Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Sep 23, 2025

This PR contains the following updates:

Package Type Update Change
azurerm (source) required_provider minor 4.44.0 -> 4.49.0

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.49.0

Compare Source

FEATURES:

  • New Data Source: azurerm_graph_services_account (#​30697)
  • New Data Source: azurerm_oracle_exascale_database_storage_vault (#​30043)
  • New Resource: azurerm_api_management_workspace_policy_fragment (#​30678)
  • New Resource: azurerm_oracle_exascale_database_storage_vault (#​30043)

ENHANCEMENTS:

  • Data Source: azurerm_data_protection_backup_vault - add support for the identity.identity_ids property (#​29061)
  • azurerm_consumption_budget_management_group - remove the maximum count validation for the notification block (#​29200)
  • azurerm_consumption_budget_resource_group - remove the maximum count validation for the notification block (#​29200)
  • azurerm_consumption_budget_subscription - remove the maximum count validation for the notification block (#​29200)
  • azurerm_data_protection_backup_vault - add support for the identity.identity_ids property (#​29061)
  • azurerm_data_protection_backup_vault - add support for UserAssigned and SystemAssigned, UserAssigned values to the identity.type property (#​29061)
  • azurerm_monitor_data_collection_rule - improve validation for data_sources.*.name (#​30851)
  • azurerm_search_service - support upgrading the sku based on tier (#​30842)
  • azurerm_storage_queue - support migrating from storage_account_name to storage_account_id (#​30836)

BUG FIXES:

  • azurerm_application_insights - fix an issue that caused tags to be removed when other properties were updated (#​30758)
  • azurerm_container_registry - fix the name length validation to allow 50 rather than 49 (#​30858)
  • azurerm_function_app_flex_consumption - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_function_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_function_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_web_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_linux_web_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_mssql_database - fix validation for min_capacity and auto_pause_delay_in_minutes being set on non-serverless SKUs (#​30856)
  • azurerm_signalr_service_custom_certificate - remove unnecessary API requests and checks that could lead to a panic (#​30412)
  • azurerm_windows_function_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_windows_function_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_windows_web_app - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)
  • azurerm_windows_web_app_slot - the auth_settings block contents are now set into state when auth_settings.enabled is set to false (#​30781)

v4.48.0

Compare Source

FEATURES:

  • New Data Source: azurerm_oracle_autonomous_database_clone_from_backup (#​29633)
  • New Data Source: azurerm_oracle_autonomous_database_clone_from_database (#​29633)
  • New Resource: azurerm_oracle_autonomous_database_clone_from_backup (#​29633)
  • New Resource: azurerm_oracle_autonomous_database_clone_from_database (#​29633)

ENHANCEMENTS:

  • dependencies: containerapps - update to API version 2025-07-01 (#​30801)
  • dependencies: containerservice - update to API version 2025-07-01 (#​30719)
  • dependencies: go-azure-sdk - update to v0.20251007.1195632 (#​30799)
  • dependencies: guestconfiguration - update to API version 2024-04-05 (#​30642)
  • dependencies: search - update to API version 2025-05-01 (#​30314)
  • azurerm_kubernetes_cluster - add support for AzureLinux3 and Ubuntu2204 to the default_node_pool.os_sku property (#​30719)
  • azurerm_kubernetes_cluster - add support for the ai_toolchain_operator_enabled property (#​30713)
  • azurerm_kubernetes_cluster_node_pool - add support for AzureLinux3 and Ubuntu2204 to the os_sku property (#​30719)
  • azurerm_linux_virtual_machine_scale_set - add support for the resilient_vm_creation_enabled and resilient_vm_deletion_enabled properties (#​30204)
  • azurerm_network_watcher_flow_log - changing the target_resource_id property no longer forces the resource to be replaced (#​30776)
  • azurerm_notification_hub_namespace - add support for replication_region and zone_redundancy_enabled (#​30531)
  • azurerm_windows_virtual_machine_scale_set - add support for the resilient_vm_creation_enabled and resilient_vm_deletion_enabled properties (#​30204)

BUG FIXES:

  • azurerm_eventhub_namespace - maximum_throughput_units can be set to 0 when auto_inflate_enabled is disabled (#​30777)
  • azurerm_log_analytics_workspace - fix the default value for local_authentication_enabled (#​30759)
  • azurerm_mssql_database - add validation to ensure that min_capacity and auto_pause_delay_in_minutes can only be set on serverless dbs (#​30790)
  • azurerm_mssql_server - the azuread_administrator block now updates in place rather than being deleted/recreated (#​30742)
  • azurerm_network_watcher_flow_log - the target_resource_id property is now included in the update request payload resolving an issue where changing it failed to recreate or update the resource (#​30776)
  • azurerm_pim_eligible_role_assignment - improve filter used during List requests to prevent timeouts (#​30705)
  • azurerm_postgresql_flexible_server_virtual_endpoint - fix read error when in replica set in failover state (#​30789)

v4.47.0

Compare Source

FEATURES:

  • New Resource: azurerm_api_management_workspace_policy (#​30547)

ENHANCEMENTS:

  • dependencies: go-azure-sdk - update to v0.20250924.1155608 (#​30693)
  • azurerm_cognitive_account - add support for value AIServices to kind property (#​30423)
  • azurerm_cognitive_account - add the project_management_enabled property (#​30423)
  • azurerm_cognitive_account - add the network_injection property (#​30423)
  • azurerm_palo_alto_local_rulestack_rule - increase limit for priority to 1000000 (#​30712)
  • azurerm_stream_analytics_job - add support for the Msi value in the job_storage_account.authentication_mode property (#​30728)

BUG FIXES:

  • azurerm_management_group_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
  • azurerm_resource_group_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
  • azurerm_resource_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)
  • azurerm_storage_account - fix error that occurs around queue_properties when not specified (#​30746)
  • azurerm_subscription_policy_remediation - suppress casing difference on policy_definition_reference_id to avoid a perpetual diff as the API doesn't honour casing (#​30736)

v4.46.0

Compare Source

ENHANCEMENTS:

  • dependencies: frontdoor/webapplicationfirewallpolicies - update to API version 2025-03-01 (#​29742)
  • azurerm_cdn_frontdoor_firewall_policy - support for the captcha_cookie_expiration_in_minutes property and the CAPTCHA value in the custom_rule.action property (#​29742)
  • azurerm_cdn_frontdoor_security_policy - add update ability (#​30299)
  • azurerm_cognitive_account - add support for C2, C3, C4, D3, and S1 to sku_name (#​30655)
  • azurerm_flex_function_app - add support for the http_concurrency property (#​29678)
  • azurerm_kubernetes_cluster - add support for the api_server_access_profile.virtual_network_integration_enabled and api_server_access_profile.subnet_id properties (#​30559)
  • azurerm_machine_learning_workspace - add support for the service_side_encryption_enabled property (#​30478)
  • azurerm_mysql_flexible_server - add support for the managed_hsm_key_id property (#​30502)
  • azurerm_netapp_volume - add support for updating protocols (#​30643)
  • azurerm_netapp_volume_group_oracle - add support for updating protocols (#​30643)
  • azurerm_netapp_volume_group_sap_hana - add support for updating protocols (#​30643)
  • azurerm_postgresql_flexible_server - add support for the 17 value in the version property (#​30683)
  • azurerm_storage_queue - add support for the storage_account_id property (#​28752)

BUG FIXES:

  • azurerm_cdn_frontdoor_firewall_policy - fix the read function so it now correctly marks the resource as gone (#​30704)

v4.45.1

Compare Source

NOTES:

This release contains a Terraform Plugin SDK v2 version bump that prevents identity change validation from raising an error when prior identity is empty (all attributes are null).

BUG FIXES:

  • dependencies: hashicorp/terraform-plugin-sdk/v2 - update to v2.38.1 (#​30667)
  • azurerm_network_interface - ensure identity is set during non-refresh apply operations (#​30667)

v4.45.0

Compare Source

FEATURES:

  • New Action: azurerm_virtual_machine_power (#​30647)
  • New List Resource: azurerm_storage_account (#​30614)
  • New List Resource: azurerm_virtual_network (#​30614)

ENHANCEMENTS:

  • dependencies: go-azure-sdk - update to v0.20250908.1192604 (#​30644)
  • azurerm_kubernetes_cluster - add support for the network_profile.advanced_networking block (#​30434)
  • azurerm_storage_account - expiration_action supports Block (#​30599) (#​30599)
  • azurerm_subnet - add support for sharing_scope (#​30600)

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Sep 23, 2025
@hmcts-jenkins-a-to-c
Copy link
Contributor

hmcts-jenkins-a-to-c bot commented Sep 23, 2025

Plan Result (aat)

Plan: 1 to add, 5 to change, 0 to destroy.
  • Create
    • module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin
  • Update
    • azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["HOST"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PASS"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PORT"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["USER"]
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-DATABASE/ff57b9039f9544be979c275eb31b0769"
        name                    = "processor-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-HOST/2dc8dc1977504071bd90e0c4b8a591fe"
        name                    = "processor-POSTGRES-HOST"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-PASS/f96764ee7960495181d327706327af90"
        name                    = "processor-POSTGRES-PASS"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-PORT/e6b64e0e09e54e39828f8891d838e308"
        name                    = "processor-POSTGRES-PORT"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:22:40Z" -> (known after apply)
        id                      = "https://bulk-scan-aat.vault.azure.net/secrets/processor-POSTGRES-USER/9f01ce8315674da5994d66e4761258b7"
        name                    = "processor-POSTGRES-USER"
        tags                    = {
            "application"         = "bulk-scan-print"
            "autoShutdown"        = "true"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "staging"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin will be created
  + resource "azurerm_postgresql_flexible_server_active_directory_administrator" "pgsql_adadmin" {
      + id                  = (known after apply)
      + object_id           = "3c52c98b-07a3-4a97-92b9-298e86bb1ca9"
      + principal_name      = "DTS Platform Operations PostgreSQL Admin Access"
      + principal_type      = "Group"
      + resource_group_name = "bulk-scan-processor-flexible-postgres-db-v15-data-aat"
      + server_name         = "bulk-scan-processor-flexible-postgres-db-v15-aat"
      + tenant_id           = "531ff96d-0ae9-462a-8d2d-bec7c0b42082"
    }

