Merge branch 'main' into list_identity-azurerm_monitor_activity_log_alert

Author: aayushsingh2502

.github/labeler-issue-triage.yml

@@ -330,7 +330,7 @@ service/spring:
   - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_(spring_cloud_accelerator\W+|spring_cloud_active_deployment\W+|spring_cloud_api_portal\W+|spring_cloud_api_portal_custom_domain\W+|spring_cloud_app\W+|spring_cloud_app_cosmosdb_association\W+|spring_cloud_app_dynamics_application_performance_monitoring\W+|spring_cloud_app_mysql_association\W+|spring_cloud_app_redis_association\W+|spring_cloud_application_insights_application_performance_monitoring\W+|spring_cloud_application_live_view\W+|spring_cloud_build_deployment\W+|spring_cloud_build_pack_binding\W+|spring_cloud_builder\W+|spring_cloud_certificate\W+|spring_cloud_configuration_service\W+|spring_cloud_container_deployment\W+|spring_cloud_custom_domain\W+|spring_cloud_customized_accelerator\W+|spring_cloud_dev_tool_portal\W+|spring_cloud_dynatrace_application_performance_monitoring\W+|spring_cloud_elastic_application_performance_monitoring\W+|spring_cloud_gateway\W+|spring_cloud_gateway_custom_domain\W+|spring_cloud_gateway_route_config\W+|spring_cloud_java_deployment\W+|spring_cloud_new_relic_application_performance_monitoring\W+|spring_cloud_service\W+|spring_cloud_storage\W+)((.|\n)*)###'
 
 service/storage:
-  - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_(managed_lustre_file_system|storage_account\W+|storage_account_blob_container_sas\W+|storage_account_customer_managed_key\W+|storage_account_local_user\W+|storage_account_network_rules\W+|storage_account_queue_properties\W+|storage_account_sas\W+|storage_account_static_website\W+|storage_blob\W+|storage_blob_inventory_policy\W+|storage_container\W+|storage_container_immutability_policy\W+|storage_containers\W+|storage_data_lake_gen2_filesystem\W+|storage_data_lake_gen2_path\W+|storage_encryption_scope\W+|storage_management_policy\W+|storage_object_replication\W+|storage_queue\W+|storage_share\W+|storage_share_directory\W+|storage_share_file\W+|storage_sync\W+|storage_sync_cloud_endpoint\W+|storage_sync_group\W+|storage_sync_server_endpoint\W+|storage_table\W+|storage_table\W+|storage_table_entities\W+|storage_table_entity\W+)((.|\n)*)###'
+  - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_(managed_lustre_file_system|storage_account\W+|storage_account_blob_container_sas\W+|storage_account_customer_managed_key\W+|storage_account_local_user\W+|storage_account_network_rules\W+|storage_account_queue_properties\W+|storage_account_sas\W+|storage_account_static_website\W+|storage_account_table_properties\W+|storage_blob\W+|storage_blob_inventory_policy\W+|storage_container\W+|storage_container_immutability_policy\W+|storage_containers\W+|storage_data_lake_gen2_filesystem\W+|storage_data_lake_gen2_path\W+|storage_encryption_scope\W+|storage_management_policy\W+|storage_object_replication\W+|storage_queue\W+|storage_share\W+|storage_share_directory\W+|storage_share_file\W+|storage_sync\W+|storage_sync_cloud_endpoint\W+|storage_sync_group\W+|storage_sync_server_endpoint\W+|storage_table\W+|storage_table\W+|storage_table_entities\W+|storage_table_entity\W+)((.|\n)*)###'
 
 service/storagemover:
   - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_storage_mover((.|\n)*)###'
@@ -363,4 +363,4 @@ service/vmware:
   - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_vmware_((.|\n)*)###'
 
