chore(deps): bump the terraform-providers group across 2 directories with 2 updates by dependabot[bot] · Pull Request #391 · Azure-Samples/Copilot-Studio-with-Azure-AI-Search

dependabot · 2026-04-09T23:14:19Z

Bumps the terraform-providers group with 2 updates in the /infra directory: azure/azapi and hashicorp/azurerm.
Bumps the terraform-providers group with 2 updates in the /infra/modules/copilot_studio directory: azure/azapi and hashicorp/azurerm.

Updates azure/azapi from 2.7.0 to 2.9.0

Release notes

Sourced from azure/azapi's releases.

v2.9.0

ENHANCEMENTS:

azapi_update_resource resource: Support replace_triggers_external_values argument to trigger resource replacement based on external values.

azapi_data_plane_resource resource: Support sensitive_body and sensitive_body_version fields, which are used to specify the write-only properties in the request body.

azapi_resource_action resource: Support updating api-version without recreating the resource.

azapi_resource_action Support ignore_not_found argument to optionally suppress 404 errors and expose resource existence.

azapi_resource, azapi_update_resource resources: Support list_unique_id_property and ignore_other_items_in_list fields, which are used to manage list properties with unique identifiers (GH-1033).

azapi provider: Add Azure Government support for KeyVault resource manager audience endpoint (GH-996).

azapi_data_plane_resource resource: Support importing existing data plane resources via terraform import (GH-1053).

azapi_data_plane_resource resource: Add support for Microsoft.Foundry/agents (AI Foundry assistants) with customization and resource management (GH-1053).

parse_resource_id function: Add resource_group_id to the function output (GH-1065).

Update bicep types to ms-henglu/bicep-types-az@5c7a4c2

BUG FIXES:

Fix Missing Resource Identity After Update error for Terraform versions below 1.12 (GH-1023).

azapi_resource_action: Fix inconsistent result error when updating query_parameters with when = "destroy" (GH-1028).

azapi_resource resource: Fix embedded schema validation failure when the discriminator property is unknown (GH-1038).

azapi_data_plane_resource resource: Fix a bug that 204 status code is not supported as a success response (GH-1055).

Fix inconsistent result after apply when lastConnectivityTime field changes between create/update and read (GH-1062).

Fix a bug that auxiliary_tenant_ids are not passed to ARM client options for cross-tenant authentication (GH-1046).

Fix azapi_update_resource state migration missing replace_triggers_external_values field (GH-1071).

Fix RequiresReplaceIfNotNull plan modifier not handling typed null from HCL conditional expressions (GH-1070).

v2.8.0

FEATURES:

New Provider Function: snake2camel

New Action: azapi_resource_action - Perform stateless actions on Azure resources that can be invoked via Terraform action triggers

ENHANCEMENTS:

azapi_resource resource: Add support for identity-based import, enabling import via resource ID and type from list resource protocol.

azapi_resource resource: Support listing resources via new ListResource protocol.

azapi_resource resource: Support listing all resources in a resource group when type is omitted. Uses ARM API /subscriptions/{sub}/resourceGroups/{rg}/resources to enumerate all resources.

azapi_resource resource: Refactor import logic to support identity block and multiple import scenarios (ID only, ID with API version, ID and type).

azapi_data_plane_resource resource: Adds a customization layer which allows custom CRUD operations for resources that don't follow standard patterns.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/keys type.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/secrets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/datasources type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexers type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexes type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/skillsets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/synonymmaps type.

Bump Go version to 1.24.6 to address CVEs (GH-992).

Add more verified azapi examples.

Update bicep types to ms-henglu/bicep-types-az@c41a40c

BUG FIXES:

Fix validation logic for properties that are both ReadOnly and Required.

Fix panic when using sensitive_body_version with empty sensitive_body (GH-999).

Fix azapi_resource resource move from azurerm_storage_share by converting /fileshares/ to /shares/ in resource ID.

