fix(deps): update dependencies

[terraform-ibm-modules-ops]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
elasticstack (source)	required_provider	minor	0.12.1 -> 0.13.1
github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper	require	minor	v1.61.5 -> v1.63.2
github.com/terraform-ibm-modules/terraform-ibm-watsonx-saas-da	module	minor	v2.0.1 -> v2.2.5
ibm (source)	required_provider	minor	1.84.3 -> 1.86.1
kubernetes (source)	required_provider	major	2.38.0 -> 3.0.1
terraform-ibm-modules/base-ocp-vpc/ibm (source)	module	minor	3.70.0 -> 3.75.3
terraform-ibm-modules/common-pipeline-assets	action	minor	v1.23.2 -> v1.24.1
terraform-ibm-modules/common-pipeline-assets	action	patch	v1.24.0 -> v1.24.1
terraform-ibm-modules/common-utilities/ibm (source)	module	patch	1.3.3 -> 1.3.5
terraform-ibm-modules/cos/ibm (source)	module	minor	10.5.5 -> 10.7.2
terraform-ibm-modules/icd-elasticsearch/ibm (source)	module	patch	2.7.3 -> 2.7.7
terraform-ibm-modules/kms-all-inclusive/ibm (source)	module	patch	5.5.3 -> 5.5.4
terraform-ibm-modules/resource-group/ibm (source)	module	patch	1.4.0 -> 1.4.6

---

Release Notes

elastic/terraform-provider-elasticstack (elasticstack)

v0.13.1

Compare Source

• Fix handling empty types in elasticstack_elasticsearch_ml_anomaly_detection_job (#​1544)
• Fix handling empty clusters and run_as attributes in elasticstack_elasticsearch_security_role resource (#​1542)

v0.13.0

Compare Source

Breaking changes

elasticstack_elasticsearch_index.alias block has changed to a set attribute.

The alias block in the elasticstack_elasticsearch_index resource has been moved to an attribute.
This transition provides better support for future changes in both the provider and the underlying Terraform framework.

Existing usage of the alias block must be migrated to the attribute syntax. For example:

alias {
  name = "my_alias_1"
}

alias {
  name = "my_alias_2"
  filter = jsonencode({
    term = { "user.id" = "developer" }
  })
}

becomes

alias = [
  {
    name = "my_alias_1"
  },
  {
    name = "my_alias_2"
    filter = jsonencode({
      term = { "user.id" = "developer" }
    })
  }
]

Changes

• Fix elasticstack_kibana_action_connector failing with "inconsistent result after apply" when config contains null values (#​1524)
• Add host_name_format to elasticstack_fleet_agent_policy to configure host name format (hostname or FQDN) (#​1312)
• Create elasticstack_kibana_prebuilt_rule resource (#​1296)
• Add required_versions to elasticstack_fleet_agent_policy (#​1436)
• Migrate elasticstack_elasticsearch_security_role resource to Terraform Plugin Framework (#​1330)
• Fix an issue where the elasticstack_fleet_output resource would error due to inconsistent state after an ouptut was edited in the Kibana UI (#​1506)
• Allow index and data_view_id values to both be unknown during planning in elasticstack_kibana_security_detection_rule (#​1499)
• Support .bedrock and .gen-ai connectors (#​1467)
• Support the solution attribute in elasticstack_kibana_space from 8.16 (#​1486)
• Add elasticstack_elasticsearch_alias resource (#​1343)
• Add mapping_total_fields_limit to elasticstack_elasticsearch_index (#​1494)
• Add elasticstack_kibana_default_data_view resource (#​1379)
• Add support for Security Exceptions
  • Add elasticstack_kibana_security_exception_item resource (#​1496)
  • Add elasticstack_kibana_security_exception_list resource (#​1495)
  • Add elasticstack_kibana_security_list resource (#​1489)
  • Add elasticstack_kibana_security_list_item resource (#​1492)
  • Add elasticstack_kibana_security_list_data_streams resource (#​1525)