 service/workloads:
-  - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_(chaos_studio_|container_connected_registry\W+|container_registry_cache_rule\W+|container_registry_credential_set\W+|container_registry_task\W+|container_registry_task_schedule_run_now\W+|container_registry_token_password\W+|kubernetes_cluster_deployment_safeguard\W+|kubernetes_cluster_extension\W+|kubernetes_cluster_trusted_access_role_binding\W+|kubernetes_fleet_manager\W+|kubernetes_fleet_member\W+|kubernetes_fleet_update_run\W+|kubernetes_fleet_update_strategy\W+|kubernetes_flux_configuration\W+|kubernetes_node_pool_snapshot\W+|workloads_sap_)((.|\n)*)###'
+  - '### (|New or )Affected Resource\(s\)\/Data Source\(s\)((.|\n)*)azurerm_(chaos_studio_|container_connected_registry\W+|container_registry_cache_rule\W+|container_registry_credential_set\W+|container_registry_task\W+|container_registry_task_schedule_run_now\W+|container_registry_token_password\W+|kubernetes_automatic_cluster\W+|kubernetes_cluster_deployment_safeguard\W+|kubernetes_cluster_extension\W+|kubernetes_cluster_trusted_access_role_binding\W+|kubernetes_fleet_manager\W+|kubernetes_fleet_member\W+|kubernetes_fleet_update_run\W+|kubernetes_fleet_update_strategy\W+|kubernetes_flux_configuration\W+|kubernetes_node_pool_snapshot\W+|workloads_sap_)((.|\n)*)###'

.github/workflows/pr-validation.yaml

@@ -331,11 +331,13 @@ jobs:
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version-file: ./.go-version
-      - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9
+      - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9
         with:
-          version: 'v2.4.0'
-          install-mode: 'goinstall'
-          args: -v ./...
+          version: 'v2.12.2'
+          # Use the default 'binary' install mode: it downloads the pre-built
+          # release binary instead of compiling golangci-lint from source
+          # (goinstall), which is significantly faster for a pinned version.
+          args: ./...
       - name: Guidance on failure
         if: failure()
         run: |

.github/workflows/teamcity-remove-label-on-commit.yaml

@@ -2,12 +2,13 @@
 name: TeamCity Remove Label on Commit
 
 on:
-  pull_request:
+  pull_request_target:
     types: [synchronize]
 
 permissions:
   contents: read
   pull-requests: write
+  issues: write
 
 jobs:
   apply-outdated-label:

.github/workflows/teamcity-run-tests-on-comment.yaml

@@ -110,7 +110,7 @@ jobs:
 
       - name: Cache tctest binary
         id: cache-tctest
-        uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+        uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: ~/go/bin/tctest
           key: tctest-${{ runner.os }}-${{ steps.tctest-version.outputs.version }}
@@ -150,18 +150,21 @@ jobs:
           # Initialize default values
           beta=false
           service=""
+          queue=false
 
           # Parse flags using getopts
           # Convert FLAGS_STRING to array for getopts
           eval set -- $FLAGS_STRING
 
-          while getopts ":bs:" opt; do
+          while getopts ":bqs:" opt; do
             case "$opt" in
               b) beta=true ;;
+              q) queue=true ;;
               s) service="$OPTARG" ;;
               *)
-                echo "Usage: /test [-b] [-s service_name]"
+                echo "Usage: /test [-b] [-q] [-s service_name]"
                 echo "  -b: Test beta version"
+                echo "  -q: Add the build to the top of the queue"
                 echo "  -s: Specify service name"
                 exit 1
                 ;;
@@ -171,18 +174,24 @@ jobs:
           echo "Running tctest for PR #${PR_NUMBER}"
           echo "PR commit SHA: ${PR_SHA}"
           echo "Beta version: ${beta}"
+          echo "Queue priority: ${queue}"
           echo "Service: ${service:-all}"
 
+          queue_flag=""
+          if [ "$queue" = true ]; then
+            queue_flag="-q"
+          fi
+
           # Run tctest with parsed flags
           if [ "$service" != "" ]; then
-            tctest pr ${PR_NUMBER} -c --reappend-split-character --service "$service" --properties "TRACKING_ID=${PR_SHA}"
+            tctest pr ${PR_NUMBER} -c ${queue_flag} --reappend-split-character --service "$service" --properties "TRACKING_ID=${PR_SHA}"
             if [ "$beta" = true ]; then
-              tctest pr ${PR_NUMBER} -c --reappend-split-character --service "$service" --buildtypeid TF_AzureRM_AZURERM_BETA_VERSION_SERVICE_PUBLIC --properties "TRACKING_ID=${PR_SHA}"
+              tctest pr ${PR_NUMBER} -c ${queue_flag} --reappend-split-character --service "$service" --buildtypeid TF_AzureRM_AZURERM_BETA_VERSION_SERVICE_PUBLIC --properties "TRACKING_ID=${PR_SHA}"
             fi
           else
-            tctest pr ${PR_NUMBER} -c --reappend-split-character --properties "TRACKING_ID=${PR_SHA}"
+            tctest pr ${PR_NUMBER} -c ${queue_flag} --reappend-split-character --properties "TRACKING_ID=${PR_SHA}"
             if [ "$beta" = true ]; then
-              tctest pr ${PR_NUMBER} -c --reappend-split-character --buildtypeid TF_AzureRM_AZURERM_BETA_VERSION_SERVICE_PUBLIC --properties "TRACKING_ID=${PR_SHA}"
+              tctest pr ${PR_NUMBER} -c ${queue_flag} --reappend-split-character --buildtypeid TF_AzureRM_AZURERM_BETA_VERSION_SERVICE_PUBLIC --properties "TRACKING_ID=${PR_SHA}"
             fi
           fi
 

