chore(deps): update terraform providers by renovate[bot] · Pull Request #502 · FinnPL/Homelab-Setup

renovate · 2026-04-20T18:53:42Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	`6.39.0` → `6.65.0`
cloudflare (source)	required_provider	minor	`5.18.0` → `5.25.0`
helm (source)	required_provider	minor	`3.1.1` → `3.3.0`
http (source)	required_provider	minor	`3.5.0` → `3.6.2`
kubernetes (source)	required_provider	minor	`3.0.1` → `3.2.1`
oci (source)	required_provider	minor	`8.8.0` → `8.29.0`
random (source)	required_provider	minor	`3.8.1` → `3.9.1`
tls (source)	required_provider	minor	`4.1.0` → `4.4.1`
unifi (source)	required_provider	minor	`1.0.0` → `1.1.0`
vault (source)	required_provider	minor	`5.10.1` → `5.12.0`

Release Notes

hashicorp/terraform-provider-aws (aws)

`v6.65.0`

Compare Source

NOTES:

resource/aws_dx_bgp_peer: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49590)
resource/aws_dx_hosted_private_virtual_interface: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49591)
resource/aws_dx_hosted_public_virtual_interface: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49591)
resource/aws_dx_hosted_transit_virtual_interface: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49591)
resource/aws_dx_public_virtual_interface: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49589)

FEATURES:

New List Resource: aws_api_gateway_deployment (#49820)
New List Resource: aws_apigatewayv2_integration (#48425)
New List Resource: aws_dms_migration_project (#49936)
New List Resource: aws_ec2_transit_gateway_policy_table_entry (#49256)
New List Resource: aws_glue_catalog_table (#49953)
New List Resource: aws_iam_group (#49994)
New List Resource: aws_iam_user_policy (#49993)
New List Resource: aws_lambda_resource_policy (#49866)
New List Resource: aws_network_acl (#50020)
New List Resource: aws_network_acl_rule (#49916)
New List Resource: aws_rds_cluster_instance (#50036)
New List Resource: aws_wafv2_ip_set (#50031)
New Resource: aws_dms_migration_project (#49936)
New Resource: aws_ec2_transit_gateway_policy_table_entry (#49256)
New Resource: aws_lambda_resource_policy (#49866)

ENHANCEMENTS:

data-source/aws_agentregistry_registry: Add discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint and discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint_override attributes (#49964)
data-source/aws_agentregistry_registry: Add encryption_configuration attribute (#49964)
resource/aws_agentregistry_registry: Add auto_detection_configuration and encryption_configuration configuration blocks (#49964)
resource/aws_agentregistry_registry: Add discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint and discovery_configuration.authorizer_configuration.custom_jwt_authorizer.private_endpoint_override configuration blocks (#49964)
resource/aws_api_gateway_deployment: Add resource identity support (#49820)
resource/aws_apigatewayv2_integration: Add resource identity support (#48425)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add callback_url attribute (#48517)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add client_authentication_method, on_behalf_of_token_exchange_config, private_endpoint, private_endpoint_override, and private_key_jwt_config arguments to oauth2_provider_config.custom_oauth2_provider_config configuration block (#48517)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add client_secret_config and client_secret_source arguments to oauth2_provider_config.custom_oauth2_provider_config, oauth2_provider_config.github_oauth2_provider_config, oauth2_provider_config.google_oauth2_provider_config, oauth2_provider_config.microsoft_oauth2_provider_config, oauth2_provider_config.salesforce_oauth2_provider_config, and oauth2_provider_config.slack_oauth2_provider_config configuration blocks (#48517)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add oauth2_provider_config.atlassian_oauth2_provider_config, oauth2_provider_config.included_oauth2_provider_config, and oauth2_provider_config.linkedin_oauth2_provider_config configuration blocks (#48517)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add oauth2_provider_config.microsoft_oauth2_provider_config.tenant_id, oauth2_provider_config.microsoft_oauth2_provider_config.tenant_id_wo, and oauth2_provider_config.microsoft_oauth2_provider_config.tenant_id_wo_version arguments (#48517)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add token_endpoint_auth_methods attribute to all oauth2_provider_config.*.oauth_discovery configuration blocks (#48517)
resource/aws_dx_bgp_peer: Add bgp_asn_long argument (#49590)
resource/aws_dx_hosted_private_virtual_interface: Add bgp_asn_long argument (#49591)
resource/aws_dx_hosted_public_virtual_interface: Add bgp_asn_long argument (#49591)
resource/aws_dx_hosted_transit_virtual_interface: Add bgp_asn_long argument (#49591)
resource/aws_dx_public_virtual_interface: Add bgp_asn_long argument (#49589)
resource/aws_glue_catalog_table: Add resource identity support (#49953)
resource/aws_glue_catalog_table: Change storage_descriptor.additional_locations, storage_descriptor.bucket_columns, storage_descriptor.columns.parameters, storage_descriptor.parameters, storage_descriptor.ser_de_info, storage_descriptor.ser_de_info.parameters, view_definition, view_definition.definer, view_definition.is_protected, view_definition.representations.validation_connection, view_definition.representations.view_expanded_text, view_definition.representations.view_original_text, view_definition.sub_object_version_ids, and view_definition.sub_objects to Optional and Computed (#49953)
resource/aws_iam_group: Add resource identity support (#49994)
resource/aws_iam_user_policy: Add resource identity support (#49993)
resource/aws_mailmanager_ingress_point: Add status_to_update argument (#49954)
resource/aws_network_acl: Add resource identity support (#50020)
resource/aws_network_acl_rule: Remove filtering of default Ipv4 and Ipv6 rules from list (#50017)
resource/aws_rds_cluster_instance: Add resource identity support (#50036)
resource/aws_wafv2_ip_set: Add Resource Identity support (#50031)

