chore(deps): update terraform cloudflare to v4.26.0

This MR contains the following updates:

Package	Type	Update	Change
cloudflare (source)	required_provider	minor	4.6.0 -> 4.26.0

---

Release Notes

cloudflare/terraform-provider-cloudflare (cloudflare)

v4.26.0

Compare Source

FEATURES:

• New Data Source: cloudflare_dlp_datasets (#​3135)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds name_id_transform_jsonata to SaaS applications (#​3132)

BUG FIXES:

• resource/cloudflare_access_application: Fix issue with sending allow_authenticate_via_warp on updates when it is not provided (#​3140)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.1 to 1.27.2 (#​3136)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.2 to 1.27.3 (#​3138)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.3 to 1.27.4 (#​3141)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.4 to 1.27.5 (#​3159)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.5 to 1.27.6 (#​3161)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.1 to 1.17.2 (#​3136)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.2 to 1.17.3 (#​3138)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.3 to 1.17.4 (#​3141)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.4 to 1.17.5 (#​3159)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.5 to 1.17.6 (#​3161)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.2 to 1.50.3 (#​3136)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.3 to 1.51.0 (#​3138)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.0 to 1.51.1 (#​3141)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.1 to 1.51.2 (#​3159)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.2 to 1.51.3 (#​3161)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.0 to 1.25.1 (#​3136)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.1 to 1.25.2 (#​3141)
• provider: bump github.com/cloudflare/cloudflare-go from 0.88.0 to 0.89.0 (#​3148)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.21.0 to 0.22.0 (#​3139)
• provider: bump github.com/hashicorp/terraform-plugin-mux from 0.14.0 to 0.15.0 (#​3149)
• provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.32.0 to 2.33.0 (#​3142)
• provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.32.0 to 2.33.0 (#​3147)
• provider: bump github.com/hashicorp/terraform-plugin-testing from 1.6.0 to 1.7.0 (#​3162)
• provider: bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#​3157)
• provider: bump golang.org/x/net from 0.21.0 to 0.22.0 (#​3160)

v4.25.0

Compare Source

BREAKING CHANGES:

• resource/cloudflare_custom_pages: Removed the always_online variant. This page is never generated anymore, if a requested page is unavailable in the archive the error page that would have been shown if always online wasn't enabled is shown. (#​3117)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds oidc saas application support (#​3133)
• resource/cloudflare_access_application: adds the ability to set allow_authenticate_via_warp. (#​3103)
• resource/cloudflare_access_organization: adds the ability to set allow_authenticate_via_warp and warp_auth_session_duration. (#​3103)
• resource/cloudflare_teams_account: Add support for extended e-mail matching (#​3089)
• resource/cloudflare_teams_accounts: Added notification settings to teams antivirus settings (#​3124)
• resource/pages_project: Add build_caching attribute (#​3110)

BUG FIXES:

• resource/cloudflare_email_routing_address: add schema migrator (#​3119)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.6 to 1.27.0 (#​3118)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.0 to 1.27.1 (#​3134)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.16 to 1.17.0 (#​3118)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.0 to 1.17.1 (#​3134)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.48.1 to 1.49.0 (#​3118)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.49.0 to 1.50.0 (#​3125)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.0 to 1.50.1 (#​3128)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.1 to 1.50.2 (#​3134)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.24.1 to 1.25.0 (#​3118)
• provider: bump github.com/cloudflare/cloudflare-go from 0.87.0 to 0.88.0 (#​3122)
• provider: bump golang.org/x/net from 0.20.0 to 0.21.0 (#​3108)
• provider: bump golangci/golangci-lint-action from 3 to 4 (#​3115)

v4.24.0

Compare Source

ENHANCEMENTS:

• datasource/cloudflare_record: Add the option to filter by "content" (#​3084)

BUG FIXES:

• resource/cloudflare_access_application: leave existence error handling checks to the Read operation when performing imports. (#​3075)
• resource/cloudflare_device_settings_policy: updated docs that auto_connect is in seconds, not in minutes (#​3080)
• resource/cloudflare_dlp_profile: fixed plan flapping with DLP custom entries (#​3090)
• resource/email_routing_rule: add schema migration for upgrading 4.22.0 to 4.23.0 (#​3102)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.48.0 to 1.48.1 (#​3078)
• provider: bump github.com/cloudflare/cloudflare-go from 0.86.0 to 0.87.0 (#​3095)
• provider: bump github.com/google/uuid from 1.5.0 to 1.6.0 (#​3076)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.20.0 to 0.21.0 (#​3081)
• provider: bump github.com/hashicorp/terraform-plugin-mux from 0.13.0 to 0.14.0 (#​3085)
• provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.31.0 to 2.32.0 (#​3086)
• provider: bump peter-evans/create-or-update-comment from 3 to 4 (#​3079)

v4.23.0

Compare Source

BREAKING CHANGES:

