Merge branch 'master' into egomes/fix-access-policy-force-new

.changelog/3337.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/zone_settings_override: deprecate `mobile_redirect` setting and include state migration to remove from local state. You should immediately remove the configuration from the resource to prevent permadiffs.
+```

.changelog/3353.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_access_application: Support configuring OIDC SaaS access token lifetime
+```

.changelog/3360.txt

@@ -0,0 +1,12 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2` from 1.27.2 to 1.28.0
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.18 to 1.27.19
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.18 to 1.17.19
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.55.1 to 1.55.2
+```

.changelog/3362.txt

@@ -0,0 +1,12 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2` from 1.28.0 to 1.29.0
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.19 to 1.27.20
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.19 to 1.17.20
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.55.2 to 1.56.0
+```

.changelog/3363.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.2.0 to 2.3.0
+```

.changelog/3364.txt

@@ -0,0 +1,12 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2` from 1.29.0 to 1.30.0
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.20 to 1.27.21
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.20 to 1.17.21
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.56.0 to 1.56.1
+```

.changelog/3365.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/cloudflare/cloudflare-go from 0.97.0 to 0.98.0
+```

.changelog/3368.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+resource/cloudflare_list_item: implement exact match for IP values to prevent overlapping IP prefixes from not being found
+```
+
+```release-note:bug
+resource/cloudflare_list_item: fix crash when not using `type = "redirect"` due to attempting to compare `nil`
+```

.changelog/3395.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 in /tools
+```

.changelog/3404.txt

@@ -0,0 +1,9 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.21 to 1.27.22
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.21 to 1.17.22
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.56.1 to 1.57.0
+```

.changelog/3412.txt

@@ -0,0 +1,12 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2` from 1.30.0 to 1.30.1
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.22 to 1.27.23
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.22 to 1.17.23
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.57.0 to 1.57.1
+```

.changelog/3417.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_notification_policy: Add tunnel_name filter for Magic Health Checks
+```

.changelog/3429.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.57.1 to 1.58.0 in the aws group
+```

.changelog/3437.txt

@@ -0,0 +1,6 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.23 to 1.27.24
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.23 to 1.17.24
+```

.changelog/3438.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/cloudflare/cloudflare-go from 0.98.0 to 0.99.0
+```

.changelog/3441.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare_r2_bucket: add validation to location hint to prevent invalid values from drifting
+```

.changelog/3442.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump golang.org/x/net from 0.26.0 to 0.27.0
+```

.changelog/3443.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+cloudflare_gateway_categories
+```

.changelog/3445.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/hashicorp/terraform-plugin-framework from 1.9.0 to 1.10.0
+```

.changelog/3446.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/hashicorp/terraform-plugin-testing from 1.8.0 to 1.9.0
+```

.changelog/3447.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/hashicorp/terraform-plugin-framework-validators from 0.12.0 to 0.13.0
+```

.changelog/3449.txt

@@ -0,0 +1,12 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2` from 1.30.1 to 1.30.2
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.24 to 1.27.25
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.24 to 1.17.25
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.58.0 to 1.58.1
+```

.changelog/3463.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare_risk_behavior: fix bug where partial definition of risk behaviors resulted in a provider error
+```

.changelog/3468.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare-access-application: fixes bug when updating self_hosted_domains
+```

.changelog/3469.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare_access_application: Fix bug that was not cleaning the API when removing all ids from the 'policies' list
+```

.changelog/3470.txt

@@ -0,0 +1,3 @@
+```release-note:new-data-source
+cloudflare_gateway_app_types
+```

.changelog/3473.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_teams_rules: add support for `ignore_cname_category_matches`
+```

.changelog/3480.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.3.0 to 2.4.0
+```

.changelog/3483.txt

@@ -0,0 +1,12 @@
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2` from 1.30.2 to 1.30.3
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/config` from 1.27.25 to 1.27.27
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.25 to 1.17.27
+```
+```release-note:dependency
+provider: bump `github.com/aws/aws-sdk-go-v2/service/s3` from 1.58.1 to 1.58.2
+```

.changelog/3488.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_teams_list: add support for descriptions on list items
+```

.changelog/3492.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_device_posture_rules: added support for intune compliance_status values
+```

.changelog/3499.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/cloudflare/cloudflare-go from 0.99.0 to 0.100.0
+```

.changelog/3500.txt

@@ -0,0 +1,48 @@
+```release-note:note
+resource/cloudflare_worker_cron_trigger: deprecated in favour of `cloudflare_workers_cron_trigger` and will be removed in the next major version.
+```
+
+```release-note:note
+resource/cloudflare_worker_domain: deprecated in favour of `cloudflare_workers_domain` and will be removed in the next major version.
+```
+
+```release-note:note
+resource/cloudflare_worker_route: deprecated in favour of `cloudflare_workers_route` and will be removed in the next major version.
+```
+
+```release-note:note
+resource/cloudflare_worker_script: deprecated in favour of `cloudflare_workers_script` and will be removed in the next major version.
+```
+
+```release-note:note
+resource/cloudflare_worker_secret: deprecated in favour of `cloudflare_workers_secret` and will be removed in the next major version.
+```
+
+
+```release-note:note
+resource/cloudflare_workers_for_platforms_namespace: deprecated in favour of `cloudflare_workers_for_platforms_dispatch_namespace` and will be removed in the next major version.
+```
+
+```release-note:new-resource
+cloudflare_workers_secret
+```
+
+```release-note:new-resource
+cloudflare_workers_script
+```
+
+```release-note:new-resource
+cloudflare_workers_route
+```
+
+```release-note:new-resource
+cloudflare_workers_domain
+```
+
+```release-note:new-resource
+cloudflare_workers_cron_trigger
+```
+
+```release-note:new-resource
+cloudflare_workers_for_platforms_dispatch_namespace
+```

.changelog/3509.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/cloudflare_record: `value` is now deprecated in favour of `content`
+```

.changelog/3511.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_teams_rule: Add `disable_clipboard_redirection` attribute to `BISOAdminControls`
+```

.changelog/3512.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_device_posture_rule: add ability to create client_certificate_v2 posture rule
+```

.changelog/3513.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/cloudflare_device_settings_policy: Add tunnel_protocol field for device policies
+```

.changelog/3515.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare_list_item: handle overlapping hostname `url_hostname`
+```

.changelog/3516.txt

@@ -0,0 +1,7 @@
+```release-note:enhancement
+resource/hyperdrive_config: Add support for creating Hyperdrive over Access configs
+```
+
+```release-note:enhancement
+resource/hyperdrive_config: Add support for max_age and stale_while_revalidate in Hyperdrive Config caching settings
+```

.changelog/3519.txt

@@ -0,0 +1,3 @@
+```release-note:enhancement
+resource/access_application: add `skip_app_launcher_login_page` flag to skip the App Launcher landing page
+```

.changelog/3521.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/zone_settings_override: deprecate `minify` setting and include state migration to remove from local state. You should immediately remove the configuration from the resource to prevent permadiffs. Automatic migration of user configuration can be handled with [Grit](https://docs.grit.io/cli/quickstart) by running `grit apply github.com/cloudflare/terraform-provider-cloudflare#cloudflare_zone_settings_override_remove_minify`
+```

.changelog/3540.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/cloudflare/cloudflare-go from 0.100.0 to 0.101.0
+```

.changelog/3556.txt

@@ -0,0 +1,3 @@
+```release-note:note
+resource/cloudflare_access_policy: remove deprecation notice related to precedence
+```

.changelog/3557.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.2 to 1.58.3 in the aws group
+```

.changelog/3563.txt

@@ -0,0 +1,3 @@
+```release-note:new-resource
+cloudflare_zero_trust_risk_score_integration
+```

.changelog/3575.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/hashicorp/terraform-plugin-framework from 1.10.0 to 1.11.0
+```

.changelog/3576.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump golang.org/x/net from 0.27.0 to 0.28.0
+```

.changelog/3579.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+resource/cloudflare_access_policy: handle multiple okta idps in access policies
+```

.changelog/3583.txt

@@ -0,0 +1,3 @@
+```release-note:dependency
+provider: bump github.com/hashicorp/terraform-plugin-testing from 1.9.0 to 1.10.0
+```