chore(deps): update terraform tls to v4

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
tls (source)	required_provider	major	~>3.1 → ~> 4.0

---

Release Notes

hashicorp/terraform-provider-tls (tls)

v4.2.1

Compare Source

BUG FIXES:

• fix regression triggering a replace for certs due to max_path_length defaulting to -1 (#​737)

v4.2.0

Compare Source

FEATURES:

• ephemeral/tls_public_key: New ephemeral resource that extracts the public key from a private key. (#​668)

ENHANCEMENTS:

• data-source/tls_certificats: Added max_path_length attribute (#​301)
• resource/tls_self_signed_cert: Added optional max_path_length attribute (#​301)
• resource/tls_locally_signed_cert: Added optional max_path_length attribute (#​301)

v4.1.0

Compare Source

NOTES:

• New ephemeral resource tls_private_key now supports ephemeral values. (#​637)

FEATURES:

• ephemeral/tls_private_key: New ephemeral resource that generates a PEM formatted private key. When used in combination with a managed resource write-only attribute, Terraform will not store the private key data in the plan or state file. (#​637)

ENHANCEMENTS:

• tls_cert_request: Added optional email_address attribute (#​35)
• tls_self_signed_cert: Added optional email_address attribute (#​35)

v4.0.6

Compare Source

NOTES:

• all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#​552)

v4.0.5

Compare Source

NOTES:

• This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#​432)

v4.0.4

Compare Source

BUG FIXES:

• resource/tls_locally_signed_cert: Ensure terraform refresh updates state when cert is ready for renewal (#​278).
• resource/tls_self_signed_cert: Ensure terraform refresh updates state when cert is ready for renewal (#​278).

v4.0.3

Compare Source

BUG FIXES:

• resource/tls_locally_signed_cert: Prevented Config Read Error with Terraform version 1.3.0 and later
• resource/tls_self_signed_cert: Prevented Config Read Error with Terraform version 1.3.0 and later

v4.0.2

Compare Source

BUG FIXES:

• resource/tls_cert_request: Fix regexp in attribute plan modifier to correctly match PEM (#​255).
• resource/tls_locally_signed_cert: Fix regexp in attribute plan modifier to correctly match PEM (#​255).
• resource/tls_self_signed_cert: Fix regexp in attribute plan modifier to correctly match PEM (#​255).

v4.0.1

Compare Source

BUG FIXES:

• data-source/tls_certificate: Prevented empty list of object error with certificates attribute (#​244).

v4.0.0

Compare Source

NOTES:

• Provider has been re-written using the new terraform-plugin-framework (#​215).

• resource/tls_cert_request: private_key_pem attribute is now stored in the state as-is; first apply may result in an update-in-place (#​87, #​215).

• resource/tls_self_signed_cert: private_key_pem attribute is now stored in the state as-is; first apply may result in an update-in-place (#​87, #​215).

• resource/tls_locally_signed_cert: cert_request_pem, ca_private_key_pem and ca_cert_pem attributes are now stored in the state as-is; first apply may result in an update-in-place (#​87, #​215).

• resource/tls_private_key: private_key_pem_pkcs8, private_key_openssh and public_key_fingerprint_sha256 attributes are now retro-fitted, depending on version being updated; first apply may result in an update-in-place (#​210, #​225)).

ENHANCEMENTS:

• resource/tls_private_key: New attribute private_key_pem_pkcs8 (PKCS#8) (#​210, #​225)).

BREAKING CHANGES:

• resource/tls_cert_request: Attribute key_algorithm is now read-only, as it's inferred from private_key_pem (#​174, #​215).

• resource/tls_self_signed_cert: Attribute private_key_pem is stored (and returned) as-is (in accordance with guidelines) (#​87, #​215).

• resource/tls_self_signed_cert: Attribute key_algorithm is now read-only, as it's inferred from private_key_pem (#​174, #​215).

• resource/tls_self_signed_cert: Setting an unsupported value in allowed_uses attribute, will now return an error instead of just a warning (#​185, #​215).

• resource/tls_self_signed_cert: Attribute private_key_pem is stored (and returned) as-is (in accordance with guidelines) (#​87, #​215).

• resource/tls_locally_signed_cert: Attribute ca_key_algorithm is now read-only, as it's inferred from ca_private_key_pem (#​174, #​215).

• resource/tls_locally_signed_cert: Setting an unsupported value in allowed_uses attribute, will now return an error instead of just a warning (#​185, #​215).

• resource/tls_locally_signed_cert: Attributes cert_request_pem, ca_private_key_pem, ca_cert_pem are stored (and returned) as-is (in accordance with guidelines) (#​87, #​215).

• provider: Default value for proxy.from_env is now true, and relies upon httpproxy.FromEnvironment (#​224).

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.