• data-source/aws_elb_hosted_zone_id: Add hosted zone ID for ap-east-2 AWS Region (#​42915)
• data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for ap-east-2 AWS Region (#​42915)
• data-source/aws_neptune_engine_version: Add several arguments and attributes to support dynamic selection of versions including latest, has_major_target, preferred_major_targets, and preferred_upgrade_targets (#​42854)
• data-source/aws_s3_bucket: Add hosted zone ID for ap-east-2 AWS Region (#​42915)
• provider: Support ap-east-2 as a valid AWS Region (#​42906)
• resource/aws_fsx_lustre_file_system: Add data_read_cache_configuration and throughput_capacity arguments in support of the Intelligent-Tiering storage class (#​42839)
• resource/aws_pinpointsmsvoicev2_phone_number: Add two_way_channel_role argument (#​42950)
• resource/aws_route53_vpc_association_authorization: Add configurable timeouts for create, read, and delete (#​42948)
• resource/aws_s3_access_point: Add support for S3 Directory Buckets (#​42338)
• resource/aws_s3control_access_point_policy: Add support for S3 Directory Buckets (#​42338)
• resource/aws_vpn_connection: Add preshared_key_storage argument and preshared_key_arn attribute (#​42819)
• resource/aws_wafv2_rule_group: Add statement.asn_match_statement configuration block (#​42965)
• resource/aws_wafv2_web_acl: Add statement.asn_match_statement configuration block (#​42965)

BUG FIXES:

• resource/aws_cloudfrontkeyvaluestore_keys_exclusive: Batch update operations to stay under the Key Value Store Service Quota. The max_batch_size argument can be used to override the default value of 50 items. (#​42795)
• resource/aws_cloudwatch_log_destination: Fix to return the first matched destination name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_group: Fix to return the first matched group name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_metric_filter: Fix to return the first matched filter name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_query_definition: Fix to return the first matched query definition ID during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_resource_policy: Fix to return the first matched policy name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_subscription_filter: Fix to return the first matched filter name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_dynamodb_table: Set new computed value for stream_arn attribute when changing stream_view_type (#​42561)
• resource/aws_neptune_cluster: Enable minor and major version upgrades by fixing various issues preventing them (#​42854)
• resource/aws_neptune_global_cluster: Enable minor and major version upgrades by fixing various issues preventing them (#​42854)
• resource/aws_route53_vpc_association_authorization: Retry InvalidPaginationToken errors on read (#​42948)
• resource/aws_verifiedaccess_endpoint: Fix InvalidParameterValue: The value of loadBalancerOptions.port you provided is not valid errors when creating TCP load balancer endpoints (#​42736)
• resource/aws_vpc_endpoint_subnet_association: Fix OperationInProgress: VpcEndpoint modify operation in progress errors when deleting multiple associations in parallel (#​42884)

hashicorp/terraform-provider-azuread (azuread)

v3.8.0

Compare Source

ENHANCEMENTS:

• dependencies: update go version to 1.25.5 (#​1842)
• dependencies: update go-azure-helpers to v0.76.2 (#​1842)
• dependencies: update go-azure-sdk to v0.20260212.1143955 (#​1842)
• dependencies: update hashicorp/terraform-plugin-sdk/v2 to v2.38.2 (#​1842)
• dependencies: update hashicorp/terraform-plugin-testing to v1.14.0 (#​1842)
• dependencies: update x/crypto to v0.48.0 (#​1842)
• azuread_group - increase default timeout for Create and Update to 30 minutes (#​1541)
• azuread_group_without_members - increase default timeout for Create and Update to 30 minutes (#​1541)

BUG FIXES:

• azuread_group - add a deadline to the context used in the CustomizeDiff (#​1541)
• azuread_group_without_members - add a deadline to the context used in the CustomizeDiff (#​1541)
• azuread_group_role_management_policy - added Eventual Consistency check to avoid misreporting not found during create (#​1836)
• azuread_invitation - added Eventual Consistency check to avoid misreporting not found during create (#​1844)
• azuread_privileged_access_group_assignment_schedule - added Eventual Consistency check to avoid misreporting not found during create (#​1845)

v3.7.0

Compare Source

FEATURES:

• New Resource: azuread_flexible_federated_identity_credential (#​1788)