Plan: 1 to add, 5 to change, 0 to destroy.

@hmcts-jenkins-a-to-c
Copy link
Contributor

hmcts-jenkins-a-to-c bot commented Sep 23, 2025

Plan Result (prod)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 1 to add, 5 to change, 1 to destroy.
  • Update
    • azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["HOST"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PASS"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["PORT"]
    • azurerm_key_vault_secret.flexible_secret_standard_format["USER"]
  • Replace
    • module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin
Change Result (Click me)
  # azurerm_key_vault_secret.flexible_secret_standard_format["DATABASE"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-DATABASE/8d2709eb815247cfbd969e34ec1b803b"
        name                    = "processor-POSTGRES-DATABASE"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["HOST"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-HOST/22b5cad58cd6486ab11e901432abbbc4"
        name                    = "processor-POSTGRES-HOST"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PASS"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-PASS/408559177e444d13b97a8dd3a30d1d01"
        name                    = "processor-POSTGRES-PASS"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["PORT"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-PORT/2cb775893a054a92aee474f5e676c2ef"
        name                    = "processor-POSTGRES-PORT"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.flexible_secret_standard_format["USER"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "flexible_secret_standard_format" {
      ~ expiration_date         = "2027-09-30T13:25:54Z" -> (known after apply)
        id                      = "https://bulk-scan-prod.vault.azure.net/secrets/processor-POSTGRES-USER/a52d84d0f7ea4178a5c0231ee4c2a71f"
        name                    = "processor-POSTGRES-USER"
        tags                    = {
            "application"         = "bulk-scan-print"
            "builtFrom"           = "https://github.com/HMCTS/bulk-scan-processor.git"
            "businessArea"        = "CFT"
            "contactSlackChannel" = "#rbs"
            "environment"         = "production"
            "managedBy"           = "Bulk Scanning and Printing"
            "source"              = "processor PostgreSQL"
        }
        # (9 unchanged attributes hidden)
    }

  # module.postgresql.azurerm_postgresql_flexible_server_active_directory_administrator.pgsql_adadmin must be replaced
-/+ resource "azurerm_postgresql_flexible_server_active_directory_administrator" "pgsql_adadmin" {
      ~ id                  = "/subscriptions/8999dec3-0104-4a27-94ee-6588559729d1/resourceGroups/bulk-scan-processor-flexible-postgres-db-v15-data-prod/providers/Microsoft.DBforPostgreSQL/flexibleServers/bulk-scan-processor-flexible-postgres-db-v15-prod/administrators/4d0554dd-fe60-424a-be9c-36636826d927" -> (known after apply)
      ~ object_id           = "4d0554dd-fe60-424a-be9c-36636826d927" -> "ef17f368-0aa5-43d5-9264-28080f83755e" # forces replacement
      ~ principal_name      = "DTS Platform Operations SC" -> "DTS Platform Operations PostgreSQL Admin Access SC" # forces replacement
        # (4 unchanged attributes hidden)
    }

Plan: 1 to add, 5 to change, 1 to destroy.

@renovate renovate bot changed the title Update Terraform azurerm to v4.45.1 Update Terraform azurerm to v4.46.0 Sep 26, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch 2 times, most recently from f7ad068 to 4ce78fa Compare September 30, 2025 13:17
@renovate renovate bot changed the title Update Terraform azurerm to v4.46.0 Update Terraform azurerm to v4.47.0 Oct 2, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 4ce78fa to 5a3cf67 Compare October 2, 2025 16:30
@renovate renovate bot changed the title Update Terraform azurerm to v4.47.0 Update Terraform azurerm to v4.48.0 Oct 14, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from 5a3cf67 to fcddc32 Compare October 14, 2025 20:36
@renovate renovate bot changed the title Update Terraform azurerm to v4.48.0 Update Terraform azurerm to v4.49.0 Oct 16, 2025
@renovate renovate bot force-pushed the renovate/azurerm-4.x branch from fcddc32 to f7f7931 Compare October 16, 2025 20:13
@renovate renovate bot enabled auto-merge (squash) October 17, 2025 12:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants