Skip to content

Repository navigation

Update Terraform providers and patch Go security vulnerabilities - #41

Merged
adit-chandra merged 5 commits into
mainfrom
dependabot/terraform/examples/aws/providers-3d83ed30dc
Oct 14, 2026
Merged

Update Terraform providers and patch Go security vulnerabilities#41
adit-chandra merged 5 commits into
mainfrom
dependabot/terraform/examples/aws/providers-3d83ed30dc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 8, 2026 •
edited by adit-chandra
Loading

Copy link
Copy Markdown
Contributor

Updates the AWS, Azure, and GCP Terraform providers across modules and examples, and fixes the Go vulnerabilities that blocked the security checks.

Both Go modules now require golang.org/x/net v0.60.0 and Go 1.26.9, including the transitive dependency updates required by x/net. The supervisor image builds with Go 1.27.2. These updates address CVE-2026-78667, CVE-2026-78669, and CVE-2026-97031.

Validation: local go mod verify, go test -race ./..., and Kubernetes CRD admission validation passed. All nine CI checks pass at 4c9d468, including source and image security.

Bumps the providers group with 1 update in the /examples/aws directory: hashicorp/aws.
Bumps the providers group with 1 update in the /examples/azure directory: hashicorp/azurerm.
Bumps the providers group with 1 update in the /examples/gcp directory: hashicorp/google.
Bumps the providers group with 1 update in the /modules/aws directory: hashicorp/aws.
Bumps the providers group with 1 update in the /modules/azure directory: hashicorp/azurerm.
Bumps the providers group with 1 update in the /modules/gcp directory: hashicorp/google.

Updates hashicorp/aws from 6.66.0 to 6.67.0

Release notes

Sourced from hashicorp/aws's releases.

v6.67.0

6.67.0 (September 30, 2026)

NOTES:

  • resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

  • New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
  • New List Resource: aws_default_security_group (#50120)
  • New List Resource: aws_directory_service_ip_route (#50138)
  • New List Resource: aws_directoryservicedata_user (#50001)
  • New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
  • New Resource: aws_directory_service_ip_route (#50138)
  • New Resource: aws_directory_service_ip_routes_exclusive (#50204)
  • New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

  • resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#50189)
  • resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#50189)
  • resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#49746)
  • resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#49746)
  • resource/aws_default_security_group: Add Resource Identity support (#50120)
  • resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#50193)
  • resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#48525)
  • resource/aws_sns_topic: Add maximum_message_size argument (#50111)

BUG FIXES:

  • list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#50133)
  • resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#50206)
  • resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#50084)
  • resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#50088)
  • resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#49851)
  • resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#48076)
Changelog

Sourced from hashicorp/aws's changelog.

6.67.0 (September 30, 2026)

NOTES:

  • resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

  • New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
  • New List Resource: aws_default_security_group (#50120)
  • New List Resource: aws_directory_service_ip_route (#50138)
  • New List Resource: aws_directoryservicedata_user (#50001)
  • New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
  • New Resource: aws_directory_service_ip_route (#50138)
  • New Resource: aws_directory_service_ip_routes_exclusive (#50204)
  • New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

  • resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#50189)
  • resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#50189)
  • resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#49746)
  • resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#49746)
  • resource/aws_default_security_group: Add Resource Identity support (#50120)
  • resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#50193)
  • resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#48525)
  • resource/aws_sns_topic: Add maximum_message_size argument (#50111)

BUG FIXES:

  • list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#50133)
  • resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#50206)
  • resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#50084)
  • resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#50088)
  • resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#49851)
  • resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#48076)
Commits
  • e449e05 chore: prepare v6.67.0 release (#50214)
  • 1444675 Update CHANGELOG.md for #50204
  • de921e3 Merge pull request #50204 from hashicorp/f-ds-ip-routes-exclusive
  • 2c79a82 Merge pull request #50138 from hashicorp/f-ad-add-ip
  • df82274 Merge remote-tracking branch 'origin/f-ad-add-ip' into f-ds-ip-routes-exclusive
  • 886c0fa ds/ip_route: keep flatten a plain copy; preserve equivalent CIDR spelling in ...
  • 80dd996 Update CHANGELOG.md for #50001
  • 106ecf5 Merge remote-tracking branch 'origin/f-ad-add-ip' into f-ds-ip-routes-exclusive
  • c948f4f Merge pull request #50001 from hashicorp/f-new-resource-aws_directoryserviced...
  • 5ee8b00 ds/ip_routes_exclusive: use shared VPC test template
  • Additional commits viewable in compare view

Updates hashicorp/azurerm from 5.7.0 to 5.8.0

Release notes

Sourced from hashicorp/azurerm's releases.

v5.8.0

5.8.0 (October 1, 2026)

FEATURES:

  • New Action: azurerm_data_protection_resource_guard_unlock_delete (#28306)
  • New Data Source: azurerm_oracle_autonomous_database_cross_region_disaster_recovery (#30167)
  • New List Resource: azurerm_dns_a_record (#33263)
  • New List Resource: azurerm_dns_cname_record (#33264)
  • New List Resource: azurerm_dns_txt_record (#33269)
  • New List Resource: azurerm_lb_probe (#33459)
  • New List Resource: azurerm_monitor_workspace (#33375)
  • New List Resource: azurerm_postgresql_flexible_server_firewall_rule (#33377)
  • New List Resource: azurerm_storage_account_network_rules (#33447)
  • New List Resource: azurerm_storage_container (#33523)
  • New Resource: azurerm_oracle_autonomous_database_cross_region_disaster_recovery (#30167)

ENHANCEMENTS:

  • dependencies: communication - update API version to 2026-03-18 (#32802)
  • dependencies: go-azure-sdk - update to v0.20260928.1201942 (#33524)
  • azurerm_linux_function_app_slot - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#33520)
  • azurerm_linux_function_app - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#33520)
  • azurerm_mysql_flexible_database - suppress persistent diffs on charset and collation when using the utf8 aliases as the API now returns utf8mb3 prefixed values (#33138)
  • azurerm_netapp_volume_group_oracle - allow volume.storage_quota_in_gb minimum of 50 (previously 100) (#33518)
  • azurerm_netapp_volume_group_sap_hana - allow volume.storage_quota_in_gb minimum of 50 (previously 100) (#33518)
  • azurerm_postgresql_flexible_server - improve validation for storage_mb to allow increments of 1024 for storage_type of PremiumV22_LRS (#33197)
  • azurerm_public_ip_prefix - support updating sku in-place. (#33480)
  • azurerm_storage_account - prevent replacement of resource when account_kind changes from StorageV2 to Storage as Storage is deprecated and can no longer be used to create accounts (#33531)
  • azurerm_storage_container - add Resource Identity support (#33523)

BUG FIXES:

  • azurerm_container_app_job - the event_stream_endpoint and outbound_ip_addresses properties are now set into state (#33513)
Changelog

Sourced from hashicorp/azurerm's changelog.

5.8.0 (October 1, 2026)

FEATURES:

  • New Action: azurerm_data_protection_resource_guard_unlock_delete (#28306)
  • New Data Source: azurerm_oracle_autonomous_database_cross_region_disaster_recovery (#30167)
  • New List Resource: azurerm_dns_a_record (#33263)
  • New List Resource: azurerm_dns_cname_record (#33264)
  • New List Resource: azurerm_dns_txt_record (#33269)
  • New List Resource: azurerm_lb_probe (#33459)
  • New List Resource: azurerm_monitor_workspace (#33375)
  • New List Resource: azurerm_postgresql_flexible_server_firewall_rule (#33377)
  • New List Resource: azurerm_storage_account_network_rules (#33447)
  • New List Resource: azurerm_storage_container (#33523)
  • New Resource: azurerm_oracle_autonomous_database_cross_region_disaster_recovery (#30167)

ENHANCEMENTS:

  • dependencies: communication - update API version to 2026-03-18 (#32802)
  • dependencies: go-azure-sdk - update to v0.20260928.1201942 (#33524)
  • azurerm_linux_function_app_slot - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#33520)
  • azurerm_linux_function_app - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#33520)
  • azurerm_mysql_flexible_database - suppress persistent diffs on charset and collation when using the utf8 aliases as the API now returns utf8mb3 prefixed values (#33138)
  • azurerm_netapp_volume_group_oracle - allow volume.storage_quota_in_gb minimum of 50 (previously 100) (#33518)
  • azurerm_netapp_volume_group_sap_hana - allow volume.storage_quota_in_gb minimum of 50 (previously 100) (#33518)
  • azurerm_postgresql_flexible_server - improve validation for storage_mb to allow increments of 1024 for storage_type of PremiumV22_LRS (#33197)
  • azurerm_public_ip_prefix - support updating sku in-place. (#33480)
  • azurerm_storage_account - prevent replacement of resource when account_kind changes from StorageV2 to Storage as Storage is deprecated and can no longer be used to create accounts (#33531)
  • azurerm_storage_container - add Resource Identity support (#33523)

BUG FIXES:

  • azurerm_container_app_job - the event_stream_endpoint and outbound_ip_addresses properties are now set into state (#33513)
Commits
  • b3831d7 5.8.0 release changelog (#33552)
  • 2cac8d8 postgresql_flexible_server_firewall_rule - add List Resource support (#33377)
  • 6f7a513 bump changelog (#33544)
  • e1b9425 fix teamcity tests (#33542)
  • 607ce8c change failure conditions for teamcity build step (#33540)
  • a05ca57 makefile add targeted linting for dev and convenience (#33539)
  • b00b060 azurerm_storage_account - deprecate Storage kind and prevent recreation o...
  • 0f3a0d0 azurerm_netapp_volume_group_oracle and `azurerm_netapp_volume_group_sap_han...
  • 7f30155 linting: stop nolint comments switching off every linter, and lint the `sdk...
  • 5ef12f8 azurerm_container_app_job - populate outbound_ip_addresses (#33513)
  • Additional commits viewable in compare view

Updates hashicorp/google from 8.4.0 to 8.5.0

Release notes

Sourced from hashicorp/google's releases.

v8.5.0

NOTES:

  • compute: migrated the VPN tunnel lookup in google_compute_router_interface to use direct HTTP rather than a client library (#29442)

DEPRECATIONS:

  • firebaseailogic: deprecated generative_language_config and generative_language_config.api_key in google_firebase_ai_logic_config resource (#29656)
  • networkservices: egress_network_config.dns_peering_config.domain field in google_network_services_agent_connectivity_template is deprecated. Use egress_network_config.dns_peering_config.domains (#29651)

FEATURES:

  • New Data Source: google_network_services_gateway (#29634)
  • New List Resource: google_project_iam_binding (#29631)
  • New List Resource: google_secret_manager_secret_version (#29654)
  • New Resource: google_resource_manager_capability_config (#29438)
  • New Resource: google_vertex_ai_semantic_governance_policy (#29649)

IMPROVEMENTS:

  • agenticapplications: added math_rendering_mode and web_search_config fields to google_agentic_applications_analyst_agent_persona resource (#29622)
  • bigqueryconnection: added password_wo write-only field and password_wo_version field in google_bigquery_connection resource (#29643)
  • ces: added proactive_execution_enabled field to callbacks in google_ces_agent resource (#29657)
  • ces: added proactive_execution_enabled output fields to snapshot.agents callbacks in google_ces_app_version resource (#29657)
  • ces: added remote_a2a_agent field to google_ces_agent resource (#29440)
  • chronicle: added parallel_instance field to google_chronicle_environment resource (#29444)
  • cloudrunv2: added ssh_enabled field to google_cloud_run_v2_service resource (#29645)
  • cloudrunv2: promoted template.scaling.cpu_utilization and template.scaling.concurrency_utilization to GA in google_cloud_run_v2_service resource (#29630)
  • compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_disk resource (#29621)
  • compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_region_disk resource (#29621)
  • compute: added nat_ips_per_endpoint field to google_compute_service_attachment resource (#29648)
  • dlp: added inspect_config subfields (custom_info_types, min_likelihood_per_info_type.info_type.sensitivity_score, and rule_set.rules.adjustment_rule) to google_data_loss_prevention_content_policy resource (#29633)
  • networkservices: added domains field to egress_network_config.dns_peering_config in google_network_services_agent_connectivity_template resource (#29651)
  • networkservices: added tls_config field to google_network_services_agent_connectivity_template resource (#29652)
  • parametermanager: added data_crc32c field to google_parameter_manager_parameter_version and google_parameter_manager_regional_parameter_version resources (#29658)
  • secretmanager: added secret_data_wo and secret_data_wo_version write-only fields to google_secret_manager_regional_secret_version resource (#29653)
  • sql: google_sql_database_instance now performs an in-place storage shrink when disk_size is reduced with disk_autoresize disabled, instead of forcing instance recreation (#29635)
  • sql: added encryption_confidential_mode to google_sql_database_instance resource (#29623)
  • storage: added updated field to bucket_objects in google_storage_bucket_objects data source (#29641)
  • storageftp: added service_agent, external_config.ip_address, internal_config.service_attachment, and state to google_storage_ftp_server resource (#29644)
  • storageftp: added state and username fields and increased user_credentials max items from 1 to 10 in google_storage_ftp_user resource (#29644)
Changelog

Sourced from hashicorp/google's changelog.

8.5.0 (September 29, 2026)

NOTES:

  • compute: migrated the VPN tunnel lookup in google_compute_router_interface to use direct HTTP rather than a client library (#29442)

DEPRECATIONS:

  • firebaseailogic: deprecated generative_language_config and generative_language_config.api_key in google_firebase_ai_logic_config resource (#29656)
  • networkservices: egress_network_config.dns_peering_config.domain field in google_network_services_agent_connectivity_template is deprecated. Use egress_network_config.dns_peering_config.domains (#29651)

FEATURES:

  • New Data Source: google_network_services_gateway (#29634)
  • New List Resource: google_project_iam_binding (#29631)
  • New List Resource: google_secret_manager_secret_version (#29654)
  • New Resource: google_resource_manager_capability_config (#29438)
  • New Resource: google_vertex_ai_semantic_governance_policy (#29649)

IMPROVEMENTS:

  • agenticapplications: added math_rendering_mode and web_search_config fields to google_agentic_applications_analyst_agent_persona resource (#29622)
  • bigqueryconnection: added password_wo write-only field and password_wo_version field in google_bigquery_connection resource (#29643)
  • ces: added proactive_execution_enabled field to callbacks in google_ces_agent resource (#29657)
  • ces: added proactive_execution_enabled output fields to snapshot.agents callbacks in google_ces_app_version resource (#29657)
  • ces: added remote_a2a_agent field to google_ces_agent resource (#29440)
  • chronicle: added parallel_instance field to google_chronicle_environment resource (#29444)
  • cloudrunv2: added ssh_enabled field to google_cloud_run_v2_service resource (#29645)
  • cloudrunv2: promoted template.scaling.cpu_utilization and template.scaling.concurrency_utilization to GA in google_cloud_run_v2_service resource (#29630)
  • compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_disk resource (#29621)
  • compute: added rsa_encryption_wo and raw_key_wo fields to google_compute_region_disk resource (#29621)
  • compute: added nat_ips_per_endpoint field to google_compute_service_attachment resource (#29648)
  • dlp: added inspect_config subfields (custom_info_types, min_likelihood_per_info_type.info_type.sensitivity_score, and rule_set.rules.adjustment_rule) to google_data_loss_prevention_content_policy resource (#29633)
  • networkservices: added domains field to egress_network_config.dns_peering_config in google_network_services_agent_connectivity_template resource (#29651)
  • networkservices: added tls_config field to google_network_services_agent_connectivity_template resource (#29652)
  • parametermanager: added data_crc32c field to google_parameter_manager_parameter_version and google_parameter_manager_regional_parameter_version resources (#29658)
  • secretmanager: added secret_data_wo and secret_data_wo_version write-only fields to google_secret_manager_regional_secret_version resource (#29653)
  • sql: google_sql_database_instance now performs an in-place storage shrink when disk_size is reduced with disk_autoresize disabled, instead of forcing instance recreation (#29635)
  • sql: added encryption_confidential_mode to google_sql_database_instance resource (#29623)
  • storage: added updated field to bucket_objects in google_storage_bucket_objects data source (#29641)
  • storageftp: added service_agent, external_config.ip_address, internal_config.service_attachment, and state to google_storage_ftp_server resource (#29644)
  • storageftp: added state and username fields and increased user_credentials max items from 1 to 10 in google_storage_ftp_user resource (#29644)
Commits
  • 70539b4 changelog 8.5.0 (#29671)
  • 7a2398d parametermanager: add data_crc32c to google_parameter_manager_parameter_versi...
  • 3741aca ces: add proactive_execution_enabled to agent callbacks (#18897) (#29657)
  • 914f108 firebaseailogic: deprecate generative_language_config in google_firebase_ai_l...
  • 2f36b8d Made it so the test reader can tell the difference between serial tests and t...
  • 9ca7dd0 secretmanager: add list resource for google_secret_manager_secret_version (#1...
  • 525da56 secretmanagerregional: add write-only secret_data_wo to `google_secret_mana...
  • a600791 feat(networkservices): add tlsConfig field to AgentConnectivityTemplate (#190...
  • 77de717 networkservices: add repeated domains to AgentConnectivityTemplate DN… (#1913...
  • 3c7be53 Added SemanticGovernancePolicy resource (#19106) (#29649)
  • Additional commits viewable in compare view

Updates hashicorp/aws from 6.66.0 to 6.67.0

Release notes

Sourced from hashicorp/aws's releases.

v6.67.0

6.67.0 (September 30, 2026)

NOTES:

  • resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

  • New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
  • New List Resource: aws_default_security_group (#50120)
  • New List Resource: aws_directory_service_ip_route (#50138)
  • New List Resource: aws_directoryservicedata_user (#50001)
  • New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
  • New Resource: aws_directory_service_ip_route (#50138)
  • New Resource: aws_directory_service_ip_routes_exclusive (#50204)
  • New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

  • resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#50189)
  • resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#50189)
  • resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#49746)
  • resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#49746)
  • resource/aws_default_security_group: Add Resource Identity support (#50120)
  • resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#50193)
  • resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#48525)
  • resource/aws_sns_topic: Add maximum_message_size argument (#50111)

BUG FIXES:

  • list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#50133)
  • resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#50206)
  • resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#50084)
  • resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#50088)
  • resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#49851)
  • resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#48076)
Changelog

Sourced from hashicorp/aws's changelog.

6.67.0 (September 30, 2026)

NOTES:

  • resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

  • New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
  • New List Resource: aws_default_security_group (#50120)
  • New List Resource: aws_directory_service_ip_route (#50138)
  • New List Resource: aws_directoryservicedata_user (#50001)
  • New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
  • New Resource: aws_directory_service_ip_route (#50138)
  • New Resource: aws_directory_service_ip_routes_exclusive (#50204)
  • New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

  • resource/aws_apprunner_custom_domain_association: Add validation to prevent trailing dot on domain_name (#50189)
  • resource/aws_apprunner_custom_domain_association: Add validation to require enable_www_subdomain to be false for wildcard domain (#50189)
  • resource/aws_bedrockagentcore_workload_identity: Add tags and tags_all attributes (#49746)
  • resource/aws_bedrockagentcore_workload_identity: Add resource identity support (#49746)
  • resource/aws_default_security_group: Add Resource Identity support (#50120)
  • resource/aws_ec2_transit_gateway_route_table_propagation: Add Resource Identity support (#50193)
  • resource/aws_route53_record: Add the TF_AWS_ROUTE53_RECORD_BATCH_READS environment variable to reduce AWS API calls when managing many records in a zone (#48525)
  • resource/aws_sns_topic: Add maximum_message_size argument (#50111)

BUG FIXES:

  • list-resource/aws_dynamodb_table_replica: Fix eventual consistency error when replacing resource. (#50133)
  • resource/aws_apprunner_custom_domain_association: Populate dns_target when importing (#50206)
  • resource/aws_autoscaling_group: Fix interface conversion: interface {} is nil, not map[string]interface {} panics when capacity_reservation_target is empty (#50084)
  • resource/aws_bedrockagentcore_harness: Fix "inconsistent result after apply" when environment_variables is unset (#50088)
  • resource/aws_config_aggregate_authorization: Fix region to authorized_aws_region migration incorrectly forcing resource replacement (#49851)
  • resource/aws_rds_global_cluster: Wait for source cluster promotion to complete when source_db_cluster_identifier is specified, fixing race condition with downstream resources (#48076)
Commits
  • e449e05 chore: prepare v6.67.0 release (#50214)
  • 1444675 Update CHANGELOG.md for #50204
  • de921e3 Merge pull request #50204 from hashicorp/f-ds-ip-routes-exclusive
  • 2c79a82 Merge pull request #50138 from hashicorp/f-ad-add-ip
  • df82274 Merge remote-tracking branch 'origin/f-ad-add-ip' into f-ds-ip-routes-exclusive
  • 886c0fa ds/ip_route: keep flatten a plain copy; preserve equivalent CIDR spelling in ...
  • 80dd996 Update CHANGELOG.md for #50001
  • 106ecf5 Merge remote-tracking branch 'origin/f-ad-add-ip' into f-ds-ip-routes-exclusive
  • c948f4f Merge pull request #50001 from hashicorp/f-new-resource-aws_directoryserviced...
  • 5ee8b00 ds/ip_routes_exclusive: use shared VPC test template
  • Additional commits viewable in compare view

Updates hashicorp/azurerm from 5.7.0 to 5.8.0

Release notes

Sourced from hashicorp/azurerm's releases.

v5.8.0

5.8.0 (October 1, 2026)

FEATURES:

  • New Action: azurerm_data_protection_resource_guard_unlock_delete (#28306)
  • New Data Source: azurerm_oracle_autonomous_database_cross_region_disaster_recovery (#30167)
  • New List Resource: azurerm_dns_a_record (#33263)
  • New List Resource: azurerm_dns_cname_record (#33264)
  • New List Resource: azurerm_dns_txt_record (#33269)
  • New List Resource: azurerm_lb_probe (#33459)
  • New List Resource: azurerm_monitor_workspace (#33375)
  • New List Resource: azurerm_postgresql_flexible_server_firewall_rule (#33377)
  • New List Resource: azurerm_storage_account_network_rules (#33447)
  • New List Resource: azurerm_storage_container (#33523)
  • New Resource: azurerm_oracle_autonomous_database_cross_region_disaster_recovery (#30167)

ENHANCEMENTS:

  • dependencies: communication - update API version to 2026-03-18 (#32802)
  • dependencies: go-azure-sdk - update to v0.20260928.1201942 (#33524)
  • azurerm_linux_function_app_slot - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#33520)
  • azurerm_linux_function_app - add support for 7.6 to the site_config.application_stack.powershell_core_version property (#33520)
  • azurerm_mysql_flexible_database - suppress persistent diffs on charset and collation when using the utf8 aliases as the API now returns utf8mb3 prefixed values (#33138)
  • azurerm_netapp_volume_group_oracle - allow volume.storage_quota_in_gb minimum of 50 (previously 100) (#33518)
  • azurerm_netapp_volume_group_sap_hana - allow volume.storage_quota_in_gb minimum of 50 (previously 100) (#33518)
  • azurerm_postgresql_flexible_server - improve validation for storage_mb to allow increments of 1024 for storage_type of PremiumV22_LRS (#33197)
  • azurerm_public_ip_prefix - support updating sku in-place. (#33480)
  • azurerm_storage_account - prevent replacement of resource when Description has been truncated

@dependabot
Bump the providers group across 6 directories with 3 updates
8188078 
Bumps the providers group with 1 update in the /examples/aws directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws).
Bumps the providers group with 1 update in the /examples/azure directory: [hashicorp/azurerm](https://github.com/hashicorp/terraform-provider-azurerm).
Bumps the providers group with 1 update in the /examples/gcp directory: [hashicorp/google](https://github.com/hashicorp/terraform-provider-google).
Bumps the providers group with 1 update in the /modules/aws directory: [hashicorp/aws](https://github.com/hashicorp/terraform-provider-aws).
Bumps the providers group with 1 update in the /modules/azure directory: [hashicorp/azurerm](https://github.com/hashicorp/terraform-provider-azurerm).
Bumps the providers group with 1 update in the /modules/gcp directory: [hashicorp/google](https://github.com/hashicorp/terraform-provider-google).


Updates `hashicorp/aws` from 6.66.0 to 6.67.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.66.0...v6.67.0)

Updates `hashicorp/azurerm` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/hashicorp/terraform-provider-azurerm/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-azurerm/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-azurerm@v5.7.0...v5.8.0)

Updates `hashicorp/google` from 8.4.0 to 8.5.0
- [Release notes](https://github.com/hashicorp/terraform-provider-google/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-google/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-google@v8.4.0...v8.5.0)

Updates `hashicorp/aws` from 6.66.0 to 6.67.0
- [Release notes](https://github.com/hashicorp/terraform-provider-aws/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-aws@v6.66.0...v6.67.0)

Updates `hashicorp/azurerm` from 5.7.0 to 5.8.0
- [Release notes](https://github.com/hashicorp/terraform-provider-azurerm/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-azurerm/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-azurerm@v5.7.0...v5.8.0)

Updates `hashicorp/google` from 8.4.0 to 8.5.0
- [Release notes](https://github.com/hashicorp/terraform-provider-google/releases)
- [Changelog](https://github.com/hashicorp/terraform-provider-google/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-provider-google@v8.4.0...v8.5.0)

---
updated-dependencies:
- dependency-name: hashicorp/aws
  dependency-version: 6.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: providers
- dependency-name: hashicorp/azurerm
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: providers
- dependency-name: hashicorp/google
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: providers
- dependency-name: hashicorp/aws
  dependency-version: 6.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: providers
- dependency-name: hashicorp/azurerm
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: providers
- dependency-name: hashicorp/google
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: providers
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Oct 8, 2026
@adit-chandra adit-chandra changed the title Bump the providers group across 6 directories with 3 updates Update Terraform providers and patch Go security vulnerabilities Oct 13, 2026
@adit-chandra
adit-chandra merged commit 565b26f into main Oct 14, 2026
9 checks passed
@adit-chandra
adit-chandra deleted the dependabot/terraform/examples/aws/providers-3d83ed30dc branch October 14, 2026 00:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@adit-chandra