EHANCEMENTS:

• Dependencies: go-azure-sdk updated to v0.20251029.1173336 (#​1787)
• Dependencies: Go updated to v1.25.3 (#​1792)

BUG FIXES:

• azuread_application - allow retry on 409 Conflict during creation (#​1768)
• azuread_conditional_access_policy - add support for the authentication_flow_transfer_methods property (#​1796)
• azuread_group_role_management_policy - fix update for activation_rule.required_conditional_access_authentication_context (#​1783)

v3.6.0

Compare Source

ENHANCEMENTS:

• data.azuread_named_location - add support for the object_id property (#​1703)
• azuread_named_location - add support for the object_id property (#​1703)

BUG FIXES:

• data.azuread_users - queries that return multiple users with the same mail nickname no longer causes an error (#​1762)

v3.5.0

Compare Source

ENHANCEMENTS:

• azuread_conditional_access_policy - add support for the client_applications.filter property (#​1744)

BUG FIXES:

• azuread_conditional_access_policy - fix support for everyTime restrictions in session_controls request payload (#​1719)

hashicorp/terraform-provider-azurerm (azurerm)

v4.66.0

Compare Source

FEATURES:

• New Data Source: azurerm_container_app_environment_storage (#​32007)
• New List Resource: azurerm_video_indexer_account (#​31978)

ENHANCEMENTS:

• dependencies: Go - upgrade to version 1.25.8 (#​31907)
• azurerm_bastion_host - Upgrade API to 2025-01-01 (#​32030)
• azurerm_kubernetes_cluster - add support for migration from Azure or Kubenet CNI to Azure CNI Overlay (#​30959)
• azurerm_search_service: add support for endpoint attribute (#​32010)
• cognitive_account_rai_blocklist_resource - add support for the tags property (#​31871)

BUG FIXES:

• azurerm_container_app - fix failure_count_threshold validation values for container app probes (#​31989)
• azurerm_linux_function_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)
• azurerm_linux_web_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)
• azurerm_log_analytics_workspace - preserve default value of local_authentication_enabled (#​32004)
• azurerm_windows_function_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)
• azurerm_windows_web_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)

v4.65.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260312.1165223
• azurerm_federated_identity_credential - the parent_id property has been renamed to user_assigned_identity_id (#​31921)

BUG FIXES:

• azurerm_kubernetes_cluster_node_pool - max_surge and max_unavailable are no longer required for spot node pools (#​31129)
• azurerm_log_analytics_workspace_table - fix validation for basic plan (#​30925)
• azurerm_managed_disk - fix nil pointer dereference when updating disk_access_id (#​31955)

v4.64.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_account_customer_managed_key (#​31805) (#​31805)

ENHANCEMENTS:

• dependencies: containerservice - partial upgrade to API version 2025-03-01 (#​31838)
• dependencies: containerservice - partial upgrade to API version 2025-10-01 (#​31401)
• dependencies: paloalto - update to API version 2025-10-08 (#​31570)
• Data Source: azurerm_kubernetes_cluster - export the bootstrap_profile and network_profile.outbound_type attributes (#​30983)
• azurerm_subnet - add support for the PureStorage.Block/storagePools value in the delegation.service_delegation.name property (#​31878)
• azurerm_virtual_network - add support for the PureStorage.Block/storagePools value in the subnet.delegation.service_delegation.name property (#​31878)

BUG FIXES:

• azurerm_purview_account - use correct API values for identity type (#​31905) (#​31905)
• azurerm_recovery_services_vault - skip request to modify soft delete state for vaults that are currently set to AlwaysON due to Azure's new secure-by-default policy
• azurerm_resource_provider_registration - add additional polling logic to prevent errors due to inconsistent API behaviour (#​31909)

v4.63.0

Compare Source

FEATURES:

• provider: added the enhanced_validation block with the locations and resource_providers properties to replace the ARM_PROVIDER_ENHANCED_VALIDATION environment variable (#​31678)

ENHANCEMENTS:

• azurerm_site_recovery_replicated_vm- add support for PremiumV2_LRS in the target_replica_disk_type property (#​31890)

BUG FIXES:

• azurerm_analysis_services_server - fix an issue that prevented creation of the resource with power_bi_service_enabled set to false and one or more ipv4_firewall_rule blocks defined (#​31870)
• azurerm_analysis_services_server - fix an issue that prevented adding or removing ipv4_firewall_rule blocks without also modifying power_bi_service_enabled (#​31870)
• azurerm_linux_web_app, azurerm_windows_web_app, azurerm_windows_function_app, azurerm_linux_function_app, azurerm_function_app_flex_consumption - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice (#​31821) (#​31821)
• dependencies: dataprotection - downgrade to API version 2025-07-01 due to new validation introduced by Azure on 2025-09-01 that is blocking deployments (#​31877)

v4.62.1

Compare Source

BUG FIXES:

• azurerm_data_factory - fix removal of customer_managed_key_identity_id to no longer send an empty string to Azure, instead sending an empty object (#​31858)
• azurerm_data_factory_customer_managed_key - fix a persistent ID parsing error on user_assigned_identity_id when Azure returned an empty string (#​31858)
• azurerm_data_factory_customer_managed_key - fix removal of user_assigned_identity_id to no longer send an empty string to Azure, instead sending an empty object (#​31858)
• azurerm_linux_function_app_slot - fix an issue that prevented users from deploying a slot to a container-based function app (#​31842)

v4.62.0

Compare Source

FEATURES:

• New List Resource: azurerm_network_ddos_protection_plan (#​31768)
• New List Resource: azurerm_private_dns_a_record (#​31785)
• New List Resource: azurerm_private_endpoint (#​31769)
• New List Resource: azurerm_redis_cache (#​31770)
• New List Resource: azurerm_redis_firewall_rule (#​31770)
• New List Resource: azurerm_route (#​31760)
• New List Resource: azurerm_mssql_elasticpool (#​31736)
• New List Resource: azurerm_mssql_virtual_machine (#​31737)

ENHANCEMENTS:

• dependencies: databricks - update to API version 2026-01-01 (#​31654)
• dependencies: dataprotection - update to API version 2025-09-01 (#​31402)
• azurerm_dashboard_grafana - add support for the 12 value in the grafana_major_version property and remove the deprecated 10 value (#​31653)
• azurerm_linux_function_app - add support for 25 in the java_version property (#​31096)
• azurerm_linux_web_app - add support for 3.14 in the python_version property (#​31826)
• azurerm_linux_web_app - add support for 25 in the java_version property (#​31096)
• azurerm_linux_web_app_slot - add support for 3.14 in the python_version property (#​31826)
• azurerm_windows_function_app - add support for 25 in the java_version property (#​31096)
• azurerm_windows_web_app - add support for 25 in the java_version property (#​31096)

BUG FIXES:

• azurerm_container_app_job - fix an issue where template.container.startup_probe.initial_delay and template.container.readiness_probe.initial_delay were not set in the API request (#​31796)

v4.61.0

Compare Source

FEATURES:

• New List Resource: azurerm_application_gateway (#​31749)
• New List Resource: azurerm_application_security_group (#​31742)
• New List Resource: azurerm_firewall and azurerm_firewall_policy (#​31734)
• New List Resource: azurerm_firewall_policy_rule_collection_group (#​31741)
• New List Resource: azurerm_ip_group (#​31740)
• New List Resource: azurerm_mssql_database (#​31735)
• New List Resource: azurerm_mssql_job_agent (#​31738)
• New List Resource: azurerm_mssql_server (#​31650)
• New List Resource: azurerm_nat_gatway (#​31764)
• New List Resource: azurerm_network_security_rule (#​31748)
• New List Resource: azurerm_public_ip (#​31762)
• New List Resource: azurerm_web_application_firewall_policy (#​31758)

ENHANCEMENTS:

• dependencies: go update to 1.25.5
• dependencies: go-azure-sdk - update to v0.20260212.1143955
• azurerm_managed_redis - sku_name can now be updated (#​31203)
• azurerm_managed_redis - default_database must be specified when creating a new resource (#​31724)
• azurerm_point_to_site_vpn_gateway - connection_configuration.x.internet_security_enabled can now be updated (#​31733)
• azurerm_security_center_storage_defender - update to API version 2025-06-01 (#​31759)

BUG FIXES:

• azurerm_managed_redis_geo_replication - fix an issue that prevented linking 3 or more clusters (#​31385)
• azurerm_signalr_service - fix setting default values into state, preventing diffs on import for connectivity_logs_enabled, http_request_logs_enabled, and messaging_logs_enabled (#​31566)

v4.60.0

Compare Source

FEATURES:

• New Data Source: azurerm_cognitive_account_project (#​31605)
• New Data Source: azurerm_managed_redis_access_policy_assignment (#​30980)
• New Data Source: azurerm_oracle_database_system_versions (#​31001)
• New Resource: azurerm_api_management_workspace_named_value (#​31299)
• New List Resource: azurerm_cognitive_account (#​31624)
• New Resource: azurerm_data_factory_linked_service_sql_managed_instance (#​30896)
• New Resource: azurerm_managed_redis_access_policy_assignment (#​30980)
• New List Resource: azurerm_mysql_flexible_database, azurerm_mysql_flexible_server_firewall_rule, azurerm_mysql_flexible_server_configuration - includes addition of Identity (#​31646) (#​31646)
• New List Resource: azurerm_service_plan (#​31610)

ENHANCEMENTS:

• dependencies: containerinstance - update to API version 2025-09-01 (#​31640)
• dependencies: storagemover - update to API version 2025-07-01 (#​31587)
• Data Source: azurerm_container_app - add support for the read_secrets property allowing users to skip secret retrieval that may trigger authorization errors (#​31199)
• azurerm_application_gateway - add support for 2.2 to waf_configuration.rule_set_version (#​31674)
• azurerm_application_gateway - add support for MS-ThreatIntel-XSS to waf_configuration.disabled_rule_group.rule_group_name (#​31674)
• azurerm_express_route_port - add support for GcmAesXpn128 and GcmAesXpn256 ciphers to link*.macsec_cipher (#​30240)
• azurerm_postgresql_flexible_server - add support for cluster (#​31315)
• azurerm_web_application_firewall_policy - add support for 2.2 to managed_rules.managed_rule_set.version and managed_rules.exclusion.excluded_rule_set.version (#​31674)
• azurerm_web_application_firewall_policy - add support for MS-ThreatIntel-XSS to managed_rules.managed_rule_set.rule_group_override.rule_group_name and managed_rules.exclusion.excluded_rule_set.rule_group.rule_group_name (#​31674)
• provider: the subscription_id property can now be populated based on the az CLI (#​30251)

BUG FIXES:

• azurerm_express_route_port - fix an issue that caused identity to be removed when updating unrelated properties (#​30240)
• azurerm_federated_identity_credential - the id is now built using the resource group name segment from the parent_id preventing unexpected 404 statuses (#​30860)
• azurerm_kubernetes_cluster - fixed capacity_reservation_group_id loss during node pool cycling (#​30654)
• azurerm_monitor_aad_diagnostic_setting - add polling as a workaround to an eventual consistency issue (#​31123)
• list.azurerm_private_dns_zone - fix context handling resolving an issue where this list resources never returned results (#​31719)

v4.59.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260129.1200123 (#​31621)
• azurerm_automation_runbook - add support for the runtime_environment_name property (#​30992)
• azurerm_kusto_eventgrid_data_connection - update validation for eventhub_consumer_group_name to allow $Default as input (#​31551)
• azurerm_linux_function_app - add support for 3.14 to site_config.application_stack.python_version (#​31195)
• azurerm_linux_function_app_slot - add support for 3.14 to site_config.application_stack.python_version (#​31195)
• azurerm_netapp_volume_group_sap_hana_resource - add support for zone, encryption_key_source, key_vault_private_endpoint_id, and network_features (#​31603)
• azurerm_user_assigned_identity - add support for the isolation_scope property (#​31216)

BUG FIXES:

• azurerm_kubernetes_cluster - thenetwork_policy property now allows updating from calico to cilium (#​31627)
• azurerm_logic_app_trigger_http_request - fix an issue that prevented importing existing resources due to empty trigger inputs (#​31433)
• azurerm_mssql_database - fix validation for min_capacity and auto_pause_delay_in_minutes (#​31690)

v4.58.0

Compare Source

FEATURES:

• New Data Source: azurerm_network_security_perimeter (#​31356)
• New Data Source: azurerm_network_security_perimeter_profile (#​31356)
• New Resource: azurerm_network_security_perimeter (#​31356)
• New Resource: azurerm_network_security_perimeter_access_rule (#​31356)
• New Resource: azurerm_network_security_perimeter_association (#​31356)
• New Resource: azurerm_network_security_perimeter_profile (#​31356)
• New List Resource: azurerm_resource_group (#​31270)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20251219.1184026 (#​31397)
• azurerm_backup_policy_file_share - add support for backup_tier and snapshot_retention_in_days (#​29243)
• azurerm_cosmosdb_cassandra_cluster - version now supports 4.1 and 5.0 (#​31424)
• azurerm_function_app_flex_consumption - the maximum_instance_count property now allows values from 1 - 1000 (#​31392)
• azurerm_kubernetes_cluster - network_data_plane and network_policy now support updating to cilium (#​30958)
• azurerm_kusto_eventhub_data_connection - add support for retrieval_start_date (#​31445)
• azurerm_kusto_iothub_data_connection - add support for retrieval_start_date (#​31413)
• azurerm_kusto_script - add support for script_level and principal_permissions_action (#​31403)
• azurerm_linux_function_app - add support for 24 to site_config.application_stack.node_version (#​31098)
• azurerm_linux_function_app_slot - add support for 24 to site_config.application_stack.node_version (#​31098)
• azurerm_linux_web_app - add support for 24-lts to site_config.application_stack.node_version (#​31098)
• azurerm_linux_web_app_slot - add support for 24-lts to site_config.application_stack.node_version (#​31098)
• azurerm_mssql_managed_instance - increase storage_size_in_gb maximum to 32768 (#​31387)
• azurerm_netapp_volume_group_oracle - service_level now supports Flexible (#​31508)
• azurerm_netapp_volume_group_sap_hana - service_level now supports Flexible (#​31508)
• azurerm_network_manager_routing_configuration - add support for the route_table_usage_mode property (#​31463)
• azurerm_windows_function_app - add support for ~24 to site_config.application_stack.node_version (#​31248)
• azurerm_windows_function_app_slot - add support for ~24 to site_config.application_stack.node_version (#​31248)
• data.azurerm_container_registry - admin_password is now sensitive (#​31428)

BUG FIXES:

• azurerm_api_management - fix an issue that prevented updates to hostname_configuration.*.key_vault_certificate_id (#​31534)
• azurerm_api_management_custom_domain - fix an issue that prevented updates to [management|portal|developer_portal|scm|gateway].key_vault_certificate_id (#​31534)
• azurerm_container_app_custom_domain - no longer error during read when container app is deleted outside of Terraform (#​31523)
• azurerm_databricks_workspace - removed a legacy workaround that prevented apply operations from succeeding when managed_disk_cmk_rotation_to_latest_version_enabled and tags were updated simultaneously (#​31509)
• azurerm_storage_account - can now update a Storage Standard ZRS account (#​31431)
• clients - fix correlation id across many clients (#​31368)

v4.57.0

Compare Source

NOTE: This release removes the Mobile Network (azurerm_mobile_network*) resources and data sources due to Azure having retired the service

FEATURES:

• New Resource: azurerm_automation_runtime_environment (#​30991)

ENHANCEMENTS:

• azurerm_data_protection_backup_vault_customer_managed_key - the key_vault_key_id property now supports keys from a Managed HSM vault (#​31365)
• azurerm_kubernetes_cluster - support for the node_provisioning_profile block (#​30517)
• azurerm_log_analytics_cluster_customer_managed_key - the key_vault_key_id property now supports keys from a Managed HSM vault (#​31375)
• azurerm_mssql_database - the transparent_data_encryption_key_vault_key_id property now supports keys from a Managed HSM vault (#​31373)

BUG FIXES:

• azurerm_data_factory - fix ID parsing errors when customer_managed_key_identity_id is an empty string (#​28621)
• azurerm_eventhub - partition_count can now be updated for dedicated clusters (#​30993)
• azurerm_linux_function_app - fix panic when deployed without all required permissions (#​31344)

v4.56.0

Compare Source

ENHANCEMENTS:

• dependencies: healthbot - update to API version 2025-05-25 (#​31328)
• dependencies: terraform-plugin-testing - update to v1.14.0 (#​31334)
• Data Source: azurerm_cognitive_account - add support for new attributes (#​30778)
• azurerm_cognitive_account - add support for the kind property to rollback or upgrade from OpenAI to AIServices (#​31063)
• azurerm_databricks_workspace_root_dbfs_customer_managed_key - the key_vault_key_id property now supports keys from Managed HSM Vaults (#​31336)
• azurerm_databricks_workspace_root_dbfs_customer_managed_key - the key_vault_key_id property now supports versionless keys (#​31336)
• azurerm_healthbot - add support for the C1 and PES SKUs (#​31328)
• azurerm_lb fix ignore_changes behaviour in updatable properties (#​31318)
• azurerm_network_manager_network_group - add support for the member_type property [GH-30672
• azurerm_network_manager_static_member - add support for using a subnet as the target resource (#​30672)
• azurerm_virtual_network_gateway - add support for the ErGwScale SKU (#​31082)

BUG FIXES:

• azurerm_container_app_environment_certificate - fix an issue that prevented creating the resource with an empty value for certificate_password (#​31335)
• azurerm_databricks_workspace_root_dbfs_customer_managed_key - fix a panic that occurred when the customer managed key was removed from the workspace outside of Terraform (#​31336)
• azurerm_databricks_workspace_root_dbfs_customer_managed_key - fix the timeout for the delete operation (#​31336)
• azurerm_storage_blob_inventory_policy - fix setting Resource Identity data (#​31313)

v4.55.0

Compare Source

FEATURES:

• New Data Source: azurerm_api_management_workspace (#​30241)
• New Resource: azurerm_cognitive_account_project (#​30916)
• New Resource: azurerm_log_analytics_workspace_table_custom_log (#​30800)
• New Resource: azurerm_mongo_cluster_user (#​31205)
• New Resource: azurerm_palo_alto_next_generation_firewall_virtual_hub_strata_cloud_manager (#​30613)
• New Resource: azurerm_palo_alto_next_generation_firewall_virtual_network_strata_cloud_manager (#​30613)
• New List Resource: azurerm_private_dns_zone (#​31157)

ENHANCEMENTS:

• dependencies: containerregistry - update to API version 2025-04-01 (#​30205)
• dependencies: go-azure-helpers - update to v0.75.1 (#​31148)
• dependencies: go-azure-sdk - update to v0.20251202.1181053 (#​31253)
• dependencies: managedidentity - upgrade API version to 2024-11-30 (#​30535)
• dependencies: postgres - update to API version 2025-08-01 (#​31162)
• azurerm_cognitive_account - update validation for customer_managed_key.key_vault_key_id to allow managed HSM keys as input (#​31147)
• azurerm_container_app_environment - extend validation for workload_profile_type for additional supported SKUs (#​30738)
• azurerm_container_app_environment_certificate - add support for the certificate_key_vault block (#​30510)
• azurerm_data_factory - update validation for customer_managed_key_id to allow managed HSM keys as input (#​31146)
• azurerm_mongo_cluster - support for new properties customer_managed_key, data_api_mode_enabled, identity, restore, authentication_methods and storage_type (#​31100)
• azurerm_mysql_flexible_server - add support for MySQL version 8.4 (#​31099)
• azurerm_oracle_autonomous_database - the admin_password property is no longer ForceNew (#​30966)
• azurerm_postgresql_flexible_server - update validation for customer_managed_key.key_vault_key_id and customer_managed_key.geo_backup_key_vault_key_id to allow managed HSM keys as input (#​31148)
• azurerm_postgresql_flexible_server - add support for PostgreSQL version 18 (#​31162)
• azurerm_storage_encryption_scope - update validation for key_vault_key_id to allow managed HSM keys as input (#​31145)

BUG FIXES:

• Data Source: azurerm_ssh_public_key - fix normalisation for public_key to avoid removing a literal EOT from the base64 encoded content (#​31249)
• azurerm_data_protection_backup_vault - poll delete request for completion (#​31202)
• azurerm_function_app_hybrid_connection - remove validation preventing resource import when using an elastic service plan SKU (#​31134)
• azurerm_key_vault_key - not_before_date and expiration_date are now set into state when empty, fixing an issue where drift was not detected (#​31192)
• azurerm_key_vault_secret - not_before_date and expiration_date are now set into state when empty, fi

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.