fix(deps): update dependencies

[terraform-ibm-modules-ops]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper	v1.60.34 -> v1.64.0			require	minor
go (source)	1.25.4 -> 1.25.5			toolchain	patch
go (source)	1.24.0 -> 1.25.5			golang	minor
ibm (source)	1.85.0 -> 1.86.1			required_provider	minor
icr.io/ext/sysdig/agent-kmodule	14.2.5 -> 14.3.0				minor
icr.io/ext/sysdig/agent-slim	14.2.5 -> 14.3.0				minor
kubernetes (source)	2.38.0 -> 3.0.1			required_provider	major
sysdig-deploy (source)	1.98.1 -> 1.99.3				minor
terraform-ibm-modules/base-ocp-vpc/ibm (source)	3.73.5 -> 3.75.3			module	minor
terraform-ibm-modules/cloud-monitoring/ibm (source)	1.11.0 -> 1.12.1			module	minor
terraform-ibm-modules/common-pipeline-assets	v1.24.0 -> v1.24.1			action	patch
terraform-ibm-modules/common-utilities/ibm (source)	1.3.0 -> 1.3.5			module	patch
terraform-ibm-modules/resource-group/ibm (source)	1.4.0 -> 1.4.6			module	patch
terraform-ibm-modules/scc-workload-protection/ibm (source)	1.16.4 -> 1.16.5			module	patch

---

Release Notes

terraform-ibm-modules/ibmcloud-terratest-wrapper (github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper)

v1.64.0

Compare Source

Features

• updated add-ons test to not poll the un-deploy status if the deploy failed and instead trigger un-deploy of the stack and fail fast (#​1095) (f0ea773)

v1.63.2

Compare Source

Bug Fixes

• deps: update terraform-ibm-modules/common-pipeline-assets action to v1.24.1 (#​1097) (ac00015)

v1.63.1

Compare Source

Bug Fixes

• deps: update dependencies (#​1096) (09151cd)

v1.63.0

Compare Source

Features

• Addons test undeploys resources and keeps project on test failure (#​1093) (a45500e)

v1.62.0

Compare Source

Features

• Refactor stacks tests to deploy from catalog (#​1088) (8f07a85)

v1.61.5

Compare Source

Bug Fixes

• logging missing for member in failed deploy state (#​1091) (d5f1d45)

v1.61.4

Compare Source

Bug Fixes

• deps: update module github.com/go-openapi/errors to v0.22.5 (#​1090) (0a393ef)

v1.61.3

Compare Source

Bug Fixes

• deps: update dependency go to v1.25.5 (#​1089) (06cc2da)

v1.61.2

Compare Source

Bug Fixes

• Fixing addon test teardown messages (#​1087) (76ce4d8)

v1.61.1

Compare Source

Bug Fixes

• identify and list missing members (#​1086) (89a9519)

v1.61.0

Compare Source

Features

• support netrc auth and refactor git auth (#​1084) (8f19824)

v1.60.35

Compare Source

Bug Fixes

• cat type_metadata validaiton (#​1081) (9c89404)

IBM-Cloud/terraform-provider-ibm (ibm)

v1.86.1

Compare Source

Full Changelog:

1.86.1 (December 12, 2025)

New Data Sources

• ibm_is_virtual_endpoint_gateway_resource_binding
• ibm_is_virtual_endpoint_gateway_resource_bindings

New Resources

• ibm_is_virtual_endpoint_gateway_resource_binding

Enhancements

• VPC: support for endpoint gateway resource bindings (#​6568)

v1.86.0

Compare Source

Bug Fixes

Cloud Logs

• fix entity_label in logs_alert_Definition resource (6554)

AppConfig

• Fixing Issues in App Configuration Service (6545)

Global Catalog

• fixed import of ibm_cm_object (6553)
• renamed error variable for GlobalSearchV2 (6547)

IAM

• fix(ibm_iam_account_settings) when only updating user domain restrictions (6549)
• update trusted profile id policies to support both iam_id and profile_id (6543)

Power Systems

• Fix instance data sources to use id (6506)
• Refactor terraform errors to use new toolchain in network and route data sources (6552)

Schematics

• Fixed agent create crash (6570)

CIS

• handled nil pointer exceptions during runtime (6550)

Enhancements

VPC Infrastructure

• feat(vpn-gateway) - Add support for VPN Gateway as spoke of Transit Gateway (6546)
• updated the import for vpc resources (6548)

Resource Management

• added support for resource_groups datasource (6499)
• Added support for working with resource reclamations (6396)

DR Automation

• DR Automation Terraform Apis (6481)

Backup/Recovery

• Add instance and region update in connection token resource (6566)

Cloud Databases

• block unsupported Gen 2 plans with helpful validation message (6571)

Event Notification

• support for smtp user credentials clone (6535)

General

• bump actions/checkout from 5.0.0 to 5.0.1 (6556)
• bump golang.org/x/crypto from 0.41.0 to 0.45.0 (6562)
• bump bluemix-go (6574)

