release: 5.8.3

.gitignore

@@ -2,4 +2,6 @@
 dist/
 terraform-provider-cloudflare
 go.work*
-.DS_Store
+.DS_Store
+.idea/
+bin/

.grit/patterns/cloudflare_terraform_v5_attribute_renames_configuration.grit

@@ -50,6 +50,45 @@ pattern cloudflare_terraform_v5_attribute_renames_configuration() {
         }
     },
 
+    //cloudflare_notification_policy
+    `resource "cloudflare_notification_policy" $_ { $body }` where {
+
+      $body <: contains any {
+        `webhooks_integration = $webhooks` => ``,
+        `pagerduty_integration = $pagerduty` => ``,
+        `email_integration = $email` => ``,
+      },
+      $integrations = "",
+      //Check if the variable is null before adding to the integrations
+      if (!$webhooks <: .) {
+        $integrations += `webhooks = $webhooks
+      `,
+      },
+      if (!$pagerduty <: .) {
+        $integrations += `pagerduty = $pagerduty
+      `,
+      },
+      if (!$email <: .) {
+        $integrations += `email = $email
+      `,
+      },
+
+      $body => `$body mechanisms = {
+        $integrations
+      }`,
+    },
+
+     // cloudflare_ruleset
+    `resource "cloudflare_ruleset" $_ { $body }` where {
+        $body <: any {
+          contains bubble `rules = $rules` where {
+            $rules <: contains bubble `action_parameters = $action_parameters` where {
+                $action_parameters <: contains bubble `rules = { $ruleset_id = $rule_id}` => `rules = { $ruleset_id = [$rule_id]}`,
+            }
+          },
+        }
+    },
+
     // cloudflare_teams_list & cloudflare_zero_trust_list
     `items = [$items]` as $all_items where {
         $values = [],

.grit/patterns/cloudflare_terraform_v5_attribute_renames_state.grit

@@ -155,7 +155,6 @@ pattern cloudflare_terraform_v5_attribute_renames_state() {
             contains `"plan": $_` => .
         }
     },
-
     // cloudflare_access_policy & cloudflare_zero_trust_access_group
     `{ $..., "mode": "managed", "type": "$resource_type", $..., "instances":[$instances] }` where {
         $resource_type <: contains `cloudflare_access_policy`,
@@ -222,5 +221,18 @@ pattern cloudflare_terraform_v5_attribute_renames_state() {
           contains `"min_days_for_renewal": $_` => .
         }
     },
+    // cloudflare_page_rule
+    `{ $..., "mode": "managed", "type": "$resource_type", $..., "instances":[$instances] }` where {
+        $resource_type <: contains `cloudflare_page_rule`,
+        $instances <: any {
+            contains `""` => `null`,
+            contains `[]` => `null`,
+            contains `false` => `null`,
+            contains `0` => `null`,
+            contains `"forwarding_url": []` => `"forwarding_url": null`,
+            contains `"forwarding_url": [{"status_code": $status_code, "url": $url}]` => `"forwarding_url": {"status_code": $status_code, "url": $url}`,
+            contains `"actions": [$action]` => `"actions": $action`
+        }
+    }
   }
 }

.release-please-manifest.json

@@ -1,3 +1,3 @@
 {
-  ".": "5.8.2"
+  ".": "5.8.3"
 }

.stats.yml

@@ -1,4 +1,4 @@
-configured_endpoints: 1783
-openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-e408a7cdec2dae3d1a18842dcc59280c56050fb042569139aec3fe0f12e0d461.yml
-openapi_spec_hash: 7e210c76f5dd4c79b3e67204ad279b81
-config_hash: a433f3793b734bc6fcc9d9e0c27ff8c2
+configured_endpoints: 1793
+openapi_spec_url: https://storage.googleapis.com/stainless-sdk-openapi-specs/cloudflare%2Fcloudflare-bf6dcd562e592c1c6d992e04b39d5b372e2a7cb4d3fdcad23e483e21389bd3aa.yml
+openapi_spec_hash: 8b8da2355d909906fe7af3bc6f507487
+config_hash: de4c81cee29cd7dd907279e8916b334f

