Commit 407fc93
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
chore(deps): update all dependencies (#1359)
This PR contains the following updates:
| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [actions/cache](https://redirect.github.com/actions/cache)
([changelog](https://redirect.github.com/actions/cache/compare/8b402f58fbc84540c8b491a91e594a4576fec3d7..cdf6c1fa76f9f475f3d7449005a359c84ca0f306))
| action | digest | `8b402f5` → `cdf6c1f` | | |
| [aws](https://registry.terraform.io/providers/hashicorp/aws)
([source](https://redirect.github.com/hashicorp/terraform-provider-aws))
| required_provider | minor | `6.28.0` → `6.30.0` |
|
|
| [boto3](https://redirect.github.com/boto/boto3) | | patch |
`==1.42.34` → `==1.42.39` |
|
|
| [botocore](https://redirect.github.com/boto/botocore) | | patch |
`==1.42.34` → `==1.42.39` |
|
|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.31.11` → `v4.32.0` |
|
|
| [local](https://registry.terraform.io/providers/hashicorp/local)
([source](https://redirect.github.com/hashicorp/terraform-provider-local))
| required_provider | patch | `2.6.1` → `2.6.2` |
|
|
| [random](https://registry.terraform.io/providers/hashicorp/random)
([source](https://redirect.github.com/hashicorp/terraform-provider-random))
| required_provider | patch | `3.8.0` → `3.8.1` |
|
|
| [tls](https://registry.terraform.io/providers/hashicorp/tls)
([source](https://redirect.github.com/hashicorp/terraform-provider-tls))
| required_provider | minor | `4.1.0` → `4.2.1` |
|
|
---
### Release Notes
<details>
<summary>hashicorp/terraform-provider-aws (aws)</summary>
###
[`v6.30.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6300-January-28-2026)
[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.29.0...v6.30.0)
FEATURES:
- **New Resource:** `aws_ssoadmin_managed_policy_attachments_exclusive`
([#​46176](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46176))
BUG FIXES:
- resource/aws\_dynamodb\_table: Fix panic when `global_secondary_index`
or `global_secondary_index.key_schema` are `dynamic`
([#​46195](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46195))
###
[`v6.29.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6290-January-28-2026)
[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.28.0...v6.29.0)
NOTES:
- data-source/aws\_organizations\_organization: Add
`return_organization_only` argument to return only the results of the
[`DescribeOrganization`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganization.html)
API and avoid API limits
([#​40884](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/40884))
- resource/aws\_cloudfront\_anycast\_ip\_list: Because we cannot easily
test all this functionality, it is best effort and we ask for community
help in testing
([#​43331](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43331))
- resource/aws\_invoicing\_invoice\_unit: Deprecates `region` attribute,
as the resource is global.
([#​46185](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46185))
- resource/aws\_organizations\_organization: Add
`return_organization_only` argument to return only the results of the
[`DescribeOrganization`](https://docs.aws.amazon.com/organizations/latest/APIReference/API_DescribeOrganization.html)
API and avoid API limits
([#​40884](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/40884))
- resource/aws\_savingsplans\_savings\_plan: Because we cannot easily
test this functionality, it is best effort and we ask for community help
in testing
([#​45834](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45834))
FEATURES:
- **New Data Source:** `aws_arcregionswitch_plan`
([#​43781](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43781))
- **New Data Source:** `aws_arcregionswitch_route53_health_checks`
([#​43781](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43781))
- **New Data Source:** `aws_organizations_entity_path`
([#​45890](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45890))
- **New Data Source:** `aws_resourcegroupstaggingapi_required_tags`
([#​45994](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45994))
- **New Data Source:** `aws_s3_bucket_object_lock_configuration`
([#​45990](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45990))
- **New Data Source:** `aws_s3_bucket_replication_configuration`
([#​42662](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42662))
- **New Data Source:** `aws_s3control_access_points`
([#​45949](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45949))
- **New Data Source:** `aws_s3control_multi_region_access_points`
([#​45974](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45974))
- **New Data Source:** `aws_savingsplans_savings_plan`
([#​45834](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45834))
- **New Data Source:** `aws_wafv2_managed_rule_group`
([#​45899](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45899))
- **New List Resource:** `aws_appflow_connector_profile`
([#​45983](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45983))
- **New List Resource:** `aws_appflow_flow`
([#​45980](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45980))
- **New List Resource:** `aws_cleanrooms_collaboration`
([#​45953](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45953))
- **New List Resource:** `aws_cleanrooms_configured_table`