IAM

• add role templates & assignments (6539)

Transit Gateway

• tgw95 - vpn gateway changes (6339)

Documentation

General

• add provider-wide best practices section to CONTRIBUTING.md (6573)

Project

• regenerate projects provider with new go sdk level and API doc (6557)

hashicorp/terraform-provider-kubernetes (kubernetes)

v3.0.1

Compare Source

HOTFIX:

• Fix missing ip_mode attribute in kubernetes_service_v1 data source. [GH-2807]

v3.0.0

Compare Source

ENHANCEMENTS:

• • Add support for sidecar containers via restart_policy field in init_container spec [GH-2786]
• Add ip_mode attribute to service status [GH-2784]
• Add support for ValidatingAdmissionPolicy [GH-2794]
• Bump Kubernetes dependencies to v1.33 [GH-2774]

DEPRECATIONS:

• Data Sources

• kubernetes_config_map → use kubernetes_config_map_v1
• kubernetes_namespace → use kubernetes_namespace_v1
• kubernetes_secret → use kubernetes_secret_v1
• kubernetes_service → use kubernetes_service_v1
• kubernetes_pod → use kubernetes_pod_v1
• kubernetes_service_account → use kubernetes_service_account_v1
• kubernetes_persistent_volume_claim → use kubernetes_persistent_volume_claim_v1
• kubernetes_storage_class → use kubernetes_storage_class_v1
• kubernetes_ingress → use kubernetes_ingress_v1

Resources

• kubernetes_namespace → use kubernetes_namespace_v1
• kubernetes_service → use kubernetes_service_v1
• kubernetes_service_account → use kubernetes_service_account_v1
• kubernetes_default_service_account → use kubernetes_default_service_account_v1
• kubernetes_config_map → use kubernetes_config_map_v1
• kubernetes_secret → use kubernetes_secret_v1
• kubernetes_pod → use kubernetes_pod_v1
• kubernetes_endpoints → use kubernetes_endpoints_v1
• kubernetes_limit_range → use kubernetes_limit_range_v1
• kubernetes_persistent_volume → use kubernetes_persistent_volume_v1
• kubernetes_persistent_volume_claim → use kubernetes_persistent_volume_claim_v1
• kubernetes_replication_controller → use kubernetes_replication_controller_v1
• kubernetes_resource_quota → use kubernetes_resource_quota_v1
• kubernetes_api_service → use kubernetes_api_service_v1
• kubernetes_deployment → use kubernetes_deployment_v1
• kubernetes_daemonset → use kubernetes_daemon_set_v1
• kubernetes_stateful_set → use kubernetes_stateful_set_v1
• kubernetes_job → use kubernetes_job_v1
• kubernetes_cron_job → use kubernetes_cron_job_v1
• kubernetes_horizontal_pod_autoscaler → use kubernetes_horizontal_pod_autoscaler_v1 or kubernetes_horizontal_pod_autoscaler_v2
• kubernetes_certificate_signing_request → use kubernetes_certificate_signing_request_v1
• kubernetes_role → use kubernetes_role_v1
• kubernetes_role_binding → use kubernetes_role_binding_v1
• kubernetes_cluster_role → use kubernetes_cluster_role_v1
• kubernetes_cluster_role_binding → use kubernetes_cluster_role_binding_v1
• kubernetes_ingress → use kubernetes_ingress_v1
• kubernetes_ingress_class → use kubernetes_ingress_class_v1
• kubernetes_network_policy → use kubernetes_network_policy_v1
• kubernetes_pod_disruption_budget → use kubernetes_pod_disruption_budget_v1
• kubernetes_pod_security_policy → removed upstream; use Pod Security Admission instead
• kubernetes_priority_class → use kubernetes_priority_class_v1
• kubernetes_validating_webhook_configuration → use kubernetes_validating_webhook_configuration_v1
• kubernetes_mutating_webhook_configuration → use kubernetes_mutating_webhook_configuration_v1
• kubernetes_storage_class → use kubernetes_storage_class_v1
• kubernetes_csi_driver → use kubernetes_csi_driver_v1 [GH-2770]

BUG FIXES:

• Environment variables should not override configuration when using kubernetes_manifest. [GH-2788]
• resource/kubernetes_daemon_set_v1: fix an issue with the provider not waiting for rollout with wait_for_rollout = true. [GH-2789]

sysdiglabs/charts (sysdig-deploy)

v1.99.3

Compare Source

What's Changed

Chores

• sysdig-deploy 15428cf7: Automatic version bump due to updated dependencies (#​2478)

Full diff: sysdiglabs/charts@sysdig-deploy-1.99.2...sysdig-deploy-1.99.3

v1.99.2

Compare Source

What's Changed

Chores

• node-analyzer ad9ba25b: bump sysdig/vuln-runtime-scanner to v1.8.6 (#​2477)

Full diff: sysdiglabs/charts@sysdig-deploy-1.99.1...sysdig-deploy-1.99.2

v1.99.1

Compare Source

What's Changed

Chores

• node-analyzer 4b1b0b52: bump sysdig/kspm-analyzer to 1.46.2 (#​2463)