v0.12.2

Compare Source

• Fix elasticstack_elasticsearch_snapshot_lifecycle metadata type conversion causing terraform apply to fail (#​1409)
• Add new elasticstack_elasticsearch_ml_anomaly_detection_job resource (#​1329)
• Add new elasticstack_elasticsearch_ml_datafeed resource (#​1340)
• Add space_ids attribute to all Fleet resources to support space-aware Fleet resource management (#​1390)
• Add back missing import support for elasticstack_elasticsearch_security_role_mapping (#​1441)
• Add new elasticstack_elasticsearch_ml_job_state resource (#​1337)
• Add new elasticstack_elasticsearch_ml_datafeed_state resource (#​1422)
• Add output_id to elasticstack_fleet_integration_policy resource (#​1445)
• Make hosts attribute required in elasticstack_fleet_output resource (#​1450)
• Fix elasticstack_kibana_security_detection_rule to properly respect space_id

terraform-ibm-modules/ibmcloud-terratest-wrapper (github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper)

v1.63.2

Compare Source

Bug Fixes

• deps: update terraform-ibm-modules/common-pipeline-assets action to v1.24.1 (#​1097) (ac00015)

v1.63.1

Compare Source

Bug Fixes

• deps: update dependencies (#​1096) (09151cd)

v1.63.0

Compare Source

Features

• Addons test undeploys resources and keeps project on test failure (#​1093) (a45500e)

v1.62.0

Compare Source

Features

• Refactor stacks tests to deploy from catalog (#​1088) (8f07a85)

terraform-ibm-modules/terraform-ibm-watsonx-saas-da (github.com/terraform-ibm-modules/terraform-ibm-watsonx-saas-da)

v2.2.5

Compare Source

Bug Fixes

• deps: update terraform terraform-ibm-modules/key-protect/ibm to v2.10.34 (#​357) (a2044f4)

v2.2.4

Compare Source

Bug Fixes

• deps: update dependencies (#​356) (b6b18bf)

v2.2.3

Compare Source

Bug Fixes

• deps: update dependencies (#​355) (c6839ae)

v2.2.2

Compare Source

Bug Fixes

• deps: update dependencies (#​351) (685c9af)

v2.2.1

Compare Source

Bug Fixes

• disable debug mode in restapi provider to prevent secret exposure (#​352) (18f4d11)

v2.2.0

Compare Source

Features

• updated several inputs to use the service dropdown picker widget (#​345) (dcfd0c4)

v2.1.7

Compare Source

Bug Fixes

• deps: update dependencies (#​350) (ebdfa92)

v2.1.6

Compare Source

Bug Fixes

• deps: update dependencies (#​349) (e01320b)

v2.1.5

Compare Source

Bug Fixes

• deps: update dependencies (#​348) (acd14ae)

v2.1.4

Compare Source

Bug Fixes

• deps: update dependencies (#​347) (d9b509f)

v2.1.3

Compare Source

Bug Fixes

• deps: update dependencies (#​346) (d440ad8)

v2.1.2

Compare Source

Bug Fixes

• deps: update dependencies (#​336) (5a0e81e)

v2.1.1

Compare Source

Bug Fixes

• add short description and features to the DA (#​343) (93b2de0)

v2.1.0

Compare Source

Features

• updated several DA inputs to use the new rich choice widget (#​341) (585ac55)

v2.0.3

Compare Source

Bug Fixes

• deps: update dependencies (#​312) (34598ce)

v2.0.2

Compare Source

Bug Fixes

• fix bug when using existing COS but creating new KMS key (#​334) (ae87721)

IBM-Cloud/terraform-provider-ibm (ibm)

v1.86.1

Compare Source

Full Changelog:

1.86.1 (December 12, 2025)

New Data Sources

• ibm_is_virtual_endpoint_gateway_resource_binding
• ibm_is_virtual_endpoint_gateway_resource_bindings

New Resources

• ibm_is_virtual_endpoint_gateway_resource_binding

Enhancements

• VPC: support for endpoint gateway resource bindings (#​6568)

v1.86.0

Compare Source

Bug Fixes

Cloud Logs

• fix entity_label in logs_alert_Definition resource (6554)

AppConfig

• Fixing Issues in App Configuration Service (6545)