BUG FIXES:

resource/aws_agentregistry_registry: Correct attribute validation so that at least one of discovery_configuration.authorizer_configuration.custom_jwt_authorizer.allowed_audience, discovery_configuration.authorizer_configuration.custom_jwt_authorizer.allowed_clients, or discovery_configuration.authorizer_configuration.custom_jwt_authorizer.allowed_scopes is configured (#50025)
resource/aws_amplify_app: Fix BadRequestException: Environment variables cannot have an empty key when clearing auto_branch_creation_config.environment_variables (#49858)
resource/aws_amplify_branch: Fix BadRequestException: Environment variables cannot have an empty key when clearing environment_variables (#49858)
resource/aws_bedrockagent_data_source: Change data_source_configuration.managed_knowledge_base_connector_configuration.deletion_protection_configuration.deletion_protection_threshold to Optional and Computed (#49977)
resource/aws_mailmanager_traffic_policy: Make policy_statement optional (#49509)
resource/aws_secretsmanager_secret: Fix removal of all replica blocks not being detected as a change (#39235)
resource/aws_wafv2_rule_group: Fix field_to_match.single_header.name and field_to_match.single_query_argument.name rejecting values the AWS WAF API accepts, such as names containing . (#49984)
resource/aws_wafv2_web_acl: Fix field_to_match.single_header.name and field_to_match.single_query_argument.name rejecting values the AWS WAF API accepts, such as names containing . (#49984)

`v6.64.0`

Compare Source

FEATURES:

New Data Source: aws_accountaccess_application (#49553)
New Data Source: aws_accountaccess_entitlements (#49554)
New Data Source: aws_agentregistry_registry (#49806)
New Data Source: aws_rds_events (#49783)
New List Resource: aws_accountaccess_entitlement (#49552)
New List Resource: aws_agentregistry_registry (#49549)
New List Resource: aws_bedrock_model_invocation_job (#49877)
New List Resource: aws_dms_data_provider (#49897)
New List Resource: aws_dms_instance_profile (#49747)
New List Resource: aws_fis_safety_lever_state (#49841)
New List Resource: aws_lambda_alias (#49706)
New Resource: aws_accountaccess_entitlement (#49552)
New Resource: aws_agentregistry_registry (#49549)
New Resource: aws_bedrock_model_invocation_job (#49877)
New Resource: aws_dms_data_provider (#49897)
New Resource: aws_dms_instance_profile (#49747)
New Resource: aws_fis_safety_lever_state (#49841)

ENHANCEMENTS:

