⬆️[Terraform] Update Terraform providers

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	5.99.1 → 5.100.0
azuread (source)	required_provider	minor	3.4.0 → 3.9.0
azurerm (source)	required_provider	minor	4.32.0 → 4.79.0
github (source)	required_provider	minor	6.6.0 → 6.12.1
google (source)	required_provider	minor	6.38.0 → 6.50.0
google-beta (source)	required_provider	minor	6.38.0 → 6.50.0
scaleway (source)	required_provider	minor	2.55.0 → 2.77.1

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v5.100.0

Compare Source

NOTES:

• resource/aws_route53_vpc_association_authorization: Because we cannot easily replicate the highly concurrent environments in which these errors have been observed, this fix is best effort and we ask for community help in verifying the reported issues are resolved by this change (#​42948)

FEATURES:

• New Resource: aws_dsql_cluster (#​41868)
• New Resource: aws_dsql_cluster_peering (#​41868)
• New Resource: aws_prometheus_workspace_configuration (#​42478)
• New Resource: aws_s3control_directory_bucket_access_point_scope (#​42338)
• New Resource: aws_vpc_route_server (#​42392)
• New Resource: aws_vpc_route_server_endpoint (#​42392)
• New Resource: aws_vpc_route_server_peer (#​42392)
• New Resource: aws_vpc_route_server_propagation (#​42392)
• New Resource: aws_vpc_route_server_vpc_association (#​42392)
• New Resource: aws_workspacesweb_data_protection_settings (#​42852)
• New Resource: aws_workspacesweb_ip_access_settings (#​42863)
• New Resource: aws_workspacesweb_user_access_logging_settings (#​42868)

ENHANCEMENTS:

• data-source/aws_elb_hosted_zone_id: Add hosted zone ID for ap-east-2 AWS Region (#​42915)
• data-source/aws_lb_hosted_zone_id: Add hosted zone IDs for ap-east-2 AWS Region (#​42915)
• data-source/aws_neptune_engine_version: Add several arguments and attributes to support dynamic selection of versions including latest, has_major_target, preferred_major_targets, and preferred_upgrade_targets (#​42854)
• data-source/aws_s3_bucket: Add hosted zone ID for ap-east-2 AWS Region (#​42915)
• provider: Support ap-east-2 as a valid AWS Region (#​42906)
• resource/aws_fsx_lustre_file_system: Add data_read_cache_configuration and throughput_capacity arguments in support of the Intelligent-Tiering storage class (#​42839)
• resource/aws_pinpointsmsvoicev2_phone_number: Add two_way_channel_role argument (#​42950)
• resource/aws_route53_vpc_association_authorization: Add configurable timeouts for create, read, and delete (#​42948)
• resource/aws_s3_access_point: Add support for S3 Directory Buckets (#​42338)
• resource/aws_s3control_access_point_policy: Add support for S3 Directory Buckets (#​42338)
• resource/aws_vpn_connection: Add preshared_key_storage argument and preshared_key_arn attribute (#​42819)
• resource/aws_wafv2_rule_group: Add statement.asn_match_statement configuration block (#​42965)
• resource/aws_wafv2_web_acl: Add statement.asn_match_statement configuration block (#​42965)

BUG FIXES:

• resource/aws_cloudfrontkeyvaluestore_keys_exclusive: Batch update operations to stay under the Key Value Store Service Quota. The max_batch_size argument can be used to override the default value of 50 items. (#​42795)
• resource/aws_cloudwatch_log_destination: Fix to return the first matched destination name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_group: Fix to return the first matched group name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_metric_filter: Fix to return the first matched filter name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_query_definition: Fix to return the first matched query definition ID during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_resource_policy: Fix to return the first matched policy name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_cloudwatch_log_subscription_filter: Fix to return the first matched filter name during the read operation. This fixes a regression introduced in v5.83.0 (#​42896)
• resource/aws_dynamodb_table: Set new computed value for stream_arn attribute when changing stream_view_type (#​42561)
• resource/aws_neptune_cluster: Enable minor and major version upgrades by fixing various issues preventing them (#​42854)
• resource/aws_neptune_global_cluster: Enable minor and major version upgrades by fixing various issues preventing them (#​42854)
• resource/aws_route53_vpc_association_authorization: Retry InvalidPaginationToken errors on read (#​42948)
• resource/aws_verifiedaccess_endpoint: Fix InvalidParameterValue: The value of loadBalancerOptions.port you provided is not valid errors when creating TCP load balancer endpoints (#​42736)
• resource/aws_vpc_endpoint_subnet_association: Fix OperationInProgress: VpcEndpoint modify operation in progress errors when deleting multiple associations in parallel (#​42884)

hashicorp/terraform-provider-azuread (azuread)

v3.9.0

Compare Source

ENHANCEMENTS:

• dependencies: update go version to 1.26.4 (#​1874)
• dependencies: update go-azure-helpers to 0.80.0 (#​1872)
• azuread_conditional_access_policy - add support for the conditions.applications.filter property (#​1780)
• azuread_privileged_access_group_assignment_schedule - add additional checks for confirming resource existence (#​1856)
• azuread_privileged_access_group_eligibility_schedule - add additional checks for confirming resource existence (#​1856)

BUG:

• azuread_privileged_access_group_assignment_schedule - fix update functionality preventing RoleAssignmentExists errors (#​1856)
• azuread_privileged_access_group_eligibility_schedule - fix update functionality preventing RoleAssignmentExists errors (#​1856)

v3.8.0

Compare Source

ENHANCEMENTS:

• dependencies: update go version to 1.25.5 (#​1842)
• dependencies: update go-azure-helpers to v0.76.2 (#​1842)
• dependencies: update go-azure-sdk to v0.20260212.1143955 (#​1842)
• dependencies: update hashicorp/terraform-plugin-sdk/v2 to v2.38.2 (#​1842)
• dependencies: update hashicorp/terraform-plugin-testing to v1.14.0 (#​1842)
• dependencies: update x/crypto to v0.48.0 (#​1842)
• azuread_group - increase default timeout for Create and Update to 30 minutes (#​1541)
• azuread_group_without_members - increase default timeout for Create and Update to 30 minutes (#​1541)

BUG FIXES:

• azuread_group - add a deadline to the context used in the CustomizeDiff (#​1541)
• azuread_group_without_members - add a deadline to the context used in the CustomizeDiff (#​1541)
• azuread_group_role_management_policy - added Eventual Consistency check to avoid misreporting not found during create (#​1836)
• azuread_invitation - added Eventual Consistency check to avoid misreporting not found during create (#​1844)
• azuread_privileged_access_group_assignment_schedule - added Eventual Consistency check to avoid misreporting not found during create (#​1845)

v3.7.0

Compare Source

FEATURES:

• New Resource: azuread_flexible_federated_identity_credential (#​1788)

EHANCEMENTS:

• Dependencies: go-azure-sdk updated to v0.20251029.1173336 (#​1787)
• Dependencies: Go updated to v1.25.3 (#​1792)

BUG FIXES:

• azuread_application - allow retry on 409 Conflict during creation (#​1768)
• azuread_conditional_access_policy - add support for the authentication_flow_transfer_methods property (#​1796)
• azuread_group_role_management_policy - fix update for activation_rule.required_conditional_access_authentication_context (#​1783)

v3.6.0

Compare Source

ENHANCEMENTS:

• data.azuread_named_location - add support for the object_id property (#​1703)
• azuread_named_location - add support for the object_id property (#​1703)

BUG FIXES:

• data.azuread_users - queries that return multiple users with the same mail nickname no longer causes an error (#​1762)

v3.5.0

Compare Source

ENHANCEMENTS:

• azuread_conditional_access_policy - add support for the client_applications.filter property (#​1744)

BUG FIXES:

• azuread_conditional_access_policy - fix support for everyTime restrictions in session_controls request payload (#​1719)

hashicorp/terraform-provider-azurerm (azurerm)

v4.79.0

Compare Source

FEATURES:

• New Action: azurerm_netapp_volume_bucket_credentials (#​32319)
• New Data Source: azurerm_netapp_volume_bucket (#​32319)
• New Data Source: azurerm_netapp_volume_bucket_with_server(#​32319)
• New List Resource: azurerm_netapp_volume_bucket (#​32319)
• New List Resource: azurerm_netapp_volume_bucket_with_server(#​32319)
• New List Resource: azurerm_signalr_service_custom_certificate (#​32114)
• New Resource: azurerm_netapp_volume_bucket (#​32319)
• New Resource: azurerm_netapp_volume_bucket_with_server(#​32319)

