chore(deps): update terraform providers

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
aws (source)	required_provider	minor	6.30.0 → 6.32.1
cloudflare (source)	required_provider	minor	5.16.0 → 5.17.0
github (source)	required_provider	minor	6.10 → 6.11

---

Release Notes

hashicorp/terraform-provider-aws (aws)

v6.32.1

Compare Source

BUG FIXES:

• resource/aws_autoscaling_group: Fix couldn't find resource error during creation when waiting for capacity to be satisfied (#​46452)
• resource/aws_cloudwatch_log_delivery: Fix s3_delivery_configuration.suffix_path losing AWS-added prefix on update (#​46455)
• resource/aws_dynamodb_table: Fix perpetual diff when using key_schema with a single range key on a global secondary index (#​46442)
• resource/aws_elasticache_replication_group: Fix false validation error when auth_token references another resource (#​46454)

v6.32.0

Compare Source

FEATURES:

• New List Resource: aws_ecr_repository (#​46344)
• New List Resource: aws_lambda_permission (#​46341)
• New List Resource: aws_route (#​46370)
• New List Resource: aws_route53_resolver_rule_association (#​46349)
• New List Resource: aws_route_table (#​46337)
• New List Resource: aws_s3_directory_bucket (#​46373)
• New List Resource: aws_secretsmanager_secret (#​46318)
• New List Resource: aws_secretsmanager_secret_version (#​46342)
• New List Resource: aws_vpc_security_group_egress_rule (#​46368)
• New List Resource: aws_vpc_security_group_ingress_rule (#​46367)
• New Resource: aws_ec2_secondary_network (#​46408)
• New Resource: aws_ec2_secondary_subnet (#​46408)

ENHANCEMENTS:

• resource/aws_instance: Add secondary_network_interface argument (#​46408)
• resource/aws_quicksight_data_set: Support use_as property to create special RLS rules dataset (#​42687)

BUG FIXES:

• data-source/aws_odb_network_peering_connections: Fix plan phase failure of listing. (#​46384)
• list-resource/aws_s3_bucket_policy: Now supports listing Bucket Policies for S3 Directory Buckets (#​46401)
• resource/aws_athena_workgroup: Allows unsetting configuration.result_configuration or child attributes. (#​46427)
• resource/aws_cloudfront_multitenant_distribution: Fix the "inconsistent result" error when custom_error_response is configured and custom_error_response.response_code and custom_error_response.response_page_path are omitted (#​46375)
• resource/aws_grafana_workspace: Fix perpetual diff when network_access_control is configured with empty prefix_list_ids and vpce_ids (#​45637)

v6.31.0

Compare Source

NOTES:

• resource/aws_s3_bucket_abac: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_abac: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_accelerate_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_accelerate_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_acl: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_acl: Removes expected_bucket_owner and acl attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_cors_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_cors_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_lifecycle_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_lifecycle_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_logging: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_logging: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_metadata_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_metadata_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_object_lock_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_object_lock_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_request_payment_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_request_payment_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_server_side_encryption_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_server_side_encryption_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_versioning: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_versioning: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)
• resource/aws_s3_bucket_website_configuration: Deprecates expected_bucket_owner attribute. (#​46262)
• resource/aws_s3_bucket_website_configuration: Removes expected_bucket_owner attribute from Resource Identity. (#​46272)

FEATURES:

• New Data Source: aws_account_regions (#​41746)
• New Ephemeral Resource: aws_ecrpublic_authorization_token (#​45841)
• New List Resource: aws_cloudwatch_event_rule (#​46304)
• New List Resource: aws_cloudwatch_event_target (#​46297)
• New List Resource: aws_cloudwatch_metric_alarm (#​46268)
• New List Resource: aws_iam_role_policy (#​46293)
• New List Resource: aws_lambda_function (#​46295)
• New List Resource: aws_s3_bucket_acl (#​46305)
• New List Resource: aws_s3_bucket_policy (#​46312)
• New List Resource: aws_s3_bucket_public_access_block (#​46309)
• New Resource: aws_ssoadmin_customer_managed_policy_attachments_exclusive (#​46191)

ENHANCEMENTS:

• resource/aws_odb_cloud_autonomous_vm_cluster: autonomous vm cluster creation using odb network ARN and exadata infrastructure ARN for resource sharing model. (#​45583)
• resource/aws_opensearch_domain: Add serverless_vector_acceleration to aiml_options (#​45882)

BUG FIXES:

• list-resource/aws_s3_bucket: Restricts listed buckets to expected region. (#​46305)
• resource/aws_elasticache_replication_group: Fixed AUTH to RBAC migration. Previously, auth_token_update_strategy always required auth_token, which caused an error when migrating from AUTH to RBAC. Now, auth_token_update_strategy still requires auth_token except when auth_token_update_strategy is DELETE. (#​45518)
• resource/aws_elasticache_replication_group: Fixed an issue with downscaling aws_elasticache_replication_group when cluster_mode="enabled" and num_node_groups is reduced. Previously, downscaling could fail in certain scenarios; for example, if nodes 0001, 0002, 0003, 0004, and 0005 exist, and a user manually removes 0003 and 0005, then sets num_node_groups = 2, terraform would attempt to delete 0003, 0004, and 0005. This is now fixed, after this fix terraform will retrieve the current node groups before resizing. (#​45893)
• resource/aws_elasticache_serverless_cache: Fix user_group_id removal during modification. (#​45571)
• resource/aws_elasticache_serverless_cache: Fix forced replacement when upgrading Valkey major version or switching engine between redis and valkey (#​45087)
• resource/aws_network_interface: Fix UnauthorizedOperation error when detaching resource that does not have an attachment (#​46211)

cloudflare/terraform-provider-cloudflare (cloudflare)

v5.17.0

Compare Source

Full Changelog: v5.16.0...v5.17.0

Features

• account: add RequiresReplace modifier to unit.id field (7cbb327)
• bump schema verion in prep for state upgraders (a721535)
• bump schema verion in prep for state upgraders (a721535)
• chore: bump cloudflare-go dependency for TF (3b4de30)
• chore: skip codegen in authenticated_origin_pulls_certificate (22d11ab)
• chore: skip codegen in authenticated_origin_pulls_hostname_certificate (0fdd92e)
• chore: skip codegen in hostnames authenticated_origin_pulls (82aab9d)
• chore: skip codegen in mtls_certificates (1b14224)
• chore: use 'next' branch of Go SDK in Terraform (809a3f3)
• custom_hostname_fallback_origin: add comprehensive lifecycle test (054611a)
• custom_hostname_fallback_origin: add migration tests and state upgrader logic (855ef8a)
• custom_hostname_fallback_origin: add v4 to v5 migration tests (0542720)
• feat(api): RAG-586: enable terraform for AI Search instances and tokens (fe5239d)
• feat(radar): add BGP RPKI ASPA endpoints and fix SDK casings (e6a03b6)
• fix: authenticated_origin_pulls_settings missing id configuration (abe9087)
• fix(total_tls): use upsert pattern for singleton zone setting (1a79609)
• leaked_credential_check: add import functionality. add tests for import (76e44f0)
• pages_project: use state upgraders (db96be7)
• refactor(terraform): restructure origin_tls_client_auth to peer subresources (6c12fea)
• state upgrader (deee33f)
• state upgrader (d8e4529)
• tiered caching state upgrader (d9d2c74)
• tiered caching state upgrader (d9d2c74)
• tiered_cache: use state upgraders (8cb061c)
• turstile_widget: add v4 to v5 migration tests (a1e27af)
• zero_trust_organization: add migration test (1032e4e)

Bug Fixes

• account: map managed_by.parent_org_id to unid.id in unmarshall and add acctests (a282d8e)
• address PR review comments (62598d7)
• authenticated_origin_pulls_certificate: add certificate normalization to prevent drift (9fa8e39)
• authenticated_origin_pulls_hostname_certificate resource and tests (3380cf9)
• authenticated_origin_pulls: handle array response and implement full lifecycle (e4c82b8)
• byo_ip_prefix: skip LOA tests (892bce0)
• changelog: update changelog to reflect reality (519c85e)
• cloudflare_zero_trust_device_posture_rule: update tests to match API (b2aad0d)
• mtls_certificates resource and test (fc44f27)
• prevent unnecessary diffs on consecutive applies for hyperdrive_config (8755bf9)
• skip tests requiring account creation (f6d48e9)
• upgrade scenario (e3831be)
• workers_script: add support for placement mode/status (1bc17fa)
• workers_script: schema and migration model (a9a0e05)
• zero_trust_access_application: update v4 version on migration tests (45a825e)
• zero_trust_organization: fix plan issues (f6a9369)

Reverts

• pages_project: "fix(pages_project) build_config to computed optional" (b9c13c9)