data-source/aws_workspaces_directory: Add workspace_access_properties.access_endpoint_config attribute (#49849)
resource/aws_appconfig_hosted_configuration_version: Add version_label argument (#49881)
resource/aws_bedrockagentcore_harness: Add model.bedrock_model_config.additional_params argument (#48498)
resource/aws_bedrockagentcore_harness: Add model.bedrock_model_config.api_format and model.openai_model_config.api_format arguments (#48521)
resource/aws_bedrockagentcore_harness: Add model.gemini_model_config.additional_params and model.openai_model_config.additional_params arguments (#48656)
resource/aws_bedrockagentcore_harness: Add model.litellm_model_config configuration block (#48656)
resource/aws_bedrockagentcore_harness: Add skill.aws_skills, skill.git, and skill.s3 configuration blocks (#48656)
resource/aws_bedrockagentcore_harness: Change max_tokens to Optional and Computed (#48656)
resource/aws_bedrockagentcore_harness: Change skill.path to Optional (#48656)
resource/aws_bedrockagentcore_harness: Change system_prompt to Required (#48656)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add Resource Identity support (#49900)
resource/aws_bedrockagentcore_oauth2_credential_provider: Add configurable resource timeouts (#49900)
resource/aws_cloudwatch_metric_alarm: Add warm_up_configuration configuration block (#49873)
resource/aws_db_instance: Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission (#49783)
resource/aws_ecs_capacity_provider: Add managed_instances_provider.auto_repair_configuration configuration block (#49763)
resource/aws_msk_replicator: Add kafka_cluster.client_authentication to configure mtls or sasl_scram authentication to an Apache Kafka cluster (#49265)
resource/aws_msk_replicator: Add kafka_cluster.encryption_in_transit to supply a custom root CA certificate for an Apache Kafka cluster (#49265)
resource/aws_msk_replicator: Support self-managed and on-premises Apache Kafka clusters as a replication source or target, via the kafka_cluster.apache_kafka_cluster block and the replication_info_list.source_kafka_cluster_id and target_kafka_cluster_id arguments (#49265)
resource/aws_rds_cluster: Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission (#49783)
resource/aws_rds_cluster_instance: Add warning_event_categories argument. When set, surface a warning diagnostic for each matching RDS event reported during create or update. Requires the rds:DescribeEvents IAM permission (#49783)

BUG FIXES:

data-source/aws_workspaces_directory: Fix setting workspace_access_properties: Invalid address to set errors (#49849)
resource/aws_bedrockagentcore_harness: Retry Role validation failed for '...'. Please verify that the role exists and its trust policy allows assumption by this service IAM eventual consistency errors on Create. Because this error is returned while waiting for a newly-created harness to stabilize, the failed harness is deleted and creation is restarted. You may see CloudTrail events that reflect this sequence of operations (#48656)
resource/aws_db_instance: Fix error when restoring multi-az SQL Server from snapshot. (#49846)
resource/aws_rds_global_cluster: Fix potential eventual consistency error when re-creating resource. (#49804)

`v6.63.0`

Compare Source

FEATURES:

New List Resource: aws_accountaccess_application (#49551)
New List Resource: aws_key_pair (#49712)
New List Resource: aws_lambdamicrovms_image (#49724)
New List Resource: aws_lambdamicrovms_microvm (#48984)
New List Resource: aws_mailmanager_archive (#49580)
New List Resource: aws_opensearchserverless_access_policy (#49717)
New List Resource: aws_opensearchserverless_lifecycle_policy (#49718)
New List Resource: aws_opensearchserverless_security_config (#49769)
New List Resource: aws_opensearchserverless_security_policy (#49770)
New List Resource: aws_opensearchserverless_vpc_endpoint (#49774)
New Resource: aws_accountaccess_application (#49551)
New Resource: aws_datazone_policy_grant (#47050)
New Resource: aws_lambdamicrovms_microvm (#48984)
New Resource: aws_mailmanager_archive (#49580)

ENHANCEMENTS:

data-source/aws_dx_connection: Add prefix_pool_size_ipv4, prefix_pool_size_ipv6, prefix_pool_unallocated_count_ipv4, and prefix_pool_unallocated_count_ipv6 attributes (#49711)
data-source/aws_dx_connection: Add rate_limiter_status attribute (#48910)
data-source/aws_eks_cluster: Add pod_gc_controller_config attribute to the kube_controller_manager_config configuration block (#49728)
data-source/aws_eks_cluster_versions: Add pod_gc_controller_config attribute to the control_plane_component_config.kube_controller_manager_config configuration block (#49730)
resource/aws_bedrockagentcore_gateway_target: Add Resource Identity support (#48706)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.http.agentcore_runtime.schema and target_configuration.http.passthrough configuration blocks (#48704)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.inference configuration block (#48705)
resource/aws_bedrockagentcore_gateway_target: Add target_configuration.mcp.connector configuration block (#48706)
resource/aws_dx_connection: Add prefix_pool_size_ipv4, prefix_pool_size_ipv6, prefix_pool_unallocated_count_ipv4, and prefix_pool_unallocated_count_ipv6 attributes (#49711)
resource/aws_dx_connection: Add rate_limiter_status attribute (#48910)
resource/aws_dx_hosted_private_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 attributes (#49711)
resource/aws_dx_hosted_private_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_hosted_private_virtual_interface_accepter: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_hosted_public_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_hosted_transit_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 attributes (#49711)
resource/aws_dx_hosted_transit_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_hosted_transit_virtual_interface_accepter: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_lag: Add rate_limiter_status attribute (#48910)
resource/aws_dx_private_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_private_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_public_virtual_interface: Add rate_limit argument (#48910)
resource/aws_dx_transit_virtual_interface: Add prefix_pool_allocated_count_ipv4 and prefix_pool_allocated_count_ipv6 arguments (#49711)
resource/aws_dx_transit_virtual_interface: Add rate_limit argument (#48910)
resource/aws_eks_cluster: Add pod_gc_controller_config argument to the kube_controller_manager_config configuration block (#49725)
resource/aws_key_pair: Add resource identity support (#49712)
resource/aws_synthetics_canary: Add kms_key_arn argument (#49406)

