chore(deps): update terraform azurerm to v4.14.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	~> 4.10.0 -> ~> 4.14.0
azurerm (source)	required_provider	minor	4.10.0 -> 4.14.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.14.0

Compare Source

BREAKING CHANGES:

• nginx - update api version to 2024-09-01-preview, this API no longer supports certain properties which have had to be deprecated in the provider for the upgrade (#​27776)
• Data Source: azurerm_nginx_configuration - the protected_file.content property will not be populated and has been deprecated (#​27776)
• Data Source: azurerm_nginx_deployment - the managed_resource_group property will not be populated and has been deprecated (#​27776)
• azurerm_network_function_collector_policy - the API doesn't preserve the ordering of the ipfx_ingestion.source_resource_ids property causing non-empty plans after apply, this property's type has been changed from a list to a set to prevent Terraform from continually trying to recreate this resource. If this property is being referenced anywhere you will need to update your config to convert it to a list before referencing it (#​27915)
• azurerm_nginx_deployment - the managed_resource_group property is no longer supported and has been deprecated (#​27776)

FEATURES:

• New Resource: azurerm_cognitive_account_rai_blocklist (#​28043)
• New Resource: azurerm_fabric_capacity (#​28080)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241206.1180327 (#​28211)
• nginx - update api version to 2024-11-01-preview (#​28227)
• azurerm_linux_function_app - add support for preview value 21 for java_version (#​26304)
• azurerm_linux_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#​28016)
• azurerm_linux_web_app - add support for preview value 21 for java_version (#​26304)
• azurerm_orchestrated_virtual_machine_scale_set - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#​28160)
• azurerm_search_service - add support for the network_rule_bypass_option property (#​28139)
• azurerm_windows_function_app - add support for preview value 21 for java_version (#​26304)
• azurerm_windows_function_app_slot - support 1.3 for site_config.minimum_tls_version and site_config.scm_minimum_tls_version (#​28016)
• azurerm_windows_virtual_machine - support hot patching for 2025-datacenter-azure-edition-core-smalldisk (#​28160)
• azurerm_windows_web_app - add support for preview value 21 for java_version (#​26304)

BUG FIXES:

• azurerm_management_group - fix regression where subscription ID can't be parsed correctly anymore (#​28228)

v4.13.0

Compare Source

ENHANCEMENTS:

• azurerm_cognitive_deployment - support for the dynamic_throttling_enabled property (#​28100)
• azurerm_key_vault_managed_hardware_security_module_key - the key_type property now supports oct-HSM (#​28171)
• azurerm_machine_learning_datastore_datalake_gen2 - can now be used with storage account in a different subscription (#​28123)
• azurerm_network_watcher_flow_log - target_resource_id supports subnets and network interfaces (#​28177)

BUG:

• Data Source: azurerm_logic_app_standard - update the identity property to support User Assigned Identities (#​28158)
• azurerm_cdn_frontdoor_origin_group - update validation of the interval_in_seconds property to match API behaviour (#​28143)
• azurerm_container_group - retrieve log analytics workspace key from config when updating resource (#​28025)
• azurerm_mssql_elasticpool - fix sku tier and family validation that prevented the creation of Hyperscale PRMS pools (#​28178)
• azurerm_search_service - the partition_count property can now be up to 3 when using basic sku (#​28105)

v4.12.0

Compare Source

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#​27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#​28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#​28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#​28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#​28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#​28137)
• containerapps - update api version to 2024-03-01 (#​28074)
• Search - update api version to 2024-06-01-preview (#​27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#​28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#​26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#​28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#​28114)

v4.11.0

Compare Source

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#​28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#​28083)
• New Resource: azurerm_eventgrid_namespace (#​27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#​28075)
• batch - upgrade api version to 2024-07-01 (#​27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#​27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#​28039)
• azurerm_arc_machine - add support for the identity and tags properties (#​27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#​27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#​28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#​26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#​27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#​28039)

BUG FIXES:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#​27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#​28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#​27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#​27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#​25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#​27828)

---

Configuration

📅 Schedule: Branch creation - "* * 1,15 * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.