chore(deps): update terraform azurerm to v4.27.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	~> 4.23.0 -> ~> 4.27.0
azurerm (source)	required_provider	minor	4.23.0 -> 4.27.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.27.0

Compare Source

FEATURES:

• New Resource: azurerm_eventgrid_partner_configuration (#​28676)

ENHANCEMENTS:

• dependencies: update go-azure-sdk to v0.20250409.1192141 (#​29307)
• dependencies: containerapps - update to API version 2025-01-01 (#​29296)
• dependencies: netapp - update to API version 2025-01-01 (#​29382)
• dependencies: operationalinsights - partial update to API version 2023-09-01 (#​29283)
• azurerm_cdn_frontdoor_origin - support managedEnvironments value for private_link.target_type (#​28239)
• azurerm_cdn_frontdoor_origin - add support for the web_secondary Gateway values in the private_link.target_type property (#​29380)
• azurerm_cognitive_deployment - add support for the Cohere value in the model.format property (#​29143)
• azurerm_container_app_environment: add support for cross subscription log_analytics_workspace_id (#​28740)
• azurerm_dev_center_project - add support for the identity property (#​29278)
• azurerm_dynatrace_tag_rules - the log_rule and metric_rule blocks and their properties are no longer ForceNew (#​29298)
• azurerm_monitor_data_collection_endpoint - add support for the metrics_ingestion_endpoint attribute (#​29292)
• azurerm_mysql_flexible_server - support for the log_on_disk_enabled property (#​28929)
• azurerm_subnet - add support for the Microsoft.PowerAutomate/hostedRpa value in the delegation.service_delegation.name property (#​29271)
• azurerm_subnet - add support for the Microsoft.Network/applicationGateways value in the delegation.service_delegation.name property (#​29361)
• azurerm_virtual_network - add support for the Microsoft.PowerAutomate/hostedRpa value in the subnet.delegation.service_delegation.name property (#​29271)
• azurerm_virtual_network - add support for the Microsoft.Network/applicationGateways value in the subnet.delegation.service_delegation.name property (#​29361)

BUG FIXES:

• provider: ensure x-ms-correlation-request-id header is only set once during list operations (#​28974)
• azurerm_app_configuration_feature - suppress casing differences for configuration_store_id to prevent resource recreation (#​29285)
• azurerm_app_configuration_key - suppress casing differences for configuration_store_id to prevent resource recreation (#​29285)
• azurerm_container_app_environment - updates are now made using the PATCH method, preventing errors due to missing properties in the request (#​29317)
• azurerm_eventhub_namespace - remove max items from network/ip rules as they can be increased above upon request (#​29333)
• azurerm_kusto_iothub_data_connection - update event_system_properties validation and documentation to be more flexible (#​29314)
• azurerm_linux_web_app - correctly read backup.schedule.start_time into state (#​29254)
• azurerm_netapp_volume - update validation for storage_quota_in_gb to allow values from 50 to 102400 (#​29341)
• azurerm_postgresql_flexible_server - downgrading version forces a new resource to be created (#​28559)
• azurerm_postgresql_flexible_server - downgrading storage_mb forces a new resource to be created (#​29309)
• azurerm_private_endpoint - private_dns_zone_group.private_dns_zone_ids can now be updated correctly (#​29329)
• azurerm_search_shared_private_link_service - add locks to prevent conflicts when creating multiple instances (#​29294)

v4.26.0

Compare Source

BREAKING CHANGES:

• feature: The Provider feature configuration item virtual_machines.graceful_shutdown is now not used due to a breaking change in the compute API. This feature block setting is now deprecated and ignored if set and will be removed in v5.0 of the provider. (#​29185)
• azurerm_linux_virtual_machine - the vm_agent_platform_updates_enabled property is now read-only due to a recent API breaking change (#​29211)
• azurerm_windows_virtual_machine - the vm_agent_platform_updates_enabled property is now read-only due to a recent API breaking change (#​29211)