• resource/cloudflare_list_item: include_subdomains is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)
• resource/cloudflare_list_item: preserve_path_suffix is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)
• resource/cloudflare_list_item: preserve_query_string is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)
• resource/cloudflare_list_item: subpath_matching is now a boolean value. If you previously set it to "enabled", you should update your configuration to use true instead or if you set it to "disabled", you should update it to false. The rest will be handled by the internal state migrator. (#​3026)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds the ability to set default_relay_state on saas applications. (#​3053)
• resource/cloudflare_email_routing_address: add ability to import (#​2977)
• resource/cloudflare_email_routing_rule: add ability to import (#​2998)
• resource/cloudflare_notification_policy: Implement the affected_components option (#​3009)

INTERNAL:

• cloudflare_email_routing_rule: migrate to plugin framework (#​2998)
• resource/cloudflare_email_routing_address: migrate to framework provider (#​2977)
• resource/cloudflare_list_item: migrate to plugin framework. Due to this migration, we are removing some workaround field values that were previously in place to account for the known zero value issues in the underlying SDKv2. See the release notes for the end user facing changes that need to be made for the internal state migrator to handle the internals. (#​3026)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.3 to 1.26.4 (#​3065)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.4 to 1.26.5 (#​3071)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.5 to 1.26.6 (#​3074)
• provider: bump actions/cache from 3 to 4 (#​3067)
• provider: bump github.com/cloudflare/cloudflare-go from 0.85.0 to 0.86.0 (#​3066)
• provider: bump github.com/hashicorp/terraform-plugin-framework from 1.4.2 to 1.5.0 (#​3058)

v4.22.0

Compare Source

FEATURES:

• New Resource: cloudflare_worker_secret (#​3035)

ENHANCEMENTS:

• resource/cloudflare_notification_policy: Add tunnel_id filter for tunnel_health_event policies (#​3038)
• resource/cloudflare_worker_script: adds D1 binding support (#​2960)

BUG FIXES:

• cloudflare_notification_policy: revert ExactlyOneOf (#​3032)
• resource/cloudflare_dlp_profile: Prevent misidentified changes in dlp resources (#​3044)
• resource/cloudflare_teams_rule: changed type & validation on the notification settings url (#​3030)
• resource/cloudflare_teams_rules: fix block_page_enabled behaviour (#​3010)
• resource/cloudflare_turnstile_widget: Support empty list of domains (#​3046)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.2 to 1.26.3 (#​3042)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.7 to 1.47.8 (#​3042)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.8 to 1.48.0 (#​3043)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.24.0 to 1.24.1 (#​3042)
• provider: bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#​3047)
• provider: bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 in /tools (#​3048)
• provider: bump github.com/cloudflare/cloudflare-go from 0.84.0 to 0.85.0 (#​3034)
• provider: bump github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0 in /tools (#​3029)
• provider: bump golang.org/x/net from 0.19.0 to 0.20.0 (#​3050)

v4.21.0

Compare Source

ENHANCEMENTS:

• resource/cloudflare_access_application: adds the ability to set customization fields on the app launcher application. (#​2777)
• resource/cloudflare_access_organization: remove default value for session_duration. (#​2995)
• resource/cloudflare_access_policy: remove default value for session_duration. (#​2995)
• resource/cloudflare_device_posture_integration: add support for access_client_id and access_client_secret fields (#​3013)
• resource/cloudflare_logpush_job: add support for magic_ids_detections. (#​2983)
• resource/cloudflare_notification_policy: enable selector filter and add traffic_anomalies_alert as a policy alert type (#​2976)
• resource/cloudflare_pages_project: support standard usage model for functions (#​2963)
• resource/cloudflare_tunnel_config: Destroying tunnel configurations now applies an empty configuration rather than deleting the parent cloudflare_tunnel resource (#​2769)

BUG FIXES:

