Update Terraform azapi to ~> 2.10.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azapi (source)	required_provider	minor	~> 2.5.0 → ~> 2.10.0

---

Release Notes

Azure/terraform-provider-azapi (azapi)

v2.10.0

Compare Source

ENHANCEMENTS:

• azapi provider: Preflight validation is now enabled on resource update operations (previously only on create) (GH-1112).
• azapi provider: Preflight validation now requires only read permission instead of write permission (GH-1112).
• Bump Go version to 1.25.8 (GH-1082).
• Bump terraform-plugin-framework from v1.16.1 to v1.19.0 (GH-1081).
• Add example for Microsoft.RedHatOpenShift/openShiftClusters (GH-1083).

BUG FIXES:

• Fix a panic when comparing a non-empty configured list with an empty remote list during no-op change detection (GH-1125).

v2.9.0

Compare Source

ENHANCEMENTS:

• azapi_update_resource resource: Support replace_triggers_external_values argument to trigger resource replacement based on external values.
• azapi_data_plane_resource resource: Support sensitive_body and sensitive_body_version fields, which are used to specify the write-only properties in the request body.
• azapi_resource_action resource: Support updating api-version without recreating the resource.
• azapi_resource_action Support ignore_not_found argument to optionally suppress 404 errors and expose resource existence.
• azapi_resource, azapi_update_resource resources: Support list_unique_id_property and ignore_other_items_in_list fields, which are used to manage list properties with unique identifiers (GH-1033).
• azapi provider: Add Azure Government support for KeyVault resource manager audience endpoint (GH-996).
• azapi_data_plane_resource resource: Support importing existing data plane resources via terraform import (GH-1053).
• azapi_data_plane_resource resource: Add support for Microsoft.Foundry/agents (AI Foundry assistants) with customization and resource management (GH-1053).
• parse_resource_id function: Add resource_group_id to the function output (GH-1065).
• Update bicep types to ms-henglu/bicep-types-az@5c7a4c2

BUG FIXES:

• Fix Missing Resource Identity After Update error for Terraform versions below 1.12 (GH-1023).
• azapi_resource_action: Fix inconsistent result error when updating query_parameters with when = "destroy" (GH-1028).
• azapi_resource resource: Fix embedded schema validation failure when the discriminator property is unknown (GH-1038).
• azapi_data_plane_resource resource: Fix a bug that 204 status code is not supported as a success response (GH-1055).
• Fix inconsistent result after apply when lastConnectivityTime field changes between create/update and read (GH-1062).
• Fix a bug that auxiliary_tenant_ids are not passed to ARM client options for cross-tenant authentication (GH-1046).
• Fix azapi_update_resource state migration missing replace_triggers_external_values field (GH-1071).
• Fix RequiresReplaceIfNotNull plan modifier not handling typed null from HCL conditional expressions (GH-1070).

v2.8.0

Compare Source

FEATURES:

• New Provider Function: snake2camel
• New Action: azapi_resource_action - Perform stateless actions on Azure resources that can be invoked via Terraform action triggers

ENHANCEMENTS:

• azapi_resource resource: Add support for identity-based import, enabling import via resource ID and type from list resource protocol.
• azapi_resource resource: Support listing resources via new ListResource protocol.
• azapi_resource resource: Support listing all resources in a resource group when type is omitted. Uses ARM API /subscriptions/{sub}/resourceGroups/{rg}/resources to enumerate all resources.
• azapi_resource resource: Refactor import logic to support identity block and multiple import scenarios (ID only, ID with API version, ID and type).
• azapi_data_plane_resource resource: Adds a customization layer which allows custom CRUD operations for resources that don't follow standard patterns.
• azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/keys type.
• azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/secrets type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/datasources type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexers type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexes type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/skillsets type.
• azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/synonymmaps type.
• Bump Go version to 1.24.6 to address CVEs (GH-992).
• Add more verified azapi examples.
• Update bicep types to ms-henglu/bicep-types-az@c41a40c

BUG FIXES:

• Fix validation logic for properties that are both ReadOnly and Required.
• Fix panic when using sensitive_body_version with empty sensitive_body (GH-999).
• Fix azapi_resource resource move from azurerm_storage_share by converting /fileshares/ to /shares/ in resource ID.

v2.7.0

Compare Source

ENHANCEMENTS:

• azapi_resource resource: Refactor move-state logic to centrally derive ARM IDs from data-plane IDs for selected azurerm resources.
• Add more verified azapi examples.
• Add documentation for choosing the resource type.
• azapi_resource data source: Support ignore_not_found argument and exists computed field to optionally suppress 404 errors and expose resource existence.
• azapi provider: Support for disabling instance discovery via new disable_instance_discovery provider argument and ARM_DISABLE_INSTANCE_DISCOVERY environment variable (GH-964).
• azapi provider: Support for explicit custom environment configuration where endpoints must be manually specified (GH-964).
• Update bicep types to ms-henglu/bicep-types-az@6b9ca69

BUG FIXES:

• azapi_client_config data source: Fix a bug that specified subscription ID should not be overridden by Azure CLI default subscription ID.
• azapi_resource resource: Support moving from azurerm_storage_container whose id is a data-plane URL by leveraging the resource_manager_id attribute (GH-955).
• azapi_resource resource: Support moving from azurerm_key_vault_secret whose id is a data-plane URL by leveraging the resource_versionless_id attribute (GH-917).
• azapi_resource resource: Support moving from azurerm_key_vault_key whose id is a data-plane URL by leveraging the resource_versionless_id attribute.
• Fix panic in retry policy when HTTP response is nil (GH-985).

v2.6.1

Compare Source

DEPRECATIONS:

• azapi provider: The maximum_busy_retry_attempts field is deprecated and will be removed in the next major release. Please remove them from the azapi provider block. The provider will use the default value for this field.

BUG FIXES:

• Fix a regression issue when authenticating via Managed Identity (MSI).
• Fix a regression issue that default retry policy doesn't work.

v2.6.0

Compare Source

DEPRECATIONS:

• retry block: The multiplier and randomization_factor are deprecated and will be removed in the next major release. Please remove them from the retry block. The provider will use the default values for these fields.

ENHANCEMENTS:

• Use aztfauth for the shared authentication logic.
• Update bicep types to ms-henglu/bicep-types-az@a3cf29c

BUG FIXES:

• Fix a bug that invalid resource ID containing | character is not detected when validating the configuration.
• Fix a bug that schema validation fails to validate when the discriminator field is unknown.
• Fix the crash that occurs when the identity.type returns a value that is not a string.

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • Between 07:00 AM and 07:59 PM, only on Monday, Wednesday, and Thursday (* 7-19 * * 1,3,4)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (~> 2.10.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.