CHANGELOG.md

@@ -1,5 +1,77 @@
 # Changelog
 
+## 5.8.3 (2025-08-13)
+
+Full Changelog: [v5.8.2...v5.8.3](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.2...v5.8.3)
+
+### Features
+
+* **api:** api update ([23eb89c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/23eb89ca43852af44e8d79ef33d2e67a20ab8f87))
+* **api:** api update ([57928dc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/57928dc81531d22e4474e9c10bf1f061266d1915))
+* **api:** api update ([3351a79](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3351a79400fc48efb8e004a74128c8eb6edc4466))
+* **api:** api update ([b1afd55](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b1afd55b64af81794cc72cb29c1ee30b6a3663eb))
+* **api:** api update ([aa5ac4d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/aa5ac4da877a5503c11aed8077351428c24153d0))
+* **api:** api update ([01bea92](https://github.com/cloudflare/terraform-provider-cloudflare/commit/01bea92e8874a836992693794b022db3187ab430))
+* **api:** api update ([5bf6360](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5bf6360e1972846b86c0d588fef10c2b3a7cc806))
+* **api:** api update ([698d90c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/698d90c0c97a5d555e78fb81aa0f8e4f413fba3b))
+* **api:** api update ([c9f96d3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c9f96d310305fbe7105ac1e6b996417eebbbca40))
+* **api:** api update ([f5ee559](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f5ee559e8db0884c4a8705756961a2ab380192ae))
+* **api:** api update ([2568efa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2568efa9b5e008964da1f519d98cb56fa0f5af31))
+* **api:** api update ([5afa7cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5afa7cb54445617490fd798ec1731cd02fd0470b))
+* **api:** api update ([7cd55d3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7cd55d34af5aec6d0b88b8572fb2ecae7f421691))
+* **api:** api update ([f1b07f6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f1b07f6af7621fe960e6996c50c0ed4c09a4a283))
+* **api:** api update ([0e1f55c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0e1f55cf54afc04d042c688b28c1719cd61fd5ed))
+* **api:** api update ([535c250](https://github.com/cloudflare/terraform-provider-cloudflare/commit/535c25089d2dd37a8cc7a8fde5d61616d7217687))
+* **api:** api update ([dda8106](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dda8106bb8308f171928ad5ba0fa36198c19fed7))
+* **api:** api update ([8a030f5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8a030f53dfb43c3ca40e8e8f3c49b674eccebfdb))
+* **apijson:** add `decode_null_to_zero` tag option ([71538e5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/71538e50970a1fd7a27bdba5ed1e285eaefcefcc))
+* **apijson:** move changes to new `apijsoncustom` package ([f5b955b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f5b955bf49c9c9db58e77bf45fca01e121c67058))
+* ensure `internal/apiform` encoder can handle "force_encode" serialization tag ([0d8e9ee](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0d8e9ee977b967ba2477009ebee6dc9e4a7313a8))
+* ensure `internal/apiform` encoder can handle "force_encode" serialization tag ([840ee94](https://github.com/cloudflare/terraform-provider-cloudflare/commit/840ee944af524f0e9c4cc4d44e86519b4bfc1f24))
+
+
+### Bug Fixes
+
+* **api:** handle mismatched dynamic array types in state and plan during serialization ([203b3ba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/203b3ba03b20e13a9d1c0279e0727f3bf111d437))
+* **cloudflare_ruleset:** handle omitted `rules` in API responses ([7f15668](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7f15668a902d6022dfc442c5cbddd45ea63176df))
+* **list_item:** Use proper pagination from client ([8f692ad](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8f692adf679f76a5e98eb3ab4980876f352d27af))
+* test data ([1cc94d4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1cc94d4adc4e739817eb10ab58cc3cdc7cf99c6c))
+* **workers_script:** ignore unmanaged secret_text bindings ([a3b6816](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a3b6816b2510577f96668d0e29aa04a4c3a74c28)), closes [#5892](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5892)
+* **workers_script:** Obtain migrations directly from config instead of plan ([2602dba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2602dbafcaca02718fd44bf54caca268170dd56b)), closes [#5898](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5898)
+* **workers_script:** Revert treating cloudflare_workers_script.bindings as a Set ([757b98f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/757b98f9e0cced8e6ae122f620de6454547ea3cc))
+
+
+### Chores
+
+* **api:** upload stainless config from cloudflare-config ([33e7b03](https://github.com/cloudflare/terraform-provider-cloudflare/commit/33e7b03f955c53a84c0d2b1a844fa0f206c4bd67))
+* **api:** upload stainless config from cloudflare-config ([bf113c7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bf113c76383636d0a4971b6f1c35d9ab6444b31c))
+* **api:** upload stainless config from cloudflare-config ([7b2fe37](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7b2fe37534d7a1438991d0ab262277b23210e9fa))
+* **api:** upload stainless config from cloudflare-config ([9c03a0e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9c03a0e95ede74ac0b7c732f9a108120dd8a2073))
+* **api:** upload stainless config from cloudflare-config ([9babc23](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9babc23830d1b7e07bd39240b09e2cd70034d9b4))
+* **api:** upload stainless config from cloudflare-config ([872f8ba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/872f8baa356b1ddba6f0537b160b26add9a1d83a))
+* **api:** upload stainless config from cloudflare-config ([b21ea4a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b21ea4aede1b39fb80c0d48883b4ca6c2f212c87))
+* **api:** upload stainless config from cloudflare-config ([5790fb1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5790fb1d073708b2ce8956337b9cf85290b91faa))
+* **api:** upload stainless config from cloudflare-config ([2016bf8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2016bf8833a37bbdd96b472467e148dca79dc890))
+* **api:** upload stainless config from cloudflare-config ([ef987a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ef987a81819fabfb0656da8723ea45c60eae5ea9))
+* **api:** upload stainless config from cloudflare-config ([26c37c4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/26c37c4ff0dc0698e56cca5f5ea2cb230b6775ee))
+* **api:** upload stainless config from cloudflare-config ([ecd274e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ecd274edee4527fe68613eee0a867011b2bbd6c7))
+* **api:** upload stainless config from cloudflare-config ([b2e06b4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b2e06b410fe8ef67a35a71638eb13a2257b33234))
+* extra checks ([3e5591e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3e5591e6e1ca89771f0c5eaf8fa6ae58d79853d7))
+* **internal:** upgrade cloudflare/circl ([2df21d4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2df21d4ee0520b977da8c151c6cc94ad41c4ddf2))
+* modernize zero_trust_access_group tests ([bf53a44](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bf53a44d007dbc31177b7cdc74731d024e98cf03))
+* modernize zero_trust_access_identity_provider tests ([41e5d14](https://github.com/cloudflare/terraform-provider-cloudflare/commit/41e5d140743cb5a3c1e52bb1cc21ebd5565bab2b))
+* modernize zero_trust_access_mtls_certificate tests ([ea33b4b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ea33b4b7db8c3b5e89c87113ef56768aa9ca2e3f))
+* modernize zero_trust_access_mtls_hostname_settings tests ([0a0556b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0a0556b968e2c9bc2514020160de063b5ae760e9))
+* new line ([1c0eb79](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1c0eb79c19759c2c7f3f37ff6389e02766d993e9))
+* sort imports ([dc52145](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc5214537b12ef7700ce2b349d42f0fa45d0ae7d))
+* tidy up ([49b1243](https://github.com/cloudflare/terraform-provider-cloudflare/commit/49b1243c2f0e5a4dd6ef71c414c28f35e26e2670))
+* update @stainless-api/prism-cli to v5.15.0 ([7534488](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7534488a919e10a96b9ddb42c7ef54460f1447f1))
+* update ci list ([13e5c5e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/13e5c5ec4c83323f6b91e8dd48f21661e98ff7ba))
+* update managed_transform tests ([ad82abe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ad82abeb5d5de428634b8f8af429be4c2500e7ac))
+* update to v5 ([d3f9d3e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d3f9d3e5cbb27d27048e3c73f9baae15204a136d))
+* update to v5 again ([2f18c95](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2f18c95e2755251ac0f6ff823c9bc9abc7dc6114))
+* **workers_script:** use resourcevalidator.ExactlyOneOf() to ensure `content` or `content_file` is provided ([e9d000c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e9d000cd2511550748d15bb0313e19c1517d32c4))
+
 ## 5.8.2 (2025-08-01)
 
