chore(deps): update terraform azurerm to v4.62.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	~> 4.56.0 → ~> 4.62.0
azurerm (source)	required_provider	minor	4.56.0 → 4.62.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.62.0

Compare Source

FEATURES:

• New List Resource: azurerm_network_ddos_protection_plan (#​31768)
• New List Resource: azurerm_private_dns_a_record (#​31785)
• New List Resource: azurerm_private_endpoint (#​31769)
• New List Resource: azurerm_redis_cache (#​31770)
• New List Resource: azurerm_redis_firewall_rule (#​31770)
• New List Resource: azurerm_route (#​31760)
• New List Resource: azurerm_mssql_elasticpool (#​31736)
• New List Resource: azurerm_mssql_virtual_machine (#​31737)

ENHANCEMENTS:

• dependencies: databricks - update to API version 2026-01-01 (#​31654)
• dependencies: dataprotection - update to API version 2025-09-01 (#​31402)
• azurerm_dashboard_grafana - add support for the 12 value in the grafana_major_version property and remove the deprecated 10 value (#​31653)
• azurerm_linux_function_app - add support for 25 in the java_version property (#​31096)
• azurerm_linux_web_app - add support for 3.14 in the python_version property (#​31826)
• azurerm_linux_web_app - add support for 25 in the java_version property (#​31096)
• azurerm_linux_web_app_slot - add support for 3.14 in the python_version property (#​31826)
• azurerm_windows_function_app - add support for 25 in the java_version property (#​31096)
• azurerm_windows_web_app - add support for 25 in the java_version property (#​31096)

BUG FIXES:

• azurerm_container_app_job - fix an issue where template.container.startup_probe.initial_delay and template.container.readiness_probe.initial_delay were not set in the API request (#​31796)

v4.61.0

Compare Source

FEATURES:

• New List Resource: azurerm_application_gateway (#​31749)
• New List Resource: azurerm_application_security_group (#​31742)
• New List Resource: azurerm_firewall and azurerm_firewall_policy (#​31734)
• New List Resource: azurerm_firewall_policy_rule_collection_group (#​31741)
• New List Resource: azurerm_ip_group (#​31740)
• New List Resource: azurerm_mssql_database (#​31735)
• New List Resource: azurerm_mssql_job_agent (#​31738)
• New List Resource: azurerm_mssql_server (#​31650)
• New List Resource: azurerm_nat_gatway (#​31764)
• New List Resource: azurerm_network_security_rule (#​31748)
• New List Resource: azurerm_public_ip (#​31762)
• New List Resource: azurerm_web_application_firewall_policy (#​31758)

ENHANCEMENTS:

• dependencies: go update to 1.25.5
• dependencies: go-azure-sdk - update to v0.20260212.1143955
• azurerm_managed_redis - sku_name can now be updated (#​31203)
• azurerm_managed_redis - default_database must be specified when creating a new resource (#​31724)
• azurerm_point_to_site_vpn_gateway - connection_configuration.x.internet_security_enabled can now be updated (#​31733)
• azurerm_security_center_storage_defender - update to API version 2025-06-01 (#​31759)

BUG FIXES:

• azurerm_managed_redis_geo_replication - fix an issue that prevented linking 3 or more clusters (#​31385)
• azurerm_signalr_service - fix setting default values into state, preventing diffs on import for connectivity_logs_enabled, http_request_logs_enabled, and messaging_logs_enabled (#​31566)

v4.60.0

Compare Source

FEATURES:

• New Data Source: azurerm_cognitive_account_project (#​31605)
• New Data Source: azurerm_managed_redis_access_policy_assignment (#​30980)
• New Data Source: azurerm_oracle_database_system_versions (#​31001)
• New Resource: azurerm_api_management_workspace_named_value (#​31299)
• New List Resource: azurerm_cognitive_account (#​31624)
• New Resource: azurerm_data_factory_linked_service_sql_managed_instance (#​30896)
• New Resource: azurerm_managed_redis_access_policy_assignment (#​30980)
• New List Resource: azurerm_mysql_flexible_database, azurerm_mysql_flexible_server_firewall_rule, azurerm_mysql_flexible_server_configuration - includes addition of Identity (#​31646) (#​31646)
• New List Resource: azurerm_service_plan (#​31610)

ENHANCEMENTS:

• dependencies: containerinstance - update to API version 2025-09-01 (#​31640)
• dependencies: storagemover - update to API version 2025-07-01 (#​31587)
• Data Source: azurerm_container_app - add support for the read_secrets property allowing users to skip secret retrieval that may trigger authorization errors (#​31199)
• azurerm_application_gateway - add support for 2.2 to waf_configuration.rule_set_version (#​31674)
• azurerm_application_gateway - add support for MS-ThreatIntel-XSS to waf_configuration.disabled_rule_group.rule_group_name (#​31674)
• azurerm_express_route_port - add support for GcmAesXpn128 and GcmAesXpn256 ciphers to link*.macsec_cipher (#​30240)
• azurerm_postgresql_flexible_server - add support for cluster (#​31315)
• azurerm_web_application_firewall_policy - add support for 2.2 to managed_rules.managed_rule_set.version and managed_rules.exclusion.excluded_rule_set.version (#​31674)
• azurerm_web_application_firewall_policy - add support for MS-ThreatIntel-XSS to managed_rules.managed_rule_set.rule_group_override.rule_group_name and managed_rules.exclusion.excluded_rule_set.rule_group.rule_group_name (#​31674)
• provider: the subscription_id property can now be populated based on the az CLI (#​30251)

BUG FIXES:

• azurerm_express_route_port - fix an issue that caused identity to be removed when updating unrelated properties (#​30240)
• azurerm_federated_identity_credential - the id is now built using the resource group name segment from the parent_id preventing unexpected 404 statuses (#​30860)
• azurerm_kubernetes_cluster - fixed capacity_reservation_group_id loss during node pool cycling (#​30654)
• azurerm_monitor_aad_diagnostic_setting - add polling as a workaround to an eventual consistency issue (#​31123)
• list.azurerm_private_dns_zone - fix context handling resolving an issue where this list resources never returned results (#​31719)

v4.59.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260129.1200123 (#​31621)
• azurerm_automation_runbook - add support for the runtime_environment_name property (#​30992)
• azurerm_kusto_eventgrid_data_connection - update validation for eventhub_consumer_group_name to allow $Default as input (#​31551)
• azurerm_linux_function_app - add support for 3.14 to site_config.application_stack.python_version (#​31195)
• azurerm_linux_function_app_slot - add support for 3.14 to site_config.application_stack.python_version (#​31195)
• azurerm_netapp_volume_group_sap_hana_resource - add support for zone, encryption_key_source, key_vault_private_endpoint_id, and network_features (#​31603)
• azurerm_user_assigned_identity - add support for the isolation_scope property (#​31216)

BUG FIXES:

• azurerm_kubernetes_cluster - thenetwork_policy property now allows updating from calico to cilium (#​31627)
• azurerm_logic_app_trigger_http_request - fix an issue that prevented importing existing resources due to empty trigger inputs (#​31433)
• azurerm_mssql_database - fix validation for min_capacity and auto_pause_delay_in_minutes (#​31690)

v4.58.0

Compare Source

FEATURES:

• New Data Source: azurerm_network_security_perimeter (#​31356)
• New Data Source: azurerm_network_security_perimeter_profile (#​31356)
• New Resource: azurerm_network_security_perimeter (#​31356)
• New Resource: azurerm_network_security_perimeter_access_rule (#​31356)
• New Resource: azurerm_network_security_perimeter_association (#​31356)
• New Resource: azurerm_network_security_perimeter_profile (#​31356)
• New List Resource: azurerm_resource_group (#​31270)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20251219.1184026 (#​31397)
• azurerm_backup_policy_file_share - add support for backup_tier and snapshot_retention_in_days (#​29243)
• azurerm_cosmosdb_cassandra_cluster - version now supports 4.1 and 5.0 (#​31424)
• azurerm_function_app_flex_consumption - the maximum_instance_count property now allows values from 1 - 1000 (#​31392)
• azurerm_kubernetes_cluster - network_data_plane and network_policy now support updating to cilium (#​30958)
• azurerm_kusto_eventhub_data_connection - add support for retrieval_start_date (#​31445)
• azurerm_kusto_iothub_data_connection - add support for retrieval_start_date (#​31413)
• azurerm_kusto_script - add support for script_level and principal_permissions_action (#​31403)
• azurerm_linux_function_app - add support for 24 to site_config.application_stack.node_version (#​31098)
• azurerm_linux_function_app_slot - add support for 24 to site_config.application_stack.node_version (#​31098)
• azurerm_linux_web_app - add support for 24-lts to site_config.application_stack.node_version (#​31098)
• azurerm_linux_web_app_slot - add support for 24-lts to site_config.application_stack.node_version (#​31098)
• azurerm_mssql_managed_instance - increase storage_size_in_gb maximum to 32768 (#​31387)
• azurerm_netapp_volume_group_oracle - service_level now supports Flexible (#​31508)
• azurerm_netapp_volume_group_sap_hana - service_level now supports Flexible (#​31508)
• azurerm_network_manager_routing_configuration - add support for the route_table_usage_mode property (#​31463)
• azurerm_windows_function_app - add support for ~24 to site_config.application_stack.node_version (#​31248)
• azurerm_windows_function_app_slot - add support for ~24 to site_config.application_stack.node_version (#​31248)
• data.azurerm_container_registry - admin_password is now sensitive (#​31428)

BUG FIXES:

• azurerm_api_management - fix an issue that prevented updates to hostname_configuration.*.key_vault_certificate_id (#​31534)
• azurerm_api_management_custom_domain - fix an issue that prevented updates to [management|portal|developer_portal|scm|gateway].key_vault_certificate_id (#​31534)
• azurerm_container_app_custom_domain - no longer error during read when container app is deleted outside of Terraform (#​31523)
• azurerm_databricks_workspace - removed a legacy workaround that prevented apply operations from succeeding when managed_disk_cmk_rotation_to_latest_version_enabled and tags were updated simultaneously (#​31509)
• azurerm_storage_account - can now update a Storage Standard ZRS account (#​31431)
• clients - fix correlation id across many clients (#​31368)

v4.57.0

Compare Source

NOTE: This release removes the Mobile Network (azurerm_mobile_network*) resources and data sources due to Azure having retired the service

FEATURES:

• New Resource: azurerm_automation_runtime_environment (#​30991)

ENHANCEMENTS:

• azurerm_data_protection_backup_vault_customer_managed_key - the key_vault_key_id property now supports keys from a Managed HSM vault (#​31365)
• azurerm_kubernetes_cluster - support for the node_provisioning_profile block (#​30517)
• azurerm_log_analytics_cluster_customer_managed_key - the key_vault_key_id property now supports keys from a Managed HSM vault (#​31375)
• azurerm_mssql_database - the transparent_data_encryption_key_vault_key_id property now supports keys from a Managed HSM vault (#​31373)

BUG FIXES:

• azurerm_data_factory - fix ID parsing errors when customer_managed_key_identity_id is an empty string (#​28621)
• azurerm_eventhub - partition_count can now be updated for dedicated clusters (#​30993)
• azurerm_linux_function_app - fix panic when deployed without all required permissions (#​31344)

---

Configuration

📅 Schedule: Branch creation - On day 1 and 15 of the month ( * * 1,15 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.