Skip to content

chore: bump the all group with 4 updates#646

Merged
jamiezieziula merged 1 commit intomainfrom
dependabot/go_modules/all-1e712f1b4c
Mar 4, 2026
Merged

chore: bump the all group with 4 updates#646
jamiezieziula merged 1 commit intomainfrom
dependabot/go_modules/all-1e712f1b4c

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps the all group with 4 updates: github.com/BurntSushi/toml, github.com/hashicorp/terraform-plugin-framework, github.com/hashicorp/terraform-plugin-go and github.com/hashicorp/terraform-plugin-testing.

Updates github.com/BurntSushi/toml from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.6.0

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:

  • Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.

  • Using duplicate array keys would not give an error:

    arr = [1]
    arr = [2]
    

    This will now correctly give a "Key 'arr' has already been defined" error.

Commits
  • 5253492 Enable TOML 1.1 by default (#457)
  • e954445 Reject duplicate arrays (#455)
  • 6b16cbd Update toml-test test cases from upstream (#456)
  • 011fa2b Ensure constant format strings in wf calls
  • 4b439bf Remove itemNil
  • a473c12 Add test for out of range float64
  • b535ff8 Add some boring tests for lex.go
  • 6011ef0 Remove unreachable condition in lexTableNameStart
  • c8ca9e6 Remove unreachable condition
  • 1121f81 Make tomlv read from stdin
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-framework from 1.16.1 to 1.18.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-framework's releases.

v1.18.0

NOTES:

  • State store support is considered experimental and offered without compatibility promises until support for state_store in Terraform core is generally available. (#1259)

FEATURES:

  • framework: Add support for deprecation messages on attributes and blocks in the configuration schema (#1276)
  • statestore: New package for implementing state stores (#1259)
  • statestore/schema: New package for implementing state store schemas (#1259)

ENHANCEMENTS:

  • types/basetypes: Added Length() method for the ListValue type. (#1067)
  • types/basetypes: Added Length() method for the MapValue type. (#1067)
  • types/basetypes: Added Length() method for the SetValue type. (#1067)
  • types/basetypes: Added Length() method for the TupleValue type. (#1067)
  • provider: Added ProviderWithStateStores interface for implementing state stores (#1259)
  • provider: Added StateStoreData to ConfigureResponse, to pass provider-defined data to (statestore.StateStore).Initialize methods (#1262)

v1.17.0

NOTES:

  • In terraform-plugin-framework@v1.15.1, the UseStateForUnknown plan modifier was updated to preserve null values from prior state for unconfigured attributes. This updated version can cause plan inconsistency errors when used on child attributes of a nested attribute that expect UseStateForUnknown to keep the child attributes on new nested objects as <unknown> (known after apply). The new UseNonNullStateForUnknown plan modifier can now be used where child attributes are expecting this pre-1.15.1 behavior. (#1197)

FEATURES:

  • action/schema: Added WriteOnly schema field for action schemas. (#1233)
  • all: Added a new plan modifier for all types, UseNonNullStateForUnknown that preserves known, non-null, values for unconfigured attributes. This can be used when it is known that an unconfigured value will remain the same after the attribute is updated to a non-null value. (#1242)

BUG FIXES:

  • fwserver: update validation list result validation to check if an identity's values are all null (#1230)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-framework's changelog.

1.18.0 (February 27, 2026)

NOTES:

  • State store support is considered experimental and offered without compatibility promises until support for state_store in Terraform core is generally available. (#1259)

FEATURES:

  • framework: Add support for deprecation messages on attributes and blocks in the configuration schema (#1276)
  • statestore: New package for implementing state stores (#1259)
  • statestore/schema: New package for implementing state store schemas (#1259)

ENHANCEMENTS:

  • types/basetypes: Added Length() method for the ListValue type. (#1067)
  • types/basetypes: Added Length() method for the MapValue type. (#1067)
  • types/basetypes: Added Length() method for the SetValue type. (#1067)
  • types/basetypes: Added Length() method for the TupleValue type. (#1067)
  • provider: Added ProviderWithStateStores interface for implementing state stores (#1259)
  • provider: Added StateStoreData to ConfigureResponse, to pass provider-defined data to (statestore.StateStore).Initialize methods (#1262)