BUG FIXES:

provider: Fix assume_role_with_web_identity.web_identity_token being rejected when AWS_WEB_IDENTITY_TOKEN_FILE is set (#49671)
resource/aws_db_parameter_group: Fix name_prefix length validation to allow the correct maximum of 229 characters (#49197)
resource/aws_docdb_cluster_parameter_group: Fix name_prefix length validation to allow the correct maximum of 229 characters (#49197)
resource/aws_observabilityadmin_telemetry_rule_for_organization: Fix updates when all_regions is enabled (#49743)
resource/aws_rds_cluster_parameter_group: Fix name_prefix length validation to allow the correct maximum of 229 characters (#49197)
resource/aws_redshift_namespace_registration: Fixes errors when Importing by ID (#49690)
resource/aws_redshift_namespace_registration: Fixes errors when Importing by Identity (#49690)
resource/aws_s3_bucket: Setting object_lock_configuration.object_lock_enabled to Enabled no longer forces a replacement (#36530)
resource/aws_s3_bucket: Setting object_lock_enabled to true no longer forces a replacement (#36530)

`v6.62.0`

Compare Source

NOTES:

resource/aws_db_instance: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
resource/aws_rds_cluster: When manage_master_user_password is enabled, the managed secret's automatic rotation can now be disabled using aws_secretsmanager_secret_rotation with rotation_enabled = false (#49659)
resource/aws_savingsplans_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49264)

FEATURES:

New List Resource: aws_db_instance (#49602)
New List Resource: aws_dsql_cluster (#49657)
New List Resource: aws_dsql_cluster_policy (#49676)
New List Resource: aws_ecr_lifecycle_policy (#49696)
New List Resource: aws_ecs_cluster (#49682)
New List Resource: aws_pinpointsmsvoicev2_keyword (#48967)
New Resource: aws_pinpointsmsvoicev2_keyword (#48967)
New Resource: aws_sesv2_multi_region_endpoint (#49660)

ENHANCEMENTS:

data-source/aws_resiliencehubv2_service: Add associated_system.user_journey_ids attribute (#49603)
resource/aws_bedrockagentcore_browser: Add plan-time validation of name (#48766)
resource/aws_bedrockagentcore_memory: Add Resource Identity support (#48766)
resource/aws_bedrockagentcore_memory: Allow adding indexed_key entries in place instead of forcing a new resource (#48877)
resource/aws_bedrockagentcore_memory: Change indexed_key from List to Set to ignore ordering (#48877)
resource/aws_bedrockagentcore_memory_strategy: Add Resource Identity support (#48766)
resource/aws_bedrockagentcore_memory_strategy: Add configuration.self_managed_configuration argument in support of self-managed strategies (#48766)
resource/aws_bedrockagentcore_memory_strategy: Add memory_record_schema argument (#48765)
resource/aws_bedrockagentcore_memory_strategy: Add plan-time validation of description (#48766)
resource/aws_bedrockagentcore_memory_strategy: Change description to Optional and Computed (#48766)
resource/aws_cloudfront_function: Validate name, code, and comment against CloudFront's documented constraints during plan instead of failing at apply time (#49395)
resource/aws_db_instance: Add resource identity support (#49602)
resource/aws_dsql_cluster: Add resource identity support (#49657)
resource/aws_dx_private_virtual_interface: Add bgp_asn_long argument (#49587)
resource/aws_dx_transit_virtual_interface: Add bgp_asn_long argument (#49588)
resource/aws_ecs_cluster: Add resource identity support (#49682)
resource/aws_elasticache_replication_group: Add auth_token_wo and auth_token_wo_version write-only arguments (#49268)
resource/aws_observabilityadmin_centralization_rule_for_organization: Add tag_propagation_configuration configuration block to rule.destination.destination_logs_configuration, and tag_propagation_status and tag_propagation_failure_reason attributes (#49656)
resource/aws_resiliencehubv2_service: Add user_journey_ids argument to the associated_system configuration block (#49603)
resource/aws_secretsmanager_secret_rotation: rotation_enabled is now configurable (previously read-only) and can be set to false to disable rotation for a secret. This is particularly useful for secrets whose rotation is otherwise managed by AWS, such as an RDS master user password secret created with manage_master_user_password (#49659)
resource/aws_secretsmanager_secret_rotation: rotation_rules is now optional, and must be omitted when rotation_enabled is false (#49659)
resource/aws_workspaces_directory: Add workspace_access_properties.access_endpoint_config argument (#49668)