.github/workflows/teamcity-test.yaml

@@ -22,12 +22,12 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5
+      - uses: actions/setup-java@1bcf9fb12cf4aa7d266a90ae39939e61372fe520 # v5
         with:
           distribution: zulu
           java-version: 17
           java-package: jdk
-      - uses: actions/cache@27d5ce7f107fe9357f9df03efb73ab90386fccae # v5
+      - uses: actions/cache@caa296126883cff596d87d8935842f9db880ef25 # v5
         with:
           path: ~/.m2/repository
           key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}

.golangci.yml

@@ -19,7 +19,6 @@ linters:
     - ineffassign
     - misspell
     - nilerr
-    - prealloc
     - predeclared
     - reassign
     - staticcheck
@@ -62,6 +61,7 @@ linters:
       - legacy
       - std-error-handling
     paths:
+      - vendor$
       - internal/services/.*/.*_gen.go$
       - /sdk/
       - third_party$
@@ -78,6 +78,7 @@ formatters:
   exclusions:
     generated: lax
     paths:
+      - vendor$
       - internal/services/.*/.*_gen.go$
       - /sdk/
       - third_party$

.teamcity/scripts/post_github_comment.sh

@@ -83,22 +83,34 @@ set_testing_label() {
 }
 
 # Fetch test results for this build from the TeamCity REST API
-TEST_RESULTS=$(curl -s \
+TEAMCITY_ERROR=""
+RAW_TEST_RESULTS_JSON=$(curl -sS -f \
   -H "Authorization: Bearer $TEAMCITY_TOKEN" \
   -H "Accept: application/json" \
-  "%teamcity.serverUrl%/app/rest/testOccurrences?locator=build:(id:$BUILD_ID),count:100000&fields=testOccurrence(name,status,duration)" \
-  | jq -r '.testOccurrence[]
+  "%teamcity.serverUrl%/app/rest/testOccurrences?locator=build:(id:$BUILD_ID),count:100000&fields=testOccurrence(name,status,duration)")
+
+if [ $? -ne 0 ] || [ -z "$RAW_TEST_RESULTS_JSON" ]; then
+  TEAMCITY_ERROR="Failed to fetch test results from TeamCity for build $BUILD_ID."
+  TEST_RESULTS=""
+else
+  TEST_RESULTS=$(echo "$RAW_TEST_RESULTS_JSON" | jq -r '(.testOccurrence // [])[]
       | select(.status == "SUCCESS" or .status == "FAILURE")
       | "\(.name)|\(if .status == "SUCCESS" then "PASS" else "FAIL" end)|\((.duration // 0) / 1000)|"')
 
+  if [ $? -ne 0 ]; then
+    TEAMCITY_ERROR="Failed to parse TeamCity test results for build $BUILD_ID."
+    TEST_RESULTS=""
+  fi
+fi
+
 PASS_COUNT=$(echo "$TEST_RESULTS" | awk -F'|' '{if($2=="PASS") print}' | wc -l | tr -d ' ')
 FAIL_COUNT=$(echo "$TEST_RESULTS" | awk -F'|' '{if($2=="FAIL") print}' | wc -l | tr -d ' ')
 TOTAL=$((PASS_COUNT + FAIL_COUNT))
 
 # Fetch main branch test results early to identify new failures for comment marking
 NEW_FAILURES=""
 MAIN_TEST_RESULTS=""
-if [ "$FAIL_COUNT" -gt 0 ]; then
+if [ -z "$TEAMCITY_ERROR" ] && [ "$FAIL_COUNT" -gt 0 ]; then
   echo "Fetching main branch test results for comparison..."
 