• resource/cloudflare_list_item: fix issue preventing usage of redirect item type (#​2975)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.10 to 1.25.11 (#​2973)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.11 to 1.25.12 (#​2987)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.12 to 1.26.0 (#​2993)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.12 to 1.26.0 (#​2993)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.5 to 1.25.8 (#​2968)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.8 to 1.25.9 (#​2969)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.9 to 1.25.10 (#​2971)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.0 to 1.26.1 (#​2997)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.1 to 1.26.2 (#​3022)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.44.0 to 1.46.0 (#​2968)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.46.0 to 1.47.0 (#​2969)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.0 to 1.47.1 (#​2971)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.1 to 1.47.2 (#​2973)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.2 to 1.47.3 (#​2987)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.3 to 1.47.4 (#​2993)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.3 to 1.47.4 (#​2993)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.4 to 1.47.5 (#​2997)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.5 to 1.47.6 (#​3016)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.47.6 to 1.47.7 (#​3022)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.1 to 1.23.2 (#​2968)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.2 to 1.23.3 (#​2969)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.3 to 1.23.4 (#​2971)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.4 to 1.23.5 (#​2973)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.5 to 1.24.0 (#​2993)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.5 to 1.24.0 (#​2993)
• provider: bump actions/setup-go from 4 to 5 (#​2989)
• provider: bump actions/stale from 8 to 9 (#​2992)
• provider: bump github.com/cloudflare/cloudflare-go from 0.82.0 to 0.83.0 (#​2988)
• provider: bump github.com/cloudflare/cloudflare-go from 0.83.0 to 0.84.0 (#​3019)
• provider: bump github.com/google/uuid from 1.4.0 to 1.5.0 (#​3002)
• provider: bump github.com/hashicorp/terraform-plugin-mux from 0.12.0 to 0.13.0 (#​3006)
• provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.30.0 to 2.31.0 (#​3007)
• provider: bump github.com/hashicorp/terraform-plugin-testing from 1.5.1 to 1.6.0 (#​2984)
• provider: bump github/codeql-action from 2 to 3 (#​3005)
• provider: bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /tools (#​3015)
• provider: bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#​3017)
• resource/cloudflare_teams_rule: Added support for notification settings at teams rule (#​3021)

v4.20.0

Compare Source

FEATURES:

• New Data Source: cloudflare_origin_ca_certificate (#​2961)

ENHANCEMENTS:

• resource/cloudflare_email_routing_rule: action.value is now optional to support drop rules not requiring it (#​2449)
• resource/cloudflare_email_routing_rule: add action type drop (#​2449)
• resource/cloudflare_notification_policy: add support for brand_protection_alert alert type (#​2937)
• resource/cloudflare_notification_policy: add support for brand_protection_digest alert type (#​2937)
• resource/cloudflare_notification_policy: add support for logo_match_alert alert type (#​2937)
• resource/cloudflare_notification_policy: add support for magic_tunnel_health_check_event alert type (#​2937)
• resource/cloudflare_notification_policy: add support for maintenance_event_notification alert type (#​2937)
• resource/cloudflare_notification_policy: add support for mtls_certificate_store_certificate_expiration_type alert type (#​2937)
• resource/cloudflare_notification_policy: add support for radar_notification alert type (#​2937)
• resource/cloudflare_ruleset: make rate limiting requests_to_origin optional with a default value of false to match the API behaviour (#​2954)

BUG FIXES:

• resource/cloudflare_list_item: fix list_item for asn and hostname types (#​2951)
• resource/cloudflare_notification_policy: Fix missing new_status filter required by tunnel_health_event policies (#​2390)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.1 to 1.25.3 (#​2948)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.3 to 1.25.4 (#​2953)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.25.4 to 1.25.5 (#​2956)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.2 to 1.43.0 (#​2948)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.43.0 to 1.43.1 (#​2953)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.43.1 to 1.44.0 (#​2956)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.23.0 to 1.23.1 (#​2953)
• provider: bump github.com/cloudflare/cloudflare-go from 0.81.0 to 0.82.0 (#​2957)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.19.0 to 0.19.1 (#​2942)
• provider: bump golang.org/x/net from 0.18.0 to 0.19.0 (#​2967)
• provider: updates github.com/aws/aws-sdk-go-v2/config from 1.24.0 to 1.25.1 (#​2945)
• provider: updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.1 to 1.42.2 (#​2945)
• provider: updates github.com/aws/aws-sdk-go-v2 from 1.22.2 to 1.23.0 (#​2945)

v4.19.0

Compare Source

NOTES:

• resource/cloudflare_argo: tiered_caching attribute is deprecated in favour of the dedicated cloudflare_tiered_cache resource. (#​2906)

FEATURES:

• New Resource: cloudflare_keyless_certificate (#​2779)

ENHANCEMENTS:

• resource/cloudflare_notification_policy: Add support for incident_alert type (#​2901)
• resource/cloudflare_zone: add support for secondary zone types (#​2939)

BUG FIXES:

• resource/cloudflare_list_item: ensure each item has its own ID and is not based on the latest created entry (#​2922)