Changelog

Sourced from azure/azapi's changelog.

v2.9.0 (Unreleased)

ENHANCEMENTS:

azapi_update_resource resource: Support replace_triggers_external_values argument to trigger resource replacement based on external values.

azapi_data_plane_resource resource: Support sensitive_body and sensitive_body_version fields, which are used to specify the write-only properties in the request body.

azapi_resource_action resource: Support updating api-version without recreating the resource.

azapi_resource_action Support ignore_not_found argument to optionally suppress 404 errors and expose resource existence.

azapi_resource, azapi_update_resource resources: Support list_unique_id_property and ignore_other_items_in_list fields, which are used to manage list properties with unique identifiers (GH-1033).

azapi provider: Add Azure Government support for KeyVault resource manager audience endpoint (GH-996).

azapi_data_plane_resource resource: Support importing existing data plane resources via terraform import (GH-1053).

azapi_data_plane_resource resource: Add support for Microsoft.Foundry/agents (AI Foundry assistants) with customization and resource management (GH-1053).

parse_resource_id function: Add resource_group_id to the function output (GH-1065).

Update bicep types to ms-henglu/bicep-types-az@5c7a4c2

BUG FIXES:

Fix Missing Resource Identity After Update error for Terraform versions below 1.12 (GH-1023).

azapi_resource_action: Fix inconsistent result error when updating query_parameters with when = "destroy" (GH-1028).

azapi_resource resource: Fix embedded schema validation failure when the discriminator property is unknown (GH-1038).

azapi_data_plane_resource resource: Fix a bug that 204 status code is not supported as a success response (GH-1055).

Fix inconsistent result after apply when lastConnectivityTime field changes between create/update and read (GH-1062).

Fix a bug that auxiliary_tenant_ids are not passed to ARM client options for cross-tenant authentication (GH-1046).

Fix azapi_update_resource state migration missing replace_triggers_external_values field (GH-1071).

Fix RequiresReplaceIfNotNull plan modifier not handling typed null from HCL conditional expressions (GH-1070).

v2.8.0

FEATURES:

New Provider Function: snake2camel

New Action: azapi_resource_action - Perform stateless actions on Azure resources that can be invoked via Terraform action triggers

ENHANCEMENTS:

azapi_resource resource: Add support for identity-based import, enabling import via resource ID and type from list resource protocol.

azapi_resource resource: Support listing resources via new ListResource protocol.

azapi_resource resource: Support listing all resources in a resource group when type is omitted. Uses ARM API /subscriptions/{sub}/resourceGroups/{rg}/resources to enumerate all resources.

azapi_resource resource: Refactor import logic to support identity block and multiple import scenarios (ID only, ID with API version, ID and type).

azapi_data_plane_resource resource: Adds a customization layer which allows custom CRUD operations for resources that don't follow standard patterns.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/keys type.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/secrets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/datasources type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexers type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexes type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/skillsets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/synonymmaps type.

Bump Go version to 1.24.6 to address CVEs (GH-992).

Add more verified azapi examples.

Update bicep types to ms-henglu/bicep-types-az@c41a40c

BUG FIXES:

Fix validation logic for properties that are both ReadOnly and Required.

Fix panic when using sensitive_body_version with empty sensitive_body (GH-999).

... (truncated)

Commits

8fe62ba Add missing changelog entries, import docs for data plane resource, and fix t...
234a244 Fix azapi_update_resource migration missing replace_triggers_external_values ...
acda56b fix: RequiresReplaceIfNotNull handles typed null from HCL conditional express...
b97c7ec feat: add AI Foundry assistants support with customization and resour… (#1053)
b799d10 azapi_update_resource resource: Support replace_triggers_external_values ...
d6711a1 feat: add resource_group_id to parse_resource_id function (#1065)
8b42cb7 fix: address test failures from unsupported API version and App Service SKU q...
aabf871 update changelog
8110523 Branch 250305 update bicep types (#1063)
88c1643 bugfix: azapi_data_plane_resource doesn't support 204 status code (#1055)
Additional commits viewable in compare view

Updates hashicorp/azurerm from 4.67.0 to 4.68.0

Release notes

Sourced from hashicorp/azurerm's releases.

v4.68.0

4.68.0 (April 09, 2026)

FEATURES:

New Data Source: azurerm_managed_devops_pool (#28325)

New List Resource: azurerm_private_dns_cname_record (#31833)

New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#32044)

New Resource: azurerm_managed_devops_pool (#28325)

ENHANCEMENTS:

dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#32112)

Data Source: azurerm_bastion_host - export private_only_enabled (#32042)

Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#29303)

azurerm_app_configuration_feature - Add support for custom_filter (#30160)

azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#32042)

azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#31836)

azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#32117)

azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#32001)

azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#29303)

azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#32099)

azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#31705)

azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#30536)

BUG FIXES:

azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#32025)

azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#32091)

azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#32117)

azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#32117)

azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#31699)

azurerm_resource_group - fix parallelism issue in create_poller (#32123)

azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#32072)

Changelog

Sourced from hashicorp/azurerm's changelog.