Chores

• add CODEOWNERS (3abbb08)
• api: update composite API spec (febe2db)
• api: update composite API spec (71cb6a6)
• api: update composite API spec (6c428d6)
• api: update composite API spec (eda1841)
• api: update composite API spec (7cda136)
• api: update composite API spec (935193b)
• api: update composite API spec (7e45f8d)
• api: update composite API spec (e42ae97)
• api: update composite API spec (48153bd)
• fix model/schema parity (b00bd10)
• improve contribution guide (85584b7)
• internal: codegen related update (22b09ad)
• internal: codegen related update (f587465)
• internal: codegen related update (0bca406)
• internal: codegen related update (3ca7e23)
• internal: codegen related update (02605c2)
• internal: codegen related update (366fb6d)
• internal: codegen related update (f55e1be)
• internal: codegen related update (33bc656)
• internal: codegen related update (6eb4afc)
• internal: codegen related update (636b4f8)
• internal: codegen related update (067536c)
• internal: codegen related update (1af8451)
• internal: codegen related update (f36071f)
• internal: codegen related update (246ffcd)
• internal: codegen related update (471df29)
• internal: codegen related update (0211418)
• internal: codegen related update (2bcbbd5)
• internal: codegen related update (09f9d99)
• internal: fix sdk (be5dbc6)
• minimum upgrade test (25504d0)
• tests: no more state file (f439772)
• Update CHANGELOG.md (f4a1b58)

Documentation

• clarify certificate normalization issue in test comments (8bddab1)
• regerate docs (fc702d9)

Refactors

• refactor stateupgraders (c950153)

integrations/terraform-provider-github (github)

v6.11.1

Compare Source

What's Changed

🐛 Bugfixes

• fix: Only send allow_forking on change by @​stevehipwell in #​3174
• fix: Type mismatch in team_id of emu_group_mapping by @​deiga in #​3163

Maintenance

• [MAINT] Fixup github_repository_file by @​deiga in #​3175

Full Changelog: integrations/terraform-provider-github@v6.11.0...v6.11.1

v6.11.0

Compare Source

What's Changed

🚀 New Features

• feat: allow users to set GitHub app in their repositories by @​M0NsTeRRR in #​2469
• feat: add github_release_asset data source by @​mdb in #​2514
• feat(actions_permissions): sha_pinning_required by @​sheeeng in #​2870
• feat: Consistent secret and variable selected repos by @​stevehipwell in #​3155
• feat: Add ruleset rule for pull request required reviewers by @​deiga in #​3073
• feat: support internal visibility for repositories created by a template by @​puneet-arora15 in #​3123

🐛 Bugfixes

• fix: Correct forking and vulnerability alert logic by @​stevehipwell in #​3127
• fix: Correct ruleset pr allowed merge method logic by @​stevehipwell in #​3128
• fix: Relax id parsing strictness for existing ids by @​stevehipwell in #​3129
• fix(environments): swallow 404 not found errors by @​acouvreur in #​3132
• fix: Correct repo vulnerability alert logic by @​stevehipwell in #​3144
• fix: Correct secret drift implementation by @​stevehipwell in #​3069
• fix: Ensure github_emu_group_mapping behaves correctly if mapping changes upstream by @​deiga in #​3118

🛠️ Maintenance

• [MAINT] Fix ruleset tests after rebase by @​deiga in #​3153
• [MAINT] enable nilnesserr linter by @​deiga in #​3113
• [MAINT] Remove unnecessary separate API call for repo topics in github_repository by @​deiga in #​3086
• [MAINT] refactor github_repository_file to use Context-aware provider functions by @​deiga in #​3107
• [MAINT] Fix github_organization_ruleset and github_repository_ruleset with push target by @​deiga in #​2958
• chore(actions): Add doc how to verify GitHub Attestations with GitHub cli and verify release artifacts with Cosign by @​ViacheslavKudinov in #​2846
• chore: Refactor test provider by @​stevehipwell in #​3146
• chore: Update go-github to v82 by @​stevehipwell in #​3139
• chore: Simplify codeql workflow by @​stevehipwell in #​3138
• build(deps): bump the github-actions group across 1 directory with 5 updates by @​dependabot[bot] in #​3141
• build(deps): bump the gomod group across 1 directory with 2 updates by @​dependabot[bot] in #​3091

New Contributors

• @​puneet-arora15 made their first contribution in #​3123
• @​sheeeng made their first contribution in #​2870

Full Changelog: integrations/terraform-provider-github@v6.10.2...v6.11.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Terraform Plan (00-global)

→ No Resource Changes!

---

Triggered by @renovate[bot], Commit: 5cd204a81e3008e7257febafe77f21e49c46ab60

[github-actions]

Terraform Plan (02-infrastructure)

→ No Resource Changes!

---

Triggered by @renovate[bot], Commit: 5cd204a81e3008e7257febafe77f21e49c46ab60

[github-actions]

Terraform Plan (01-network)

→ No Resource Changes!

---

Triggered by @renovate[bot], Commit: 5cd204a81e3008e7257febafe77f21e49c46ab60