FEATURES:

• New Data Source: azurerm_role_assignments (#​29214)

ENHANCEMENTS:

• dependencies: azurerm_sentinel_automation_rule - update to API version 2024-09-01 (#​29240)
• dependencies: devcenter - update to API version 2025-02-01 (#​29240)
• dependencies: recoveryservices - partial update to API version 2024-10-01 (#​29240)
• Data Source: azurerm_mssql_server - export the express_vulnerability_assessment_enabled property (#​29168)
• azurerm_dashboard_grafana - grafana_major_version is no longer ForceNew (#​29212)
• azurerm_data_factory_linked_service_sftp - add support for SSH authentication and Key Vault secret references (#​28690)
• azurerm_databricks_workspace - resources using managed resource groups that contain UC can now be deleted with the force_delete Provider Feature flag (#​29095)
• azurerm_mssql_server - add support for the express_vulnerability_assessment_enabled property (#​29168)
• azurerm_mysql_flexible_server - deprecate public_network_access_enabled in favor of public_network_access (#​28890)
• azurerm_netapp_volume - service_level can now be updated (#​29209)
• azurerm_nginx_deployment - frontend_public, frontend_private, and network_interface are no longer ForceNew (#​28577)
• azurerm_orchestrated_virtual_machine_scale_set - add support for the upgrade_mode and rolling_upgrade_policy properties (#​28354)
• azurerm_static_webapp - mark app_settings sensitive in schema (#​28689)

BUG FIXES:

• azurerm_linux_virtual_machine - license_type can now be updated to None (#​28786)
• azurerm_mysql_flexible_server - prevent a panic when customer_managed_key is nil (#​29225)
• azurerm_traffic_manager_nested_endpoint - remove Computed from priority property as these are assigned dynamically by the API (#​29217)

v4.25.0

Compare Source

ENHANCEMENTS:

• dependencies: go-azure-helpers - update to 0.72.0 (#​29206)
• dependencies: redisenterprise - update to API version 2024-10-01 (#​29073)
• dependencies: servicefabricmanaged - update to API version 2024-04-01 (#​29199)
• Data Source: azurerm_virtual_hub_connection - add support for the static_vnet_propagate_static_routes property (#​28560)
• azurerm_cosmosdb_account - add support for the DeleteAllItemsByPartitionKey value in the capabilities property (#​29126)
• azurerm_hdinsight_spark_cluster_resource - add support for the zones property (#​28149)
• azurerm_linux_function_app - add support for Python version 3.13 (#​29131)
• azurerm_linux_function_app_slot - add support for Python version 3.13 (#​29131)
• azurerm_linux_web_app - add support for Python version 3.13 (#​29131)
• azurerm_linux_web_app_slot - add support for Python version 3.13 (#​29131)
• azurerm_log_analytics_workspace - add support for the LACluster SKU (#​29137)
• azurerm_managed_disk - allow disk expansion without downtime for all storage_account_type (#​28730)
• azurerm_mssql_job_agent - add support for the identity and sku properties (#​29090)
• azurerm_network_manager - scope_accesses is now optional (#​28781)
• azurerm_oracle_cloud_vm_cluster - add support for the system_version property (#​29093)
• azurerm_powerbi_embedded - add support for A7 and A8 values for sku_name (#​29153)
• azurerm_virtual_hub_connection - add support for the static_vnet_propagate_static_routes property (#​28560)