4.68.0 (April 09, 2026)

FEATURES:

New Data Source: azurerm_managed_devops_pool (#28325)

New List Resource: azurerm_private_dns_cname_record (#31833)

New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#32044)

New Resource: azurerm_managed_devops_pool (#28325)

ENHANCEMENTS:

dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#32112)

Data Source: azurerm_bastion_host - export private_only_enabled (#32042)

Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#29303)

azurerm_app_configuration_feature - Add support for custom_filter (#30160)

azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#32042)

azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#31836)

azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#32117)

azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#32001)

azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#29303)

azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#32099)

azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#31705)

azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#30536)

BUG FIXES:

azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#32025)

azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#32091)

azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#32117)

azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#32117)

azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#31699)

azurerm_resource_group - fix parallelism issue in create_poller (#32123)

azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#32072)

Commits

726d71b CHANGELOG.md for 4.68.0 (#32110)
1e59cf1 azurerm_mssql_managed_instance - adding general_purpose_v2_enabled (Suppo...
f1d4fde azurerm_kubernetes_cluster_node_pool: fix subnet lock to use resource ID in...
6f5f895 azurerm_key_vault_certificate_contacts - Update contact to Required in ...
a060c6c azurerm_private_endpoint: request_message and is_manual_connection chec...
fc75618 azurerm_app_configuration_feature - Add support for custom_filter (#30160)
96b84dc change list resource example test to use resource reference (#32129)
bb83066 azurerm_iothub - add default value for min_tls_version to prevent force repla...
87c3270 Network - fix TestAccVirtualHubBgpConnection_virtualWan (#31314)
68c8e46 Add support for new resource and datasource for Managed DevOps Pools service ...
Additional commits viewable in compare view

Updates azure/azapi from 2.7.0 to 2.9.0

Release notes

Sourced from azure/azapi's releases.

v2.9.0

ENHANCEMENTS:

azapi_update_resource resource: Support replace_triggers_external_values argument to trigger resource replacement based on external values.

azapi_data_plane_resource resource: Support sensitive_body and sensitive_body_version fields, which are used to specify the write-only properties in the request body.

azapi_resource_action resource: Support updating api-version without recreating the resource.

azapi_resource_action Support ignore_not_found argument to optionally suppress 404 errors and expose resource existence.

azapi_resource, azapi_update_resource resources: Support list_unique_id_property and ignore_other_items_in_list fields, which are used to manage list properties with unique identifiers (GH-1033).

azapi provider: Add Azure Government support for KeyVault resource manager audience endpoint (GH-996).

azapi_data_plane_resource resource: Support importing existing data plane resources via terraform import (GH-1053).

azapi_data_plane_resource resource: Add support for Microsoft.Foundry/agents (AI Foundry assistants) with customization and resource management (GH-1053).

parse_resource_id function: Add resource_group_id to the function output (GH-1065).

Update bicep types to ms-henglu/bicep-types-az@5c7a4c2

BUG FIXES:

Fix Missing Resource Identity After Update error for Terraform versions below 1.12 (GH-1023).

azapi_resource_action: Fix inconsistent result error when updating query_parameters with when = "destroy" (GH-1028).

azapi_resource resource: Fix embedded schema validation failure when the discriminator property is unknown (GH-1038).

azapi_data_plane_resource resource: Fix a bug that 204 status code is not supported as a success response (GH-1055).

Fix inconsistent result after apply when lastConnectivityTime field changes between create/update and read (GH-1062).

Fix a bug that auxiliary_tenant_ids are not passed to ARM client options for cross-tenant authentication (GH-1046).