1.17.0 (December 02, 2025)

NOTES:

  • In terraform-plugin-framework@v1.15.1, the UseStateForUnknown plan modifier was updated to preserve null values from prior state for unconfigured attributes. This updated version can cause plan inconsistency errors when used on child attributes of a nested attribute that expect UseStateForUnknown to keep the child attributes on new nested objects as <unknown> (known after apply). The new UseNonNullStateForUnknown plan modifier can now be used where child attributes are expecting this pre-1.15.1 behavior. (#1197)

FEATURES:

  • action/schema: Added WriteOnly schema field for action schemas. (#1233)
  • all: Added a new plan modifier for all types, UseNonNullStateForUnknown that preserves known, non-null, values for unconfigured attributes. This can be used when it is known that an unconfigured value will remain the same after the attribute is updated to a non-null value. (#1242)

BUG FIXES:

  • fwserver: update validation list result validation to check if an identity's values are all null (#1230)
Commits
  • c271e91 Update changelog
  • ed8d66c feat: add deprecation messages for attributes and blocks in configschema (#1276)
  • 60c74cf build(deps): Bump github.com/hashicorp/terraform-plugin-go (#1280)
  • 7b6eb10 Add Validate for StateStore (#1272)
  • 9bd8a09 statestore: Add experimental notes + changelog (#1277)
  • aa52d37 build(deps): Bump github.com/hashicorp/copywrite in /tools (#1275)
  • 5024442 statestore: Implement workspace RPCs (GetStates, DeleteState) (#1273)
  • 43e0360 statestore: Implement Write for state stores (#1270)
  • e642d51 statestore: Implement Lock and Unlock for state stores (#1266)
  • c999217 Update Copywrite years to 2026 (#1268)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-go from 0.29.0 to 0.30.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-go's releases.

v0.30.0

NOTES:

  • tfprotov6: An upcoming release will require the StateStoreServer implementation as part of ProviderServer. (#594)
  • The state store protocol definitions are considered experimental and may change up until general availability in Terraform core. (#563)

FEATURES:

  • tfprotov6: Upgraded protocol v6 and added types to support the new state store type. (#563)
  • tfprotov5/tfprotov6: Added DeprecationMessage field to SchemaAttribute and SchemaNestedAttribute (#600)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-go's changelog.

0.30.0 (February 24, 2026)

NOTES:

  • tfprotov6: An upcoming release will require the StateStoreServer implementation as part of ProviderServer. (#594)
  • The state store protocol definitions are considered experimental and may change up until general availability in Terraform core. (#563)

FEATURES:

  • tfprotov6: Upgraded protocol v6 and added types to support the new state store type. (#563)
  • tfprotov5/tfprotov6: Added DeprecationMessage field to SchemaAttribute and SchemaNestedAttribute (#600)
Commits
  • 7a04181 Update changelog
  • e000918 statestore: Add experimental notes + changelog (#604)
  • e392eb6 add deprecation_message to grpc proto and schema structs (#600)
  • 6f6f68a build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.1 (#603)
  • cd3252f build(deps): Bump github.com/hashicorp/copywrite in /tools (#602)
  • 83ff282 build(deps): Bump google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.5.1 to...
  • caa1250 build(deps): Bump github.com/hashicorp/copywrite from 0.24.0 to 0.24.2 in /to...
  • 14fe65e build(deps): Bump github.com/hashicorp/copywrite in /tools (#597)
  • 5ee985d build(deps): Bump actions/checkout in the github-actions group (#595)
  • b0a6aca tfprotov6: Add package docs for state store types, refactoring, add unit test...
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-testing from 1.13.3 to 1.14.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-testing's releases.

v1.14.0

FEATURES:

  • queryfilter: Introduces new queryfilter package with interface and built-in query check filtering functionality. (#573)
  • querycheck: Adds ExpectResourceDisplayName query check to assert a display name value on a filtered query result. (#573)
  • querycheck: Adds ExpectResourceKnownValues query check to assert resource values on a filtered query result. (#583)

ENHANCEMENTS:

  • helper/resource: Adds PostApplyFunc test step hook to run generic post-apply logic for plan/apply testing. (#566)

v1.14.0-beta.1

NOTES:

  • Adds an opt-in compatibility flag for config mode tests to unlock upgrade from v1.5.1 to latest for specific providers. (#496)
  • This beta pre-release adds a new query mode to support testing for list blocks which can be used with Terraform v1.14+ (#531)
  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. (#551)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-testing's changelog.