([#​45956](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45956))
- **New List Resource:** `aws_cloudfront_key_value_store`
([#​45957](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45957))
- **New List Resource:** `aws_opensearchserverless_collection`
([#​46001](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46001))
- **New List Resource:** `aws_route53_record`
([#​46059](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46059))
- **New List Resource:** `aws_s3_bucket`
([#​46004](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46004))
- **New List Resource:** `aws_s3_object`
([#​46002](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46002))
- **New List Resource:** `aws_security_group`
([#​46062](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46062))
- **New Resource:** `aws_apigatewayv2_routing_rule`
([#​42961](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42961))
- **New Resource:** `aws_arcregionswitch_plan`
([#​43781](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43781))
- **New Resource:** `aws_cloudfront_anycast_ip_list`
([#​43331](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43331))
- **New Resource:**
`aws_notifications_managed_notification_account_contact_association`
([#​45185](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45185))
- **New Resource:**
`aws_notifications_managed_notification_additional_channel_association`
([#​45186](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45186))
- **New Resource:** `aws_notifications_organizational_unit_association`
([#​45197](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45197))
- **New Resource:** `aws_notifications_organizations_access`
([#​45273](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45273))
- **New Resource:** `aws_opensearch_application`
([#​43822](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43822))
- **New Resource:** `aws_ram_permission`
([#​44114](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44114))
- **New Resource:** `aws_ram_resource_associations_exclusive`
([#​45883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45883))
- **New Resource:** `aws_sagemaker_labeling_job`
([#​46041](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46041))
- **New Resource:** `aws_sagemaker_model_card`
([#​45993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45993))
- **New Resource:** `aws_sagemaker_model_card_export_job`
([#​46009](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46009))
- **New Resource:** `aws_savingsplans_savings_plan`
([#​45834](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45834))
- **New Resource:** `aws_sesv2_tenant_resource_association`
([#​45904](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45904))
- **New Resource:** `aws_vpc_security_group_rules_exclusive`
([#​45876](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45876))
ENHANCEMENTS:
- aws\_api\_gateway\_domain\_name: Add `routing_mode` argument to
support dynamic routing via routing rules
([#​42961](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42961))
- aws\_apigatewayv2\_domain\_name: Add `routing_mode` argument to
support dynamic routing via routing rules
([#​42961](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/42961))
- data-source/aws\_batch\_job\_definition: Add
`allow_privilege_escalation` attribute to
`eks_properties.pod_properties.containers.security_context`
([#​45896](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45896))
- data-source/aws\_dynamodb\_table: Add
`global_secondary_index.key_schema` attribute
([#​46157](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46157))
- data-source/aws\_networkmanager\_core\_network\_policy\_document: Add
`segment_actions.routing_policy_names` argument
([#​45928](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45928))
- data-source/aws\_s3\_object: Add `body_base64` and `download_body`
attributes. For improved performance, set `download_body = false` to
ensure bodies are never downloaded
([#​46163](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46163))
- data-source/aws\_vpc\_ipam\_pool: Add `source_resource` attribute
([#​44705](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44705))
- resource/aws\_batch\_job\_definition: Add `allow_privilege_escalation`
attribute to `eks_properties.pod_properties.containers.security_context`
([#​45896](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45896))
- resource/aws\_bedrockagent\_data\_source: Add
`vector_ingestion_configuration.parsing_configuration.bedrock_data_automation_configuration`
block
([#​45966](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45966))
- resource/aws\_bedrockagent\_data\_source: Add
`vector_ingestion_configuration.parsing_configuration.bedrock_foundation_model_configuration.parsing_modality`
argument
([#​46056](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46056))
- resource/aws\_docdb\_cluster\_instance: Add
`certificate_rotation_restart` argument
([#​45984](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45984))
- resource/aws\_dynamodb\_table: Add support for multi-attribute keys in
global secondary indexes. Introduces hash\_keys and range\_keys to the
gsi block and makes hash\_key optional for backwards compatibility.