Fix azapi_update_resource state migration missing replace_triggers_external_values field (GH-1071).

Fix RequiresReplaceIfNotNull plan modifier not handling typed null from HCL conditional expressions (GH-1070).

v2.8.0

FEATURES:

New Provider Function: snake2camel

New Action: azapi_resource_action - Perform stateless actions on Azure resources that can be invoked via Terraform action triggers

ENHANCEMENTS:

azapi_resource resource: Add support for identity-based import, enabling import via resource ID and type from list resource protocol.

azapi_resource resource: Support listing resources via new ListResource protocol.

azapi_resource resource: Support listing all resources in a resource group when type is omitted. Uses ARM API /subscriptions/{sub}/resourceGroups/{rg}/resources to enumerate all resources.

azapi_resource resource: Refactor import logic to support identity block and multiple import scenarios (ID only, ID with API version, ID and type).

azapi_data_plane_resource resource: Adds a customization layer which allows custom CRUD operations for resources that don't follow standard patterns.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/keys type.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/secrets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/datasources type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexers type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexes type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/skillsets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/synonymmaps type.

Bump Go version to 1.24.6 to address CVEs (GH-992).

Add more verified azapi examples.

Update bicep types to ms-henglu/bicep-types-az@c41a40c

BUG FIXES:

Fix validation logic for properties that are both ReadOnly and Required.

Fix panic when using sensitive_body_version with empty sensitive_body (GH-999).

Fix azapi_resource resource move from azurerm_storage_share by converting /fileshares/ to /shares/ in resource ID.

Changelog

Sourced from azure/azapi's changelog.

v2.9.0 (Unreleased)

ENHANCEMENTS:

azapi_update_resource resource: Support replace_triggers_external_values argument to trigger resource replacement based on external values.

azapi_data_plane_resource resource: Support sensitive_body and sensitive_body_version fields, which are used to specify the write-only properties in the request body.

azapi_resource_action resource: Support updating api-version without recreating the resource.

azapi_resource_action Support ignore_not_found argument to optionally suppress 404 errors and expose resource existence.

azapi_resource, azapi_update_resource resources: Support list_unique_id_property and ignore_other_items_in_list fields, which are used to manage list properties with unique identifiers (GH-1033).

azapi provider: Add Azure Government support for KeyVault resource manager audience endpoint (GH-996).

azapi_data_plane_resource resource: Support importing existing data plane resources via terraform import (GH-1053).

azapi_data_plane_resource resource: Add support for Microsoft.Foundry/agents (AI Foundry assistants) with customization and resource management (GH-1053).

parse_resource_id function: Add resource_group_id to the function output (GH-1065).

Update bicep types to ms-henglu/bicep-types-az@5c7a4c2

BUG FIXES:

Fix Missing Resource Identity After Update error for Terraform versions below 1.12 (GH-1023).

azapi_resource_action: Fix inconsistent result error when updating query_parameters with when = "destroy" (GH-1028).

azapi_resource resource: Fix embedded schema validation failure when the discriminator property is unknown (GH-1038).

azapi_data_plane_resource resource: Fix a bug that 204 status code is not supported as a success response (GH-1055).

Fix inconsistent result after apply when lastConnectivityTime field changes between create/update and read (GH-1062).

Fix a bug that auxiliary_tenant_ids are not passed to ARM client options for cross-tenant authentication (GH-1046).

Fix azapi_update_resource state migration missing replace_triggers_external_values field (GH-1071).

Fix RequiresReplaceIfNotNull plan modifier not handling typed null from HCL conditional expressions (GH-1070).

v2.8.0

FEATURES:

New Provider Function: snake2camel

New Action: azapi_resource_action - Perform stateless actions on Azure resources that can be invoked via Terraform action triggers

ENHANCEMENTS:

azapi_resource resource: Add support for identity-based import, enabling import via resource ID and type from list resource protocol.

azapi_resource resource: Support listing resources via new ListResource protocol.

azapi_resource resource: Support listing all resources in a resource group when type is omitted. Uses ARM API /subscriptions/{sub}/resourceGroups/{rg}/resources to enumerate all resources.

azapi_resource resource: Refactor import logic to support identity block and multiple import scenarios (ID only, ID with API version, ID and type).

azapi_data_plane_resource resource: Adds a customization layer which allows custom CRUD operations for resources that don't follow standard patterns.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/keys type.

azapi_data_plane_resource resource: Support Microsoft.KeyVault/vaults/secrets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/datasources type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexers type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/indexes type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/skillsets type.

azapi_data_plane_resource resource: Support Microsoft.Search/searchServices/synonymmaps type.