1.14.0 (December 03, 2025)

FEATURES:

  • queryfilter: Introduces new queryfilter package with interface and built-in query check filtering functionality. (#573)
  • querycheck: Adds ExpectResourceDisplayName query check to assert a display name value on a filtered query result. (#573)
  • querycheck: Adds ExpectResourceKnownValues query check to assert resource values on a filtered query result. (#583)

ENHANCEMENTS:

  • helper/resource: Adds PostApplyFunc test step hook to run generic post-apply logic for plan/apply testing. (#566)

1.14.0-beta.1 (September 18, 2025)

NOTES:

  • Adds an opt-in compatibility flag for config mode tests to unlock upgrade from v1.5.1 to latest for specific providers. (#496)
  • This beta pre-release adds a new query mode to support testing for list blocks which can be used with Terraform v1.14+ (#531)
  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. (#551)

1.13.2 (June 11, 2025)

BUG FIXES:

  • helper/resource: Updated ImportBlockWith* import state modes to use the ExpectNonEmpty field to allow non-empty import plans to pass successfully. (#518)
  • helper/resource: Fixed bug with import state mode where prior test config is not used for ConfigFile or ConfigDirectory (#516)

1.13.1 (May 21, 2025)

BUG FIXES:

  • echoprovider: Fixed bug where Terraform v1.12+ would return an error message indicating the provider doesn't support GetResourceIdentitySchemas. (#512)

1.13.0 (May 16, 2025)

NOTES:

  • reduced the volume of DEBUG-level logging to make it easier to visually scan debug output (#463)

FEATURES:

  • ImportState: Added support for testing plannable import via Terraform configuration. Configuration is used from the previous test step if available. Config, ConfigFile, and ConfigDirectory can also be used directly with ImportState if needed. (#442)
  • ImportState: Added ImportStateKind to control which method of import the ImportState test step uses. ImportCommandWithID (default, same behavior as today) , ImportBlockWithID, and ImportBlockWithResourceIdentity. (#442)
  • ImportState: Added ImportStateConfigExact to opt-out of new import config generation for plannable import. (#494)
  • statecheck: Added ExpectIdentityValueMatchesState state check to assert that an identity value matches a state value at the same path. (#503)
  • statecheck: Added ExpectIdentityValueMatchesStateAtPath state check to assert that an identity value matches a state value at different paths. (#503)

ENHANCEMENTS:

  • statecheck: Added ExpectIdentityValue state check, which asserts a specified attribute value of a managed resource identity in state. (#468)

... (truncated)

Commits
  • 1d62277 Update changelog
  • 4fba753 Update ExpectKnownValue query check to use queryfilter and accept multipl...
  • b176f5b Add queryfilter package and ExpectResourceDisplayName query check (#573)
  • f696cc9 build(deps): Bump the github-actions group with 3 updates (#581)
  • 1c1f594 build(deps): Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in /tools (#578)
  • d27b48d build(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#579)
  • 86601b0 build(deps): Bump golang.org/x/crypto from 0.43.0 to 0.44.0 (#575)
  • 3bb9253 Use tfsdklog.ContextWithTestLogging (#574)
  • 926d699 build(deps): Bump golangci/golangci-lint-action (#572)
  • 203e6cc query: refactor query test step logic into testStepNewQuery() (#568)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 4 updates: [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml), [github.com/hashicorp/terraform-plugin-framework](https://github.com/hashicorp/terraform-plugin-framework), [github.com/hashicorp/terraform-plugin-go](https://github.com/hashicorp/terraform-plugin-go) and [github.com/hashicorp/terraform-plugin-testing](https://github.com/hashicorp/terraform-plugin-testing).


Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.5.0...v1.6.0)

Updates `github.com/hashicorp/terraform-plugin-framework` from 1.16.1 to 1.18.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-framework/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-framework/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-framework@v1.16.1...v1.18.0)

Updates `github.com/hashicorp/terraform-plugin-go` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-go/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-go/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-go@v0.29.0...v0.30.0)

Updates `github.com/hashicorp/terraform-plugin-testing` from 1.13.3 to 1.14.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-testing/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-testing/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-testing@v1.13.3...v1.14.0)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/hashicorp/terraform-plugin-framework
  dependency-version: 1.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/hashicorp/terraform-plugin-go
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/hashicorp/terraform-plugin-testing
  dependency-version: 1.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@jamiezieziula
Copy link
Contributor

Dependency Update Review: #646

PR: #646
Title: chore: bump the all group with 4 updates
Author: dependabot[bot]
Created: 2026-03-01T03:23:08Z
Branch: dependabot/go_modules/all-1e712f1b4c


Summary

This PR updates 4 Go dependencies in the terraform-provider-prefect repository. All CI checks have passed successfully, including acceptance tests, builds across multiple platforms (macOS, Ubuntu, Windows), and linting. The updates include important HashiCorp Terraform plugin framework libraries and the TOML parser.

Recommendation: Approve and merge


Updated Dependencies

1. github.com/BurntSushi/toml: 1.5.0 → 1.6.0

Changes:

  • Enables TOML 1.1 by default
  • Fixes encoding of large floats as exponent syntax for correct round-tripping
  • Adds validation to reject duplicate array keys

Impact: Low risk. This is a minor version update with bug fixes and spec compliance improvements. The terraform-provider-prefect likely uses this for configuration parsing.

Release notes: https://github.com/BurntSushi/toml/releases/tag/v1.6.0


2. github.com/hashicorp/terraform-plugin-framework: 1.16.1 → 1.18.0

Changes:

v1.18.0 (February 27, 2026):

  • EXPERIMENTAL: New state store support (experimental, no compatibility promises)
  • Added deprecation message support for attributes and blocks
  • Added Length() methods for collection types (List, Map, Set, Tuple)
  • Added ProviderWithStateStores interface

v1.17.0 (December 02, 2025):

  • Added UseNonNullStateForUnknown plan modifier for pre-1.15.1 behavior
  • Added WriteOnly schema field for action schemas
  • Bug fix for validation list result validation

Impact: Medium risk. This is a two minor version jump with new features. The state store functionality is experimental and shouldn't affect existing code. The new deprecation message support and Length() methods are additive features. The UseNonNullStateForUnknown plan modifier addresses a behavior change from v1.15.1.

Note: The experimental state store features are clearly marked and won't impact stability.

Release notes: https://github.com/hashicorp/terraform-plugin-framework/releases


3. github.com/hashicorp/terraform-plugin-go: 0.29.0 → 0.30.0

Changes:

  • Upgraded protocol v6 with state store type support (experimental)
  • Added DeprecationMessage field to schema attributes
  • Note: Future release will require StateStoreServer implementation as part of ProviderServer

Impact: Low-Medium risk. This update aligns with the plugin-framework changes. The state store protocol is experimental. The deprecation message field is additive. The note about future breaking changes gives advance warning.

Release notes: https://github.com/hashicorp/terraform-plugin-go/releases/tag/v0.30.0


4. github.com/hashicorp/terraform-plugin-testing: 1.13.3 → 1.14.0

Changes:

  • New queryfilter package with query check filtering
  • New query checks: ExpectResourceDisplayName, ExpectResourceKnownValues
  • Added PostApplyFunc test step hook for post-apply logic
  • Updated to Go 1.24 (from beta notes)

Impact: Low risk. This is a test-only dependency update. New features are additive and improve testing capabilities. The Go 1.24 update is consistent with Go support policies.

