chore(deps): update terraform azurerm to v4.73.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	~> 4.62.0 → ~> 4.73.0
azurerm (source)	required_provider	minor	4.62.0 → 4.73.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.73.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_mover_job_definition (#​32184)
• New List Resource: azurerm_storage_mover_project (#​32183)

ENHANCEMENTS:

• azurerm_cdn_frontdoor_firewall_policy - add support for the 429, 990, 991, 992, 993, 994, 995, 996, 997, 998, and 999 values in the custom_block_response_status_code property (#​32312)
• azurerm_container_app_job - add support for identity_id property to scaling.rules (#​31312)
• azurerm_databricks_workspace - add support for the values FEDRAMP_MODERATE, IRAP_PROTECTED, FEDRAMP_HIGH, FEDRAMP_IL5, ITAR_EAR, CYBER_ESSENTIAL_PLUS, CANADA_PROTECTED_B, ISMAP, HITRUST, K_FSI, GERMANY_C5, and GERMANY_TISAX in the compliance_security_profile_standards property (#​32163)

v4.72.0

Compare Source

FEATURES:

• New List Resource: azurerm_subnet (#​32236)

ENHANCEMENTS:

• dependencies: update go to 1.25.10 (#​32344)
• dependencies: loganalytics - update to API version 2023-09-01 (#​32280)
• azurerm_data_factory_linked_service_data_lake_storage_gen2 - set schema fields service_principal_key and storage_account_key as sensitive (#​32284)
• azurerm_frontdoor_custom_domain - add support for the cipher_suite property (#​30997)
• azurerm_log_analytics_workspace - add support for the 10000, 25000 and 50000 values in the reservation_capacity_in_gb_per_day property (#​32322)
• azurerm_machine_learning_compute_cluster - set schema field ssh.0.admin_password as sensitive (#​32293)
• azurerm_subnet - add support for the Microsoft.MessagingConnectors/connectors value in the delegation.service_delegation.name property (#​32305)
• azurerm_virtual_network - add support for the Microsoft.MessagingConnectors/connectors value in the subnet.delegation.service_delegation.name property (#​32305)
• cosmos - migrate all resources and data sources to go-azure-sdk (#​32066)

BUG FIXES:

• azurerm_frontdoor_custom_domain - fixed an eventual consistency bug in creation (#​30997)

v4.71.0

Compare Source

FEATURES:

• New Data Source: azurerm_cdn_frontdoor_security_policy (#​31957)

ENHANCEMENTS:

• dependencies: storage - update API version to 2025-08-01 (#​32218)
• azurerm_bot_channel_directline_speech - the cognitive_service_access_key and cognitive_service_location properties are now optional (#​30243)
• azurerm_eventhub - add support for storage_authentication_type and storage_authentication_id properties in the capture_description.destination block (#​31265)
• azurerm_kubernetes_cluster - the container_log_max_lines property has been renamed to container_log_max_files (#​31721)
• azurerm_kubernetes_cluster_node_pool - the container_log_max_lines property has been renamed to container_log_max_files (#​31721)
• azurerm_storage_account - add support for the Smart value to access_tier (#​32218)
• azurerm_storage_account - add support for the All value to allowed_copy_scope (#​32218)
• List Resource: azurerm_storage_account - skip resource data retrieval when include_resource is false (#​31898)

BUG FIXES:

• azurerm_mssql_managed_database - skip retrieval of long_term_retention_policy when the database is in a stopped state (#​32246)
• azurerm_mssql_managed_database - fix an issue that caused 400 errors when users did not specify long_term_retention_policy.yearly_retention (#​32246)
• azurerm_mssql_server - fix resource update to conform with enforcement of "AD Auth Only" policy (#​31901)
• azurerm_network_security_rule and azurerm_network_security_group - add case-insensitive handling for application security group IDs (#​30913)

v4.70.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_mover (#​32165)
• New List Resource: azurerm_storage_mover_agent (#​32166)
• New List Resource: azurerm_storage_mover_source_endpoint (#​32167)

ENHANCEMENTS:

• dependencies: azurerm_synapse_managed_private_endpoint - update to API version 2021-06-01-preview (#​32153)
• dependencies: cosmosdb/mongorbacs - update to API version 2025-10-15 (#​32164)
• dependencies: giovanni update to v0.29.0 (#​32188)
• dependencies: go-azure-sdk - update to v0.20260417.1195006 (#​31974)
• azurerm_backup_policy_vm - add support for the consistency_type property (#​32203)
• azurerm_bot_channel_directline - export the extension_key_1 and extension_key_2 properties (#​30242)
• azurerm_bot_web_app - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#​30459)
• azurerm_dashboard_grafana- add support for the sku_size property (#​31047)
• azurerm_key_vault_key - migrate to go-azure-sdk (#​31806)
• azurerm_machine_learning_datastore_blobstorage - improved storage account retrieval (#​32222)
• azurerm_nat_gateway_public_ip_association - add support for IPv6 public IP addresses (#​32176)
• azurerm_nat_gateway_public_ip_prefix_association - add support for IPv6 public IP prefixes (#​32195)
• azurerm_postgresql_flexible_server - add support for confidential compute server type SKU (#​32209)
• azurerm_synapse_managed_private_endpoint - migrate to go-azure-sdk (#​32153)
• azurerm_synapse_managed_private_endpoint - add support for the fully_qualified_domain_names property (#​32153)

BUG FIXES:

• Data Source: azurerm_storage_account_sas - fix a regression that caused missing permissions in the sas property (#​32234)
• azurerm_container_app_environment - fix potential nil pointer dereferences to prevent panics (#​32198)

v4.69.0

Compare Source

FEATURES:

• New List Resource: azurerm_traffic_manager_profile (#​31977)
• New List Resource: azurerm_web_pubsub (#​32126)
• New Resource: azurerm_automation_runtime_environment_package (#​32022)
• New Resource: azurerm_container_app_environment_managed_certificate (#​31137)

ENHANCEMENTS:

• dependencies: Go - update to 1.25.9 (#​32148)
• dependencies: kubernetesconfiguration/fluxconfiguration - update to API version 2025-04-01 (#​32080)
• Data Source: azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#​32108)
• Data Source: azurerm_storage_account_blob_container_sas - expand permissions block to include new fields (#​32149)
• Data Source: azurerm_storage_account_sas - expand permissions block to include new fields (#​32149)
• Data Source: azurerm_storage_share - export the rbac_scope_id property (#​31194)
• azurerm_bot_channels_registration - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#​30457)
• azurerm_cdn_frontdoor_route - the cdn_frontdoor_origin_ids property is now optional, allowing users to use the depends_on meta-argument instead (#​29350)
• azurerm_cognitive_deployment - the rai_policy_name property is now Optional + Computed as Azure returns a value when not set in the creation request (#​32131)
• azurerm_container_app - add support for identity_id property in custom_scale_rule block (#​29777)
• azurerm_key_vault - added object-name max length validation for all key vault entries (keys, secrets, certs, etc) (#​30665)
• azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#​32108)
• azurerm_kubernetes_flux_configuration - the git_repository.provider property now supports GitHub (#​32080)
• azurerm_monitor_scheduled_query_rules_alert_v2 - add support for email_subject within action block (#​32132)
• azurerm_storage_share - export the rbac_scope_id property (#​31194)

BUG FIXES:

• azurerm_linux_virtual_machine - parse os_managed_disk_id insensitively as Azure returns static segments cased inconsistently (#​32145)
• azurerm_private_dns_resolver_inbound_endpoint - the ip_configurations.private_ip_address, ip_configurations.private_ip_allocation_method, and ip_configurations.subnet_id properties are now ForceNew as the API does not allow updating these values (#​31088)

v4.68.0

Compare Source

FEATURES:

• New Data Source: azurerm_managed_devops_pool (#​28325)
• New List Resource: azurerm_private_dns_cname_record (#​31833)
• New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#​32044)
• New Resource: azurerm_managed_devops_pool (#​28325)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#​32112)
• Data Source: azurerm_bastion_host - export private_only_enabled (#​32042)
• Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#​30453)
• Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#​29303)
• azurerm_app_configuration_feature - Add support for custom_filter (#​30160)
• azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#​32042)
• azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#​31836)
• azurerm_key_vault - improve validation for the name field to prevent apply time errors (#​30453)
• azurerm_kubernetes_cluster - changing oidc_issuer_enabled from true to false now forces resource recreation as the API does not support this (#​32117)
• azurerm_kubernetes_cluster_node_pool - lock on subnet ID instead of subnet name to prevent unnecessary serialization (#​32001)
• azurerm_mssql_managed_instance - export the general_purpose_v2_enabled property (#​29303)
• azurerm_netapp_volume - add support for data_protection_advanced_ransomware (#​32099)
• azurerm_private_endpoint - the request_message and is_manual_connection properties are now validated at plan time (#​31705)
• azurerm_storage_account - the is_hns_enabled property is now validated at plan time (#​30536)

BUG FIXES:

• azurerm_databricks_workspace - fix the update behaviour for the access_connector_id property (#​32025)
• azurerm_function_app_flex_consumption - add locking on virtual_network_subnet_id to prevent conflicts if the same subnet is used for multiple deployments (#​32091)
• azurerm_kubernetes_cluster - fix an issue that prevented oidc_issuer_enabled = false from being set on create (#​32117)
• azurerm_kubernetes_cluster - fix a diff caused by Azure's default value for oidc_issuer_enabled changing in AKS 1.34+ (#​32117)
• azurerm_public_ip - domain_name_label, reverse_fqdn, domain_name_label_scope can now be set to empty (#​31699)
• azurerm_resource_group - fix parallelism issue in create_poller (#​32123)
• azurerm_storage_account - Remove TLS1_3 as a valid value for min_tls_version (#​32072)

v4.67.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_sync (#​31995)
• New Resource: azurerm_data_protection_backup_policy_data_lake_storage (#​31179)
• New Resource: azurerm_eventgrid_namespace_topic (#​30104)
• New Resource: azurerm_kubernetes_cluster_deployment_safeguard (#​31670)
• New Resource: azurerm_resource_provider_feature_registration (#​28303)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260326.1151219 (#​32047)
• dependencies: storage - update to API version 2025-06-01 (#​32071)
• Data Source: azurerm_application_gateway - export the backend, listener, and routing_rule properties (#​30376)
• Data Source: azurerm_logic_app_standard - export the site_config.ip_restriction_default_action property (#​31816)
• Data Source: azurerm_mssql_elasticpool - export the high_availability_replica_count property (#​31761)
• azurerm_application_gateway - add support for the backend, listener, and routing_rule properties (#​30376)
• azurerm_kubernetes_cluster - add support for the Ubuntu2404 OS SKU (#​32070)
• azurerm_kubernetes_cluster - improve validation for network_profile.0.advanced_networking (#​31497)
• azurerm_kubernetes_cluster_node_pool - add support for the Ubuntu2404 OS SKU (#​32070)
• azurerm_kusto_attached_database_configuration - add support for the database_name_override, database_name_prefix, sharing.functions_to_exclude, and sharing.functions_to_include properties (#​31470)
• azurerm_logic_app_standard - add support for the site_config.scm_ip_restriction_default_action property (#​32043)
• azurerm_logic_app_standard - add support for the site_config.ip_restriction_default_action property (#​31816)
• azurerm_mssql_elasticpool - add support for the high_availability_replica_count property (#​31761)
• azurerm_nat_gateway - add support for the StandardV2 SKU (#​31197)
• azurerm_public_ip - add support for the StandardV2 SKU (#​31197)
• azurerm_public_ip_prefix - add support for the StandardV2 SKU (#​31197)

BUG FIXES:

• azurerm_backup_policy_vm - fix the Update function to properly set all timestamps when any of backup.time, retention_daily, retention_weekly, retention_montly, or retention_yearly change (#​31969)
• azurerm_cosmosdb_account - fix an API error caused by backup.interval_in_minutes and backup.retention_in_hours being set to 0 in the API payload when not defined in config (#​32037)
• azurerm_machine_learning_compute_instance - fix setting node_public_ip_enabled into state (#​31725)
• azurerm_search_service - mark query_keys.key value as sensitive (#​32053) (#​32053)

v4.66.0

Compare Source

FEATURES:

• New Data Source: azurerm_container_app_environment_storage (#​32007)
• New List Resource: azurerm_video_indexer_account (#​31978)

ENHANCEMENTS:

• dependencies: Go - upgrade to version 1.25.8 (#​31907)
• azurerm_bastion_host - Upgrade API to 2025-01-01 (#​32030)
• azurerm_kubernetes_cluster - add support for migration from Azure or Kubenet CNI to Azure CNI Overlay (#​30959)
• azurerm_search_service: add support for endpoint attribute (#​32010)
• cognitive_account_rai_blocklist_resource - add support for the tags property (#​31871)

BUG FIXES:

• azurerm_container_app - fix failure_count_threshold validation values for container app probes (#​31989)
• azurerm_linux_function_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)
• azurerm_linux_web_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)
• azurerm_log_analytics_workspace - preserve default value of local_authentication_enabled (#​32004)
• azurerm_windows_function_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)
• azurerm_windows_web_app_slot - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice slot (#​32008)

v4.65.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260312.1165223
• azurerm_federated_identity_credential - the parent_id property has been renamed to user_assigned_identity_id (#​31921)

BUG FIXES:

• azurerm_kubernetes_cluster_node_pool - max_surge and max_unavailable are no longer required for spot node pools (#​31129)
• azurerm_log_analytics_workspace_table - fix validation for basic plan (#​30925)
• azurerm_managed_disk - fix nil pointer dereference when updating disk_access_id (#​31955)

v4.64.0

Compare Source

FEATURES:

• New List Resource: azurerm_storage_account_customer_managed_key (#​31805) (#​31805)

ENHANCEMENTS:

• dependencies: containerservice - partial upgrade to API version 2025-03-01 (#​31838)
• dependencies: containerservice - partial upgrade to API version 2025-10-01 (#​31401)
• dependencies: paloalto - update to API version 2025-10-08 (#​31570)
• Data Source: azurerm_kubernetes_cluster - export the bootstrap_profile and network_profile.outbound_type attributes (#​30983)
• azurerm_subnet - add support for the PureStorage.Block/storagePools value in the delegation.service_delegation.name property (#​31878)
• azurerm_virtual_network - add support for the PureStorage.Block/storagePools value in the subnet.delegation.service_delegation.name property (#​31878)

BUG FIXES:

• azurerm_purview_account - use correct API values for identity type (#​31905) (#​31905)
• azurerm_recovery_services_vault - skip request to modify soft delete state for vaults that are currently set to AlwaysON due to Azure's new secure-by-default policy
• azurerm_resource_provider_registration - add additional polling logic to prevent errors due to inconsistent API behaviour (#​31909)

v4.63.0

Compare Source

FEATURES:

• provider: added the enhanced_validation block with the locations and resource_providers properties to replace the ARM_PROVIDER_ENHANCED_VALIDATION environment variable (#​31678)

ENHANCEMENTS:

• azurerm_site_recovery_replicated_vm- add support for PremiumV2_LRS in the target_replica_disk_type property (#​31890)

BUG FIXES:

• azurerm_analysis_services_server - fix an issue that prevented creation of the resource with power_bi_service_enabled set to false and one or more ipv4_firewall_rule blocks defined (#​31870)
• azurerm_analysis_services_server - fix an issue that prevented adding or removing ipv4_firewall_rule blocks without also modifying power_bi_service_enabled (#​31870)
• azurerm_linux_web_app, azurerm_windows_web_app, azurerm_windows_function_app, azurerm_linux_function_app, azurerm_function_app_flex_consumption - fix API error when removing auth_settings_v2 configuration from a previously deployed appservice (#​31821) (#​31821)
• dependencies: dataprotection - downgrade to API version 2025-07-01 due to new validation introduced by Azure on 2025-09-01 that is blocking deployments (#​31877)

v4.62.1

Compare Source

BUG FIXES:

• azurerm_data_factory - fix removal of customer_managed_key_identity_id to no longer send an empty string to Azure, instead sending an empty object (#​31858)
• azurerm_data_factory_customer_managed_key - fix a persistent ID parsing error on user_assigned_identity_id when Azure returned an empty string (#​31858)
• azurerm_data_factory_customer_managed_key - fix removal of user_assigned_identity_id to no longer send an empty string to Azure, instead sending an empty object (#​31858)
• azurerm_linux_function_app_slot - fix an issue that prevented users from deploying a slot to a container-based function app (#​31842)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • On day 1 and 15 of the month (* * 1,15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.