BUG FIXES:

resource/aws_bedrockagentcore_harness: Correct plan-time validation of name (#48766)
resource/aws_bedrockagentcore_memory_strategy: Force resource replacement when name is modified (#48766)
resource/aws_bedrockagentcore_registry: Correct plan-time validation of name (#48766)
resource/aws_cloudwatch_log_resource_policy: Fixes error when importing by identity when using resource-scope (#49614)
resource/aws_elasticache_cluster: Add plan-time validation to reject transit_encryption_enabled for Redis and Valkey engines, which are only supported on aws_elasticache_replication_group (#49114)
resource/aws_resiliencehubv2_input_source: Change resource_configuration.resource_tag from List to Set to ignore ordering (#49585)
resource/aws_s3_account_public_access_block: Fixes eventual consistency issue on creation (#49687)
resource/aws_savingsplan_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49678)
resource/aws_savingsplan_savings_plan: Because we cannot easily test this functionality, it is best effort and we ask for community help in testing (#49679)
resource/aws_savingsplan_savings_plan: Mark purchase_time as Optional and Computed (#49679)
resource/aws_savingsplan_savings_plan: Treat queued as a target state during creation (#49678)
resource/aws_savingsplans_savings_plan: Mark upfront_payment_amount as Computed to fix a Provider produced inconsistent result after apply error for No Upfront savings plans (#49264)

`v6.61.0`

Compare Source

FEATURES:

New Data Source: aws_odb_iam_role_association (#46794)
New List Resource: aws_ec2_ami_launch_permission (#49461)
New List Resource: aws_iam_instance_profile (#49576)
New List Resource: aws_lambdacore_network_connector (#49387)
New List Resource: aws_mailmanager_relay (#49394)
New List Resource: aws_resiliencehubv2_assertion (#48329)
New List Resource: aws_resiliencehubv2_service_function (#48328)
New List Resource: aws_resiliencehubv2_user_journey (#48330)
New Resource: aws_dsql_cluster_policy (#47748)
New Resource: aws_lambdacore_network_connector (#49387)
New Resource: aws_lambdamicrovms_image (#48950)
New Resource: aws_mailmanager_relay (#49394)
New Resource: aws_odb_iam_role_association (#46794)
New Resource: aws_resiliencehubv2_assertion (#48329)
New Resource: aws_resiliencehubv2_service_function (#48328)
New Resource: aws_resiliencehubv2_user_journey (#48330)
New Resource: aws_securityhub_feature_v2 (#49503)

ENHANCEMENTS:

data-source/aws_fsx_ontap_file_system: Add network_type attribute (#49512)
data-source/aws_fsx_windows_file_system: Add network_type attribute (#49514)
data-source/aws_lb_listener_rule: Add condition.source_ip.ip_address_type attribute (#49476)
data-source/aws_resiliencehubv2_service: Add associated_system attribute (#49498)
data-source/aws_vpclattice_service: Add idle_timeout_seconds attribute (#49540)
resource/aws_bedrockagentcore_harness: Adds attribute environment_actual (#48815)
resource/aws_ec2_ami_launch_permission: Add resource identity support (#49461)
resource/aws_fsx_ontap_file_system: Add network_type argument (#49512)
resource/aws_fsx_openzfs_file_system: Add network_type argument (#49513)
resource/aws_fsx_windows_file_system: Add network_type argument (#49514)
resource/aws_lb_listener_rule: Add condition.source_ip.ip_address_type argument (#49476)
resource/aws_lb_listener_rule: Change condition.source_ip.values to Optional (#49476)
resource/aws_medialive_channel: Add resource identity (#49532)
resource/aws_medialive_input: Add resource identity support (#49534)
resource/aws_medialive_input_security_group: Add resource identity support (#49537)
resource/aws_medialive_multiplex: Add resource identity support (#49557)
resource/aws_medialive_multiplex_program: Add resource identity (#49561)
resource/aws_observabilityadmin_centralization_rule_for_organization: Add encryption_scope argument to the logs_encryption_configuration configuration block (#49563)
resource/aws_pinpointsmsvoicev2_phone_number: Add status attribute (#49485)
resource/aws_pinpointsmsvoicev2_phone_number: Add wait_for_active argument to allow create and update to return without waiting for the phone number to reach ACTIVE status. Number types gated on carrier or registration approval (for example TEN_DLC, TOLL_FREE, or any number submitted with registration_id) can remain PENDING for days to weeks, which previously caused terraform apply to time out (#49485)
resource/aws_resiliencehubv2_service: Add associated_system configuration block (#49498)
resource/aws_vpclattice_service: Add idle_timeout_seconds argument (#49540)