Bump Go version to 1.24.6 to address CVEs (GH-992).

Add more verified azapi examples.

Update bicep types to ms-henglu/bicep-types-az@c41a40c

BUG FIXES:

Fix validation logic for properties that are both ReadOnly and Required.

Fix panic when using sensitive_body_version with empty sensitive_body (GH-999).

... (truncated)

Commits

8fe62ba Add missing changelog entries, import docs for data plane resource, and fix t...
234a244 Fix azapi_update_resource migration missing replace_triggers_external_values ...
acda56b fix: RequiresReplaceIfNotNull handles typed null from HCL conditional express...
b97c7ec feat: add AI Foundry assistants support with customization and resour… (#1053)
b799d10 azapi_update_resource resource: Support replace_triggers_external_values ...
d6711a1 feat: add resource_group_id to parse_resource_id function (#1065)
8b42cb7 fix: address test failures from unsupported API version and App Service SKU q...
aabf871 update changelog
8110523 Branch 250305 update bicep types (#1063)
88c1643 bugfix: azapi_data_plane_resource doesn't support 204 status code (#1055)
Additional commits viewable in compare view

Updates hashicorp/azurerm from 4.67.0 to 4.68.0

Release notes

Sourced from hashicorp/azurerm's releases.

v4.68.0

4.68.0 (April 09, 2026)

FEATURES:

New Data Source: azurerm_managed_devops_pool (#28325)

New List Resource: azurerm_private_dns_cname_record (#31833)

New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#32044)

New Resource: azurerm_managed_devops_pool (#28325)

ENHANCEMENTS:

dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#32112)

Data Source: azurerm_bastion_host - export private_only_enabled (#32042)

Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#29303)

azurerm_app_configuration_feature - Add support for custom_filter (#30160)

azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#32042)

azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#31836)

azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#32117)

azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#32001)

azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#29303)

azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#32099)

azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#31705)

azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#30536)

BUG FIXES:

azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#32025)

azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#32091)

azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#32117)

azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#32117)

azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#31699)

azurerm_resource_group - fix parallelism issue in create_poller (#32123)

azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#32072)

Changelog

Sourced from hashicorp/azurerm's changelog.

4.68.0 (April 09, 2026)

FEATURES:

New Data Source: azurerm_managed_devops_pool (#28325)

New List Resource: azurerm_private_dns_cname_record (#31833)

New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#32044)

New Resource: azurerm_managed_devops_pool (#28325)

ENHANCEMENTS:

dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#32112)

Data Source: azurerm_bastion_host - export private_only_enabled (#32042)

Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#29303)

azurerm_app_configuration_feature - Add support for custom_filter (#30160)

azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#32042)

azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#31836)

azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)

azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#32117)

azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#32001)

azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#29303)

azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#32099)

azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#31705)

azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#30536)

BUG FIXES:

azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#32025)

azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#32091)

azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#32117)

azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#32117)

azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#31699)

azurerm_resource_group - fix parallelism issue in create_poller (#32123)

azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#32072)

Commits

726d71b CHANGELOG.md for 4.68.0 (#32110)
1e59cf1 azurerm_mssql_managed_instance - adding general_purpose_v2_enabled (Suppo...
f1d4fde azurerm_kubernetes_cluster_node_pool: fix subnet lock to use resource ID in...
6f5f895 azurerm_key_vault_certificate_contacts - Update contact to Required in ...
a060c6c azurerm_private_endpoint: request_message and is_manual_connection chec...
fc75618 azurerm_app_configuration_feature - Add support for custom_filter (#30160)
96b84dc change list resource example test to use resource reference (#32129)
bb83066 azurerm_iothub - add default value for min_tls_version to prevent force repla...
87c3270 Network - fix TestAccVirtualHubBgpConnection_virtualWan (#31314)
68c8e46 Add support for new resource and datasource for Managed DevOps Pools service ...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it...