([#​45357](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45357))
- resource/aws\_dynamodb\_table: Adds warning when `stream_view_type` is
set and `stream_enabled` is either `false` or unset.
([#​45934](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45934))
- resource/aws\_ecr\_account\_setting: Add support for `BLOB_MOUNTING`
account setting name with `ENABLED` and `DISABLED` values
([#​46092](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46092))
- resource/aws\_fsx\_windows\_file\_system: Add
`domain_join_service_account_secret` argument to
`self_managed_active_directory` configuration block
([#​45852](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45852))
- resource/aws\_fsx\_windows\_file\_system: Change
`self_managed_active_directory.password` to Optional and
`self_managed_active_directory.username` to Optional and Computed
([#​45852](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45852))
- resource/aws\_invoicing\_invoice\_unit: Adds resource identity
support.
([#​46185](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46185))
- resource/aws\_invoicing\_invoice\_unit: Adds validation to restrict
`rules` to a single element.
([#​46185](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46185))
- resource/aws\_lambda\_function: Increase upper limit of `memory_size`
from 10240 MB to 32768 MB
([#​46065](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46065))
- resource/aws\_launch\_template: Add `network_performance_options`
argument
([#​46071](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46071))
- resource/aws\_odb\_network: Enhancements to support KMS and STS
parameters in CreateOdbNetwork and UpdateOdbNetwork.
([#​45636](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45636))
- resource/aws\_opensearchserverless\_collection: Add resource identity
support
([#​45981](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45981))
- resource/aws\_osis\_pipeline: Updates `pipeline_configuration_body`
maximum length validation to 2,621,440 bytes to align with AWS API
specification.
([#​44881](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44881))
- resource/aws\_sagemaker\_endpoint: Retry IAM eventual consistency
errors on Create
([#​45951](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45951))
- resource/aws\_sagemaker\_monitoring\_schedule: Add
`monitoring_schedule_config.monitoring_job_definition` argument
([#​45951](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45951))
- resource/aws\_sagemaker\_monitoring\_schedule: Make
`monitoring_schedule_config.monitoring_job_definition_name` argument
optional
([#​45951](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45951))
- resource/aws\_vpc\_ipam\_pool: Add `source_resource` argument in
support of provisioning of VPC Resource Planning Pools
([#​44705](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44705))
- resource/aws\_vpc\_ipam\_resource\_discovery: Add
`organizational_unit_exclusion` argument
([#​45890](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45890))
- resource/aws\_vpc\_subnet: Add `ipv4_ipam_pool_id`,
`ipv4_netmask_length`, `ipv6_ipam_pool_id`, and `ipv6_netmask_length`
arguments in support of provisioning of subnets using IPAM
([#​44705](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44705))
- resource/aws\_vpc\_subnet: Change `ipv6_cidr_block` to Optional and
Computed
([#​44705](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/44705))
BUG FIXES:
- data-source/aws\_ecr\_lifecycle\_policy\_document: Add
`rule.action.target_storage_class` and `rule.selection.storage_class` to
JSON serialization
([#​45909](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45909))
- data-source/aws\_lakeformation\_permissions: Remove incorrect
validation from `catalog_id`, `data_location.catalog_id`,
`database.catalog_id`, `lf_tag_policy.catalog_id`, `table.catalog_id`,
and `table_with_columns.catalog_id` arguments
([#​43931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43931))
- data-source/aws\_networkmanager\_core\_network\_policy\_document: Fix
panic when
`attachment_routing_policy_rules.action.associate_routing_policies` is
empty
([#​46160](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46160))
- provider: Fix crash when using custom S3 endpoints with non-standard
region strings (e.g., S3-compatible storage like Ceph or MinIO)
([#​46000](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46000))
- provider: When importing resources with `region` defined, in AWS
European Sovereign Cloud, prevent failing due to region validation
requiring region names to start with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_athena\_workgroup: Fix error when removing
`configuration.result_configuration.encryption_configuration` argument
([#​46159](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46159))
- resource/aws\_bcmdataexports\_export: Fix `Provider produced
inconsistent result after apply` error when querying `CARBON_EMISSIONS`
table without `table_configurations`
([#​45972](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45972))
- resource/aws\_bedrock\_inference\_profile: Fixed forced replacement