   # Get the latest successful build on main branch
@@ -146,7 +158,16 @@ BUILD_HOURS=$((BUILD_DURATION / 3600))
 BUILD_MINUTES=$(((BUILD_DURATION % 3600) / 60))
 BUILD_SECONDS=$((BUILD_DURATION % 60))
 
-COMMENT="Build: [$BUILD_ID](%teamcity.serverUrl%/viewLog.html?buildId=$BUILD_ID)
+if [ -n "$TEAMCITY_ERROR" ]; then
+  COMMENT="Build: [$BUILD_ID](%teamcity.serverUrl%/viewLog.html?buildId=$BUILD_ID)
+PR: #$PR_NUMBER
+
+**TeamCity Error:** $TEAMCITY_ERROR
+
+Unable to collect test details for this run. Please check TeamCity build logs.
+"
+else
+  COMMENT="Build: [$BUILD_ID](%teamcity.serverUrl%/viewLog.html?buildId=$BUILD_ID)
 PR: #$PR_NUMBER
 
 **Total:** $TOTAL
@@ -188,15 +209,16 @@ $1 == "" { next }
 }
 ')
 
-COMMENT+="$TABLE_ROWS"
+  COMMENT+="$TABLE_ROWS"
 
-COMMENT+="</table>
+  COMMENT+="</table>
 </details>
 "
+fi
 
 # Fetch PR author if there are failures
 AUTHOR_MESSAGE=""
-if [ "$FAIL_COUNT" -gt 0 ]; then
+if [ -z "$TEAMCITY_ERROR" ] && [ "$FAIL_COUNT" -gt 0 ]; then
   PR_AUTHOR=$(github_api_request "/pulls/${PR_NUMBER}" \
   | jq -r '.user.login')
 
@@ -280,9 +302,14 @@ curl -s -X POST \
   "https://api.github.com/repos/$GITHUB_REPO/issues/${PR_NUMBER}/comments" \
   -d "{\"body\": $(jq -Rs . <<< "$COMMENT")}"
 
-if APPLY_TESTING_LABELS_ENABLED; then
+if [ "$APPLY_TESTING_LABELS_ENABLED" = "true" ]; then
   echo "Applying labels..."
 
+  if [ -n "$TEAMCITY_ERROR" ]; then
+    echo "Skipping label application due to TeamCity error"
+    exit 0
+  fi
+
   # If no failures, apply teamcity-passed label
   if [ "$FAIL_COUNT" -eq 0 ]; then
     echo "No test failures detected"

CHANGELOG.md

@@ -1,3 +1,16 @@
+## 4.80.0 (July 02, 2026)
+
+ENHANCEMENTS:
+
+* dependencies: `go-azure-sdk` - update to `v0.20260629.1154953` ([#32691](https://github.com/hashicorp/terraform-provider-azurerm/issues/32691))
+* dependencies: `managedhsm` - update to API version `2026-02-01` ([#32377](https://github.com/hashicorp/terraform-provider-azurerm/issues/32377))
+* `azurerm_cdn_frontdoor_custom_domain` - add basic validation for the `host_name` property ([#32349](https://github.com/hashicorp/terraform-provider-azurerm/issues/32349))
+* `azurerm_cdn_frontdoor_custom_domain` - improve validation for additional `host_name` constraints when `tls.certificate_type` is `ManagedCertificate` ([#32349](https://github.com/hashicorp/terraform-provider-azurerm/issues/32349))
+
+BUG FIXES:
+
+* `azurerm_machine_learning_datastore_fileshare` - fix 5.0 migration bug for the `storage_fileshare_id` property ([#32586](https://github.com/hashicorp/terraform-provider-azurerm/issues/32586))
+
 ## 4.79.0 (June 25, 2026)
 
 FEATURES:

examples/app-service-certificate/stored-in-keyvault/main.tf

@@ -13,10 +13,11 @@ resource "azurerm_resource_group" "example" {
 }
 
 resource "azurerm_key_vault" "example" {
-  name                = "${var.prefix}-key-vault"
-  resource_group_name = azurerm_resource_group.example.name
-  location            = azurerm_resource_group.example.location
-  tenant_id           = data.azurerm_client_config.current.tenant_id
+  name                       = "${var.prefix}-key-vault"
+  resource_group_name        = azurerm_resource_group.example.name
+  location                   = azurerm_resource_group.example.location
+  tenant_id                  = data.azurerm_client_config.current.tenant_id
+  rbac_authorization_enabled = false
 
   sku_name = "standard"
 }