Release notes: https://github.com/hashicorp/terraform-plugin-testing/releases/tag/v1.14.0


Indirect Dependencies

The PR also updates several indirect dependencies:

  • github.com/fatih/color: 1.16.0 → 1.18.0
  • github.com/hashicorp/hcl/v2: 2.23.0 → 2.24.0
  • github.com/hashicorp/terraform-plugin-sdk/v2: 2.37.0 → 2.38.1
  • github.com/mitchellh/go-wordwrap: 1.0.0 → 1.0.1
  • Various golang.org/x/* packages (crypto, mod, net, sync, sys, text, tools)
  • google.golang.org/grpc: 1.75.1 → 1.79.1
  • google.golang.org/protobuf: 1.36.9 → 1.36.11
  • OpenTelemetry packages (auto/sdk, otel, metric, trace)

These are standard maintenance updates that come with the primary dependency updates.


CI Status

All checks passed:

  • Acceptance Tests - OSS: PASS (3m30s)
  • Build and Test (macos-latest): PASS (3m8s)
  • Build and Test (ubuntu-latest): PASS (1m4s)
  • Build and Test (windows-latest): PASS (2m5s)
  • Lint: PASS (1m1s)

Two checks are pending:

  • Acceptance Tests: PENDING (requires approval/secrets)
  • label: PENDING (workflow-related)

The core functionality tests have all passed successfully.


Files Changed

  • go.mod: Updated direct and indirect dependencies
  • go.sum: Updated checksums for all changed dependencies

No source code changes required.


Risk Assessment

Overall Risk: Low-Medium

Pros:

  • All core CI checks passing
  • Updates align with HashiCorp's Terraform plugin development roadmap
  • Experimental features are clearly marked and isolated
  • No breaking changes in current functionality
  • Bug fixes and improvements included

Cons:

  • Two minor version jumps in plugin-framework (1.16.1 → 1.18.0)
  • Experimental state store features could change (but won't affect current code)
  • Future breaking changes noted for plugin-go (advance warning given)

Recommendation

Approve and merge this PR.

Rationale:

  1. All tests are passing across multiple platforms
  2. Updates are from trusted HashiCorp sources
  3. Changes are primarily additive features and bug fixes
  4. Experimental features won't impact existing functionality
  5. Keeps the provider aligned with latest Terraform plugin ecosystem
  6. Security and bug fixes in indirect dependencies

Post-merge actions:

  • Monitor for any issues in downstream usage
  • Review experimental state store features when they become stable
  • Plan for future StateStoreServer implementation requirement noted in plugin-go v0.30.0

1 similar comment
@jamiezieziula
Copy link
Contributor

Dependency Update Review: #646

PR: #646
Title: chore: bump the all group with 4 updates
Author: dependabot[bot]
Created: 2026-03-01T03:23:08Z
Branch: dependabot/go_modules/all-1e712f1b4c


Summary

This PR updates 4 Go dependencies in the terraform-provider-prefect repository. All CI checks have passed successfully, including acceptance tests, builds across multiple platforms (macOS, Ubuntu, Windows), and linting. The updates include important HashiCorp Terraform plugin framework libraries and the TOML parser.

Recommendation: Approve and merge


Updated Dependencies

1. github.com/BurntSushi/toml: 1.5.0 → 1.6.0

Changes:

  • Enables TOML 1.1 by default
  • Fixes encoding of large floats as exponent syntax for correct round-tripping
  • Adds validation to reject duplicate array keys

Impact: Low risk. This is a minor version update with bug fixes and spec compliance improvements. The terraform-provider-prefect likely uses this for configuration parsing.

Release notes: https://github.com/BurntSushi/toml/releases/tag/v1.6.0


2. github.com/hashicorp/terraform-plugin-framework: 1.16.1 → 1.18.0

Changes:

v1.18.0 (February 27, 2026):

  • EXPERIMENTAL: New state store support (experimental, no compatibility promises)
  • Added deprecation message support for attributes and blocks
  • Added Length() methods for collection types (List, Map, Set, Tuple)
  • Added ProviderWithStateStores interface

v1.17.0 (December 02, 2025):

  • Added UseNonNullStateForUnknown plan modifier for pre-1.15.1 behavior
  • Added WriteOnly schema field for action schemas
  • Bug fix for validation list result validation

Impact: Medium risk. This is a two minor version jump with new features. The state store functionality is experimental and shouldn't affect existing code. The new deprecation message support and Length() methods are additive features. The UseNonNullStateForUnknown plan modifier addresses a behavior change from v1.15.1.