following import when `model_source` is set
([#​45713](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45713))
- resource/aws\_billing\_view: Fix handling of data\_filter\_expression
([#​45293](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45293))
- resource/aws\_cloudformation\_stack\_set: Fix perpetual diff when
using `auto_deployment` with `permission_model` set to `SERVICE_MANAGED`
([#​45992](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45992))
- resource/aws\_cloudfront\_distribution: Fix `runtime error: invalid
memory address or nil pointer dereference` panic when mistakenly
importing a multi-tenant distribution
([#​45873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45873))
- resource/aws\_cloudfront\_distribution: Prevent mistakenly importing a
multi-tenant distribution
([#​45873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45873))
- resource/aws\_cloudfront\_multitenant\_distribution: Fix "specified
origin server does not exist or is not valid" errors when attempting to
use Origin Access Control (OAC)
([#​45977](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45977))
- resource/aws\_cloudfront\_multitenant\_distribution: Fix
`origin_group` to use correct `id` attribute name and fix field mapping
to resolve `missing required field` errors
([#​45921](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45921))
- resource/aws\_cloudwatch\_event\_rule: Prevent failing on AWS European
Sovereign Cloud regions due to region validation requiring region names
to start with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_config\_configuration\_recorder: Fix
`InvalidRecordingGroupException: The recording group provided is not
valid` errors when the `recording_group.exclusion_by_resource_type` or
`recording_group.recording_strategy` argument is removed during update
([#​46110](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46110))
- resource/aws\_datazone\_environment\_profile: Prevent failing on AWS
European Sovereign Cloud regions due to region validation requiring
region names to start with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_dynamodb\_table: Fix perpetual diff for
`warm_throughput` in global\_secondary\_index when not set in
configuration.
([#​46094](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46094))
- resource/aws\_dynamodb\_table: Fixes error when `name` is known after
apply
([#​45917](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45917))
- resource/aws\_eks\_cluster: Fix `kubernetes_network_config` argument
name in EKS Auto Mode validation error message
([#​45997](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45997))
- resource/aws\_emrserverless\_application: Prevent failing on AWS
European Sovereign Cloud regions due to region validation requiring
region names to start with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_lakeformation\_permissions: Remove incorrect validation
from `catalog_id`, `data_location.catalog_id`, `database.catalog_id`,
`lf_tag_policy.catalog_id`, `table.catalog_id`, and
`table_with_columns.catalog_id` arguments
([#​43931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/43931))
- resource/aws\_lambda\_event\_source\_mapping: Prevent failing on AWS
European Sovereign Cloud regions due to region validation requiring
region names to start with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_lambda\_invocation: Fix panic when deleting or replacing
resource with empty input in CRUD lifecycle scope
([#​45967](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45967))
- resource/aws\_lambda\_permission: Prevent failing on AWS European
Sovereign Cloud regions due to region validation requiring region names
to start with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_lb\_target\_group: Fix update error when switching
`health_check.protocol` from `HTTP` to `TCP` when `protocol` is `TCP`
([#​46036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46036))
- resource/aws\_multitenant\_cloudfront\_distribution: Prevent
mistakenly importing a standard distribution
([#​45873](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45873))
- resource/aws\_networkfirewall\_firewall\_policy: Support
partner-managed rule groups via
`firewall_policy.stateful_rule_group_reference.resource_arn`
([#​46124](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46124))
- resource/aws\_odb\_network: Fix `delete_associated_resources` being
set when value is unknown
([#​45636](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45636))
- resource/aws\_pipes\_pipe: Prevent failing on AWS European Sovereign
Cloud regions due to region validation requiring region names to start
with "\[a-z]{2}-"
([#​45895](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45895))
- resource/aws\_placement\_group: Correct validation of
`partition_count`
([#​45042](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45042))
- resource/aws\_rds\_cluster: Properly set
`iam_database_authentication_enabled` when restored from snapshot
([#​39461](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39461))
- resource/aws\_redshift\_cluster: Changing `port` now works.
([#​45870](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45870))
- resource/aws\_redshiftserverless\_workgroup: Fix `ValidationException:
Base capacity cannot be updated when PerformanceTarget is Enabled` error
when updating `price_performance_target` and `base_capacity`
([#​46137](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46137))
- resource/aws\_route53\_health\_check: Mark `regions` argument as
`Computed` to fix an unexpected `regions` diff when it is not specified
([#​45829](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45829))
- resource/aws\_route53\_zone: Fix `InvalidChangeBatch` errors during
[ForceNew](https://developer.hashicorp.com/terraform/plugin/sdkv2/schemas/schema-behaviors#forcenew)
operations when zone name changes
([#​45242](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45242))
- resource/aws\_route53\_zone: Fixes error where Delete would fail if
the remote resource had already been deleted.
([#​45985](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45985))
- resource/aws\_route53profiles\_resource\_association: Fix `Invalid
JSON String Value` error on initial apply and `ConflictException` on
subsequent apply when associating Route53 Resolver Query Log Configs
([#​45958](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45958))
- resource/aws\_route53recoverycontrolconfig\_control\_panel: Fix crash
when create returns an error
([#​45954](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45954))
- resource/aws\_s3\_bucket: Fix bucket creation with tags in
non-commercial AWS regions by handling `UnsupportedArgument` errors
during tag-on-create operations
([#​46122](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46122))
- resource/aws\_s3\_bucket: Fix tag read and update operations in
non-commercial AWS regions by handling `MethodNotAllowed` errors when S3
Control APIs are unavailable
([#​46122](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46122))
- resource/aws\_servicecatalog\_portfolio\_share: Support organization
and OU IDs in addition to ARNs for GovCloud compatibility
([#​39863](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/39863))
- resource/aws\_subnet: Mark `ipv6_cidr_block` as `ForceNew` when the
existing IPv6 subnet was created with `assign_ipv6_address_on_create =
true`
([#​46043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46043))
- resource/aws\_vpc\_endpoint: Fix persistent diffs caused by case
differences in `ip_address_type`
([#​45947](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45947))
</details>
<details>
<summary>boto/boto3 (boto3)</summary>
###
[`v1.42.39`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14239)
[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.42.38...1.42.39)
\=======
- api-change:`connect`: \[`botocore`] This release adds Estimated Wait
Time support to the GetContactMetrics API for Amazon Connect.
- api-change:`quicksight`: \[`botocore`] Improve SessionTag usage
guidelines in the GenerateEmbedURLForAnonymousUser API documentation.
Update the GetIdentityContext document with the region support context.
###
[`v1.42.38`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14238)
[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.42.37...1.42.38)
\=======
- api-change:`ec2`: \[`botocore`] G7e instances feature up to 8 NVIDIA
RTX PRO 6000 Blackwell Server Edition GPUs with 768 GB of memory and 5th
generation Intel Xeon Scalable processors. Supporting up to 192 vCPUs,
1600 Gbps networking bandwidth with EFA, up to 2 TiB of system memory,
and up to 15.2 TB of local NVMe SSD storage.
- api-change:`gamelift`: \[`botocore`] Amazon GameLift Servers now
supports automatic scaling to and from zero instances based on game
session activity. Fleets scale down to zero following a defined period
of no game session activity and scale up from zero when game sessions
are requested, providing an option for cost optimization.
###
[`v1.42.37`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14237)
[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.42.36...1.42.37)
\=======
- api-change:`cognito-idp`: \[`botocore`] This release adds support for
a new lambda trigger to transform federated user attributes during the
authentication with external identity providers on Cognito Managed
Login.
- api-change:`connect`: \[`botocore`] Adds support for filtering search
results based on tags assigned to contacts.
- api-change:`ec2`: \[`botocore`] SearchTransitGatewayRoutes API
response now includes a NextToken field, enabling pagination when
retrieving large sets of transit gateway routes. Pass the returned
NextToken value in subsequent requests to retrieve the next page of
results.
- api-change:`lambda`: \[`botocore`] We are launching ESM Metrics and
logging for Kafka ESM to allow customers to monitor Kafka event
processing using CloudWatch Metrics and Logs.
- api-change:`mediaconnect`: \[`botocore`] This release adds support for
NDI flow sources in AWS Elemental MediaConnect. You can now send content
to your MediaConnect transport streams directly from your NDI
environment using the new NDI source type. Also adds support for LARGE
4X flow size, which can be used when creating CDI JPEG-XS flows.
- api-change:`mediaconvert`: \[`botocore`] This release adds a follow
source mode for audio output channel count, an AES audio frame wrapping
option for MXF outputs, and an option to signal DolbyVision
compatibility using the SUPPLEMENTAL-CODECS tag in HLS manifests.
- api-change:`s3`: \[`botocore`] Adds support for the
UpdateObjectEncryption API to change the server-side encryption type of
objects in general purpose buckets.
- api-change:`s3control`: \[`botocore`] Adds support for the
UpdateObjectEncryption API to change the server-side encryption type of
objects in general purpose buckets.
###
[`v1.42.36`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14236)
[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.42.35...1.42.36)
\=======
- api-change:`connect`: \[`botocore`] Added support for task
attachments. The StartTaskContact API now accepts file attachments,
enabling customers to include files (.csv, .doc, .docx, .heic, .jfif,
.jpeg, .jpg, .mov, .mp4, .pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when
creating Task contacts. Supports up to 5 attachments per task.
- api-change:`deadline`: \[`botocore`] AWS Deadline Cloud now supports
editing job names and descriptions after submission.
- api-change:`ec2`: \[`botocore`] Releasing new EC2 instances. C8gb and
M8gb with highest EBS performance, M8gn with 600 Gbps network bandwidth,
X8aedz and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6
processors and up to 6TB memory, and Mac-m4max with Apple M4 Max chip
for 25 percent faster builds.
- api-change:`medialive`: \[`botocore`] AWS Elemental MediaLive released
two new features that allows customers 1) to set Output Timecode for AV1
encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2
output groups when using Pipeline Locking or Disabled Locking modes.
- api-change:`sagemaker`: \[`botocore`] Idle resource sharing enables
teams to borrow unused compute resources in your SageMaker HyperPod
cluster. This capability maximizes resource utilization by allowing
teams to borrow idle compute capacity beyond their allocated compute
quotas.
###
[`v1.42.35`](https://redirect.github.com/boto/boto3/blob/HEAD/CHANGELOG.rst#14235)
[Compare
Source](https://redirect.github.com/boto/boto3/compare/1.42.34...1.42.35)
\=======
- api-change:`connectcases`: \[`botocore`] Amazon Connect now enables
you to use tag-based access controls to define who can access specific
cases. You can associate tags with case templates and configure security
profiles to determine which users can access cases with those tags.
- api-change:`ec2`: \[`botocore`] DescribeInstanceTypes API response now
includes an additionalFlexibleNetworkInterfaces field, the number of
interfaces attachable to an instance when using flexible Elastic Network
Adapter (ENA) queues in addition to the base number specified by
maximumNetworkInterfaces.
- api-change:`evidently`: \[`botocore`] Deprecate all Evidently API for
AWS CloudWatch Evidently deprecation
- api-change:`groundstation`: \[`botocore`] Adds support for AWS Ground
Station Telemetry.
</details>
<details>
<summary>boto/botocore (botocore)</summary>
###
[`v1.42.39`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14239)
[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.42.38...1.42.39)
\=======
- api-change:`connect`: This release adds Estimated Wait Time support to
the GetContactMetrics API for Amazon Connect.
- api-change:`quicksight`: Improve SessionTag usage guidelines in the
GenerateEmbedURLForAnonymousUser API documentation. Update the
GetIdentityContext document with the region support context.
###
[`v1.42.38`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14238)
[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.42.37...1.42.38)
\=======
- api-change:`ec2`: G7e instances feature up to 8 NVIDIA RTX PRO 6000
Blackwell Server Edition GPUs with 768 GB of memory and 5th generation
Intel Xeon Scalable processors. Supporting up to 192 vCPUs, 1600 Gbps
networking bandwidth with EFA, up to 2 TiB of system memory, and up to
15.2 TB of local NVMe SSD storage.
- api-change:`gamelift`: Amazon GameLift Servers now supports automatic
scaling to and from zero instances based on game session activity.
Fleets scale down to zero following a defined period of no game session
activity and scale up from zero when game sessions are requested,
providing an option for cost optimization.
###
[`v1.42.37`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14237)
[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.42.36...1.42.37)
\=======
- api-change:`cognito-idp`: This release adds support for a new lambda
trigger to transform federated user attributes during the authentication
with external identity providers on Cognito Managed Login.
- api-change:`connect`: Adds support for filtering search results based
on tags assigned to contacts.
- api-change:`ec2`: SearchTransitGatewayRoutes API response now includes
a NextToken field, enabling pagination when retrieving large sets of
transit gateway routes. Pass the returned NextToken value in subsequent
requests to retrieve the next page of results.
- api-change:`lambda`: We are launching ESM Metrics and logging for
Kafka ESM to allow customers to monitor Kafka event processing using
CloudWatch Metrics and Logs.
- api-change:`mediaconnect`: This release adds support for NDI flow
sources in AWS Elemental MediaConnect. You can now send content to your
MediaConnect transport streams directly from your NDI environment using
the new NDI source type. Also adds support for LARGE 4X flow size, which
can be used when creating CDI JPEG-XS flows.
- api-change:`mediaconvert`: This release adds a follow source mode for
audio output channel count, an AES audio frame wrapping option for MXF
outputs, and an option to signal DolbyVision compatibility using the
SUPPLEMENTAL-CODECS tag in HLS manifests.
- api-change:`s3`: Adds support for the UpdateObjectEncryption API to
change the server-side encryption type of objects in general purpose
buckets.
- api-change:`s3control`: Adds support for the UpdateObjectEncryption
API to change the server-side encryption type of objects in general
purpose buckets.
###
[`v1.42.36`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14236)
[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.42.35...1.42.36)
\=======
- api-change:`connect`: Added support for task attachments. The
StartTaskContact API now accepts file attachments, enabling customers to
include files (.csv, .doc, .docx, .heic, .jfif, .jpeg, .jpg, .mov, .mp4,
.pdf, .png, .ppt, .pptx, .rtf, .txt, etc.) when creating Task contacts.
Supports up to 5 attachments per task.
- api-change:`deadline`: AWS Deadline Cloud now supports editing job
names and descriptions after submission.
- api-change:`ec2`: Releasing new EC2 instances. C8gb and M8gb with
highest EBS performance, M8gn with 600 Gbps network bandwidth, X8aedz
and M8azn with 5GHz AMD processors, X8i with Intel Xeon 6 processors and
up to 6TB memory, and Mac-m4max with Apple M4 Max chip for 25 percent
faster builds.
- api-change:`medialive`: AWS Elemental MediaLive released two new
features that allows customers 1) to set Output Timecode for AV1
encoder, 2) to set a Custom Epoch for CMAF Ingest and MediaPackage V2
output groups when using Pipeline Locking or Disabled Locking modes.
- api-change:`sagemaker`: Idle resource sharing enables teams to borrow
unused compute resources in your SageMaker HyperPod cluster. This
capability maximizes resource utilization by allowing teams to borrow
idle compute capacity beyond their allocated compute quotas.
###
[`v1.42.35`](https://redirect.github.com/boto/botocore/blob/HEAD/CHANGELOG.rst#14235)
[Compare
Source](https://redirect.github.com/boto/botocore/compare/1.42.34...1.42.35)
\=======
- api-change:`connectcases`: Amazon Connect now enables you to use
tag-based access controls to define who can access specific cases. You
can associate tags with case templates and configure security profiles
to determine which users can access cases with those tags.
- api-change:`ec2`: DescribeInstanceTypes API response now includes an
additionalFlexibleNetworkInterfaces field, the number of interfaces
attachable to an instance when using flexible Elastic Network Adapter
(ENA) queues in addition to the base number specified by
maximumNetworkInterfaces.
- api-change:`evidently`: Deprecate all Evidently API for AWS CloudWatch
Evidently deprecation
- api-change:`groundstation`: Adds support for AWS Ground Station
Telemetry.
</details>
<details>
<summary>github/codeql-action (github/codeql-action)</summary>
###
[`v4.32.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.32.0)
[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.31.11...v4.32.0)
- Update default CodeQL bundle version to
[2.24.0](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.0).
[#​3425](https://redirect.github.com/github/codeql-action/pull/3425)
</details>
<details>
<summary>hashicorp/terraform-provider-local (local)</summary>
###
[`v2.6.2`](https://redirect.github.com/hashicorp/terraform-provider-local/blob/HEAD/CHANGELOG.md#262-January-28-2026)
[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-local/compare/v2.6.1...v2.6.2)
NOTES:
- all: This release introduces no functional changes. It was built using
the latest 1.24 patch version of Go and re-released to address a
certificate handshake issue.
([#​461](https://redirect.github.com/hashicorp/terraform-provider-local/issues/461))
</details>
<details>
<summary>hashicorp/terraform-provider-random (random)</summary>
###
[`v3.8.1`](https://redirect.github.com/hashicorp/terraform-provider-random/blob/HEAD/CHANGELOG.md#381-January-27-2026)
[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-random/compare/v3.8.0...v3.8.1)
NOTES:
- This release introduces no functional changes but has been signed with
a valid certificate for the windows binary.
([#​749](https://redirect.github.com/hashicorp/terraform-provider-random/issues/749))
</details>
<details>
<summary>hashicorp/terraform-provider-tls (tls)</summary>
###
[`v4.2.1`](https://redirect.github.com/hashicorp/terraform-provider-tls/blob/HEAD/CHANGELOG.md#421-January-30-2026)
[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-tls/compare/v4.2.0...v4.2.1)
BUG FIXES:
- fix regression triggering a replace for certs due to max\_path\_length
defaulting to -1
([#​737](https://redirect.github.com/hashicorp/terraform-provider-tls/issues/737))
###
[`v4.2.0`](https://redirect.github.com/hashicorp/terraform-provider-tls/blob/HEAD/CHANGELOG.md#420-January-28-2026)
[Compare
Source](https://redirect.github.com/hashicorp/terraform-provider-tls/compare/v4.1.0...v4.2.0)
FEATURES:
- ephemeral/tls\_public\_key: New ephemeral resource that extracts the
public key from a private key.
([#​668](https://redirect.github.com/hashicorp/terraform-provider-tls/issues/668))
ENHANCEMENTS:
- data-source/tls\_certificats: Added `max_path_length` attribute
([#​301](https://redirect.github.com/hashicorp/terraform-provider-tls/issues/301))
- resource/tls\_self\_signed\_cert: Added optional `max_path_length`
attribute
([#​301](https://redirect.github.com/hashicorp/terraform-provider-tls/issues/301))
- resource/tls\_locally\_signed\_cert: Added optional `max_path_length`
attribute
([#​301](https://redirect.github.com/hashicorp/terraform-provider-tls/issues/301))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, only on
Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule
defined).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/cattle-ops/terraform-aws-gitlab-runner).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDIuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent 59be483 commit 407fc93
4 files changed
Lines changed: 79 additions & 79 deletions
File tree
- .github/workflows
- modules/terminate-agent-hook/lambda
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
72 | 72 | | |
73 | 73 | | |
74 | 74 | | |
75 | | - | |
| 75 | + | |
76 | 76 | | |
77 | 77 | | |
78 | 78 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
34 | 34 | | |
35 | 35 | | |
36 | 36 | | |
37 | | - | |
| 37 | + | |
38 | 38 | | |
39 | 39 | | |
40 | 40 | | |
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
2 | | - | |
| 1 | + | |
| 2 | + | |
0 commit comments