Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
azurerm (source)	required_provider	minor	~> 3.97.0 -> ~> 3.109.0
hashicorp/terraform		minor	1.7.5 -> 1.9.0
microsoft/ApplicationInsights-Java		patch	3.5.1 -> 3.5.3
org.junit.jupiter:junit-jupiter-api (source)	dependencies	patch	5.10.2 -> 5.10.3
org.junit.jupiter:junit-jupiter-engine (source)	dependencies	patch	5.10.2 -> 5.10.3
au.com.dius.pact.consumer:junit5	dependencies	patch	4.6.8 -> 4.6.10
com.github.hmcts:fortify-client	dependencies	patch	1.4.1 -> 1.4.3
org.apache.tomcat.embed:tomcat-embed-websocket	dependencies	patch	9.0.87 -> 9.0.90
org.apache.tomcat.embed:tomcat-embed-core	dependencies	patch	9.0.87 -> 9.0.90
commons-io:commons-io (source)	dependencies	patch	2.16.0 -> 2.16.1
com.nimbusds:nimbus-jose-jwt	dependencies	minor	9.37.3 -> 9.40
com.fasterxml.jackson.datatype:jackson-datatype-jdk8	dependencies	patch	2.17.0 -> 2.17.1
com.fasterxml.jackson.datatype:jackson-datatype-jsr310	dependencies	patch	2.17.0 -> 2.17.1
com.fasterxml.jackson.dataformat:jackson-dataformat-csv	dependencies	patch	2.17.0 -> 2.17.1
com.fasterxml.jackson.dataformat:jackson-dataformat-yaml	dependencies	patch	2.17.0 -> 2.17.1
com.fasterxml.jackson.core:jackson-annotations (source)	dependencies	patch	2.17.0 -> 2.17.1
com.fasterxml.jackson.core:jackson-core	dependencies	patch	2.17.0 -> 2.17.1
com.fasterxml.jackson.core:jackson-databind (source)	dependencies	patch	2.17.0 -> 2.17.1
jacoco (source)	dependencies	patch	0.8.11 -> 0.8.12
net.serenity-bdd:serenity-spring (source)	dependencies	patch	4.1.4 -> 4.1.20
net.serenity-bdd:serenity-rest-assured (source)	dependencies	patch	4.1.4 -> 4.1.20
net.serenity-bdd:serenity-junit (source)	dependencies	patch	4.1.4 -> 4.1.20
net.serenity-bdd:serenity-core (source)	dependencies	patch	4.1.4 -> 4.1.20
org.pitest:pitest (source)	dependencies	minor	1.15.8 -> 1.16.1
org.junit.platform:junit-platform-engine (source)	dependencies	patch	1.10.2 -> 1.10.3
org.junit.platform:junit-platform-commons (source)	dependencies	patch	1.10.2 -> 1.10.3
org.junit.jupiter:junit-jupiter-params (source)	dependencies	patch	5.10.2 -> 5.10.3
au.com.dius.pact	plugin	patch	4.6.8 -> 4.6.10
uk.gov.hmcts.java	plugin	patch	0.12.59 -> 0.12.63
org.owasp.dependencycheck	plugin	minor	9.0.10 -> 9.2.0
io.spring.dependency-management	plugin	patch	1.1.4 -> 1.1.5

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v3.109.0

Compare Source

FEATURES:

• New Data Source: azurerm_automation_runbook (#​26359)
• New Resource: azurerm_data_protection_backup_instance_postgresql_flexible_server (#​26249)
• New Resource: azurerm_email_communication_service_domain (#​26179)
• New Resource: azurerm_system_center_virtual_machine_manager_cloud (#​25429)
• New Resource: azurerm_system_center_virtual_machine_manager_virtual_machine_template (#​25449)
• New Resource: azurerm_system_center_virtual_machine_manager_virtual_network (#​25451)

ENHANCEMENTS:

• Data Source: azurerm_hdinsight_cluster - export the cluster_id attribute (#​26228)
• azurerm_cosmosdb_sql_container - support for the partition_key_kind and partition_key_paths properties (#​26372)
• azurerm_data_protection_backup_instance_blob_storage - support for the storage_account_container_names property (#​26232)
• azurerm_virtual_network_peering - support for the peer_complete_virtual_networks_enabled, only_ipv6_peering_enabled, local_subnet_names, and remote_subnet_names properties (#​26229)
• azurerm_virtual_desktop_host_pool - changing the preferred_app_group_type property no longer creates a new resource (#​26333)
• azurerm_maps_account - support for the location, identity, cors and data_store properties (#​26397)

BUG FIXES:

• azurerm_automation_job_schedule - updates azurerm_automation_job_schedule to use a composite resource id and allows azurerm_automation_runbook to be updated without causing azurerm_automation_job_schedule to recreate (#​22164)
• azurerm_databricks_workspace- correctly allow disabling the default firewall (#​26339)
• azurerm_virtual_hub_* - spliting create and update so lifecycle ignore changes works correctly (#​26310)

DEPRECATIONS:

• Data Source: azurerm_mariadb_server - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server instead (#​26354)
• azurerm_mariadb_configuration - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server_configuration instead (#​26354)
• azurerm_mariadb_database - deprecated since the service is retiring. Please use azurerm_mysql_flexible_database instead (#​26354)
• azurerm_mariadb_firewall_rule - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server_firewall_rule instead (#​26354)
• azurerm_mariadb_server - deprecated since the service is retiring. Please use azurerm_mysql_flexible_server instead (#​26354)
• azurerm_mariadb_virtual_network_rule - deprecated since the service is retiring (#​26354)

v3.108.0

Compare Source

FEATURES:

• New Data Source: azurerm_role_management_policy (#​25900)
• New Resource: azurerm_role_management_policy (#​25900)

ENHANCEMENTS:

• provider: support subscription ID hinting when using Azure CLI authentication (#​26282)
• serviceconnector: updating to use API Version 2024-04-01 (#​26248)
• azurerm_container_groups - can now be created with a User Assigned Identity when running Windows (#​26308)
• azurerm_kubernetes_cluster - updating the network_profile.network_policy property to azure and calico when it hasn't been previously set is supported (#​26176)
• azurerm_kubernetes_cluster - respect Pod Distruption Budgets when rotating the default_node_pool (#​26274)
• azurerm_lb_backend_address_pool - support for the synchronous_mode property (#​26309)
• azurerm_private_endpoint - support symultaneous creation of multiple resources of this type per subnet (#​26006)

BUG FIXES:

• azurerm_express_route_circuit_peering, azurerm_express_route_circuit, azurerm_express_route_gateway, azurerm_express_route_port - split create and update (#​26237)
• azurerm_lb_backend_address_pool_address - when using this resource, values are no longer reset on azurerm_lb_backend_address_pool (#​26264)
• azurerm_route_filter - spliting create and update so lifecycle ignore changes works correctly (#​26266)
• azurerm_route_server - spliting create and update so lifecycle ignore changes works correctly (#​26266)
• azurerm_synapse_workspace - updates the client used in all operations of azurerm_synapse_workspace_sql_aad_admin to prevent this resource from modifying the same resource as azurerm_synapse_workspace_aad_admin (#​26317)
• azurerm_virtual_network - correctly parse network securty group IDs (#​26283)

DEPRECATIONS:

• Data Source: azurerm_network_interface - the enable_ip_forwarding and enable_accelerated_networking properties have been deprecated and superseded by the ip_forwarding_enabled and accelerated_networking_enabled properties (#​26293)
• azurerm_api_management - the policy block has been deprecated is superseded by the azurerm_api_management_policy resource (#​26305)
• azurerm_kubernetes_cluster - the ebpf_data_plane property has been deprecated and superseded by the network_data_plane property (#​26251)
• azurerm_network_interface - the enable_ip_forwarding and enable_accelerated_networking properties have been deprecated and superseded by the ip_forwarding_enabled and accelerated_networking_enabled properties (#​26293)
• azurerm_synapse_workspace - the aad_admin and sql_aad_admin blocks have been deprecated and superseded by the azurerm_synapse_workspace_aad_admin and azurerm_synapse_workspace_sql_aad_admin resources (#​26317)

v3.107.0

Compare Source

FEATURES:

• New Resource: azurerm_data_protection_backup_policy_postgresql_flexible_server (#​26024)

ENHANCEMENTS:

• dependencies: updating to v0.20240604.1114748 of github.com/hashicorp/go-azure-sdk (#​26216)
• advisor: update API version to 2023-01-01 (#​26205)
• keyvault: handling the Resources API returning Key Vaults that have been deleted when populating the cache (#​26199)
• machinelearning: update API version to 2024-04-01 (#​26168)
• network/privatelinkservices - update to use hashicorp/go-azure-sdk (#​26212)
• network/serviceendpointpolicies - update to use hashicorp/go-azure-sdk (#​26196)
• network/virtualnetworks - update to use hashicorp/go-azure-sdk (#​26217)
• network/virtualwans: update route resources to use hashicorp/go-azure-sdk (#​26189)
• azurerm_container_app_job - support for the key_vault_secret_id and identity properties in the secret block (#​25969)
• azurerm_kubernetes_cluster - support forthe dns_zone_ids popperty in the web_app_routing block (#​26117)
• azurerm_notification_hub_authorization_rule - support for the primary_connection_string and secondary_connection_string properties (#​26188)
• azurerm_subnet - support for the default_outbound_access_enabled property (#​25259)

BUG FIXES:

• azurerm_api_management_named_value - will now enforce setting the secret property when setting the value_from_key_vault property (#​26150)
• azurerm_storage_sync_server_endpoint - improve pooling to work around api inconsistencies (#​26204)
• azurerm_virtual_network - split create and update function to fix lifecycle - ignore (#​26246)
• azurerm_vpn_server_configuration - split create and update function to fix lifecycle - ignore (#​26175)
• azurerm_vpn_server_configuration_policy_group - split create and update function to fix lifecycle - ignore (#​26207)
• azurerm_vpn_site - split create and update function to fix lifecycle - ignore changes (#​26163)

DEPRECATIONS:

• azurerm_kubernetes_cluster - the property dns_zone_id has been superseded by the property dns_zone_ids in the web_app_routing block (#​26117)
• azurerm_nginx_deployment - the block configuration has been deprecated and superseded by the resource azurerm_nginx_configuration (#​25773)

v3.106.1

Compare Source

BUG FIXES:

• Data Source: azurerm_kubernetes_cluster - fix a crash when reading/setting upgrade_settings (#​26173)

v3.106.0

Compare Source

UPGRADE NOTES:

• This release updates the Key Vault cache to load Key Vaults using both the Key Vaults List API and the Resources API to workaround the API returning incomplete/stale data. To achieve this, and provide consistency between tooling, we are intentionally using the same older version of the Resources API as the current version of Azure CLI. (#​26070)

FEATURES:

• New Data Source: azurerm_arc_resource_bridge_appliance (#​25731)
• New Data Source: azurerm_elastic_san_volume_group (#​26111)
• New Data Source: azurerm_storage_queue (#​26087)
• New Data Source: azurerm_storage_table (#​26126)
• New Resource: azurerm_container_registry_cache_rule (#​26034)
• New Resource: azurerm_virtual_machine_implicit_data_disk_from_source (#​25537)

ENHANCEMENTS:

• Data Source: azurerm_kubernetes_cluster - add support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#​26137)
• dependencies: updating to v0.20240529.1155048 of github.com/hashicorp/go-azure-sdk (#​26148)
• containerapps: update API version to 2024-03-01 (#​25993)
• expressroute: update to use hashicorp/go-azure-sdk (#​26066)
• keyvault: populating the cache using both the Key Vault List and Resources API to workaround incomplete/stale data being returned (#​26070)
• servicenetworking: updating to API Version 2023-11-01 (#​26148)
• virtualnetworkpeerings: update to use hashicorp/go-azure-sdk (#​26065)
• azurerm_automation_powershell72_module - support for the tags property (#​26106)
• azurerm_bastion_host - support for Developer SKU (#​26068)
• azurerm_container_app_environment - support for the mutual_tls_enabled property (#​25993)
• azurerm_container_registry - validation to fail fast when setting public_network_access_enabled with an invalid SKU (#​26054)
• azurerm_key_vault_managed_hardware_security_module - the public_network_access_enabled property can now be updated (#​26075)
• azurerm_kubernetes_cluster - support for the cost_analysis_enabled property (#​26052)
• azurerm_kubernetes_cluster - support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#​26137)
• azurerm_kubernetes_cluster_node_pool - support for the drain_timeout_in_minutes and node_soak_duration_in_minutes properties in the upgrade_settings block (#​26137)
• azurerm_linux_virtual_machine - the hibernation_enabled property can now be updated (#​26112)
• azurerm_logic_app_trigger_custom - support for the property callback_url (#​25979)
• azurerm_machine_learning_workspace - support for the serverless_compute block (#​25660)
• azurerm_mssql_elasticpool - support the sku HS_PRMS (#​26161)
• azurerm_new_relic_monitor - support for the identity block (#​26115)
• azurerm_route_map - the parameter property is now Optional when the action type is Drop (#​26003)
• azurerm_windows_virtual_machine - the hibernation_enabled property can now be updated (#​26112)

BUG FIXES:

• Data Source: azurerm_system_center_virtual_machine_manager_inventory_items - normalise the resource ID for Intentory Items (#​25955)
• azurerm_app_configuration_feature - update polling interval to tolerate eventual consistency of the API (#​26025)
• azurerm_app_configuration_key - update polling interval to tolerate eventual consistency of the API (#​26025)
• azurerm_eventhub_namespace_customer_managed_key - validating that the User Assigned Identity used for accessing the Key Vault is assigned to the EventHub Namespace (#​28509)
• azurerm_linux_function_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_linux_function_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_linux_web_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_linux_web_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_postgresql_flexible_server - prevent premature check on updated storage_mb value that prevents the resource from being re-created (#​25986)
• azurerm_redis_access_cache_policy_assignment - add locks to stabilize creation of multiple policy assignments (#​26085)
• azurerm_redis_access_cache_policy - add locks to stabilize creation of multiple policy assignments (#​26085)
• azurerm_windows_function_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_windows_function_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_windows_web_app - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)
• azurerm_windows_web_app_slot - fix update handling of health_check_eviction_time_in_min and WEBSITE_HEALTHCHECK_MAXPINGFAILURES (#​26107)

v3.105.0

Compare Source

BREAKING CHANGE:

• azurerm_kubernetes_cluster - the properties workload_autoscaler_profile.vertical_pod_autoscaler_update_mode and workload_autoscaler_profile.vertical_pod_autoscaler_controlled_values are no longer populated since they're not exported in API version 2023-09-02-preview (#​25663)

FEATURES:

• New Resource: azurerm_api_management_policy_fragment (#​24968)

ENHANCEMENTS:

• dependencies: updating to v0.20240522.1080424 of github.com/hashicorp/go-azure-sdk (#​26069)
• containerservice: updating to use API Version 2023-09-02-preview (#​25663)
• azurerm_application_insights_standard_web_test - http_verb can now be set to HEAD and OPTIONS (#​26077)
• azurerm_cdn_frontdoor_rule - updating the validation for match_values within the uri_path_condition block to support a forward-slash (#​26017)
• azurerm_linux_web_app - normalising the value for virtual_network_subnet_id (#​25885)
• azurerm_machine_learning_compute_cluster - add validation for name (#​26060)
• azurerm_machine_learning_compute_cluster - improve validation to allow an empty subnet_resource_id when the Workspace is using a managed Virtual Network (#​26073)
• azurerm_postgresql_flexible_server - the field public_network_access_enabled is now configurable (previously this was computed-only/not settable via the API) (#​25812)
• azurerm_snapshot - support for disk_access_id (#​25996)
• azurerm_windows_web_app - normalising the value for virtual_network_subnet_id (#​25885)

BUG FIXES:

• azurerm_container_app_environment_custom_domain: parsing the Log Analytics Workspace ID insensitively to workaround the API returning this inconsistently (#​26074)
• azurerm_container_app_job - updating the validation for the name field (#​26049)
• azurerm_container_app_job - updating the validation for the name field within the custom_scale_rule block (#​26049)
• azurerm_container_app_job - updating the validation for the name field within the rules block (#​26049)
• azurerm_linux_function_app_slot - fixed panic when planning from a version older than 3.88.0 (#​25838)
• azurerm_pim_active_role_assignment - fix a persistent diff when ticket is not specified (#​26059)
• azurerm_pim_eligible_role_assignment - fix a persistent diff when ticket is not specified (#​26059)
• azurerm_policy_definition - recreate the resource if the parameters property is updated to include fewer items (#​26083)
• azurerm_windows_function_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#​25634)
• azurerm_windows_web_app_slot - set Server Farm ID in payload when using a Virtual Network Subnet for the slot (#​25634)

v3.104.2

Compare Source

NOTE: This is a re-release of v3.104.1 to include missing changes, please refer to the changelog entries for v3.104.1.

v3.104.1

Compare Source

BUG FIXES:

• azurerm_pim_active_role_assignment - fix a regression where roles assignments could not be created with no expiration (#​26029)
• azurerm_pim_eligible_role_assignment - fix a regression where roles assignments could not be created with no expiration (#​26029)

v3.104.0

Compare Source

FEATURES:

• New Data Source: azurerm_elastic_san (#​25719)

ENHANCEMENTS:

• New Resource - azurerm_key_vault_managed_hardware_security_module_key (#​25935)
• Data Source - azurerm_kubernetes_service_version - support for the default_version property (#​25953)
• network/applicationgateways - update to use hashicorp/go-azure-sdk (#​25844)
• dataprotection - update API version to 2024-04-01 (#​25882)
• databasemigration - update API version to 2021-06-30 (#​25997)
• network/ips - update to use hashicorp/go-azure-sdk (#​25905)
• network/localnetworkgateway - update to use hashicorp/go-azure-sdk (#​25905)
• network/natgateway - update to use hashicorp/go-azure-sdk (#​25905)
• network/networksecuritygroup - update to use hashicorp/go-azure-sdk (#​25971)
• network/publicips - update to use hashicorp/go-azure-sdk (#​25971)
• network/virtualwan - update to use hashicorp/go-azure-sdk (#​25971)
• network/vpn - update to use hashicorp/go-azure-sdk (#​25971)
• azurerm_databricks_workspace - support for the default_storage_firewall_enabled property (#​25919)
• azurerm_key_vault - allow previously existing key vaults to continue to manage the contact field prior to the v3.93.0 conditional polling change (#​25777)
• azurerm_linux_function_app - support for the PowerShell 7.4 (#​25980)
• azurerm_log_analytics_cluster - support for the value UserAssigned in the identity.type property (#​25940)
• azurerm_pim_active_role_assignment - remove hard dependency on the roleAssignmentScheduleRequests API, so that role assignments will not become unmanageable over time (#​25956)
• azurerm_pim_eligible_role_assignment - remove hard dependency on the roleEligibilityScheduleRequests API, so that role assignments will not become unmanageable over time (#​25956)
• azurerm_windows_function_app - support for the PowerShell 7.4 ([#​25980](https://togithub.com/hashicorp/terraform-

---

Configuration

📅 Schedule: Branch creation - "before 3am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[hmcts-jenkins-d-to-i]

Plan Result (aat)

Plan: 0 to add, 1 to change, 0 to destroy.

• Update
  • azurerm_resource_group.rg

Change Result (Click me)

  # azurerm_resource_group.rg will be updated in-place
  ~ resource "azurerm_resource_group" "rg" {
        id         = "/subscriptions/1c4f0704-a29e-403d-b719-b90c34ef14c9/resourceGroups/ia-case-documents-api-aat"
        name       = "ia-case-documents-api-aat"
      ~ tags       = {
          - "application"         = "immigration"
          - "autoShutdown"        = "true"
          - "builtFrom"           = "https://github.com/HMCTS/ia-case-documents-api.git"
          - "businessArea"        = "CFT"
          - "contactSlackChannel" = "#ia-tech"
          - "environment"         = "staging"
          - "lastUpdated"         = "2024-06-27T15:37:18Z"
          - "managedBy"           = "Immigration"
        } -> (known after apply)
        # (2 unchanged attributes hidden)
    }

Plan: 0 to add, 1 to change, 0 to destroy.

[infracost]

💰 Infracost report

Monthly cost will not change

_{This comment will be updated when code changes.}

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.