BUG FIXES:

list-resource/aws_bedrockagentcore_harness: Prevents error when remote resource disappears during List (#49446)
list-resource/aws_bedrockagentcore_online_evaluation_config: Prevents error when remote resource disappears during List (#49479)
list-resource/aws_bedrockagentcore_policy_engine: Prevents error when remote resource disappears during List (#49478)
list-resource/aws_bedrockagentcore_registry: Prevents error when remote resource disappears during List (#49480)
list-resource/aws_bedrockagentcore_resource_policy: Prevents error when remote resource disappears during List (#49481)
resource/aws_bedrockagentcore_harness: Fix Provider produced inconsistent result after apply error for environment (#48815)
resource/aws_bedrockagentcore_online_evaluation_config: Retries additional IAM propagation errors on creation (#49479)
resource/aws_mailmanager_ingress_point: Include FAILED as a pending state while an ingress point is deleting (#49502)
resource/aws_nat_gateway: Allow updating secondary_private_ip_address_count in-place for private NAT gateways (#47477)
resource/aws_observabilityadmin_telemetry_enrichment: Prevent couldn't find resource (21 retries) errors on delete if enrichment has never been started in the Region (#49502)
resource/aws_observabilityadmin_telemetry_evaluation: Include NOT_STARTED as a target state while the resource is deleting (#49502)

`v6.60.0`

Compare Source

FEATURES:

New List Resource: aws_db_parameter_group (#49418)
New List Resource: aws_resiliencehubv2_input_source (#48327)
New Resource: aws_resiliencehubv2_input_source (#48327)

ENHANCEMENTS:

resource/aws_db_parameter_group: Add Resource Identity support (#49418)

BUG FIXES:

resource/aws_bedrockagentcore_gateway_target: Prevent state inconsistencies caused by the service-managed policy session header (#49447)
resource/aws_network_acl_rule: Fix Missing Resource Identity After Read errors. This fixes a regression introduced in v6.59.0 (#49470)

`v6.59.0`

Compare Source

FEATURES:

New Data Source: aws_rds_snapshots (#49259)
New Data Source: aws_resiliencehubv2_policy (#48324)
New Data Source: aws_resiliencehubv2_service (#48326)
New Data Source: aws_resiliencehubv2_system (#48325)
New Data Source: aws_vpclattice_service_network_service_associations (#42680)
New List Resource: aws_backup_plan (#49329)
New List Resource: aws_backup_selection (#49283)
New List Resource: aws_backup_vault (#49423)
New List Resource: aws_bedrockagentcore_gateway_rule (#48804)
New List Resource: aws_mailmanager_ingress_point (#49322)
New List Resource: aws_neptunegraph_private_graph_endpoint (#45929)
New List Resource: aws_networkfirewall_container_association (#49321)
New List Resource: aws_pinpointsmsvoicev2_resource_policy (#48771)
New List Resource: aws_pinpointsmsvoicev2_sender_id (#46472)
New List Resource: aws_resiliencehubv2_service (#48323)
New List Resource: aws_resiliencehubv2_system (#48322)
New List Resource: aws_ssm_patch_baseline (#49332)
New Resource: aws_bedrockagentcore_gateway_rule (#48804)
New Resource: aws_mailmanager_ingress_point (#49322)
New Resource: aws_neptunegraph_private_graph_endpoint (#45929)
New Resource: aws_networkfirewall_container_association (#49321)
New Resource: aws_pinpointsmsvoicev2_resource_policy (#48771)
New Resource: aws_pinpointsmsvoicev2_sender_id (#46472)
New Resource: aws_resiliencehubv2_service (#48323)
New Resource: aws_resiliencehubv2_system (#48322)

ENHANCEMENTS:

data-source/aws_eks_cluster: Add kube_api_server_config, kube_controller_manager_config, and kube_scheduler_config attributes (#49420)
data-source/aws_eks_clus

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

github-actions · 2026-04-20T18:54:16Z

Terraform Plan (00-global)

→ No Resource Changes!

Triggered by @renovate[bot], Commit: 12c938f374b2c0cec8fa6587c5481bc255d4bf62

github-actions · 2026-04-20T18:54:22Z

Terraform Plan (cloud-edge)

→ No Resource Changes!

Triggered by @renovate[bot], Commit: 12c938f374b2c0cec8fa6587c5481bc255d4bf62

github-actions · 2026-04-20T18:54:54Z

Terraform Plan (03-services)

→ No Resource Changes!