Full diff: sysdiglabs/charts@sysdig-deploy-1.99.0...sysdig-deploy-1.99.1

v1.99.0

Compare Source

What's Changed

New Features

• agent,shield c719a458: release agent 14.3.0 with FIM (#​2461)

Full diff: sysdiglabs/charts@sysdig-deploy-1.98.1...sysdig-deploy-1.99.0

terraform-ibm-modules/terraform-ibm-base-ocp-vpc (terraform-ibm-modules/base-ocp-vpc/ibm)

v3.75.3

Compare Source

Bug Fixes

• deps: update dependencies (#​891) (aa4fc36)

v3.75.2

Compare Source

Bug Fixes

• deps: update dependencies (#​890) (4e89e5a)

v3.75.1

Compare Source

Bug Fixes

• update the default kube-audit image tag and digest (#​750) (6d12079)

v3.75.0

Compare Source

Features

• Added service dropdown picker widget for several DA inputs (#​878) (c099854)

v3.74.1

Compare Source

Bug Fixes

• deps: update dependencies (#​889) (24dab00)

v3.74.0

Compare Source

Features

• added support to install required binary jq and kubectl if they do not exist. This can be disabled using the install_required_binaries boolean. NOTE: public access is required to pull the binaries from the internet. The binaries will be placed in /tmp. (#​867) (7a7aad3)

v3.73.6

Compare Source

Bug Fixes

• binary widget minor fixes (#​877) (d9499e3)

terraform-ibm-modules/terraform-ibm-cloud-monitoring (terraform-ibm-modules/cloud-monitoring/ibm)

v1.12.1

Compare Source

Bug Fixes

• enforce HCL editor for several DA inputs (#​133) (e299834)

v1.12.0

Compare Source

Features

• added new submodule which supports retrieving the Metrics Routing primary metadata region. The enable_primary_metadata_region DA input has been removed as the DA will now call the new submodule to determine if a primary metadata region is set and will only set it if one is not already set. To explicitly configure the different Metrics Routing settings, use the Metrics Routing account settings DA variation.

DA upgrade notes

When upgrading from a previous version of the DA, the Terraform plan output may indicate that the metrics_router_settings resource will be destroyed. This behaviour is not a breaking change.

• For accounts where primary_metadata_region is being configured for the first time, the destroy operation does not result in any effective change and the configured value is retained after apply.

• For accounts where primary_metadata_region was previously updated, the operation results in the value being reverted to the earlier configured region.

(#​127) (3b25188)

terraform-ibm-modules/common-pipeline-assets (terraform-ibm-modules/common-pipeline-assets)

v1.24.1

Compare Source

Bug Fixes

• deps: update dependencies (#​829) (c255fe5)

terraform-ibm-modules/terraform-ibm-common-utilities (terraform-ibm-modules/common-utilities/ibm)

v1.3.5

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.63.2 (#​129) (5365e2f)

v1.3.4

Compare Source

Bug Fixes

• deps: update dependencies (#​128) (5013272)

v1.3.3

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.61.4 (#​127) (b77d381)

v1.3.2

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.61.3 (#​126) (1b151ca)

v1.3.1

Compare Source

Bug Fixes

• deps: update dependencies (#​125) (fe515a2)

terraform-ibm-modules/terraform-ibm-resource-group (terraform-ibm-modules/resource-group/ibm)

v1.4.6

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.63.2 (#​767) (9a80790)

v1.4.5

Compare Source

Bug Fixes

• deps: update dependencies (#​766) (0a43334)

v1.4.4

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.63.0 (#​765) (2dc5ed5)

v1.4.3

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.61.4 (#​764) (b4f81ad)

v1.4.2

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.61.3 (#​763) (f1e7a21)

v1.4.1

Compare Source

Bug Fixes

• deps: update dependencies (#​762) (9e7f05a)

terraform-ibm-modules/terraform-ibm-scc-workload-protection (terraform-ibm-modules/scc-workload-protection/ibm)

v1.16.5

Compare Source

Bug Fixes

• add short description to Da variation(#​360) (1194b4a)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-ops]

ℹ Artifact update notice

File name: tests/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
github.com/IBM-Cloud/power-go-client	v1.14.3 -> v1.14.4
github.com/IBM/platform-services-go-sdk	v0.90.4 -> v0.91.0
github.com/go-openapi/errors	v0.22.4 -> v0.22.5
golang.org/x/crypto	v0.45.0 -> v0.46.0
golang.org/x/mod	v0.29.0 -> v0.30.0
golang.org/x/sync	v0.18.0 -> v0.19.0
golang.org/x/sys	v0.38.0 -> v0.39.0
golang.org/x/text	v0.31.0 -> v0.32.0
golang.org/x/tools	v0.38.0 -> v0.39.0

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-ops]

🎉 This PR is included in version 1.19.2 🎉

The release is available on:

• GitHub release
• v1.19.2

Your semantic-release bot 📦🚀