BUG FIXES

• Data source: azurerm_container_app_environment - prevent an error when the log analytics workspace is in a different subscription (#​28647)
• azurerm_kubernetes_cluster_node_pool - fix issue where kubelet_disk_type couldn't be updated, updating this will now rotate the node pool (#​29135)
• azurerm_linux_virtual_machine - fix issue where a user assigned identity couldn't be removed from the resource (#​29157)
• azurerm_linux_virtual_machine_scale_set - fix issue where a user assigned identity couldn't be removed from the resource (#​29157)
• azurerm_log_analytics_workspace - prevent an error when the workspace is in a soft-deleted state and linked to a log analytics cluster (#​29137)
• azurerm_postgresql_flexible_server_virtual_endpoint - add a lock on the replica server to prevent a race condition (#​29071)
• azurerm_signalr_service - set location in payload when updating to prevent an API error (#​29184)
• azurerm_storage_account_queue_properties - prevent a panic when the storage account is removed out of band (#​28371)
• azurerm_storage_account_static_website - prevent a panic when the storage account is removed out of band (#​28371)
• azurerm_stream_analytics_job - update validation to notify users if content_storage_policy hasn't been correctly set to setup job_storage_account (#​29158)

v4.24.0

Compare Source

FEATURES:

• New Resource: azurerm_servicebus_namespace_customer_managed_key (#​28888)
• New Resource: azurerm_stream_analytics_job_storage_account (#​29113)
• New Resource: azurerm_web_pubsub_socketio (#​28992)

ENHANCEMENTS:

• dependencies: hashicorp/go-azure-sdk - update to v0.20250314.1213156 (#​29081)
• dependencies: loganalytics - partial update to API version 2023-03-01 (#​28977)
• dependencies: monitor - partial update to API version 2023-03-01 (#​28977)
• dependencies: postgresql - partial update to API version 2024-08-01 (#​28964)
• Data Source: azurerm_linux_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• Data Source: azurerm_linux_web_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• Data Source: azurerm_windows_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_ai_services - add support for the network_acls.bypass property (#​28569)
• azurerm_dashboard_grafana - add support for grafana_major_version 11 (#​28884)
• azurerm_kubernetes_cluster_node_pool - remove call to retrieve the parent cluster in the read (#​29088)
• azurerm_linux_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_linux_function_app - set pre_warmed_instance_count on create (#​28739)
• azurerm_linux_function_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_linux_web_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_linux_web_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_redis_cache - tighten validation for sku_name, family, capacity (#​29079)
• azurerm_windows_function_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_windows_function_app - set pre_warmed_instance_count on create (#​28739)
• azurerm_windows_function_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_windows_web_app - add support for node version ~22 (#​29082)
• azurerm_windows_web_app - add support for the virtual_network_backup_restore_enabled property (#​29012)
• azurerm_windows_web_app_slot - add support for node version ~22 (#​29082)
• azurerm_windows_web_app_slot - add support for the virtual_network_backup_restore_enabled property (#​29012)

BUG FIXES:

• azurerm_app_configuration - the encryption block can now be removed (#​28173)
• azurerm_cdn_frontdoor_origin_group - health_probe no longer resets during update unless specified (#​29094)
• azurerm_cognitive_account - customer_managed_key can now be removed (#​28368)
• azurerm_container_group - dns_name_label_reuse_policy is now marked as ForceNew (#​29040)
• azurerm_disk_encryption_set - prevent crash when retrieving Key Vault details when updating (#​29018)
• azurerm_express_route_circuit - fix issue where bandwidth_in_mbps isn't updated correctly (#​28822)
• azurerm_key_vault_secret - revert CustomizeDiff logic to recreate the resource when expiration_date is removed (#​28920)
• azurerm_kubernetes_cluster - fips_enabled can be updated by cycling the default node pool (#​29096)
• azurerm_monitor_diagnostic_setting - the enabled_log block can now be removed (#​28485)
• azurerm_mssql_database - fix validation for auto_pause_delay_in_minutes (#​28670)
• azurerm_mssql_server - fix an issue where the provider would incorrectly error during plan operations if administrator_login or administrator_login_password were added to lifecycle.ignore_changes (#​29107)

---

Configuration

📅 Schedule: Branch creation - On day 1 and 15 of the month ( * * 1,15 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.