Global Catalog

• fixed import of ibm_cm_object (6553)
• renamed error variable for GlobalSearchV2 (6547)

IAM

• fix(ibm_iam_account_settings) when only updating user domain restrictions (6549)
• update trusted profile id policies to support both iam_id and profile_id (6543)

Power Systems

• Fix instance data sources to use id (6506)
• Refactor terraform errors to use new toolchain in network and route data sources (6552)

Schematics

• Fixed agent create crash (6570)

CIS

• handled nil pointer exceptions during runtime (6550)

Enhancements

VPC Infrastructure

• feat(vpn-gateway) - Add support for VPN Gateway as spoke of Transit Gateway (6546)
• updated the import for vpc resources (6548)

Resource Management

• added support for resource_groups datasource (6499)
• Added support for working with resource reclamations (6396)

DR Automation

• DR Automation Terraform Apis (6481)

Backup/Recovery

• Add instance and region update in connection token resource (6566)

Cloud Databases

• block unsupported Gen 2 plans with helpful validation message (6571)

Event Notification

• support for smtp user credentials clone (6535)

General

• bump actions/checkout from 5.0.0 to 5.0.1 (6556)
• bump golang.org/x/crypto from 0.41.0 to 0.45.0 (6562)
• bump bluemix-go (6574)

IAM

• add role templates & assignments (6539)

Transit Gateway

• tgw95 - vpn gateway changes (6339)

Documentation

General

• add provider-wide best practices section to CONTRIBUTING.md (6573)

Project

• regenerate projects provider with new go sdk level and API doc (6557)

v1.85.0

Compare Source

Bug Fixes

Power Systems

• Refactor terraform errors to use new toolchain in nag and ni data sources (6525)
• Refactor terraform errors to use new toolchain in nsg, network_port, and network peer data sources (6529)

VPC Infrastructure

• Fix example in share docs (6534)

Enhancements

IAM

• add new account settings (6538)

Power Systems

• Deprecate Arg_VolumeName for Arg_VolumeID (6508)
• Add new ibm_pi_volumes data source and documentation (6520)

hashicorp/terraform-provider-kubernetes (kubernetes)

v3.0.1

Compare Source

HOTFIX:

• Fix missing ip_mode attribute in kubernetes_service_v1 data source. [GH-2807]

v3.0.0

Compare Source

ENHANCEMENTS:

• • Add support for sidecar containers via restart_policy field in init_container spec [GH-2786]
• Add ip_mode attribute to service status [GH-2784]
• Add support for ValidatingAdmissionPolicy [GH-2794]
• Bump Kubernetes dependencies to v1.33 [GH-2774]

DEPRECATIONS:

• Data Sources

• kubernetes_config_map → use kubernetes_config_map_v1
• kubernetes_namespace → use kubernetes_namespace_v1
• kubernetes_secret → use kubernetes_secret_v1
• kubernetes_service → use kubernetes_service_v1
• kubernetes_pod → use kubernetes_pod_v1
• kubernetes_service_account → use kubernetes_service_account_v1
• kubernetes_persistent_volume_claim → use kubernetes_persistent_volume_claim_v1
• kubernetes_storage_class → use kubernetes_storage_class_v1
• kubernetes_ingress → use kubernetes_ingress_v1

Resources

• kubernetes_namespace → use kubernetes_namespace_v1
• kubernetes_service → use kubernetes_service_v1
• kubernetes_service_account → use kubernetes_service_account_v1
• kubernetes_default_service_account → use kubernetes_default_service_account_v1
• kubernetes_config_map → use kubernetes_config_map_v1
• kubernetes_secret → use kubernetes_secret_v1
• kubernetes_pod → use kubernetes_pod_v1
• kubernetes_endpoints → use kubernetes_endpoints_v1
• kubernetes_limit_range → use kubernetes_limit_range_v1
• kubernetes_persistent_volume → use kubernetes_persistent_volume_v1
• kubernetes_persistent_volume_claim → use kubernetes_persistent_volume_claim_v1
• kubernetes_replication_controller → use kubernetes_replication_controller_v1
• kubernetes_resource_quota → use kubernetes_resource_quota_v1
• kubernetes_api_service → use kubernetes_api_service_v1
• kubernetes_deployment → use kubernetes_deployment_v1
• kubernetes_daemonset → use kubernetes_daemon_set_v1
• kubernetes_stateful_set → use kubernetes_stateful_set_v1
• kubernetes_job → use kubernetes_job_v1
• kubernetes_cron_job → use kubernetes_cron_job_v1
• kubernetes_horizontal_pod_autoscaler → use kubernetes_horizontal_pod_autoscaler_v1 or kubernetes_horizontal_pod_autoscaler_v2
• kubernetes_certificate_signing_request → use kubernetes_certificate_signing_request_v1
• kubernetes_role → use kubernetes_role_v1
• kubernetes_role_binding → use kubernetes_role_binding_v1
• kubernetes_cluster_role → use kubernetes_cluster_role_v1
• kubernetes_cluster_role_binding → use kubernetes_cluster_role_binding_v1
• kubernetes_ingress → use kubernetes_ingress_v1
• kubernetes_ingress_class → use kubernetes_ingress_class_v1
• kubernetes_network_policy → use kubernetes_network_policy_v1
• kubernetes_pod_disruption_budget → use kubernetes_pod_disruption_budget_v1
• kubernetes_pod_security_policy → removed upstream; use Pod Security Admission instead
• kubernetes_priority_class → use kubernetes_priority_class_v1
• kubernetes_validating_webhook_configuration → use kubernetes_validating_webhook_configuration_v1
• kubernetes_mutating_webhook_configuration → use kubernetes_mutating_webhook_configuration_v1
• kubernetes_storage_class → use kubernetes_storage_class_v1
• kubernetes_csi_driver → use kubernetes_csi_driver_v1 [GH-2770]

BUG FIXES:

• Environment variables should not override configuration when using kubernetes_manifest. [GH-2788]
• resource/kubernetes_daemon_set_v1: fix an issue with the provider not waiting for rollout with wait_for_rollout = true. [GH-2789]

terraform-ibm-modules/terraform-ibm-base-ocp-vpc (terraform-ibm-modules/base-ocp-vpc/ibm)

v3.75.3

Compare Source

Bug Fixes

• deps: update dependencies (#​891) (aa4fc36)

v3.75.2

Compare Source

Bug Fixes

• deps: update dependencies (#​890) (4e89e5a)

v3.75.1

Compare Source

Bug Fixes

• update the default kube-audit image tag and digest (#​750) (6d12079)

v3.75.0

Compare Source

Features

• Added service dropdown picker widget for several DA inputs (#​878) (c099854)

v3.74.1

Compare Source

Bug Fixes

• deps: update dependencies (#​889) (24dab00)

v3.74.0

Compare Source

Features

• added support to install required binary jq and kubectl if they do not exist. This can be disabled using the install_required_binaries boolean. NOTE: public access is required to pull the binaries from the internet. The binaries will be placed in /tmp. (#​867) (7a7aad3)

v3.73.6

Compare Source

Bug Fixes

• binary widget minor fixes (#​877) (d9499e3)

v3.73.5

Compare Source

Bug Fixes

• deps: update terraform terraform-ibm-modules/secrets-manager-secret-group/ibm to v1.3.19 (#​881) (514d0ac)

v3.73.4

Compare Source

Bug Fixes

• deps: update dependencies (#​876) (4c782ad)

v3.73.3

Compare Source

Bug Fixes

• updated the validation logic used to validate OS (#​870) (794961f)

v3.73.2

Compare Source

Bug Fixes

• deps: update dependencies (#​869) (7af563c)

v3.73.1

Compare Source

Bug Fixes

• update the next steps url for the DAs (#​868) (0ad1a56)

v3.73.0

Compare Source

Features

• added a new widget for the default_worker_pool_machine_type variable to enhance the user experience
  - The widget dynamically fetches available worker node flavors based on the selected region, ensuring users only see machine types that are actually available in their chosen deployment location. (#​863) (43bcb86)

v3.72.0

Compare Source

Features

• DA updates:
  - updated the default value for cluster_name to "cluster"
  - updated the default value of the prefix inputto start with "ocp"
  - added validation for the default_worker_pool_workers_per_zone
  - updated some inout to leverage the new rich choise input widget (#​862) (5ec4f07)

v3.71.4

Compare Source

Bug Fixes

• deps: update dependencies (#​835) (d7ebdda)

v3.71.3

Compare Source

Bug Fixes

• update text used for secrets manager service plan input (#​861) (a4bf968)

v3.71.2

Compare Source

Bug Fixes

• updates to DA widgets (#​859) (2bd5ab8)

v3.71.1

Compare Source

Bug Fixes

• deps: update DA dependencies (#​857) (878d32e)

v3.71.0

Compare Source

Features

• added the new worker node flavors widget to the DA (#​851) (750d14d)

terraform-ibm-modules/common-pipeline-assets (terraform-ibm-modules/common-pipeline-assets)

v1.24.1

Compare Source

Bug Fixes

• deps: update dependencies (#​829) (c255fe5)

v1.24.0

Compare Source

Features

• remove CRA scan. CRA depends on the SCC service which is EOL on 15th Dec (#​825) (63d89ff)

terraform-ibm-modules/terraform-ibm-common-utilities (terraform-ibm-modules/common-utilities/ibm)

v1.3.5

Compare Source

Bug Fixes

• deps: update module github.com/terraform-ibm-modules/ibmcloud-terratest-wrapper to v1.63.2 (#​129) (5365e2f)

v1.3.4

Compare Source

Bug Fixes

• deps: update dependencies (#​128) (5013272)

terraform-ibm-modules/terraform-ibm-cos (terraform-ibm-modules/cos/ibm)

v10.7.2

Compare Source

Bug Fixes

• fix typos in DA bucket outputs (#​1029) (3ccc224)

v10.7.1

Compare Source

Bug Fixes

• add fix for missing output in bucket DAs (#​1028) (509b0e7)

v10.7.0

Compare Source

Features

• Added a new lifecycle_rules submodule which allows to add multiple expiry lifecycle rules to an existing cos bucket (#​999) (78be598)

v10.6.1

Compare Source

Bug Fixes

• updated default value of "add_bucket_name_suffix" to true in fscloud submodule (#​1003) (ce92d6f)

v10.6.0

Compare Source

Features

• Added "Next steps" to the DA (#​989) (17ab156)

v10.5.11

Compare Source

Bug Fixes

• deps: update dependencies (#​1004) (7f916d0)

v10.5.10

Compare Source

Bug Fixes

• changed the default value for add_bucket_name_suffix to true in buckets submodule (#​1002) (3ba70bf)

v10.5.9

Compare Source

Bug Fixes

• deps: update dependencies (#​993) (fc1c91d)

v10.5.8

Compare Source

Bug Fixes

• deps: update dependencies (#​992) (e2a7e5e)

v10.5.7

Compare Source

Bug Fixes

• deps: update dependencies (#​991) (cbab8fe)

v10.5.6

Compare Source

Bug Fixes

• deps: update dependencies (#​990) (a5f219b)

terraform-ibm-modules/terraform-ibm-icd-elasticsearch (terraform-ibm-modules/icd-elasticsearch/ibm)

v2.7.7

Compare Source

Bug Fixes

• deps: update dependencies (#​581) (5d8b486)

v2.7.6

Compare Source

Bug Fixes

• deps: update dependencies (#​580) ([ad6d522](https://redirect.github.com/t

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-ops]

ℹ Artifact update notice

File name: tests/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated

Details:

Package	Change
github.com/IBM-Cloud/power-go-client	v1.14.3 -> v1.14.4
github.com/IBM/platform-services-go-sdk	v0.90.4 -> v0.91.0
golang.org/x/crypto	v0.45.0 -> v0.46.0
golang.org/x/mod	v0.29.0 -> v0.30.0
golang.org/x/sync	v0.18.0 -> v0.19.0
golang.org/x/sys	v0.38.0 -> v0.39.0
golang.org/x/text	v0.31.0 -> v0.32.0
golang.org/x/tools	v0.38.0 -> v0.39.0

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline

[terraform-ibm-modules-dev]

/run pipeline