chore(deps): update terraform azurerm to v5.6.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	5.3.0 → 5.6.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v5.6.0

Compare Source

FEATURES:

• New List Resource: azurerm_batch_account (#​33252)
• New List Resource: azurerm_cdn_frontdoor_origin_group (#​33334)
• New Resource: azurerm_storage_discovery_workspace (#​31479)

ENHANCEMENTS:

• dependencies: containers - update API version to 2026-05-01 (#​32688)
• dependencies: go-azure-sdk - update to v0.20260910.1141000 (#​33413)
• dependencies: qumulo - update API version to 2026-04-16 (#​33421)
• dependencies: servicebus - update to API version 2026-01-01 (#​33450)
• azurerm_iothub_device_update_instance - add support for the connection_string_wo and connection_string_wo_version properties (#​33448)
• azurerm_linux_function_app - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_linux_function_app_slot - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_linux_web_app - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_linux_web_app_slot - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_mongo_cluster - Support new property network_bypass_mode (#​33168)
• azurerm_servicebus_namespace - add support for the 1.3 value to the minimum_tls_version property (#​33457)
• azurerm_windows_function_app - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_windows_function_app_slot - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_windows_web_app - add support for the end_to_end_tls_encryption_enabled property (#​31135)
• azurerm_windows_web_app_slot - add support for the end_to_end_tls_encryption_enabled property (#​31135)

BUG FIXES:

• azurerm_site_recovery_replicated_vm - select managed_disk properties compared case insensitive (#​33424)

v5.5.0

Compare Source

FEATURES:

• New List Resource: azurerm_analysis_services_server (#​33250)
• New List Resource: azurerm_application_insights_workbook (#​33244)
• New List Resource: azurerm_attestation_provider (#​33251)
• New List Resource: azurerm_cdn_frontdoor_origin (#​33307)
• New List Resource: azurerm_eventhub_consumer_group (#​33335)
• New List Resource: azurerm_linux_virtual_machine (#​33333)
• New List Resource: azurerm_virtual_hub_connection (#​33311)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260901.1173158 (#​33274)
• azurerm_private_endpoint - lock on private service connection resource ids (#​33298)
• azurerm_storage_account - add support for the public_network_access property (#​33292)

BUG FIXES:

• azurerm_resource_group - the managed_by property now forces recreation when changed as the API does not support changing this value (#​33339)
• go-azure-sdk - Delete operations now poll on asynchronous operation URLs if returned by the API instead of only checking for a 404 on the resource URL, ensuring deletion errors are reported to the user (#​33274)

v5.4.0

Compare Source

FEATURES:

• New List Resource: azurerm_application_insights_standard_web_test (#​33243)
• New List Resource: azurerm_application_insights_workbook_template (#​33245)
• New List Resource: azurerm_arc_kubernetes_provisioned_cluster (#​33247)
• New List Resource: azurerm_availability_set (#​33241)
• New List Resource: azurerm_batch_application (#​33254)
• New List Resource: azurerm_dedicated_host_group (#​33257)
• New List Resource: azurerm_log_analytics_workspace (#​33259)

ENHANCEMENTS:

• dependencies: azurerm_mongo_cluster - update API version to 2026-06-01 (#​33195)
• dependencies: azurerm_mongo_cluster_firewall_rule - update API version to 2026-06-01 (#​33195)
• dependencies: azurerm_mongo_cluster_user - update API version to 2026-06-01 (#​33195)
• dependencies: netapp - update API version to 2026-05-01 (#​33215)
• Data Source: azurerm_api_management_workspace - export the description property (#​33205)
• Data Source: azurerm_attestation_provider - export the sev_snp_policy_base64, open_enclave_policy_base64, sgx_enclave_policy_base64, and tpm_policy_base64 properties (#​33125)
• Data Source: azurerm_automation_account - export the dsc_primary_access_key, dsc_server_endpoint, dsc_secondary_access_key, public_network_access_enabled, sku_name, and tags properties (#​33135)
• Data Source: azurerm_automation_account - export the encryption block (#​33135)
• Data Source: azurerm_ip_group - export the firewall_ids and firewall_policy_ids properties (#​33190)
• Data Source: azurerm_private_link_service - export the fqdns and destination_ip_address properties (#​33191)
• azurerm_key_vault_managed_hardware_security_module_key - allow the key_size property to be set when key_type is oct-HSM (#​32690)
• azurerm_lb_probe - add support for the no_healthy_backends_behavior property (#​32645)
• azurerm_linux_virtual_machine_scale_set - add support for the NvmeDisk value to the os_disk.diff_disk_settings.placement property (#​30328)
• azurerm_linux_web_app - add support for the 8.5 value in the site_config.application_stack.php_version property (#​33308)
• azurerm_linux_web_app_slot - add support for the 8.5 value in the site_config.application_stack.php_version property (#​33308)
• azurerm_netapp_volume - support for the breakthrough_mode_enabled property (#​33215)
• azurerm_postgresql_flexible_server - add support for the storage_type, storage_iops, and storage_throughput properties which allows choice of the new "Premium V2 LRS" storage type (#​32121)
• azurerm_storage_account - add support for an in-place migration of account_replication_type between matching non-zonal and zonal types instead of resource recreation (#​33236)
• azurerm_storage_table - add support for AAD authentication (#​32997)
• azurerm_synapse_spark_pool - migrate to go-azure-sdk (#​33258)
• azurerm_windows_virtual_machine_scale_set - add support for the NvmeDisk value to the os_disk.diff_disk_settings.placement property (#​30328)

BUG FIXES:

• azurerm_synapse_spark_pool - fix lifecycle.ignore_changes support (#​33258)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[autonomous-bancey]

Plan Result (generate_ansible_inventory)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_twingate)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_dns)

Plan: 0 to add, 2 to change, 0 to destroy.

• Update
  • module.adguard_gamora.adguard_config.config
  • module.adguard_thanos.adguard_config.config

Change Result (Click me)

  # module.adguard_gamora.adguard_config.config will be updated in-place
  ~ resource "adguard_config" "config" {
      ~ dhcp                            = {
          ~ ipv4_settings = {
              ~ lease_duration = 86400 -> 0
                # (4 unchanged attributes hidden)
            }
            # (3 unchanged attributes hidden)
        }
        id                              = "1"
      ~ last_updated                    = "Monday, 21-Sep-26 14:15:06 UTC" -> (known after apply)
      ~ tls                             = {
          ~ dns_names          = [] -> (known after apply)
          ~ issuer             = null -> (known after apply)
          ~ key_type           = null -> (known after apply)
          ~ not_after          = null -> (known after apply)
          ~ not_before         = null -> (known after apply)
          ~ private_key_saved  = false -> (known after apply)
          ~ subject            = null -> (known after apply)
          ~ valid_cert         = false -> (known after apply)
          ~ valid_chain        = false -> (known after apply)
          ~ valid_key          = false -> (known after apply)
          ~ valid_pair         = false -> (known after apply)
          ~ warning_validation = null -> (known after apply)
            # (9 unchanged attributes hidden)
        }
        # (9 unchanged attributes hidden)
    }

  # module.adguard_thanos.adguard_config.config will be updated in-place
  ~ resource "adguard_config" "config" {
      ~ dhcp                            = {
          ~ ipv4_settings = {
              ~ lease_duration = 86400 -> 0
                # (4 unchanged attributes hidden)
            }
            # (3 unchanged attributes hidden)
        }
        id                              = "1"
      ~ last_updated                    = "Monday, 21-Sep-26 14:15:07 UTC" -> (known after apply)
      ~ tls                             = {
          ~ dns_names          = [] -> (known after apply)
          ~ issuer             = null -> (known after apply)
          ~ key_type           = null -> (known after apply)
          ~ not_after          = null -> (known after apply)
          ~ not_before         = null -> (known after apply)
          ~ private_key_saved  = false -> (known after apply)
          ~ subject            = null -> (known after apply)
          ~ valid_cert         = false -> (known after apply)
          ~ valid_chain        = false -> (known after apply)
          ~ valid_key          = false -> (known after apply)
          ~ valid_pair         = false -> (known after apply)
          ~ warning_validation = null -> (known after apply)
            # (9 unchanged attributes hidden)
        }
        # (9 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

[autonomous-bancey]

Plan Result (tiny_virtual_machines)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (wanda_virtual_machines)

No changes. Your infrastructure matches the configuration.

[mergify]

🤖 LGTM! beep boop