ENHANCEMENTS:

• azurerm_batch_job - migrate to go-azure-sdk (#​32662)
• azurerm_data_protection_backup_instance_data_lake_storage - increase the limit of items for storage_container_names from 100 to 1000 (#​32643)
• azurerm_postgresql_flexible_server - add Ddsv6 skus to validation (#​32657)
• azurerm_virtual_network_gateway - add support for maximum_scale_unit and minimum_scale_unit (#​32647)
• desktopvirtualization - upgrade API version to 2025-10-10 (#​32563)

v4.78.0

Compare Source

FEATURES:

• New List Resource: azurerm_signalr_service_custom_domain (#​32124)
• New List Resource: azurerm_storage_sync_server_endpoint (#​31988)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260616.1142719 (#​32631)
• Data Source: azurerm_network_manager_connectivity_configuration - export the connected_group_address_overlap, connected_group_private_endpoints_scale, and peering_enforcement properties (#​31562)
• Data Source: azurerm_storage_container - export the url property (#​29036)
• azurerm_kubernetes_cluster - add support KataVmIsolation for workload_runtime (#​32579)
• azurerm_kubernetes_cluster_node_pool - add support KataVmIsolation for workload_runtime (#​32579)
• azurerm_mssql_managed_instance - add support for the storage_iops property (#​32250)
• azurerm_network_manager_connectivity_configuration - add support for the connected_group_address_overlap, connected_group_private_endpoints_scale, and peering_enforcement properties (#​31562)
• azurerm_storage_container - export the url property (#​29036)

BUG FIXES:

• azurerm_cosmosdb_account - fix an issue that prevented diffs on geo_location.zone_redundant from showing (#​32620)
• azurerm_express_route_connection - fix an issue that caused unintentional changes to internet_security_enabled on updates (#​32498)
• azurerm_static_web_app - fix an issue that caused updates to fail once a private endpoint was attached (#​32631)

v4.77.0

Compare Source

FEATURES:

• New List Resource: azurerm_key_vault (#​32408)
• New List Resource: azurerm_web_pubsub_custom_domain (#​32186)

ENHANCEMENTS:

• dependencies: go - update to 1.26.4 (#​32539)
• dependencies: go-azure-sdk - update to v0.20260603.1074745 (#​32503)
• Data Source: azurerm_storage_blob - the storage_account_name and storage_container_name properties have been deprecated in favour of the storage_container_id property (#​32235)
• Data Source: azurerm_storage_table - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)
• azurerm_machine_learning_workspace - add support for the storage_account_access_type property (#​32514)
• azurerm_storage_blob - the storage_account_name and storage_container_name properties have been deprecated in favour of the storage_container_id property (#​32235)
• azurerm_storage_container - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)
• azurerm_storage_object_replication - add support for the metrics_enabled property (#​32204)
• azurerm_storage_queue - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)
• azurerm_storage_table - the storage_account_name property has been deprecated in favour of the storage_account_id property (#​32235)

BUG FIXES:

• azurerm_mssql_managed_instance - fix an issue that caused an error when changing from a GP_* SKU to a BC_* SKU (#​32560)
• azurerm_network_manager_deployment - add a custom poller to work around an API issue on creation (#​32530)
• azurerm_recovery_services_vault_resource_guard_association - normalize resource_guard_id before persisting to state to work around an API issue (#​32554)
• azurerm_subnet - fix an issue that incorrectly caused a validation error when increasing ip_address_pool.number_of_ip_addresses (#​32500)
• azurerm_virtual_network - fix an issue that incorrectly caused a validation error when increasing ip_address_pool.number_of_ip_addresses (#​32500)

v4.76.0

Compare Source

ENHANCEMENTS:

• Action: azurerm_virtual_machine_power - power_action now supports deallocate (#​32492)
• azurerm_key_vault_key - add support for the release_policy block (#​32478)

BUG FIXES:

• azurerm_federated_identity_credential - fix update logic, preventing import errors on updates (#​32522)
• azurerm_netapp_account - the update function now uses the PUT operation to fix a removal issue with the active_directory property (#​32494)
• azurerm_netapp_account - fix drift detection for the active_directory and identity properties (#​32494)
• azurerm_netapp_volume_group_oracle - fix validation for the application_identifier property (#​32499)
• azurerm_oracle_resource_anchor - fix validation for the name property to allow hyphens (#​32481)

v4.75.0

Compare Source

FEATURES:

• provider: adds support for the features.persist_id_on_create_before_polling_for_completion feature (#​32318)
• provider: adds support for the features.skip_import_check_on_create_and_allow_overwriting_existing_resources feature (#​32318)

ENHANCEMENTS:

• dependencies: azurerm_cdn_frontdoor - update API version to 2025-12-01 (#​32461)
• dependencies: cognitive - update API version to 2026-03-01 (#​32427)
• dependencies: recoveryservices/vaults - update to API Version 2025-08-01 (#​31163)
• Data Source: azurerm_orchestrated_virtual_machine_scale_set - export the sku_profile block (#​30260)
• azurerm_application_gateway - add support for certificate_chain_validation_enabled, sni_validation_enabled, and sni_name properties to backend_http_settings (#​31206)
• azurerm_data_factory_linked_service_mysql - add support for the driver_version property (#​32076)
• azurerm_data_protection_backup_instance_data_lake_storage - add FriendlyName on Create to align with other backup instance resources (#​32351)
• azurerm_mongo_cluster - the storage_size_in_gb property now allows values of up to 32768 (#​32428)
• azurerm_mssql_managed_instance_transparent_data_encryption - support versionless key_vault_key_id (#​32399)
• azurerm_orchestrated_virtual_machine_scale_set - add support for the virtual_machine_size block (#​30260)
• azurerm_redhat_openshift_cluster - update API version to 2025-07-25 (#​32029)
• azurerm_windows_function_app - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#​32448)
• azurerm_windows_function_app_slot - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#​32448)

BUG FIXES:

• Data Source: azurerm_virtual_network_gateway - fixed issue returning correct value for deprecated enable_bgp property (#​32422)
• azurerm_api_management_backend - the proxy.username property is now optional (#​32433)
• azurerm_cosmosdb_sql_container - fix Read function to ensure the resource is able to track drift (#​32443)
• azurerm_site_recovery_vmware_replicated_vm - fixes a bug where test_subnet_name not set correctly (#​32407)

v4.74.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260520.1145341 (#​32420)
• azurerm_advisor_recommendations - add support for the filter_by_resource_ids and filter_by_recommendation_type_guids properties (#​26220)
• azurerm_data_factory_integration_runtime_azure - add support for the interactive_authoring_time_to_live_in_minutes property (#​32316)
• azurerm_linux_function_app - add support for minimum_tls_cipher_suite property (#​26584)
• azurerm_linux_web_app - add support for minimum_tls_cipher_suite property (#​26584)
• azurerm_logic_app_standard - add support for key_vault_reference_identity_id (#​30010)
• azurerm_windows_function_app - add support for minimum_tls_cipher_suite property (#​26584)
• azurerm_windows_web_app - add support for minimum_tls_cipher_suite property (#​26584)

BUG FIXES:

• azurerm_container_app_environment - allow names that start with a digit (#​32267)
• azurerm_logic_app_standard - fix the update path for the app_service_plan_id property (#​32421)
• azurerm_virtual_network_gateway set radius_server_secret to sensitive (#​32419)

v4.73.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_mover_job_definition (#​32184)
• New List Resource: azurerm_storage_mover_project (#​32183)

ENHANCEMENTS:

• azurerm_cdn_frontdoor_firewall_policy - add support for the 429, 990, 991, 992, 993, 994, 995, 996, 997, 998, and 999 values in the custom_block_response_status_code property (#​32312)
• azurerm_container_app_job - add support for identity_id property to scaling.rules (#​31312)
• azurerm_databricks_workspace - add support for the values FEDRAMP_MODERATE, IRAP_PROTECTED, FEDRAMP_HIGH, FEDRAMP_IL5, ITAR_EAR, CYBER_ESSENTIAL_PLUS, CANADA_PROTECTED_B, ISMAP, HITRUST, K_FSI, GERMANY_C5, and GERMANY_TISAX in the compliance_security_profile_standards property (#​32163)

v4.72.0

Compare Source

FEATURES:

• New List Resource: azurerm_subnet (#​32236)

ENHANCEMENTS:

• dependencies: update go to 1.25.10 (#​32344)
• dependencies: loganalytics - update to API version 2023-09-01 (#​32280)
• azurerm_data_factory_linked_service_data_lake_storage_gen2 - set schema fields service_principal_key and storage_account_key as sensitive (#​32284)
• azurerm_frontdoor_custom_domain - add support for the cipher_suite property (#​30997)
• azurerm_log_analytics_workspace - add support for the 10000, 25000 and 50000 values in the reservation_capacity_in_gb_per_day property (#​32322)
• azurerm_machine_learning_compute_cluster - set schema field ssh.0.admin_password as sensitive (#​32293)
• azurerm_subnet - add support for the Microsoft.MessagingConnectors/connectors value in the delegation.service_delegation.name property (#​32305)
• azurerm_virtual_network - add support for the Microsoft.MessagingConnectors/connectors value in the subnet.delegation.service_delegation.name property (#​32305)
• cosmos - migrate all resources and data sources to go-azure-sdk (#​32066)

BUG FIXES:

• azurerm_frontdoor_custom_domain - fixed an eventual consistency bug in creation (#​30997)

v4.71.0

Compare Source

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_security_policy (#​31957)

ENHANCEMENTS:

• dependencies: storage - update API version to 2025-08-01 (#​32218)
• azurerm_bot_channel_directline_speech - the cognitive_service_access_key and cognitive_service_location properties are now optional (#​30243)
• azurerm_eventhub - add support for storage_authentication_type and storage_authentication_id properties in the capture_description.destination block (#​31265)
• azurerm_kubernetes_cluster - the container_log_max_lines property has been renamed to container_log_max_files (#​31721)
• azurerm_kubernetes_cluster_node_pool - the container_log_max_lines property has been renamed to container_log_max_files (#​31721)
• azurerm_storage_account - add support for the Smart value to access_tier (#​32218)
• azurerm_storage_account - add support for the All value to allowed_copy_scope (#​32218)
• List Resource: azurerm_storage_account - skip resource data retrieval when include_resource is false (#​31898)

BUG FIXES:

• azurerm_mssql_managed_database - skip retrieval of long_term_retention_policy when the database is in a stopped state (#​32246)
• azurerm_mssql_managed_database - fix an issue that caused 400 errors when users did not specify long_term_retention_policy.yearly_retention (#​32246)
• azurerm_mssql_server - fix resource update to conform with enforcement of "AD Auth Only" policy (#​31901)
• azurerm_network_security_rule and azurerm_network_security_group - add case-insensitive handling for application security group IDs (#​30913)

v4.70.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_mover (#​32165)
• New List Resource: azurerm_storage_mover_agent (#​32166)
• New List Resource: azurerm_storage_mover_source_endpoint (#​32167)

ENHANCEMENTS:

• dependencies: azurerm_synapse_managed_private_endpoint - update to API version 2021-06-01-preview (#​32153)
• dependencies: cosmosdb/mongorbacs - update to API version 2025-10-15 (#​32164)
• dependencies: giovanni update to v0.29.0 (#​32188)
• dependencies: go-azure-sdk - update to v0.20260417.1195006 (#​31974)
• azurerm_backup_policy_vm - add support for the consistency_type property (#​32203)
• azurerm_bot_channel_directline - export the extension_key_1 and extension_key_2 properties (#​30242)
• azurerm_bot_web_app - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#​30459)
• azurerm_dashboard_grafana- add support for the sku_size property (#​31047)
• azurerm_key_vault_key - migrate to go-azure-sdk (#​31806)
• azurerm_machine_learning_datastore_blobstorage - improved storage account retrieval (#​32222)
• azurerm_nat_gateway_public_ip_association - add support for IPv6 public IP addresses (#​32176)
• azurerm_nat_gateway_public_ip_prefix_association - add support for IPv6 public IP prefixes (#​32195)
• azurerm_postgresql_flexible_server - add support for confidential compute server type SKU (#​32209)
• azurerm_synapse_managed_private_endpoint - migrate to go-azure-sdk (#​32153)
• azurerm_synapse_managed_private_endpoint - add support for the fully_qualified_domain_names property (#​32153)