INTERNAL:

• provider: prevent new resources and datasources from being created with terraform-plugin-sdk (#​2871)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.22.0 (#​2899)
• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.22.0 to 1.22.1 (#​2904)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.20.0 (#​2898)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.20.0 to 1.21.0 (#​2902)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.21.0 to 1.22.0 (#​2908)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.22.0 to 1.22.1 (#​2912)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.22.1 to 1.22.2 (#​2917)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.2 to 1.41.0 (#​2897)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.41.0 to 1.42.0 (#​2905)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.80.0 to 0.81.0 (#​2919)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.29.0 to 2.30.0 (#​2925)
• provider: bumps golang.org/x/net from 0.17.0 to 0.18.0 (#​2921)
• provider: updates github.com/aws/aws-sdk-go-v2/config from 1.22.2 to 1.23.0 (#​2931)
• provider: updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.42.0 to 1.42.1 (#​2931)
• provider: updates github.com/aws/aws-sdk-go-v2 from 1.22.1 to 1.22.2 (#​2931)

v4.18.0

Compare Source

FEATURES:

• New Data Source: cloudflare_device_posture_rules (#​2868)
• New Data Source: cloudflare_tunnel (#​2866)
• New Data Source: cloudflare_tunnel_virtual_network (#​2867)
• New Resource: cloudflare_api_shield_operation_schema_validation_settings (#​2852)
• New Resource: cloudflare_api_shield_schema_validation_settings (#​2841)

ENHANCEMENTS:

• resource/cloudflare_load_balancer: Add support for least_connections steering (#​2818)
• resource/cloudflare_load_balancer_pool: Add support for least_connections origin steering (#​2818)
• resource/cloudflare_logpush_job: add support for casb_findings dataset (#​2859)
• resource/cloudflare_teams_account: Add non_identity_browser_isolation_enabled field (#​2878)
• resource/cloudflare_teams_account: add support for body_scanning config (#​2887)
• resource/cloudflare_workers_script: add support for placement config (#​2893)

BUG FIXES:

• resource/cloudflare_observatory_scheduled_test: Add missing 'asia-south1' region (#​2891)
• resource/cloudflare_rulesets: Allow zero to not default to null for mitigation_timeout (#​2874)

DEPENDENCIES:

• ci: drop separate misspell installation (#​2814)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.19.0 to 1.19.1 (#​2877)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.79.0 to 0.80.0 (#​2883)
• provider: bumps github.com/google/uuid from 1.3.1 to 1.4.0 (#​2889)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.4.1 to 1.4.2 (#​2876)

v4.17.0

Compare Source

FEATURES:

• New Resource: cloudflare_access_tag (#​2776)
• New Resource: cloudflare_api_shield_schema (#​2784)
• New Resource: cloudflare_d1_database (#​2850)
• New Resource: cloudflare_observatory_scheduled_test (#​2807)

ENHANCEMENTS:

• provider: allow defining a user agent operator suffix through the schema field (user_agent_operator_suffix) and via the environment variable (CLOUDFLARE_USER_AGENT_OPERATOR_SUFFIX) (#​2831)
• resource/cloudflare_access_application: Add idp_entity_id, public_key and sso_endpoint attributes to saas_app (#​2838)
• resource/cloudflare_access_application: adds the ability to associate a tag with an application. (#​2776)
• resource/cloudflare_access_organization: Add session_duration field (#​2857)
• resource/cloudflare_access_policy: Add session_duration field (#​2857)
• resource/cloudflare_ruleset: Add support for the use of Additional Cacheable Ports option in the Rulesets API (#​2854)
• resource/cloudflare_teams_accounts: Add support for setting ssh encryption key in ZT settings (#​2826)
• resource/cloudflare_zone_settings_override: Add support for fonts (#​2773)

BUG FIXES:

• resource/cloudflare_access_application: fix import of cloudflare_access_application not reading saas_app config (#​2843)
• resource/cloudflare_access_policy: Send purpose justification settings properly on updates (#​2836)
• resource/cloudflare_bot_management: fix fight mode not being sent to API (#​2833)
• resource/cloudflare_pages_project: Fix 'preview_branch_includes' always showing it has changes if not provided (#​2796)
• resource/cloudflare_ruleset: Add note that logging is only supported with the skip action (#​2851)

INTERNAL:

• provider: updated user agent string to now be terraform-provider-cloudflare/<version> <plugin> <operator suffix> (#​2831)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.21.0 to 1.21.1 (#​2820)
• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.21.1 to 1.21.2 (#​2847)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.43 to 1.18.44 (#​2823)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.44 to 1.18.45 (#​2846)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.45 to 1.19.0 (#​2853)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.41 to 1.13.42 (#​2821)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.0 to 1.40.1 (#​2822)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.78.0 to 0.79.0 (#​2832)
• provider: bumps github.com/google/go-cmp from 0.5.9 to 0.6.0 (#​2830)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.4.0 to 1.4.1 (#​2828)
• provider: bumps golang.org/x/net from 0.15.0 to 0.16.0 (#​2819)
• provider: bumps golang.org/x/net from 0.16.0 to 0.17.0 (#​2829)
• provider: bumps golang.org/x/net from 0.7.0 to 0.17.0 (#​2837)

v4.16.0

Compare Source

BREAKING CHANGES:

• resource/cloudflare_spectrum_application: Remove default values, make edge_ips parameter optional. (#​2629)

FEATURES:

• New Resource: cloudflare_api_shield_operation (#​2760)

ENHANCEMENTS:

• resource/cloudflare_authenticated_origin_pulls: Improve import, update documentation (#​2771)
• resource/cloudflare_notification_policy: Add advanced_http_alert_error alert_type (#​2789)
• resource/cloudflare_notification_policy: Implement the group_by, where and actions options (#​2789)
• resource/cloudflare_ruleset: Add support for cache bypass by default in Edge TTL modes (#​2764)

BUG FIXES:

• resource/cloudflare_access_identity_provider: Fix cloudflare_access_identity_provider incorrectly discards SCIM configuration secret (#​2744)
• resource/cloudflare_notification_policy: handle manually deleted policies by removing them from state (#​2791)
• resource/cloudflare_ruleset: ability to use exclude_origin=true in cache_key.custom_key.header without the need of specifying include or check_presence. (#​2802)
• resource/cloudflare_ruleset: mark requests_to_origin required for ratelimit blocks (#​2808)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.40 to 1.18.41 (#​2781)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.41 to 1.18.42 (#​2792)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.42 to 1.18.43 (#​2811)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.39 to 1.13.40 (#​2793)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.40 to 1.13.41 (#​2810)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.5 to 1.39.0 (#​2782)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.39.0 to 1.40.0 (#​2795)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.77.0 to 0.78.0 (#​2797)

v4.15.0

Compare Source

ENHANCEMENTS:

• resource/cloudflare_access_identity_provider: Support email_claim_name, Okta authorization_server_id, and pingone (#​2765)
• resource/cloudflare_ruleset: Add support for a new Browser Mode that allows bypass of downstream caches (#​2756)
• resource/cloudflare_ruleset: Add support for the use of Origin Cache Control in the Rulesets API (#​2753)
• resource/cloudflare_ruleset: Add support for the use of Proxy Read Timeout field in Rulesets API (#​2755)

BUG FIXES:

• resource/cloudflare_list: Fix import for cloudflare_list resource (#​2663)
• resource/cloudflare_record: Updates the cast to a pointer to match changes in the SDK (#​2763)
• resource/pages_project: force replace when changing pages source (#​2750)

DEPENDENCIES:

• provider: bumps crazy-max/ghaction-import-gpg from 5 to 6 (#​2758)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.39 to 1.18.40 (#​2775)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.76.0 to 0.77.0 (#​2761)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.5 to 1.4.0 (#​2745)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.11.2 to 0.12.0 (#​2746)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.28.0 to 2.29.0 (#​2748)
• provider: bumps goreleaser/goreleaser-action from 4.6.0 to 5.0.0 (#​2757)

v4.14.0

Compare Source

FEATURES:

• New Resource: cloudflare_web_analytics_rule (#​2686)
• New Resource: cloudflare_web_analytics_site (#​2686)

ENHANCEMENTS:

• resource/cloudflare_access_application: Add custom_non_identity_deny_url field (#​2721)
• resource/cloudflare_access_group: Improve documentation for access_group usage (#​2718)
• resource/cloudflare_load_balancer_monitor: add support for consecutive_up and consecutive_down (#​2723)
• resource/cloudflare_total_tls: add support for importing existing resources (#​2734)

BUG FIXES:

• resource/cloudflare_access_identity_provider: Fix access IDPs not importing config obj (#​2735)

DEPENDENCIES:

• provider: bumps actions/checkout from 3 to 4 (#​2736)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.36 to 1.18.37 (#​2714)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.37 to 1.18.38 (#​2731)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.38 to 1.18.39 (#​2741)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.35 to 1.13.36 (#​2732)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.36 to 1.13.37 (#​2740)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.75.0 to 0.76.0 (#​2726)
• provider: bumps github.com/hashicorp/terraform-plugin-framework-validators from 0.11.0 to 0.12.0 (#​2727)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.27.0 to 2.28.0 (#​2719)
• provider: bumps github.com/hashicorp/terraform-plugin-testing from 1.4.0 to 1.5.1 (#​2730)
• provider: bumps golang.org/x/net from 0.14.0 to 0.15.0 (#​2739)
• provider: bumps goreleaser/goreleaser-action from 4.4.0 to 4.6.0 (#​2742)

v4.13.0

Compare Source

FEATURES:

• New Data Source: cloudflare_user (#​2691)
• New Resource: cloudflare_bot_management (#​2672)
• New Resource: cloudflare_hostname_tls_setting (#​2700)
• New Resource: cloudflare_hostname_tls_setting_ciphers (#​2700)
• New Resource: cloudflare_zone_hold (#​2671)

ENHANCEMENTS:

• datasource/api_token_permission_groups: Add R2 scopes (#​2687)
• datasource/api_token_permission_groups: Convert to plugin framework (#​2687)
• resource/cloudflare_access_application: adds support for custom saml attributes in saas access apps (#​2676)
• resource/cloudflare_access_group: add support for AccessGroupAzureAuthContext (#​2654)
• resource/cloudflare_access_identity_provider: add conditional_access_enabled attr (#​2654)
• resource/cloudflare_access_service_token: add support for managing Duration (#​2647)
• resource/cloudflare_device_posture_integration: update support for managing tanium_s2s third party posture provider. (#​2674)
• resource/cloudflare_device_posture_rule: update support for new fields for tanium_s2s posture rule. (#​2674)
• resource/cloudflare_notification_policy: Add possibility to configure Pages Alerts. (#​2694)
• resource/cloudflare_waiting_room: Add queueing_status_code to the Waiting Room resource (#​2666)
• resource/cloudflare_worker_domain: add support for Import operations (#​2679)

BUG FIXES:

• resource/cloudflare_access_group: Fix issue where saml rules would not read the IDP id from the API (#​2683)
• resource/cloudflare_rulest: allow configuring an origin Port value without the Host (and vice versa) (#​2677)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.20.1 to 1.20.2 (#​2695)
• provider: bumps github.com/aws/aws-sdk-go-v2 from 1.20.3 to 1.21.0 (#​2710)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.33 to 1.18.34 (#​2697)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.34 to 1.18.35 (#​2706)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.35 to 1.18.36 (#​2708)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.32 to 1.13.33 (#​2696)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.33 to 1.13.34 (#​2703)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.34 to 1.13.35 (#​2709)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.2 to 1.38.3 (#​2698)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.3 to 1.38.4 (#​2705)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.38.4 to 1.38.5 (#​2707)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.74.0 to 0.75.0 (#​2685)
• provider: bumps github.com/google/uuid from 1.3.0 to 1.3.1 (#​2711)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.4 to 1.3.5 (#​2699)
• provider: bumps goreleaser/goreleaser-action from 4.3.0 to 4.4.0 (#​2675)

v4.12.0

Compare Source

BREAKING CHANGES:

• resource/cloudflare_ruleset: remove shareable_entitlement_name per the Go library changes since it hasn't ever been controllable by users (#​2652)

FEATURES:

• New Data Source: cloudflare_zone_cache_reserve (#​2642)
• New Resource: cloudflare_access_custom_page (#​2643)
• New Resource: cloudflare_zone_cache_reserve (#​2642)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds the ability to associate a custom page with an application. (#​2643)
• resource/cloudflare_access_organization: adds the ability to associate a custom page with an organization. (#​2643)
• resource/cloudflare_notification_policy: Add support for pages_event_alert alert type (#​2602)
• resource/cloudflare_pages_project: Allow renaming projects without destroying and recreating (#​2602)
• resource/cloudflare_teams_account: Adds support for protocol detection feature (#​2625)
• resource/cloudflare_user_agent_blocking_rules: add support for importing resources (#​2640)

BUG FIXES:

• resource/cloudflare_custom_hostname: prevent infinite loop when wait_for_ssl_pending_validation is set if SSL status is already active (#​2638)
• resource/cloudflare_load_balancer: fix full deletion of pop_pools, region_pools, country_pools on update (#​2673)
• resource/cloudflare_load_balancer: handle inconsistent sorting bug in schema.HashResource resulting in resources incorrectly being updated when no changes have been made (#​2635)
• resource/cloudflare_pages_project: deployment_configs are now computed (#​2602)

DEPENDENCIES:

• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.29 to 1.18.32 (#​2651)
• provider: bumps github.com/aws/aws-sdk-go-v2/config from 1.18.32 to 1.18.33 (#​2670)
• provider: bumps github.com/aws/aws-sdk-go-v2/credentials from 1.13.28 to 1.13.31 (#​2648)
• provider: bumps github.com/aws/aws-sdk-go-v2/service/s3 from 1.37.0 to 1.38.1 (#​2650)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.73.0 to 0.74.0 (#​2652)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.3 to 1.3.4 (#​2657)
• provider: bumps github.com/hashicorp/terraform-plugin-framework-validators from 0.10.0 to 0.11.0 (#​2658)
• provider: bumps golang.org/x/net from 0.12.0 to 0.13.0 (#​2646)
• provider: bumps golang.org/x/net from 0.13.0 to 0.14.0 (#​2661)

v4.11.0

Compare Source

FEATURES:

• New Resource: cloudflare_regional_tiered_cache (#​2624)

ENHANCEMENTS:

• resource/cloudflare_device_posture_integration: add support for managing sentinelone_s2s third party posture provider. (#​2618)
• resource/cloudflare_device_posture_rule: add ability to create client_certificate and sentinelone_s2s posture rule (#​2618)
• resource/cloudflare_load_balancer: support header session affinity policy (#​2521)
• resource/record: Allow SVCB DNS record (#​2632)

DEPENDENCIES:

• provider: bumps github.com/cloudflare/cloudflare-go from 0.72.0 to 0.73.0 (#​2626)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.2 to 1.3.3 (#​2627)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.11.1 to 0.11.2 (#​2616)
• provider: bumps github.com/hashicorp/terraform-plugin-testing from 1.3.0 to 1.4.0 (#​2631)

v4.10.0

Compare Source

FEATURES:

• New Data Source: clouflare_access_application (#​2547)

ENHANCEMENTS:

• resource/cloudflare_access_ca_certificate: remove redundant certificate_id from Import requirements as it is never used (#​2547)
• resource/cloudflare_load_balancer_monitor: Add example import. (#​2572)

BUG FIXES:

• resource/cloudflare_load_balancer: fix import of load_balancer when rules included overrides or fixed_response (#​2571)
• resource/cloudflare_record: fix importing of DNSKEY record types (#​2568)
• resource/cloudflare_ruleset: Fix detection of conflicting entrypoint rulesets (#​2566)

DEPENDENCIES:

• provider: bumps dependabot/fetch-metadata from 1.5.1 to 1.6.0 (#​2557)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.70.0 to 0.72.0 (#​2584)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.1 to 1.3.2 (#​2563)
• provider: bumps github.com/hashicorp/terraform-plugin-go from 0.17.0 to 0.18.0 (#​2580)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.10.0 to 0.11.0 (#​2564)
• provider: bumps github.com/hashicorp/terraform-plugin-mux from 0.11.0 to 0.11.1 (#​2567)
• provider: bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.26.1 to 2.27.0 (#​2565)
• provider: bumps golang.org/x/net from 0.11.0 to 0.12.0 (#​2589)

v4.9.0

Compare Source

NOTES:

• resource/cloudflare_pages_project: Clarify example projects resource (#​2543)

ENHANCEMENTS:

• resource/cloudflare_notification_policy: Add alert_trigger_preferences to the filters block. (#​2535)
• resource/cloudflare_waiting_room: Add additional_routes and cookie_suffix to the Waiting Room resource (#​2528)

BUG FIXES:

• resource/cloudflare_access_ca_certificate: Fix issue with importing existing certificate as the application id was not being set. (#​2539)
• resource/cloudflare_teams_rules: handle state correctly when rules_setting is empty (#​2532)
• resource/cloudflare_tunnel_config: fix sending incorrect values for various timeouts in the origin configuration block (#​2510)
• tunnel_config: fix nil pointers for time.Durations (#​2504)

DEPENDENCIES:

• provider: bumps github.com/cloudflare/cloudflare-go from 0.69.0 to 0.70.0 (#​2541)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.3.0 to 1.3.1 (#​2529)
• provider: bumps github.com/hashicorp/terraform-plugin-go from 0.15.0 to 0.16.0 (#​2536)

v4.8.0

Compare Source

BREAKING CHANGES:

• resource/cloudflare_ruleset: Prevent the rule ID, version and last updated attributes from being set (#​2511)

ENHANCEMENTS:

• cloudflare_pages_project: add placement to deployment config (#​2480)
• resource/access_application: add support for self_hosted_domains (#​2441)
• resource/cloudflare_custom_hostname: add support for bundle_method TLS configuration (#​2494)
• resource/cloudflare_device_posture_rule: add ability to create intune and kolide s2s posture rule creation (#​2474)
• resource/cloudflare_device_settings_policy: add description to device settings policy (#​2474)
• resource/cloudflare_load_balancer: Add support for least_outstanding_requests steering (#​2472)
• resource/cloudflare_load_balancer_pool: Add support for least_outstanding_requests origin steering (#​2472)
• resource/cloudflare_page_rule: removes ability to set wildcards for include and exclude, provides guidance on proper values to use instead (#​2491)
• resource/cloudflare_teams_account: add ability to set root_ca for ZT Accounts (#​2474)

BUG FIXES:

• cloudflare_pages_project: use user provided configuration for secrets in the state handler since the API does not return them (#​2480)
• resource/cloudflare_certificate_pack: handle UI deletion scenarios for HTTP 404s and status = "deleted" responses (#​2497)
• resource/cloudflare_custom_hostname: use user provided values for state management when the API response isn't provided (#​2494)
• resource/cloudflare_origin_ca_certificate: mark csr as Required (#​2496)
• resource/cloudflare_ruleset: Mark that the ruleset must be re-created if the shareable entitlement name attribute changes (#​2511)
• resource/cloudflare_ruleset: Populate the rule ID, ref, version and last updated attributes in API requests and from API responses (#​2511)
• resource/cloudflare_ruleset: Populate the shareable entitlement name attribute in API requests and from API responses (#​2511)
• resource/cloudflare_ruleset: handle Import operations where the required values are missing for providing a nicer error message (#​2503)

DEPENDENCIES:

• provider: bumps github.com/cloudflare/cloudflare-go from 0.68.0 to 0.69.0 (#​2507)
• provider: bumps github.com/hashicorp/terraform-plugin-framework from 1.2.0 to 1.3.0 (#​2509)
• provider: bumps github.com/hashicorp/terraform-plugin-log from 0.8.0 to 0.9.0 (#​2489)
• provider: bumps github.com/hashicorp/terraform-plugin-testing from 1.2.0 to 1.3.0 (#​2524)
• provider: bumps golang.org/x/net from 0.10.0 to 0.11.0 (#​2523)
• provider: bumps goreleaser/goreleaser-action from 4.2.0 to 4.3.0 (#​2519)

v4.7.1

Compare Source

BUG FIXES:

• resource/cloudflare_list: remove IsIPAddress validation that doesn't take into account CIDR notation (#​2486)

v4.7.0

Compare Source

NOTES:

• resource/cloudflare_filter: This resource is being deprecated in favor of the cloudflare_rulesets resource. See https://developers.cloudflare.com/waf/reference/migration-guides/firewall-rules-to-custom-rules/#relevant-changes-for-terraform-users for more details. (#​2442)
• resource/cloudflare_firewall_rule: This resource is being deprecated in favor of the cloudflare_rulesets resource. See https://developers.cloudflare.com/waf/reference/migration-guides/firewall-rules-to-custom-rules/#relevant-changes-for-terraform-users for more details. (#​2442)

FEATURES:

• New Resource: cloudflare_r2_bucket (#​2378)

ENHANCEMENTS:

• resource/cloudflare_account: provide account ID for error handling in resourceCloudflareAccountDelete (#​2436)
• resource/cloudflare_device_posture_integration: add api_url to uptycs posture integration config. (#​2468)
• resource/cloudflare_list: add support for Hostname and ASN lists. (#​2483)
• resource/cloudflare_tunnel_config: add support for origin config on ingress rule and access (#​2477)

BUG FIXES:

• resource/cloudflare_logpush_job: Properly set dataset field when importing logpush jobs (#​2444)
• resource/cloudflare_pages_project: suggest a better default value for root_dir (#​2440)
• resource/cloudflare_ruleset: Validation of ttls for action_parameters with edge_ttl or browser_ttl mode of override_origin (#​2454)
• resource/cloudflare_workers_kv: Fix import to properly parse the id (#​2434)

DEPENDENCIES:

• provider: bumps dependabot/fetch-metadata from 1.4.0 to 1.5.0 (#​2463)
• provider: bumps dependabot/fetch-metadata from 1.5.0 to 1.5.1 (#​2469)
• provider: bumps github.com/cloudflare/cloudflare-go from 0.67.0 to 0.68.0 (#​2466)
• provider: bumps github.com/stretchr/testify from 1.8.2 to 1.8.3 (#​2457)
• provider: bumps github.com/stretchr/testify from 1.8.3 to 1.8.4 (#​2484)

---

Configuration

Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.