 Full Changelog: [v5.8.1...v5.8.2](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.1...v5.8.2)

README.md

@@ -20,7 +20,7 @@ terraform {
   required_providers {
     cloudflare = {
       source  = "cloudflare/cloudflare"
-      version = "~> 5.8.2"
+      version = "~> 5.8.3"
     }
   }
 }

docs/resources/snippet.md

@@ -0,0 +1,58 @@
+---
+page_title: "cloudflare_snippet Resource - Cloudflare"
+subcategory: ""
+description: |-
+  
+---
+
+# cloudflare_snippet (Resource)
+
+
+
+## Example Usage
+
+```terraform
+resource "cloudflare_snippet" "example_snippet" {
+  zone_id = "9f1839b6152d298aca64c4e906b6d074"
+  snippet_name = "my_snippet"
+  files = [
+    {
+      name    = "main.js"
+      content = <<-EOT
+      export default {
+        async fetch(request) {
+          return new Response('Hello, World!');
+        }
+      }
+      EOT
+    }
+  ]
+  metadata = {
+    main_module = "main.js"
+  }
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `files` (List of String) The list of files belonging to the snippet.
+- `metadata` (Attributes) Metadata about the snippet. (see [below for nested schema](#nestedatt--metadata))
+- `snippet_name` (String) The identifying name of the snippet.
+- `zone_id` (String) The unique ID of the zone.
+
+### Read-Only
+
+- `created_on` (String) The timestamp of when the snippet was created.
+- `modified_on` (String) The timestamp of when the snippet was last modified.
+
+<a id="nestedatt--metadata"></a>
+### Nested Schema for `metadata`
+
+Required:
+
+- `main_module` (String) Name of the file that contains the main module of the snippet.
+
+