BUG FIXES:

• Data Source: azurerm_storage_account_sas - fix a regression that caused missing permissions in the sas property (#​32234)
• azurerm_container_app_environment - fix potential nil pointer dereferences to prevent panics (#​32198)

v4.69.0

Compare Source

FEATURES:

• New List Resource: azurerm_traffic_manager_profile (#​31977)
• New List Resource: azurerm_web_pubsub (#​32126)
• New Resource: azurerm_automation_runtime_environment_package (#​32022)
• New Resource: azurerm_container_app_environment_managed_certificate (#​31137)

ENHANCEMENTS:

• dependencies: Go - update to 1.25.9 (#​32148)
• dependencies: kubernetesconfiguration/fluxconfiguration - update to API version 2025-04-01 (#​32080)
• Data Source: azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#​32108)
• Data Source: azurerm_storage_account_blob_container_sas - expand permissions block to include new fields (#​32149)
• Data Source: azurerm_storage_account_sas - expand permissions block to include new fields (#​32149)
• Data Source: azurerm_storage_share - export the rbac_scope_id property (#​31194)
• azurerm_bot_channels_registration - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#​30457)
• azurerm_cdn_frontdoor_route - the cdn_frontdoor_origin_ids property is now optional, allowing users to use the depends_on meta-argument instead (#​29350)
• azurerm_cognitive_deployment - the rai_policy_name property is now Optional + Computed as Azure returns a value when not set in the creation request (#​32131)
• azurerm_container_app - add support for identity_id property in custom_scale_rule block (#​29777)
• azurerm_key_vault - added object-name max length validation for all key vault entries (keys, secrets, certs, etc) (#​30665)
• azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#​32108)
• azurerm_kubernetes_flux_configuration - the git_repository.provider property now supports GitHub (#​32080)
• azurerm_monitor_scheduled_query_rules_alert_v2 - add support for email_subject within action block (#​32132)
• azurerm_storage_share - export the rbac_scope_id property (#​31194)

BUG FIXES:

• azurerm_linux_virtual_machine - parse os_managed_disk_id insensitively as Azure returns static segments cased inconsistently (#​32145)
• azurerm_private_dns_resolver_inbound_endpoint - the ip_configurations.private_ip_address, ip_configurations.private_ip_allocation_method, and ip_configurations.subnet_id properties are now ForceNew as the API does not allow updating these values (#​31088)

v4.68.0

Compare Source

FEATURES:

• New Data Source: azurerm_managed_devops_pool (#​28325)
• New List Resource: azurerm_private_dns_cname_record (#​31833)
• New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#​32044)
• New Resource: azurerm_managed_devops_pool (#​28325)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#​32112)
• Data Source: azurerm_bastion_host - export private_only_enabled (#​32042)
• Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#​30453)
• Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#​29303)
• azurerm_app_configuration_feature - Add support for custom_filter (#​30160)
• azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#​32042)
• azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#​31836)
• azurerm_key_vault - improve validation for the name field to prevent apply time errors (#​30453)
• azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#​32117)
• azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#​32001)
• azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#​29303)
• azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#​32099)
• azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#​31705)
• azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#​30536)

BUG FIXES:

• azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#​32025)
• azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#​32091)
• azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#​32117)
• azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#​32117)
• azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#​31699)
• azurerm_resource_group - fix parallelism issue in create_poller (#​32123)
• azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#​32072)

v4.67.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_sync (#​31995)
• New Resource: azurerm_data_protection_backup_policy_data_lake_storage (#​31179)
• New Resource: azurerm_eventgrid_namespace_topic (#​30104)
• New Resource: azurerm_kubernetes_cluster_deployment_safeguard (#​31670)
• New Resource: azurerm_resource_provider_feature_registration (#​28303)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260326.1151219 (#​32047)
• dependencies: storage - update to API version 2025-06-01 (#​32071)
• Data Source: azurerm_application_gateway - export the backend, listener, and routing_rule properties (#​30376)
• Data Source: azurerm_logic_app_standard - export the site_config.ip_restriction_default_action property

✂ Note

PR body was truncated to here.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.