Note: The experimental state store features are clearly marked and won't impact stability.

Release notes: https://github.com/hashicorp/terraform-plugin-framework/releases


3. github.com/hashicorp/terraform-plugin-go: 0.29.0 → 0.30.0

Changes:

  • Upgraded protocol v6 with state store type support (experimental)
  • Added DeprecationMessage field to schema attributes
  • Note: Future release will require StateStoreServer implementation as part of ProviderServer

Impact: Low-Medium risk. This update aligns with the plugin-framework changes. The state store protocol is experimental. The deprecation message field is additive. The note about future breaking changes gives advance warning.

Release notes: https://github.com/hashicorp/terraform-plugin-go/releases/tag/v0.30.0


4. github.com/hashicorp/terraform-plugin-testing: 1.13.3 → 1.14.0

Changes:

  • New queryfilter package with query check filtering
  • New query checks: ExpectResourceDisplayName, ExpectResourceKnownValues
  • Added PostApplyFunc test step hook for post-apply logic
  • Updated to Go 1.24 (from beta notes)

Impact: Low risk. This is a test-only dependency update. New features are additive and improve testing capabilities. The Go 1.24 update is consistent with Go support policies.

Release notes: https://github.com/hashicorp/terraform-plugin-testing/releases/tag/v1.14.0


Indirect Dependencies

The PR also updates several indirect dependencies:

  • github.com/fatih/color: 1.16.0 → 1.18.0
  • github.com/hashicorp/hcl/v2: 2.23.0 → 2.24.0
  • github.com/hashicorp/terraform-plugin-sdk/v2: 2.37.0 → 2.38.1
  • github.com/mitchellh/go-wordwrap: 1.0.0 → 1.0.1
  • Various golang.org/x/* packages (crypto, mod, net, sync, sys, text, tools)
  • google.golang.org/grpc: 1.75.1 → 1.79.1
  • google.golang.org/protobuf: 1.36.9 → 1.36.11
  • OpenTelemetry packages (auto/sdk, otel, metric, trace)

These are standard maintenance updates that come with the primary dependency updates.


CI Status

All checks passed:

  • Acceptance Tests - OSS: PASS (3m30s)
  • Build and Test (macos-latest): PASS (3m8s)
  • Build and Test (ubuntu-latest): PASS (1m4s)
  • Build and Test (windows-latest): PASS (2m5s)
  • Lint: PASS (1m1s)

Two checks are pending:

  • Acceptance Tests: PENDING (requires approval/secrets)
  • label: PENDING (workflow-related)

The core functionality tests have all passed successfully.


Files Changed

  • go.mod: Updated direct and indirect dependencies
  • go.sum: Updated checksums for all changed dependencies

No source code changes required.


Risk Assessment

Overall Risk: Low-Medium

Pros:

  • All core CI checks passing
  • Updates align with HashiCorp's Terraform plugin development roadmap
  • Experimental features are clearly marked and isolated
  • No breaking changes in current functionality
  • Bug fixes and improvements included

Cons:

  • Two minor version jumps in plugin-framework (1.16.1 → 1.18.0)
  • Experimental state store features could change (but won't affect current code)
  • Future breaking changes noted for plugin-go (advance warning given)

Recommendation

Approve and merge this PR.

Rationale:

  1. All tests are passing across multiple platforms
  2. Updates are from trusted HashiCorp sources
  3. Changes are primarily additive features and bug fixes
  4. Experimental features won't impact existing functionality
  5. Keeps the provider aligned with latest Terraform plugin ecosystem
  6. Security and bug fixes in indirect dependencies

Post-merge actions:

  • Monitor for any issues in downstream usage
  • Review experimental state store features when they become stable
  • Plan for future StateStoreServer implementation requirement noted in plugin-go v0.30.0

@jamiezieziula jamiezieziula merged commit 314c575 into main Mar 4, 2026
7 checks passed
@jamiezieziula jamiezieziula deleted the dependabot/go_modules/all-1e712f1b4c branch March 4, 2026 16:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant