Skip to content

chore(deps): update terraform cloudflare to v4.46.0

Lama Bot requested to merge renovate/cloudflare-4.x into main

This MR contains the following updates:

Package Type Update Change
cloudflare (source) required_provider minor 4.17.0 -> 4.46.0

⚠️ Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

cloudflare/terraform-provider-cloudflare (cloudflare)

v4.46.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_waiting_room: add "bg-BG", "hr-HR", "cs-CZ", "da-DK", "fi-FI", "lt-LT", "ms-MY", "nb-NO", "ro-RO", "el-GR", "he-IL" "hi-IN", "hu-HU", "sr-BA", "sk-SK", "sl-SI", "sv-SE", "tl-PH", "th-TH", "uk-UA", and "vi-VN" to default_template_language field (#​4509)

BUG FIXES:

  • resource/cloudflare_certificate_pack: Fix importing existing resources issue due to 3 ignored required fields in importer (#​4544)
  • resource/cloudflare_list: Don't read list items if there are none configured (#​4511)
  • resource/cloudflare_zero_trust_list: Consider items_with_description when updating a ZT list (#​4477)
  • resource/turnstile: Force recreate on region update (#​4496)

DEPENDENCIES:

  • provider: bump github.com/cloudflare/cloudflare-go from 0.108.0 to 0.109.0 (#​4523)
  • provider: bump github.com/hashicorp/terraform-plugin-framework-validators from 0.14.0 to 0.15.0 (#​4492)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.24.0 to 0.25.0 (#​4483)
  • provider: bump github.com/hashicorp/terraform-plugin-mux from 0.16.0 to 0.17.0 (#​4484)
  • provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.34.0 to 2.35.0 (#​4491)
  • provider: bump golang.org/x/net from 0.30.0 to 0.31.0 (#​4541)
  • provider: bump goreleaser/goreleaser-action from 6.0.0 to 6.1.0 (#​4531)

v4.45.0

Compare Source

NOTES:

  • datasource/cloudflare_infrastructure_access_targets: deprecated in favour of cloudflare_zero_trust_infrastructure_access_targets and will be removed in the next major version. (#​4403)
  • resource/cloudflare_infrastructure_access_target: deprecated in favour of cloudflare_zero_trust_infrastructure_access_target and will be removed in the next major version. (#​4403)

FEATURES:

  • New Resource: cloudflare_zero_trust_infrastructure_access_target (#​4403)

ENHANCEMENTS:

  • resource/cloudflare_ruleset: add support for zstd compression in the compress_response action (#​4300)

BUG FIXES:

  • resource/cloudflare_workers_cron_trigger: fix incorrectly reported deprecated resource (#​4295)
  • resource/cloudflare_zero_trust_dlp_profile: Include more fields in entry set hash function (#​4464)

DEPENDENCIES:

  • provider: bump github.com/cloudflare/cloudflare-go from 0.107.0 to 0.108.0 (#​4394)
  • provider: bump github.com/hashicorp/terraform-plugin-framework-validators from 0.13.0 to 0.14.0 (#​4313)

v4.44.0

Compare Source

NOTES:

  • cloudflare_list has been migrated to the terraform-plugin-framework in doing so addresses issues with the internal representation of zero values. A downside to this is that to get the full benefits, you will need to remove the resource from your Terraform state (terraform state rm ...) and then import the resource back into your state. (#​4228)

ENHANCEMENTS:

  • resource/cloudflare_certificate_pack: Add SSL.com as valid certificate authority (#​4267)
  • resource/cloudflare_device_posture_rule: Add support for SentinelOne posture check operational_state field (#​4200)

BUG FIXES:

  • resource/cloudflare_device_posture_rule: fix bug where locations were not parsed correctly for client_certificate_v2 posture rules (#​4168)
  • resource/cloudflare_teams_rule: start persisting rule settings, wo rules may not stuck in plan cycle (#​4261)
  • resource/cloudflare_zone: When changing type to or from partial the verification_key attribute will properly show that it will receive a new value. (#​4019)

INTERNAL:

  • resource/cloudflare_list: migrate from SDKv2 to terraform-plugin-framework (#​4228)

DEPENDENCIES:

  • provider: bump github.com/cloudflare/cloudflare-go from 0.106.0 to 0.107.0 (#​4251)
  • provider: bump golang.org/x/net from 0.29.0 to 0.30.0 (#​4213)

v4.43.0

Compare Source

FEATURES:

  • New Resource: cloudflare_infrastructure_access_target (#​4077)

ENHANCEMENTS:

  • resource/cloudflare_access_application: added target contexts support for access application type infrastructure (#​4128)
  • resource/cloudflare_access_policy: added infrastructure connection rule support for access policy (#​4128)
  • resource/cloudflare_device_posture_integration: add support for managing custom_s2s third party posture provider. (#​3917)
  • resource/cloudflare_device_posture_rule: add ability to create custom_s2s posture rule (#​3917)
  • resource/cloudflare_zone_settings_override: add support for Speed Brain (#​4113)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.34 to 1.27.37 (#​4124)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.37 to 1.27.38 (#​4127)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.32 to 1.17.35 (#​4124)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.35 to 1.17.36 (#​4127)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.61.2 to 1.63.1 (#​4124)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.63.1 to 1.63.2 (#​4127)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.5 to 1.31.0 (#​4124)
  • provider: bump actions/checkout from 3 to 4 (#​4101)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.104.0 to 0.105.0 (#​4125)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.105.0 to 0.106.0 (#​4137)
  • provider: bump github.com/hashicorp/terraform-plugin-framework from 1.11.0 to 1.12.0 (#​4061)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.23.0 to 0.24.0 (#​4060)

v4.42.0

Compare Source

FEATURES:

  • New Resource: cloudflare_zero_trust_gateway_certificate (#​3547)

ENHANCEMENTS:

  • resource/cloudflare_notification_policy: add support for image_notification alert type (#​3981)
  • resource/cloudflare_access_group: Added description strings to all rule types (#​3792)
  • resource/cloudflare_bot_management: Add support for ai_bots_protection settings (#​3960)
  • resource/cloudflare_record: remove internal references to deprecated ZoneID and ZoneName fields (#​4018)
  • resource/cloudflare_workers_script: Add support for hyperdrive binding type (#​3821)
  • resource/cloudflare_zone_settings_override: Add optional setting replace_insecure_js (#​3602)
  • resource/rulesets: add cache_reserve terraform support and fix typo (#​3923)
  • resource/zero_trust_gateway_settings: Add missing disable_for_time example field (#​3931)

BUG FIXES:

  • resource/cloudflare_access_application: fix the name of the new resource to use when upgrading (#​4044)
  • resource/cloudflare_access_application: reconcile access application custom attributes logic (#​3987)
  • resource/cloudflare_hyperdrive_config: fix bug when calling passing Hyperdrive config ID to update method (#​4042)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.31 to 1.27.32 (#​3892)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.32 to 1.27.33 (#​3901)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.30 to 1.17.31 (#​3892)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.31 to 1.17.32 (#​3901)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.61.0 to 1.61.1 (#​3892)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.61.1 to 1.61.2 (#​3901)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.4 to 1.30.5 (#​3892)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.33 to 1.27.34 in the aws group (#​4020)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.103.0 to 0.104.0 (#​3974)
  • provider: bump golang.org/x/net from 0.28.0 to 0.29.0 (#​3911)

v4.41.0

Compare Source

NOTES:

  • resource/cloudflare_logpush_job: Deprecate frequency in favour of max_upload_interval_seconds (#​3745)
  • resource/cloudflare_record: remove deprecated zone_name field (#​3855)

FEATURES:

  • New Data Source: cloudflare_dcv_delegation (#​3885)
  • New Resource: cloudflare_cloud_connector_rules (#​3622)

ENHANCEMENTS:

  • resource/cloudflare_device_posture_rule: Modify Tanium's eid_last_seen field to be relative instead of a timestamp value (#​3764)
  • resource/cloudflare_teams_account: Add disable_for_time attribute (#​3526)
  • resource/cloudflare_waiting_room: Add enabled_origin_commands field. (#​3805)
  • resource/rulesets: add "contains" support to custom cache key headers (#​3820)

BUG FIXES:

  • resource/cloudflare_access_mutual_tls_certificate: change associated hostnames to a set (#​3498)
  • resource/cloudflare_access_policy: Fix forcing new access policies when account id is not set through import (#​3358)
  • resource/cloudflare_record: Suppress matching ipv6 dns record (#​3888)
  • resource/cloudflare_record: handle scenarios where content and value are both being set in state and erroneously always thinking the content field is the source of truth (#​3776)
  • resource/cloudflare_zero_trust_access_group: Fix false deprecation warnings (#​3740)
  • resource/cloudflare_zone_settings_override: fix migration process with nil initial_settings (#​3829)
  • resource/hyperdrive_config: use hyperdrive_config id when updating resource (#​3704)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.27 to 1.27.31 (#​3801)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.27 to 1.17.30 (#​3801)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.3 to 1.60.1 (#​3801)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4 (#​3801)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.60.1 to 1.61.0 in the aws group (#​3823)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.101.0 to 0.102.0 (#​3713)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.102.0 to 0.103.0 (#​3824)

v4.40.0

Compare Source

NOTES:

  • resource/cloudflare_access_application: deprecated in favour of cloudflare_zero_trust_access_application and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_ca_certificate: deprecated in favour of cloudflare_zero_trust_access_short_lived_certificate and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_custom_page: deprecated in favour of cloudflare_zero_trust_access_custom_page and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_group: deprecated in favour of cloudflare_zero_trust_access_group and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_identity_provider: deprecated in favour of cloudflare_zero_trust_access_identity_provider and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_keys_configuration: deprecated in favour of cloudflare_zero_trust_access_key_configuration and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_mutual_tls_certificate: deprecated in favour of cloudflare_zero_trust_access_mtls_certificate and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_mutual_tls_hostname_settings: deprecated in favour of cloudflare_zero_trust_access_mtls_hostname_settings and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_organization: deprecated in favour of cloudflare_zero_trust_organization and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_policy: deprecated in favour of cloudflare_zero_trust_access_policy and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_service_token: deprecated in favour of cloudflare_zero_trust_access_service_token and will be removed in the next major version. (#​3584)
  • resource/cloudflare_access_tag: deprecated in favour of cloudflare_zero_trust_access_tag and will be removed in the next major version. (#​3584)
  • resource/cloudflare_device_dex_test: deprecated in favour of cloudflare_zero_trust_dex_test and will be removed in the next major version. (#​3584)
  • resource/cloudflare_device_managed_networks: deprecated in favour of cloudflare_zero_trust_device_managed_networks and will be removed in the next major version. (#​3584)
  • resource/cloudflare_device_policy_certificates: deprecated in favour of cloudflare_zero_trust_device_certificates and will be removed in the next major version. (#​3584)
  • resource/cloudflare_device_posture_integration: deprecated in favour of cloudflare_zero_trust_device_posture_integration and will be removed in the next major version. (#​3584)
  • resource/cloudflare_device_posture_rule: deprecated in favour of cloudflare_zero_trust_device_posture_rule and will be removed in the next major version. (#​3584)
  • resource/cloudflare_device_settings_policy: deprecated in favour of cloudflare_zero_trust_device_profiles and will be removed in the next major version. (#​3584)
  • resource/cloudflare_dlp_custom_profile: deprecated in favour of cloudflare_zero_trust_dlp_custom_profile and will be removed in the next major version. (#​3584)
  • resource/cloudflare_dlp_predefined_profile: deprecated in favour of cloudflare_zero_trust_dlp_predefined_profile and will be removed in the next major version. (#​3584)
  • resource/cloudflare_dlp_profile: deprecated in favour of cloudflare_zero_trust_dlp_profile and will be removed in the next major version. (#​3584)
  • resource/cloudflare_fallback_domain: deprecated in favour of cloudflare_zero_trust_local_domain_fallback and will be removed in the next major version. (#​3584)
  • resource/cloudflare_gre_tunnel: deprecated in favour of cloudflare_magic_wan_gre_tunnel and will be removed in the next major version. (#​3584)
  • resource/cloudflare_ipsec_tunnel: deprecated in favour of cloudflare_magic_wan_ipsec_tunnel and will be removed in the next major version. (#​3584)
  • resource/cloudflare_record: fix a bug that prematurely removed the ability to set the deprecated value field. (#​3674)
  • resource/cloudflare_risk_behavior: deprecated in favour of cloudflare_zero_trust_risk_behavior and will be removed in the next major version. (#​3584)
  • resource/cloudflare_split_tunnel: deprecated in favour of cloudflare_zero_trust_split_tunnels and will be removed in the next major version. (#​3584)
  • resource/cloudflare_static_route: deprecated in favour of cloudflare_magic_wan_static_route and will be removed in the next major version. (#​3584)
  • resource/cloudflare_teams_account: deprecated in favour of cloudflare_zero_trust_gateway_settings and will be removed in the next major version. (#​3584)
  • resource/cloudflare_teams_list: deprecated in favour of cloudflare_zero_trust_list and will be removed in the next major version. (#​3584)
  • resource/cloudflare_teams_location: deprecated in favour of cloudflare_zero_trust_dns_location and will be removed in the next major version. (#​3584)
  • resource/cloudflare_teams_proxy_endpoint: deprecated in favour of cloudflare_zero_trust_gateway_proxy_endpoint and will be removed in the next major version. (#​3584)
  • resource/cloudflare_teams_rule: deprecated in favour of cloudflare_zero_trust_gateway_policy and will be removed in the next major version. (#​3584)
  • resource/cloudflare_tunnel: deprecated in favour of cloudflare_zero_trust_tunnel_cloudflared and will be removed in the next major version. (#​3584)
  • resource/cloudflare_tunnel_config: deprecated in favour of cloudflare_zero_trust_tunnel_cloudflared_config and will be removed in the next major version. (#​3584)
  • resource/cloudflare_tunnel_route: deprecated in favour of cloudflare_zero_trust_tunnel_route and will be removed in the next major version. (#​3584)
  • resource/cloudflare_tunnel_virtual_network: deprecated in favour of cloudflare_zero_trust_tunnel_virtual_network and will be removed in the next major version. (#​3584)
  • resource/cloudflare_worker_cron_trigger: deprecated in favour of cloudflare_workers_cron_trigger and will be removed in the next major version. (#​3584)
  • resource/cloudflare_worker_domain: deprecated in favour of cloudflare_workers_custom_domain and will be removed in the next major version. (#​3584)
  • resource/cloudflare_worker_script: deprecated in favour of cloudflare_workers_script and will be removed in the next major version. (#​3584)
  • resource/cloudflare_worker_secret: deprecated in favour of cloudflare_workers_secret and will be removed in the next major version. (#​3584)
  • resource/cloudflare_workers_for_platforms_namespace: deprecated in favour of cloudflare_workers_for_platforms_dispatch_namespace and will be removed in the next major version. (#​3584)

FEATURES:

  • New Resource: cloudflare_magic_wan_gre_tunnel (#​3584)
  • New Resource: cloudflare_magic_wan_ipsec_tunnel (#​3584)
  • New Resource: cloudflare_magic_wan_static_route (#​3584)
  • New Resource: cloudflare_workers_cron_trigger (#​3584)
  • New Resource: cloudflare_workers_custom_domain (#​3584)
  • New Resource: cloudflare_workers_for_platforms_dispatch_namespace (#​3584)
  • New Resource: cloudflare_workers_script (#​3584)
  • New Resource: cloudflare_workers_secret (#​3584)
  • New Resource: cloudflare_zero_trust_access_application (#​3584)
  • New Resource: cloudflare_zero_trust_access_custom_page (#​3584)
  • New Resource: cloudflare_zero_trust_access_group (#​3584)
  • New Resource: cloudflare_zero_trust_access_identity_provider (#​3584)
  • New Resource: cloudflare_zero_trust_access_key_configuration (#​3584)
  • New Resource: cloudflare_zero_trust_access_mtls_certificate (#​3584)
  • New Resource: cloudflare_zero_trust_access_mtls_hostname_settings (#​3584)
  • New Resource: cloudflare_zero_trust_access_policy (#​3584)
  • New Resource: cloudflare_zero_trust_access_service_token (#​3584)
  • New Resource: cloudflare_zero_trust_access_short_lived_certificate (#​3584)
  • New Resource: cloudflare_zero_trust_access_tag (#​3584)
  • New Resource: cloudflare_zero_trust_device_certificates (#​3584)
  • New Resource: cloudflare_zero_trust_device_managed_networks (#​3584)
  • New Resource: cloudflare_zero_trust_device_posture_integration (#​3584)
  • New Resource: cloudflare_zero_trust_device_posture_rule (#​3584)
  • New Resource: cloudflare_zero_trust_device_profiles (#​3584)
  • New Resource: cloudflare_zero_trust_dex_test (#​3584)
  • New Resource: cloudflare_zero_trust_dlp_custom_profile (#​3584)
  • New Resource: cloudflare_zero_trust_dlp_predefined_profile (#​3584)
  • New Resource: cloudflare_zero_trust_dlp_profile (#​3584)
  • New Resource: cloudflare_zero_trust_dns_location (#​3584)
  • New Resource: cloudflare_zero_trust_gateway_policy (#​3584)
  • New Resource: cloudflare_zero_trust_gateway_proxy_endpoint (#​3584)
  • New Resource: cloudflare_zero_trust_gateway_settings (#​3584)
  • New Resource: cloudflare_zero_trust_list (#​3584)
  • New Resource: cloudflare_zero_trust_local_domain_fallback (#​3584)
  • New Resource: cloudflare_zero_trust_organization (#​3584)
  • New Resource: cloudflare_zero_trust_risk_behavior (#​3584)
  • New Resource: cloudflare_zero_trust_risk_score_integration (#​3563)
  • New Resource: cloudflare_zero_trust_split_tunnels (#​3584)
  • New Resource: cloudflare_zero_trust_tunnel_cloudflared (#​3584)
  • New Resource: cloudflare_zero_trust_tunnel_cloudflared_config (#​3584)
  • New Resource: cloudflare_zero_trust_tunnel_route (#​3584)
  • New Resource: cloudflare_zero_trust_tunnel_virtual_network (#​3584)

ENHANCEMENTS:

  • resource/cloudflare_device_posture_rule: add ability to create client_certificate_v2 posture rule (#​3512)
  • resource/cloudflare_device_settings_policy: Add tunnel_protocol field for device policies (#​3513)

BUG FIXES:

  • resource/cloudflare_access_policy: handle multiple okta idps in access policies (#​3579)
  • resource/cloudflare_record: refactor validation to use ExactlyOneOf instead of custom logic (#​3699)

DEPENDENCIES:

  • provider: bump github.com/hashicorp/terraform-plugin-framework from 1.10.0 to 1.11.0 (#​3575)
  • provider: bump github.com/hashicorp/terraform-plugin-testing from 1.9.0 to 1.10.0 (#​3583)
  • provider: bump golang.org/x/net from 0.27.0 to 0.28.0 (#​3576)

v4.39.0

Compare Source

NOTES:

  • resource/cloudflare_access_policy: remove deprecation notice related to precedence (#​3556)
  • resource/cloudflare_record: value is now deprecated in favour of content (#​3509)
  • resource/cloudflare_worker_cron_trigger: deprecated in favour of cloudflare_workers_cron_trigger and will be removed in the next major version. (#​3500)
  • resource/cloudflare_worker_domain: deprecated in favour of cloudflare_workers_domain and will be removed in the next major version. (#​3500)
  • resource/cloudflare_worker_route: deprecated in favour of cloudflare_workers_route and will be removed in the next major version. (#​3500)
  • resource/cloudflare_worker_script: deprecated in favour of cloudflare_workers_script and will be removed in the next major version. (#​3500)
  • resource/cloudflare_worker_secret: deprecated in favour of cloudflare_workers_secret and will be removed in the next major version. (#​3500)
  • resource/cloudflare_workers_for_platforms_namespace: deprecated in favour of cloudflare_workers_for_platforms_dispatch_namespace and will be removed in the next major version. (#​3500)
  • resource/zone_settings_override: deprecate minify setting and include state migration to remove from local state. You should immediately remove the configuration from the resource to prevent permadiffs. Automatic migration of user configuration can be handled with Grit by running grit apply github.com/cloudflare/terraform-provider-cloudflare#cloudflare_zone_settings_override_remove_minify (#​3521)

FEATURES:

  • New Data Source: cloudflare_gateway_app_types (#​3470)
  • New Resource: cloudflare_workers_cron_trigger (#​3500)
  • New Resource: cloudflare_workers_domain (#​3500)
  • New Resource: cloudflare_workers_for_platforms_dispatch_namespace (#​3500)
  • New Resource: cloudflare_workers_route (#​3500)
  • New Resource: cloudflare_workers_script (#​3500)
  • New Resource: cloudflare_workers_secret (#​3500)

ENHANCEMENTS:

  • resource/access_application: add skip_app_launcher_login_page flag to skip the App Launcher landing page (#​3519)
  • resource/cloudflare_device_posture_rules: added support for intune compliance_status values (#​3492)
  • resource/cloudflare_teams_rule: Add disable_clipboard_redirection attribute to BISOAdminControls (#​3511)
  • resource/hyperdrive_config: Add support for creating Hyperdrive over Access configs (#​3516)
  • resource/hyperdrive_config: Add support for max_age and stale_while_revalidate in Hyperdrive Config caching settings (#​3516)

BUG FIXES:

  • resource/cloudflare_list_item: handle overlapping hostname url_hostname (#​3515)
  • resource/cloudflare_risk_behavior: fix bug where partial definition of risk behaviors resulted in a provider error (#​3463)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.2 to 1.58.3 in the aws group (#​3557)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.100.0 to 0.101.0 (#​3540)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.99.0 to 0.100.0 (#​3499)

v4.38.0

Compare Source

FEATURES:

  • New Data Source: cloudflare_gateway_categories (#​3443)

ENHANCEMENTS:

  • resource/cloudflare_teams_list: add support for descriptions on list items (#​3488)
  • resource/cloudflare_teams_rules: add support for ignore_cname_category_matches (#​3473)

BUG FIXES:

  • resource/cloudflare-access-application: fixes bug when updating self_hosted_domains (#​3468)
  • resource/cloudflare_access_application: Fix bug that was not cleaning the API when removing all ids from the 'policies' list (#​3469)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.24 to 1.27.25 (#​3449)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.25 to 1.27.27 (#​3483)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.24 to 1.17.25 (#​3449)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.25 to 1.17.27 (#​3483)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.0 to 1.58.1 (#​3449)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.1 to 1.58.2 (#​3483)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.2 (#​3449)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.2 to 1.30.3 (#​3483)
  • provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.3.0 to 2.4.0 (#​3480)

v4.37.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_notification_policy: Add tunnel_name filter for Magic Health Checks (#​3417)

BUG FIXES:

  • resource/cloudflare_r2_bucket: add validation to location hint to prevent invalid values from drifting (#​3441)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.21 to 1.27.22 (#​3404)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.22 to 1.27.23 (#​3412)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.23 to 1.27.24 (#​3437)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.21 to 1.17.22 (#​3404)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.22 to 1.17.23 (#​3412)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.23 to 1.17.24 (#​3437)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.56.1 to 1.57.0 (#​3404)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.57.0 to 1.57.1 (#​3412)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.0 to 1.30.1 (#​3412)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.57.1 to 1.58.0 in the aws group (#​3429)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.98.0 to 0.99.0 (#​3438)
  • provider: bump github.com/hashicorp/terraform-plugin-framework from 1.9.0 to 1.10.0 (#​3445)
  • provider: bump github.com/hashicorp/terraform-plugin-framework-validators from 0.12.0 to 0.13.0 (#​3447)
  • provider: bump github.com/hashicorp/terraform-plugin-testing from 1.8.0 to 1.9.0 (#​3446)
  • provider: bump golang.org/x/net from 0.26.0 to 0.27.0 (#​3442)

v4.36.0

Compare Source

NOTES:

  • resource/zone_settings_override: deprecate mobile_redirect setting and include state migration to remove from local state. You should immediately remove the configuration from the resource to prevent permadiffs. (#​3337)

ENHANCEMENTS:

  • resource/cloudflare_access_application: Support configuring OIDC SaaS access token lifetime (#​3353)

BUG FIXES:

  • resource/cloudflare_list_item: fix crash when not using type = "redirect" due to attempting to compare nil (#​3368)
  • resource/cloudflare_list_item: implement exact match for IP values to prevent overlapping IP prefixes from not being found (#​3368)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.19 (#​3360)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.19 to 1.27.20 (#​3362)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.20 to 1.27.21 (#​3364)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.18 to 1.17.19 (#​3360)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.19 to 1.17.20 (#​3362)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.20 to 1.17.21 (#​3364)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.1 to 1.55.2 (#​3360)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.2 to 1.56.0 (#​3362)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.56.0 to 1.56.1 (#​3364)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.27.2 to 1.28.0 (#​3360)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.28.0 to 1.29.0 (#​3362)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.29.0 to 1.30.0 (#​3364)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.97.0 to 0.98.0 (#​3365)
  • provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.2.0 to 2.3.0 (#​3363)
  • provider: bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 in /tools (#​3395)

v4.35.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_access_application: Add Hybrid and Implicit flow support to OIDC SaaS Apps (#​3324)
  • resource/cloudflare_access_organization: Fix 'name' being optional (#​3343)
  • resource/cloudflare_load_balancer_pool: Add support for virtual_network_id (#​3333)
  • resource/cloudflare_teams_account: add support for 'virtual_ip' (#​3321)
  • resource/resource_cloudflare_zone: add support for 'vanity_name_servers' (#​3315)

BUG FIXES:

  • resource/cloudflare_access_application: Fix bug requiring explicit account_id or zone_id (#​3352)
  • resource/cloudflare_access_application: force recreation if SaaS app auth_type is changed (#​3332)
  • resource/cloudflare_list_item: handle overlapping redirect source_url (#​3335)
  • resource/cloudflare_logpush_job: Mirror API defaults for record_delimiter to include newline (#​3334)
  • resource/cloudflare_waiting_room_event: fix panic when trying to import a resource (#​3351)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.16 to 1.27.17 (#​3339)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.17 to 1.27.18 (#​3350)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.16 to 1.17.17 (#​3339)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.17 to 1.17.18 (#​3350)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.3 to 1.54.4 (#​3339)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.0 to 1.55.1 (#​3350)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.27.0 to 1.27.1 (#​3339)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.27.1 to 1.27.2 (#​3350)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.4 to 1.55.0 in the aws group (#​3346)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.96.0 to 0.97.0 (#​3347)
  • provider: bump github.com/hashicorp/terraform-plugin-framework from 1.8.0 to 1.9.0 (#​3341)
  • provider: bump golang.org/x/net from 0.25.0 to 0.26.0 (#​3342)
  • provider: bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (#​3345)

v4.34.0

Compare Source

FEATURES:

  • New Resource: cloudflare_risk_behavior (#​3307)

ENHANCEMENTS:

  • resource/cloudflare_access_application: Add support for OIDC refresh tokens, allowing PKCE without client secret, custom claims, and specifying name_by_idp for custom attributes/claims (#​3306)
  • resource/cloudflare_access_application: improve validation logic for zone level reusable policies (#​3325)
  • resource/cloudflare_access_group: improve validation logic for zone level reusable policies (#​3325)
  • resource/cloudflare_ruleset: add support for fonts and disable_rum action parameters (#​3261)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.13 to 1.27.14 (#​3310)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.14 to 1.27.15 (#​3313)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.15 to 1.27.16 (#​3326)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.13 to 1.17.14 (#​3310)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.14 to 1.17.15 (#​3313)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.15 to 1.17.16 (#​3326)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.0 to 1.54.1 (#​3310)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.1 to 1.54.2 (#​3313)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.2 to 1.54.3 (#​3326)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.26.1 to 1.26.2 (#​3310)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.26.2 to 1.27.0 (#​3313)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.2 to 1.54.0 in the aws group (#​3308)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.95.0 to 0.96.0 (#​3322)
  • provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.33.0 to 2.34.0 (#​3316)
  • provider: bump github.com/hashicorp/terraform-plugin-testing from 1.6.0 to 1.8.0 (#​3317)

v4.33.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_access_application: added support for 'policies' argument (#​3288)
  • resource/cloudflare_access_policy: added support for reusable policies (#​3288)
  • resource/cloudflare_zone_settings_override: add support for NEL (#​3305)

BUG FIXES:

  • resource/cloudflare_list_item: retry list ID fetch operations for the identifiers (#​3303)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.11 to 1.27.12 (#​3295)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.12 to 1.27.13 (#​3301)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.11 to 1.17.12 (#​3295)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.12 to 1.17.13 (#​3301)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.1 to 1.53.2 (#​3295)
  • provider: bump bflad/action-milestone-comment from 1 to 2 (#​3299)
  • provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.1.0 to 2.2.0 (#​3298)
  • provider: bump github.com/hashicorp/terraform-plugin-mux from 0.15.0 to 0.16.0 (#​3296)
  • provider: bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (#​3302)

v4.32.0

Compare Source

NOTES:

  • resource/cloudflare_rate_limit: This resource is being deprecated in favor of the cloudflare_rulesets resource (#​3279)

ENHANCEMENTS:

  • resource/cloudflare_access_application: add support for SCIM provisioning configuration (#​3291)
  • resource/cloudflare_access_group: Add the option for email_list to be used in require, include and exclude fields (#​3247)
  • resource/cloudflare_device_posture_rules: added support for os_version_extra (#​3281)

BUG FIXES:

  • resource/cloudflare_turnstile: Fix error handling corrupting state (#​3284)

DEPENDENCIES:

  • provider: bump github.com/cloudflare/cloudflare-go from 0.94.0 to 0.95.0 (#​3294)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.22.2 to 0.23.0 (#​3289)
  • provider: bump golang.org/x/net from 0.24.0 to 0.25.0 (#​3290)
  • provider: bump golangci/golangci-lint-action from 5 to 6 (#​3293)

v4.31.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_access_application: added support for options_preflight_bypass (#​3267)
  • resource/cloudflare_dlp_profile: Added support for ocr_enabled field to profiles (#​3224)
  • resource/cloudflare_notification_policy: add 'target_ip' atrribute to 'filter' nested block (#​3263)
  • resource/cloudflare_teams_account: add custom_certificate setting support (#​3253)
  • resource/cloudflare_teams_location: added ecs_support field (#​3264)

BUG FIXES:

  • resource/cloudflare_hyperdrive_config: Fix 'HyperdriveID' not included in Update call (#​3251)
  • resource/cloudflare_managed_headers: disable header if it is deleted from terraform state (#​3260)
  • resource/cloudflare_worker_script: fix namespaced script delete trying to delete from account rather than the namespace (#​3238)

INTERNAL:

  • provider: introduce a muxed client to support using cloudflare-go/v0 and cloudflare-go/v2 together (#​3262)

DEPENDENCIES:

  • provider: bump github.com/cloudflare/cloudflare-go from 0.93.0 to 0.94.0 (#​3265)
  • provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.0.0 to 2.1.0 (#​3274)
  • provider: bump github.com/hashicorp/terraform-plugin-framework from 1.5.0 to 1.8.0 (#​3255)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.21.0 to 0.22.2 (#​3254)
  • provider: bump golang.org/x/net from 0.19.0 to 0.23.0 in /tools (#​3258)
  • provider: bump golangci/golangci-lint-action from 4 to 5 (#​3271)

v4.30.0

Compare Source

ENHANCEMENTS:

  • cloudflare/resource_logpush_job: Add support for page_shield_events (#​3237)
  • resource/cloudflare_access_group: added support for common_names rule list type to allow for more than one common_name rule in a policy block (#​3229)
  • resource/cloudflare_access_policy: added support for common_names rule list type to allow for more than one common_name rule in a policy block (#​3229)
  • resource/cloudflare_ipsec_tunnel: added support for replay_protection (#​3249)

BUG FIXES:

  • resource/cloudflare_email_routing_address: Make sure schema is correctly upgraded. (#​3245)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.10 to 1.27.11 (#​3232)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.10 to 1.17.11 (#​3232)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.92.0 to 0.93.0 (#​3239)
  • provider: bump golang.org/x/net from 0.22.0 to 0.23.0 (#​3225)
  • provider: bump golang.org/x/net from 0.23.0 to 0.24.0 (#​3230)

v4.29.0

Compare Source

BREAKING CHANGES:

  • data_source/record: Remove locked flag which is always false (#​3220)

ENHANCEMENTS:

  • datasource/cloudflare_tunnel: Add the option to filter deleted tunnels (#​3201)
  • resource/cloudflare_teams_rule: Add support for resolver policies (#​3198)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.9 to 1.27.10 (#​3222)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.9 to 1.17.10 (#​3222)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.0 to 1.53.1 (#​3222)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.26.0 to 1.26.1 (#​3222)

v4.28.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_access_application: adds saml_attribute_transform_jsonata` to SaaS applications (#​3187)
  • resource/cloudflare_device_posture_rule: update support for new fields for crowdstrike_s2s posture rule. (#​3216)
  • resource/cloudflare_ipsec_tunnel: Adds IPsec tunnel health_check_direction & health_check_rate parameters (#​3112)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.8 to 1.27.9 (#​3207)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.8 to 1.17.9 (#​3207)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.90.0 to 0.91.0 (#​3208)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.91.0 to 0.92.0 (#​3218)

v4.27.0

Compare Source

FEATURES:

  • New Resource: cloudflare_access_mutual_tls_hostname_settings (#​3173)
  • New Resource: cloudflare_hyperdrive_config (#​3111)

ENHANCEMENTS:

  • resource/cloudflare_dlp_profile: Added support for context_awareness field to profiles (#​3158)
  • resource/cloudflare_logpush_job: Add output_options parameter (#​3171)
  • resource/cloudflare_notification_policy: Implement the airport_code filter (#​3183)
  • resource/cloudflare_worker_script: Add dispatch_namespace to support uploading to a Workers for Platforms namespace (#​3154)
  • resource/cloudflare_worker_script: Add tags to support tagging Workers for Platforms Workers (#​3154)

BUG FIXES:

  • resource/cloudflare_access_application: Add Sensitive to oidc client_secret and preserve client_secret across apply (#​3168)
  • resource/cloudflare_list_item: fix id parsing for imports (#​3191)
  • resource/cloudflare_logpush_job: only set the value in state when it is defined (#​3188)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.6 to 1.27.7 (#​3172)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.7 to 1.27.8 (#​3197)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.6 to 1.17.7 (#​3172)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.7 to 1.17.8 (#​3197)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.3 to 1.51.4 (#​3172)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.4 to 1.52.0 (#​3182)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.52.0 to 1.52.1 (#​3190)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.52.1 to 1.53.0 (#​3197)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.2 to 1.25.3 (#​3172)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.3 to 1.26.0 (#​3197)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.89.0 to 0.90.0 (#​3178)
  • provider: bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools (#​3180)
  • provider: bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#​3181)

v4.26.0

Compare Source

FEATURES:

  • New Data Source: cloudflare_dlp_datasets (#​3135)

ENHANCEMENTS:

  • resource/cloudflare_access_application: adds name_id_transform_jsonata to SaaS applications (#​3132)

BUG FIXES:

  • resource/cloudflare_access_application: Fix issue with sending allow_authenticate_via_warp on updates when it is not provided (#​3140)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.1 to 1.27.2 (#​3136)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.2 to 1.27.3 (#​3138)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.3 to 1.27.4 (#​3141)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.4 to 1.27.5 (#​3159)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.5 to 1.27.6 (#​3161)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.1 to 1.17.2 (#​3136)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.2 to 1.17.3 (#​3138)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.3 to 1.17.4 (#​3141)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.4 to 1.17.5 (#​3159)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.5 to 1.17.6 (#​3161)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.2 to 1.50.3 (#​3136)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.3 to 1.51.0 (#​3138)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.0 to 1.51.1 (#​3141)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.1 to 1.51.2 (#​3159)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.2 to 1.51.3 (#​3161)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.0 to 1.25.1 (#​3136)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.1 to 1.25.2 (#​3141)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.88.0 to 0.89.0 (#​3148)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.21.0 to 0.22.0 (#​3139)
  • provider: bump github.com/hashicorp/terraform-plugin-mux from 0.14.0 to 0.15.0 (#​3149)
  • provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.32.0 to 2.33.0 (#​3142)
  • provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.32.0 to 2.33.0 (#​3147)
  • provider: bump github.com/hashicorp/terraform-plugin-testing from 1.6.0 to 1.7.0 (#​3162)
  • provider: bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#​3157)
  • provider: bump golang.org/x/net from 0.21.0 to 0.22.0 (#​3160)

v4.25.0

Compare Source

BREAKING CHANGES:

  • resource/cloudflare_custom_pages: Removed the always_online variant. This page is never generated anymore, if a requested page is unavailable in the archive the error page that would have been shown if always online wasn't enabled is shown. (#​3117)

ENHANCEMENTS:

  • resource/cloudflare_access_application: adds oidc saas application support (#​3133)
  • resource/cloudflare_access_application: adds the ability to set allow_authenticate_via_warp. (#​3103)
  • resource/cloudflare_access_organization: adds the ability to set allow_authenticate_via_warp and warp_auth_session_duration. (#​3103)
  • resource/cloudflare_teams_account: Add support for extended e-mail matching (#​3089)
  • resource/cloudflare_teams_accounts: Added notification settings to teams antivirus settings (#​3124)
  • resource/pages_project: Add build_caching attribute (#​3110)

BUG FIXES:

  • resource/cloudflare_email_routing_address: add schema migrator (#​3119)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.6 to 1.27.0 (#​3118)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.0 to 1.27.1 (#​3134)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.16 to 1.17.0 (#​3118)
  • provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.0 to 1.17.1 (#​3134)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.48.1 to 1.49.0 (#​3118)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.49.0 to 1.50.0 (#​3125)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.0 to 1.50.1 (#​3128)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.1 to 1.50.2 (#​3134)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.24.1 to 1.25.0 (#​3118)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.87.0 to 0.88.0 (#​3122)
  • provider: bump golang.org/x/net from 0.20.0 to 0.21.0 (#​3108)
  • provider: bump golangci/golangci-lint-action from 3 to 4 (#​3115)

v4.24.0

Compare Source

ENHANCEMENTS:

  • datasource/cloudflare_record: Add the option to filter by "content" (#​3084)

BUG FIXES:

  • resource/cloudflare_access_application: leave existence error handling checks to the Read operation when performing imports. (#​3075)
  • resource/cloudflare_device_settings_policy: updated docs that auto_connect is in seconds, not in minutes (#​3080)
  • resource/cloudflare_dlp_profile: fixed plan flapping with DLP custom entries (#​3090)
  • resource/email_routing_rule: add schema migration for upgrading 4.22.0 to 4.23.0 (#​3102)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.48.0 to 1.48.1 (#​3078)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.86.0 to 0.87.0 (#​3095)
  • provider: bump github.com/google/uuid from 1.5.0 to 1.6.0 (#​3076)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.20.0 to 0.21.0 (#​3081)
  • provider: bump github.com/hashicorp/terraform-plugin-mux from 0.13.0 to 0.14.0 (#​3085)
  • provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.31.0 to 2.32.0 (#​3086)
  • provider: bump peter-evans/create-or-update-comment from 3 to 4 (#​3079)

v4.23.0

Compare Source

BREAKING CHANGES:

  • resource/cloudflare_list_item: include_subdomains is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)
  • resource/cloudflare_list_item: preserve_path_suffix is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)
  • resource/cloudflare_list_item: preserve_query_string is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)
  • resource/cloudflare_list_item: subpath_matching is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)

ENHANCEMENTS:

  • resource/cloudflare_access_application: adds the ability to set default_relay_state on saas applications. (#​3053)
  • resource/cloudflare_email_routing_address: add ability to import (#​2977)
  • resource/cloudflare_email_routing_rule: add ability to import (#​2998)
  • resource/cloudflare_notification_policy: Implement the affected_components option (#​3009)

INTERNAL:

  • cloudflare_email_routing_rule: migrate to plugin framework (#​2998)
  • resource/cloudflare_email_routing_address: migrate to framework provider (#​2977)
  • resource/cloudflare_list_item: migrate to plugin framework. Due to this migration, we are removing some workaround field values that were previously in place to account for the known zero value issues in the underlying SDKv2. See the release notes for the end user facing changes that need to be made for the internal state migrator to handle the internals. (#​3026)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.3 to 1.26.4 (#​3065)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.4 to 1.26.5 (#​3071)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.5 to 1.26.6 (#​3074)
  • provider: bump actions/cache from 3 to 4 (#​3067)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.85.0 to 0.86.0 (#​3066)
  • provider: bump github.com/hashicorp/terraform-plugin-framework from 1.4.2 to 1.5.0 (#​3058)

v4.22.0

Compare Source

FEATURES:

  • New Resource: cloudflare_worker_secret (#​3035)

ENHANCEMENTS:

  • resource/cloudflare_notification_policy: Add tunnel_id filter for tunnel_health_event policies (#​3038)
  • resource/cloudflare_worker_script: adds D1 binding support (#​2960)

BUG FIXES:

  • cloudflare_notification_policy: revert ExactlyOneOf (#​3032)
  • resource/cloudflare_dlp_profile: Prevent misidentified changes in dlp resources (#​3044)
  • resource/cloudflare_teams_rule: changed type & validation on the notification settings url (#​3030)
  • resource/cloudflare_teams_rules: fix block_page_enabled behaviour (#​3010)
  • resource/cloudflare_turnstile_widget: Support empty list of domains (#​3046)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.2 to 1.26.3 (#​3042)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.7 to 1.47.8 (#​3042)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.8 to 1.48.0 (#​3043)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.24.0 to 1.24.1 (#​3042)
  • provider: bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#​3047)
  • provider: bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 in /tools (#​3048)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.84.0 to 0.85.0 (#​3034)
  • provider: bump github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0 in /tools (#​3029)
  • provider: bump golang.org/x/net from 0.19.0 to 0.20.0 (#​3050)

v4.21.0

Compare Source

ENHANCEMENTS:

  • resource/cloudflare_access_application: adds the ability to set customization fields on the app launcher application. (#​2777)
  • resource/cloudflare_access_organization: remove default value for session_duration. (#​2995)
  • resource/cloudflare_access_policy: remove default value for session_duration. (#​2995)
  • resource/cloudflare_device_posture_integration: add support for access_client_id and access_client_secret fields (#​3013)
  • resource/cloudflare_logpush_job: add support for magic_ids_detections. (#​2983)
  • resource/cloudflare_notification_policy: enable selector filter and add traffic_anomalies_alert as a policy alert type (#​2976)
  • resource/cloudflare_pages_project: support standard usage model for functions (#​2963)
  • resource/cloudflare_tunnel_config: Destroying tunnel configurations now applies an empty configuration rather than deleting the parent cloudflare_tunnel resource (#​2769)

BUG FIXES:

  • resource/cloudflare_list_item: fix issue preventing usage of redirect item type (#​2975)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.10 to 1.25.11 (#​2973)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.11 to 1.25.12 (#​2987)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.12 to 1.26.0 (#​2993)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.12 to 1.26.0 (#​2993)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.5 to 1.25.8 (#​2968)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.8 to 1.25.9 (#​2969)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.9 to 1.25.10 (#​2971)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.0 to 1.26.1 (#​2997)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.1 to 1.26.2 (#​3022)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.44.0 to 1.46.0 (#​2968)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.46.0 to 1.47.0 (#​2969)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.0 to 1.47.1 (#​2971)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.1 to 1.47.2 (#​2973)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.2 to 1.47.3 (#​2987)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.3 to 1.47.4 (#​2993)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.3 to 1.47.4 (#​2993)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.4 to 1.47.5 (#​2997)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.5 to 1.47.6 (#​3016)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.6 to 1.47.7 (#​3022)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.1 to 1.23.2 (#​2968)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.2 to 1.23.3 (#​2969)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.3 to 1.23.4 (#​2971)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.4 to 1.23.5 (#​2973)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.5 to 1.24.0 (#​2993)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.5 to 1.24.0 (#​2993)
  • provider: bump actions/setup-go from 4 to 5 (#​2989)
  • provider: bump actions/stale from 8 to 9 (#​2992)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.82.0 to 0.83.0 (#​2988)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.83.0 to 0.84.0 (#​3019)
  • provider: bump github.com/google/uuid from 1.4.0 to 1.5.0 (#​3002)
  • provider: bump github.com/hashicorp/terraform-plugin-mux from 0.12.0 to 0.13.0 (#​3006)
  • provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.30.0 to 2.31.0 (#​3007)
  • provider: bump github.com/hashicorp/terraform-plugin-testing from 1.5.1 to 1.6.0 (#​2984)
  • provider: bump github/codeql-action from 2 to 3 (#​3005)
  • provider: bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /tools (#​3015)
  • provider: bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#​3017)
  • resource/cloudflare_teams_rule: Added support for notification settings at teams rule (#​3021)

v4.20.0

Compare Source

FEATURES:

  • New Data Source: cloudflare_origin_ca_certificate (#​2961)

ENHANCEMENTS:

  • resource/cloudflare_email_routing_rule: action.value is now optional to support drop rules not requiring it (#​2449)
  • resource/cloudflare_email_routing_rule: add action type drop (#​2449)
  • resource/cloudflare_notification_policy: add support for brand_protection_alert alert type (#​2937)
  • resource/cloudflare_notification_policy: add support for brand_protection_digest alert type (#​2937)
  • resource/cloudflare_notification_policy: add support for logo_match_alert alert type (#​2937)
  • resource/cloudflare_notification_policy: add support for magic_tunnel_health_check_event alert type (#​2937)
  • resource/cloudflare_notification_policy: add support for maintenance_event_notification alert type (#​2937)
  • resource/cloudflare_notification_policy: add support for mtls_certificate_store_certificate_expiration_type alert type (#​2937)
  • resource/cloudflare_notification_policy: add support for radar_notification alert type (#​2937)
  • resource/cloudflare_ruleset: make rate limiting requests_to_origin optional with a default value of false to match the API behaviour (#​2954)

BUG FIXES:

  • resource/cloudflare_list_item: fix list_item for asn and hostname types (#​2951)
  • resource/cloudflare_notification_policy: Fix missing new_status filter required by tunnel_health_event policies (#​2390)

DEPENDENCIES:

  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 (#​2948)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 (#​2953)
  • provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 (#​2956)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.2 to 1.43.0 (#​2948)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.43.0 to 1.43.1 (#​2953)
  • provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.43.1 to 1.44.0 (#​2956)
  • provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.0 to 1.23.1 (#​2953)
  • provider: bump github.com/cloudflare/cloudflare-go from 0.81.0 to 0.82.0 (#​2957)
  • provider: bump github.com/hashicorp/terraform-plugin-go from 0.19.0 to 0.19.1 (#​2942)
  • provider: bump golang.org/x/net from 0.18.0 to 0.19.0 (#​2967)
  • provider: updates github.com/aws/aws-sdk-go-v2/config from 1.24.0 to 1.25.1 (#​2945)
  • provider: updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.1 to 1.42.2 (#​2945)
  • provider: updates github.com/aws/aws-sdk-go-v2 from 1.22.2 to 1.23.0 (#​2945)

v4.19.0

Compare Source

NOTES:

  • resource/cloudflare_argo: tiered_caching attribute is deprecated in favour of the dedicated cloudflare_tiered_cache resource. (#​2906)

FEATURES:

  • New Resource: cloudflare_keyless_certificate (#​2779)

ENHANCEMENTS:

  • resource/cloudflare_notification_policy: Add support for incident_alert type (#​2901)
  • resource/cloudflare_zone: add support for secondary zone types (#​2939)

BUG FIXES:

  • resource/cloudflare_list_item: ensure each item has its own ID and is not based on the latest created entry (#​2922)

INTERNAL:

  • provider: prevent new resources and datasources from being created with terraform-plugin-sdk (#​2871)

DEPENDENCIES:

  • provider: bumps github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.22.0 (#​2899)
  • provider: bumps github.com/aws/aws-sdk-go-v2 from 1.22.0 to 1.22.1 (#​2904)
  • provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.20.0 (#​2898)
  • provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.20.0 to 1.21.0 (#​2902)
  • provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.21.0 to 1.22.0 (#​2908)
  • provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.22.0 to 1.22.1 (#​2912)
  • provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.22.1 to 1.22.2 (#​2917)
  • provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.2 to 1.41.0 (#​2897)
  • provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.41.0 to 1.42.0 (#​2905)
  • provider: bumps github.com/cloudflare/cloudflare-go from 0.80.0 to 0.81.0 (#​2919)
  • provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.29.0 to 2.30.0 (#​2925)
  • provider: bumps golang.org/x/net from 0.17.0 to 0.18.0 (#​2921)
  • provider: updates github.com/aws/aws-sdk-go-v2/config from 1.22.2 to 1.23.0 (#​2931)
  • provider: updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.0 to 1.42.1 (#​2931)
  • provider: updates github.com/aws/aws-sdk-go-v2 from 1.22.1 to 1.22.2 (#​2931)

v4.18.0

Compare Source

FEATURES:

  • New Data Source: cloudflare_device_posture_rules (#​2868)
  • New Data Source: cloudflare_tunnel (#​2866)
  • New Data Source: cloudflare_tunnel_virtual_network (#​2867)
  • New Resource: cloudflare_api_shield_operation_schema_validation_settings (#​2852)
  • New Resource: cloudflare_api_shield_schema_validation_settings (#​2841)

ENHANCEMENTS:

  • resource/cloudflare_load_balancer: Add support for least_connections steering (#​2818)
  • resource/cloudflare_load_balancer_pool: Add support for least_connections origin steering (#​2818)
  • resource/cloudflare_logpush_job: add support for casb_findings dataset (#​2859)
  • resource/cloudflare_teams_account: Add non_identity_browser_isolation_enabled field (#​2878)
  • resource/cloudflare_teams_account: add support for body_scanning config (#​2887)
  • resource/cloudflare_workers_script: add support for placement config (#​2893)

BUG FIXES:

  • resource/cloudflare_observatory_scheduled_test: Add missing 'asia-south1' region (#​2891)
  • resource/cloudflare_rulesets: Allow zero to not default to null for mitigation_timeout (#​2874)

DEPENDENCIES:

  • ci: drop separate misspell installation (#​2814)
  • provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 (#​2877)
  • provider: bumps github.com/cloudflare/cloudflare-go from 0.79.0 to 0.80.0 (#​2883)
  • provider: bumps github.com/google/uuid from 1.3.1 to 1.4.0 (#​2889)
  • provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.4.1 to 1.4.2 (#​2876)

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.


  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Lama Bot

Merge request reports

Loading