Description has been truncated

…with 2 updates Bumps the terraform-providers group with 2 updates in the /infra directory: [azure/azapi](https://github.com/Azure/terraform-provider-azapi) and [hashicorp/azurerm](https://github.com/hashicorp/terraform-provider-azurerm). Bumps the terraform-providers group with 2 updates in the /infra/modules/copilot_studio directory: [azure/azapi](https://github.com/Azure/terraform-provider-azapi) and [hashicorp/azurerm](https://github.com/hashicorp/terraform-provider-azurerm). Updates `azure/azapi` from 2.7.0 to 2.9.0 - [Release notes](https://github.com/Azure/terraform-provider-azapi/releases) - [Changelog](https://github.com/Azure/terraform-provider-azapi/blob/main/CHANGELOG.md) - [Commits](Azure/terraform-provider-azapi@v2.7.0...v2.9.0) Updates `hashicorp/azurerm` from 4.67.0 to 4.68.0 - [Release notes](https://github.com/hashicorp/terraform-provider-azurerm/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-azurerm/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-azurerm@v4.67.0...v4.68.0) Updates `azure/azapi` from 2.7.0 to 2.9.0 - [Release notes](https://github.com/Azure/terraform-provider-azapi/releases) - [Changelog](https://github.com/Azure/terraform-provider-azapi/blob/main/CHANGELOG.md) - [Commits](Azure/terraform-provider-azapi@v2.7.0...v2.9.0) Updates `hashicorp/azurerm` from 4.67.0 to 4.68.0 - [Release notes](https://github.com/hashicorp/terraform-provider-azurerm/releases) - [Changelog](https://github.com/hashicorp/terraform-provider-azurerm/blob/main/CHANGELOG.md) - [Commits](hashicorp/terraform-provider-azurerm@v4.67.0...v4.68.0) --- updated-dependencies: - dependency-name: azure/azapi dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-providers - dependency-name: hashicorp/azurerm dependency-version: 4.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-providers - dependency-name: azure/azapi dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-providers - dependency-name: hashicorp/azurerm dependency-version: 4.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: terraform-providers ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-04-09T23:15:59Z

Terraform Validation Passed ✅

The Terraform provider update has been validated with:

✅ Terraform Init
✅ Terraform Format Check
✅ Terraform Validation
✅ TFLint Check
✅ Security Scanning

This PR can pass all the checks to be tested and then merged.

dependabot · 2026-04-16T23:14:29Z

Superseded by #394.

dependabot Bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Apr 9, 2026

dependabot Bot requested a review from a team as a code owner April 9, 2026 23:14

dependabot Bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Apr 9, 2026

github-actions Bot added the terraform-validated label Apr 9, 2026

dependabot Bot closed this Apr 16, 2026

dependabot Bot deleted the dependabot/terraform/infra/terraform-providers-cb9fffd290 branch April 16, 2026 23:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the terraform-providers group across 2 directories with 2 updates#391

chore(deps): bump the terraform-providers group across 2 directories with 2 updates#391
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/terraform/infra/terraform-providers-cb9fffd290

dependabot Bot commented on behalf of github Apr 9, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Apr 9, 2026

Uh oh!

dependabot Bot commented on behalf of github Apr 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 9, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.9.0

ENHANCEMENTS:

BUG FIXES:

v2.8.0

FEATURES:

ENHANCEMENTS:

BUG FIXES:

v2.9.0 (Unreleased)

v2.8.0

v4.68.0

4.68.0 (April 09, 2026)

4.68.0 (April 09, 2026)

v2.9.0

ENHANCEMENTS:

BUG FIXES:

v2.8.0

FEATURES:

ENHANCEMENTS:

BUG FIXES:

v2.9.0 (Unreleased)

v2.8.0

v4.68.0

4.68.0 (April 09, 2026)

4.68.0 (April 09, 2026)

Uh oh!

github-actions Bot commented Apr 9, 2026

Terraform Validation Passed ✅

Uh oh!

dependabot Bot commented on behalf of github Apr 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 9, 2026 •

edited

Loading