Triggered by @renovate[bot], Commit: 12c938f374b2c0cec8fa6587c5481bc255d4bf62

github-actions · 2026-04-23T21:47:35Z

Terraform Plan (02-infrastructure)

→ Resource Changes: 1 to create, 0 to update, 0 to re-create, 0 to delete, 0 ephemeral, 0 to import.

✨ Create

local_sensitive_file.ansible_ssh_key

+ content              = (sensitive value)
+ content_base64sha256 = (known after apply)
+ content_base64sha512 = (known after apply)
+ content_md5          = (known after apply)
+ content_sha1         = (known after apply)
+ content_sha256       = (known after apply)
+ content_sha512       = (known after apply)
+ directory_permission = "0700"
+ file_permission      = "0600"
+ filename             = "./.ansible/ssh_key"
+ id                   = (known after apply)

Triggered by @renovate[bot], Commit: e245ccf6350b7be4665d9b8bfe67d84f7f3570b6

github-actions · 2026-04-25T04:57:37Z

Terraform Plan (01-network)

→ Resource Changes: 2 to create, 6 to update, 0 to re-create, 0 to delete, 0 ephemeral, 0 to import.

✨ Create

unifi_device.tf_cgu

+ allow_adoption    = true
+ disabled          = (known after apply)
+ forget_on_destroy = true
+ id                = (known after apply)
+ mac               = "28:70:4e:3e:fb:15"
+ name              = "Vieta"
+ site              = "default"

+ port_override {
+     name            = "tf-Port1"
+     number          = 1
+     port_profile_id = "694523b42cdb653b685898e8"
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port2"
+     number          = 2
+     port_profile_id = "6945245f2cdb653b685898f1"
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port3"
+     number          = 3
+     port_profile_id = "6945245f2cdb653b685898f1"
      # (2 unchanged attributes hidden)
  }

unifi_user.tf_mesh_router

+ allow_existing         = true
+ fixed_ip               = "10.10.1.90"
+ hostname               = (known after apply)
+ id                     = (known after apply)
+ ip                     = (known after apply)
+ local_dns_record       = "mesh-router.athena"
+ mac                    = "bc:24:11:00:00:90"
+ name                   = "tf-Mesh-Router"
+ network_id             = "694487da2cdb653b68588dbe"
+ note                   = "Managed by Terraform - Tailscale subnet router for clustermesh"
+ site                   = (known after apply)
+ skip_forget_on_destroy = false

♻️ Update

unifi_device.usw_ultra

  id                = "69629e562cdb653b685a2127"
  name              = "USW-Ultra"
  # (5 unchanged attributes hidden)

- port_override {
-     aggregate_num_ports = 0 -> null
-     name                = "tf-Port1" -> null
-     number              = 1 -> null
-     port_profile_id     = "6962b52d2cdb653b685a22e0" -> null
      # (2 unchanged attributes hidden)
  }
- port_override {
-     aggregate_num_ports = 0 -> null
-     name                = "tf-Port2" -> null
-     number              = 2 -> null
-     port_profile_id     = "6962b52d2cdb653b685a22e0" -> null
      # (2 unchanged attributes hidden)
  }
- port_override {
-     aggregate_num_ports = 0 -> null
-     name                = "tf-Port3" -> null
-     number              = 3 -> null
-     port_profile_id     = "6962b52d2cdb653b685a22e0" -> null
      # (2 unchanged attributes hidden)
  }
- port_override {
-     aggregate_num_ports = 0 -> null
-     name                = "tf-Port4" -> null
-     number              = 4 -> null
-     poe_mode            = "off" -> null
      # (2 unchanged attributes hidden)
  }
- port_override {
-     aggregate_num_ports = 0 -> null
-     name                = "tf-Port5" -> null
-     number              = 5 -> null
-     port_profile_id     = "6962b52d2cdb653b685a22e0" -> null
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port1"
+     number          = 1
+     port_profile_id = "6962b52d2cdb653b685a22e0"
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port2"
+     number          = 2
+     port_profile_id = "6962b52d2cdb653b685a22e0"
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port3"
+     number          = 3
+     port_profile_id = "6962b52d2cdb653b685a22e0"
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port4"
+     number          = 4
+     port_profile_id = "6962b52d2cdb653b685a22e0"
      # (2 unchanged attributes hidden)
  }
+ port_override {
+     name            = "tf-Port5"
+     number          = 5
+     port_profile_id = "6962b52d2cdb653b685a22e0"
      # (2 unchanged attributes hidden)
  }

unifi_network.tf_vlan_athena

  id                         = "694487da2cdb653b68588dbe"
! igmp_snooping              = false -> true
  name                       = "tf-Athena"
  # (49 unchanged attributes hidden)

unifi_network.tf_vlan_default

  id                         = "694541612cdb653b68589b05"
! igmp_snooping              = false -> true
  name                       = "tf-Default"
  # (49 unchanged attributes hidden)

unifi_user.tf_talos_worker_1

- dev_id_override        = 4133 -> null
  id                     = "69769463ebb51e7e10272f60"
  name                   = "tf-Talos-Worker-1"
  # (12 unchanged attributes hidden)

unifi_user.tf_talos_worker_2

- dev_id_override        = 4133 -> null
  id                     = "697695feebb51e7e10272fa9"
  name                   = "tf-Talos-Worker-2"
  # (12 unchanged attributes hidden)

unifi_user.tf_talos_worker_3

- dev_id_override        = 4133 -> null
  id                     = "6987b83b312cbf652a03562f"
  name                   = "tf-Talos-Worker-3"
  # (12 unchanged attributes hidden)

Triggered by @renovate[bot], Commit: e245ccf6350b7be4665d9b8bfe67d84f7f3570b6

github-actions · 2026-08-14T20:55:15Z

Terraform Plan (tailscale)

→ No Resource Changes!

Triggered by @renovate[bot], Commit: 12c938f374b2c0cec8fa6587c5481bc255d4bf62

renovate Bot added the dependencies Pull requests that update a dependency file label Apr 20, 2026

renovate Bot temporarily deployed to Terraform April 20, 2026 18:53 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from bbf8e3f to 0d2cb53 Compare April 23, 2026 01:36

renovate Bot temporarily deployed to Terraform April 23, 2026 01:36 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 0d2cb53 to d4b39a1 Compare April 23, 2026 21:46

renovate Bot temporarily deployed to Terraform April 23, 2026 21:46 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from d4b39a1 to ed32101 Compare April 23, 2026 21:49

renovate Bot temporarily deployed to Terraform April 23, 2026 21:49 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from ed32101 to c45d00a Compare April 25, 2026 04:56

renovate Bot temporarily deployed to Terraform April 25, 2026 04:57 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from c45d00a to 9a6068d Compare April 26, 2026 16:41

renovate Bot temporarily deployed to Terraform April 26, 2026 16:41 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 9a6068d to 98b0631 Compare April 28, 2026 20:27

renovate Bot temporarily deployed to Terraform May 1, 2026 14:37 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 51cf5c5 to b7551f6 Compare May 7, 2026 01:24

renovate Bot temporarily deployed to Terraform May 7, 2026 01:24 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from b7551f6 to 308b619 Compare May 7, 2026 04:59

renovate Bot temporarily deployed to Terraform May 7, 2026 05:00 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 308b619 to 127727a Compare May 13, 2026 12:36

renovate Bot temporarily deployed to Terraform May 13, 2026 12:36 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 127727a to 4671091 Compare May 13, 2026 21:42

renovate Bot temporarily deployed to Terraform May 13, 2026 21:42 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 4671091 to 9d76fc2 Compare May 14, 2026 20:29

renovate Bot temporarily deployed to Terraform May 14, 2026 20:29 Inactive

renovate Bot force-pushed the renovate/terraform-providers branch from 9d76fc2 to ab2aaae Compare May 15, 2026 12:14

chore(deps): update terraform providers

12c938f

Navigation Menu

chore(deps): update terraform providers - #502

chore(deps): update terraform providers#502
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/terraform-providers

renovate Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 20, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 23, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 25, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Aug 14, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v6.65.0

v6.64.0

v6.63.0

v6.62.0

v6.61.0

v6.60.0

v6.59.0

Configuration

Uh oh!

github-actions Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan (00-global)

Uh oh!

github-actions Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan (cloud-edge)

Uh oh!

github-actions Bot commented Apr 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan (03-services)

Uh oh!

github-actions Bot commented Apr 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan (02-infrastructure)

✨ Create

Uh oh!

github-actions Bot commented Apr 25, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan (01-network)

✨ Create

♻️ Update

Uh oh!

github-actions Bot commented Aug 14, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Terraform Plan (tailscale)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Apr 20, 2026 •

edited

Loading

`v6.65.0`

`v6.64.0`

`v6.63.0`

`v6.62.0`

`v6.61.0`

`v6.60.0`

`v6.59.0`

github-actions Bot commented Apr 20, 2026 •

edited

Loading

github-actions Bot commented Apr 20, 2026 •

edited

Loading

github-actions Bot commented Apr 20, 2026 •

edited

Loading

github-actions Bot commented Apr 23, 2026 •

edited

Loading

github-actions Bot commented Apr 25, 2026 •

edited

Loading

github-actions Bot commented Aug 14, 2026 •

edited

Loading