Terraform Provider Cloudflare Versions Save

ENHANCEMENTS:

• resource/cloudflare_access_application: added support for 'policies' argument (#3288)
• resource/cloudflare_access_policy: added support for reusable policies (#3288)
• resource/cloudflare_zone_settings_override: add support for NEL (#3305)

BUG FIXES:

• resource/cloudflare_list_item: retry list ID fetch operations for the identifiers (#3303)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.11 to 1.27.12 (#3295)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.12 to 1.27.13 (#3301)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.11 to 1.17.12 (#3295)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.12 to 1.17.13 (#3301)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.1 to 1.53.2 (#3295)
• provider: bump bflad/action-milestone-comment from 1 to 2 (#3299)
• provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.1.0 to 2.2.0 (#3298)
• provider: bump github.com/hashicorp/terraform-plugin-mux from 0.15.0 to 0.16.0 (#3296)
• provider: bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (#3302)

NOTES:

• resource/cloudflare_rate_limit: This resource is being deprecated in favor of the cloudflare_rulesets resource (#3279)

ENHANCEMENTS:

• resource/cloudflare_access_application: add support for SCIM provisioning configuration (#3291)
• resource/cloudflare_access_group: Add the option for email_list to be used in require, include and exclude fields (#3247)
• resource/cloudflare_device_posture_rules: added support for os_version_extra (#3281)

BUG FIXES:

• resource/cloudflare_turnstile: Fix error handling corrupting state (#3284)

DEPENDENCIES:

• provider: bump github.com/cloudflare/cloudflare-go from 0.94.0 to 0.95.0 (#3294)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.22.2 to 0.23.0 (#3289)
• provider: bump golang.org/x/net from 0.24.0 to 0.25.0 (#3290)
• provider: bump golangci/golangci-lint-action from 5 to 6 (#3293)

ENHANCEMENTS:

• resource/cloudflare_access_application: added support for options_preflight_bypass (#3267)
• resource/cloudflare_dlp_profile: Added support for ocr_enabled field to profiles (#3224)
• resource/cloudflare_notification_policy: add 'target_ip' atrribute to 'filter' nested block (#3263)
• resource/cloudflare_teams_account: add custom_certificate setting support (#3253)
• resource/cloudflare_teams_location: added ecs_support field (#3264)

BUG FIXES:

• resource/cloudflare_hyperdrive_config: Fix 'HyperdriveID' not included in Update call (#3251)
• resource/cloudflare_managed_headers: disable header if it is deleted from terraform state (#3260)
• resource/cloudflare_worker_script: fix namespaced script delete trying to delete from account rather than the namespace (#3238)

INTERNAL:

• provider: introduce a muxed client to support using cloudflare-go/v0 and cloudflare-go/v2 together (#3262)

DEPENDENCIES:

• provider: bump github.com/cloudflare/cloudflare-go from 0.93.0 to 0.94.0 (#3265)
• provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.0.0 to 2.1.0 (#3274)
• provider: bump github.com/hashicorp/terraform-plugin-framework from 1.5.0 to 1.8.0 (#3255)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.21.0 to 0.22.2 (#3254)
• provider: bump golang.org/x/net from 0.19.0 to 0.23.0 in /tools (#3258)
• provider: bump golangci/golangci-lint-action from 4 to 5 (#3271)

ENHANCEMENTS:

• cloudflare/resource_logpush_job: Add support for page_shield_events (#3237)
• resource/cloudflare_access_group: added support for common_names rule list type to allow for more than one common_name rule in a policy block (#3229)
• resource/cloudflare_access_policy: added support for common_names rule list type to allow for more than one common_name rule in a policy block (#3229)
• resource/cloudflare_ipsec_tunnel: added support for replay_protection (#3249)

BUG FIXES:

• resource/cloudflare_email_routing_address: Make sure schema is correctly upgraded. (#3245)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.10 to 1.27.11 (#3232)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.10 to 1.17.11 (#3232)
• provider: bump github.com/cloudflare/cloudflare-go from 0.92.0 to 0.93.0 (#3239)
• provider: bump golang.org/x/net from 0.22.0 to 0.23.0 (#3225)
• provider: bump golang.org/x/net from 0.23.0 to 0.24.0 (#3230)

BREAKING CHANGES:

• data_source/record: Remove locked flag which is always false (#3220)

ENHANCEMENTS:

• datasource/cloudflare_tunnel: Add the option to filter deleted tunnels (#3201)
• resource/cloudflare_teams_rule: Add support for resolver policies (#3198)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.9 to 1.27.10 (#3222)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.9 to 1.17.10 (#3222)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.53.0 to 1.53.1 (#3222)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.26.0 to 1.26.1 (#3222)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds saml_attribute_transform_jsonata to SaaS applications (#3187)
• resource/cloudflare_device_posture_rule: update support for new fields for crowdstrike_s2s posture rule. (#3216)
• resource/cloudflare_ipsec_tunnel: Adds IPsec tunnel health_check_direction & health_check_rate parameters (#3112)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.8 to 1.27.9 (#3207)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.8 to 1.17.9 (#3207)
• provider: bump github.com/cloudflare/cloudflare-go from 0.90.0 to 0.91.0 (#3208)
• provider: bump github.com/cloudflare/cloudflare-go from 0.91.0 to 0.92.0 (#3218)

FEATURES:

• New Resource: cloudflare_access_mutual_tls_hostname_settings (#3173)
• New Resource: cloudflare_hyperdrive_config (#3111)

ENHANCEMENTS:

• resource/cloudflare_dlp_profile: Added support for context_awareness field to profiles (#3158)
• resource/cloudflare_logpush_job: Add output_options parameter (#3171)
• resource/cloudflare_notification_policy: Implement the airport_code filter (#3183)
• resource/cloudflare_worker_script: Add dispatch_namespace to support uploading to a Workers for Platforms namespace (#3154)
• resource/cloudflare_worker_script: Add tags to support tagging Workers for Platforms Workers (#3154)

BUG FIXES:

• resource/cloudflare_access_application: Add Sensitive to oidc client_secret and preserve client_secret across apply (#3168)
• resource/cloudflare_list_item: fix id parsing for imports (#3191)
• resource/cloudflare_logpush_job: only set the value in state when it is defined (#3188)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.6 to 1.27.7 (#3172)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.7 to 1.27.8 (#3197)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.6 to 1.17.7 (#3172)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.7 to 1.17.8 (#3197)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.3 to 1.51.4 (#3172)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.4 to 1.52.0 (#3182)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.52.0 to 1.52.1 (#3190)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.52.1 to 1.53.0 (#3197)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.2 to 1.25.3 (#3172)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.3 to 1.26.0 (#3197)
• provider: bump github.com/cloudflare/cloudflare-go from 0.89.0 to 0.90.0 (#3178)
• provider: bump google.golang.org/protobuf from 1.31.0 to 1.33.0 in /tools (#3180)
• provider: bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#3181)

FEATURES:

• New Data Source: cloudflare_dlp_datasets (#3135)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds name_id_transform_jsonata to SaaS applications (#3132)

BUG FIXES:

• resource/cloudflare_access_application: Fix issue with sending allow_authenticate_via_warp on updates when it is not provided (#3140)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.1 to 1.27.2 (#3136)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.2 to 1.27.3 (#3138)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.3 to 1.27.4 (#3141)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.4 to 1.27.5 (#3159)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.5 to 1.27.6 (#3161)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.1 to 1.17.2 (#3136)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.2 to 1.17.3 (#3138)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.3 to 1.17.4 (#3141)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.4 to 1.17.5 (#3159)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.5 to 1.17.6 (#3161)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.2 to 1.50.3 (#3136)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.3 to 1.51.0 (#3138)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.0 to 1.51.1 (#3141)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.1 to 1.51.2 (#3159)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.2 to 1.51.3 (#3161)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.0 to 1.25.1 (#3136)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.25.1 to 1.25.2 (#3141)
• provider: bump github.com/cloudflare/cloudflare-go from 0.88.0 to 0.89.0 (#3148)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.21.0 to 0.22.0 (#3139)
• provider: bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#3157)
• provider: bump golang.org/x/net from 0.21.0 to 0.22.0 (#3160)

BREAKING CHANGES:

• resource/cloudflare_custom_pages: Removed the always_online variant. This page is never generated anymore, if a requested page is unavailable in the archive the error page that would have been shown if always online wasn't enabled is shown. (#3117)

ENHANCEMENTS:

• resource/cloudflare_access_application: adds oidc saas application support (#3133)
• resource/cloudflare_access_application: adds the ability to set allow_authenticate_via_warp. (#3103)
• resource/cloudflare_access_organization: adds the ability to set allow_authenticate_via_warp and warp_auth_session_duration. (#3103)
• resource/cloudflare_teams_account: Add support for extended e-mail matching (#3089)
• resource/cloudflare_teams_accounts: Added notification settings to teams antivirus settings (#3124)
• resource/pages_project: Add build_caching attribute (#3110)

BUG FIXES:

• resource/cloudflare_email_routing_address: add schema migrator (#3119)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.26.6 to 1.27.0 (#3118)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.0 to 1.27.1 (#3134)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.16 to 1.17.0 (#3118)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.0 to 1.17.1 (#3134)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.48.1 to 1.49.0 (#3118)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.49.0 to 1.50.0 (#3125)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.0 to 1.50.1 (#3128)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.50.1 to 1.50.2 (#3134)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.24.1 to 1.25.0 (#3118)
• provider: bump github.com/cloudflare/cloudflare-go from 0.87.0 to 0.88.0 (#3122)
• provider: bump golang.org/x/net from 0.20.0 to 0.21.0 (#3108)
• provider: bump golangci/golangci-lint-action from 3 to 4 (#3115)

ENHANCEMENTS:

• datasource/cloudflare_record: Add the option to filter by "content" (#3084)

BUG FIXES:

• resource/cloudflare_access_application: leave existence error handling checks to the Read operation when performing imports. (#3075)
• resource/cloudflare_device_settings_policy: updated docs that auto_connect is in seconds, not in minutes (#3080)
• resource/cloudflare_dlp_profile: fixed plan flapping with DLP custom entries (#3090)
• resource/email_routing_rule: add schema migration for upgrading 4.22.0 to 4.23.0 (#3102)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.48.0 to 1.48.1 (#3078)
• provider: bump github.com/cloudflare/cloudflare-go from 0.86.0 to 0.87.0 (#3095)
• provider: bump github.com/google/uuid from 1.5.0 to 1.6.0 (#3076)
• provider: bump github.com/hashicorp/terraform-plugin-go from 0.20.0 to 0.21.0 (#3081)
• provider: bump github.com/hashicorp/terraform-plugin-mux from 0.13.0 to 0.14.0 (#3085)
• provider: bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.31.0 to 2.32.0 (#3086)
• provider: bump peter-evans/create-or-update-comment from 3 to 4 (#3079)