examples/data-sources/cloudflare_snippet/data-source.tf

@@ -0,0 +1,4 @@
+data "cloudflare_snippet" "example_snippet" {
+  zone_id = "9f1839b6152d298aca64c4e906b6d074"
+  snippet_name = "my_snippet"
+}

examples/data-sources/cloudflare_snippets/data-source.tf

@@ -1,4 +1,3 @@
 data "cloudflare_snippets" "example_snippets" {
   zone_id = "9f1839b6152d298aca64c4e906b6d074"
-  snippet_name = "my_snippet"
 }

examples/data-sources/cloudflare_streams/data-source.tf

@@ -6,4 +6,5 @@ data "cloudflare_streams" "example_streams" {
   start = "2014-01-02T02:20:00Z"
   status = "inprogress"
   type = "live"
+  video_name = "puppy.mp4"
 }

examples/data-sources/cloudflare_workers_scripts/data-source.tf

@@ -1,3 +1,4 @@
 data "cloudflare_workers_scripts" "example_workers_scripts" {
   account_id = "023e105f4ecef8ad9ca31a8372d0c353"
+  tags = "production:yes,staging:no"
 }

examples/data-sources/cloudflare_zero_trust_tunnel_cloudflared_routes/data-source.tf

@@ -1,6 +1,5 @@
 data "cloudflare_zero_trust_tunnel_cloudflared_routes" "example_zero_trust_tunnel_cloudflared_routes" {
   account_id = "699d98642c564d2e855e9661899b7252"
-  comment = "Example comment for this route."
   existed_at = "2019-10-12T07%3A20%3A50.52Z"
   is_deleted = true
   network_subset = "172.16.0.0/16"

examples/resources/cloudflare_bot_management/resource.tf

@@ -4,4 +4,5 @@ resource "cloudflare_bot_management" "example_bot_management" {
   crawler_protection = "enabled"
   enable_js = true
   fight_mode = true
+  is_robots_txt_managed = true
 }

examples/resources/cloudflare_filter/resource.tf

@@ -1,4 +1,9 @@
 resource "cloudflare_filter" "example_filter" {
   zone_id = "023e105f4ecef8ad9ca31a8372d0c353"
-  expression = "(http.request.uri.path ~ \".*wp-login.php\" or http.request.uri.path ~ \".*xmlrpc.php\") and ip.addr ne 172.16.22.155"
+  body = [{
+    description = "Restrict access from these browsers on this address range."
+    expression = "(http.request.uri.path ~ \".*wp-login.php\" or http.request.uri.path ~ \".*xmlrpc.php\") and ip.addr ne 172.16.22.155"
+    paused = false
+    ref = "FIL-100"
+  }]
 }

examples/resources/cloudflare_r2_custom_domain/resource.tf

@@ -4,5 +4,6 @@ resource "cloudflare_r2_custom_domain" "example_r2_custom_domain" {
   domain = "domain"
   enabled = true
   zone_id = "zoneId"
+  ciphers = ["string"]
   min_tls = "1.0"
 }

examples/resources/cloudflare_snippet/resource.tf

@@ -0,0 +1,19 @@
+resource "cloudflare_snippet" "example_snippet" {
+  zone_id      = "9f1839b6152d298aca64c4e906b6d074"
+  snippet_name = "my_snippet"
+  files = [
+    {
+      name    = "main.js"
+      content = <<-EOT
+      export default {
+        async fetch(request) {
+          return new Response('Hello, World!');
+        }
+      }
+      EOT
+    }
+  ]
+  metadata = {
+    main_module = "main.js"
+  }
+}

examples/resources/cloudflare_spectrum_application/resource.tf

@@ -4,21 +4,21 @@ resource "cloudflare_spectrum_application" "example_spectrum_application" {
     name = "ssh.example.com"
     type = "CNAME"
   }
-  ip_firewall = true
   protocol = "tcp/22"
-  proxy_protocol = "off"
-  tls = "full"
   traffic_type = "direct"
   argo_smart_routing = true
   edge_ips = {
     connectivity = "all"
     type = "dynamic"
   }
+  ip_firewall = false
   origin_direct = ["tcp://127.0.0.1:8080"]
   origin_dns = {
     name = "origin.example.com"
     ttl = 600
     type = ""
   }
   origin_port = 22
+  proxy_protocol = "off"
+  tls = "off"
 }

examples/resources/cloudflare_zero_trust_gateway_settings/resource.tf

@@ -24,7 +24,7 @@ resource "cloudflare_zero_trust_gateway_settings" "example_zero_trust_gateway_se
       logo_path = "https://logos.com/a.png"
       mailto_address = "[email protected]"
       mailto_subject = "Blocked User Inquiry"
-      mode = "customized_block_page"
+      mode = ""
       name = "Cloudflare"
       suppress_footer = false
       target_uri = "https://example.com"