Bump the terraform-all-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the terraform-all-dependencies group with 3 updates in the /infra/shared directory: auth0/auth0, hashicorp/aws and hashicorp/awscc.

Updates auth0/auth0 from 1.53.0 to 1.54.0

Release notes

Sourced from auth0/auth0's releases.

v1.54.0

FEATURES:

• resource/auth0_connection – Add cross_app_access_requesting_app block for Cross-App Access (XAA) on oidc/okta strategies (EA only) (#1648)
• resource/auth0_client – Add identity_assertion_authorization_grant block for the ID-JAG exchange used by XAA (EA only) (#1658)
• resource/auth0_connection – Add cross_app_access_resource_app block and expose the oidc_metadata option on samlp strategy (EA only) (#1658)
• resource/auth0_network_acl – Add auth0_managed attribute on match/not_match blocks for Auth0-curated blocklists (EA only) (#1653)
• resource/auth0_branding_theme – Add identifiers block for identifier input display settings (#1638)
• resource/auth0_tenant – Add country_codes block for phone identifier country-code filtering (#1638)

ENHANCEMENTS:

• provider – Emit a warning when a resource 404s on read (deleted outside Terraform) explaining it was removed from state (#1654)
• data-source/auth0_client – Add hide_client_secret to keep client_secret out of state (#1652)
• data-source/auth0_clients – Add hide_client_secret to keep client_secret out of state for all returned clients (#1652)
• resource/auth0_attack_protection – Surface missing Bot Detection/Captcha entitlements as non-fatal warnings (#1661)

NOTES:

• resource/auth0_client – Promote session_transfer.delegation from Early Access to general availability (#1659)

Changelog

Sourced from auth0/auth0's changelog.

v1.54.0

FEATURES:

• resource/auth0_connection – Add cross_app_access_requesting_app block for Cross-App Access (XAA) on oidc/okta strategies (EA only) (#1648)
• resource/auth0_client – Add identity_assertion_authorization_grant block for the ID-JAG exchange used by XAA (EA only) (#1658)
• resource/auth0_connection – Add cross_app_access_resource_app block and expose the oidc_metadata option on samlp strategy (EA only) (#1658)
• resource/auth0_network_acl – Add auth0_managed attribute on match/not_match blocks for Auth0-curated blocklists (EA only) (#1653)
• resource/auth0_branding_theme – Add identifiers block for identifier input display settings (#1638)
• resource/auth0_tenant – Add country_codes block for phone identifier country-code filtering (#1638)

ENHANCEMENTS:

• provider – Emit a warning when a resource 404s on read (deleted outside Terraform) explaining it was removed from state (#1654)
• data-source/auth0_client – Add hide_client_secret to keep client_secret out of state (#1652)
• data-source/auth0_clients – Add hide_client_secret to keep client_secret out of state for all returned clients (#1652)
• resource/auth0_attack_protection – Surface missing Bot Detection/Captcha entitlements as non-fatal warnings (#1661)

NOTES:

• resource/auth0_client – Promote session_transfer.delegation from Early Access to general availability (#1659)

Commits

• 5eb57cc Add Changelog for v1.54.0 (#1663)
• efed12c chore(deps): bump go-auth0 to v1.46.0 (#1662)
• e9b2b18 feat: add Cross App Access support to connection and client (EA only) (#1658)
• f89a63a feat: surface a helpful warning when a resource 404s during read (#1654)
• 12d110f feat: auth0_managed curated blocklist support (#1653)
• 11e51ea feat: tfp bot detection entitlement (EA only) (#1661)
• 42f4d7c feat: tfp xaa support added (EA Only) (#1648)
• 769584a feat: optionally suppress client secret in data sources (#1652)
• 523bce8 docs: promote session_transfer delegation on client to GA (#1659)
• 6aa5adb chore(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 (#1657)
• Additional commits viewable in compare view

Updates hashicorp/aws from 6.56.0 to 6.58.0

Release notes

Sourced from hashicorp/aws's releases.

v6.58.0

6.58.0 (August 5, 2026)

FEATURES:

• New List Resource: aws_mailmanager_rule_set (#49257)
• New List Resource: aws_prometheus_anomaly_detector (#49139)
• New List Resource: aws_prometheus_scraper (#47466)
• New List Resource: aws_prometheus_scraper_logging_configuration (#47466)
• New List Resource: aws_resiliencehubv2_policy (#48321)
• New Resource: aws_mailmanager_rule_set (#49257)
• New Resource: aws_prometheus_anomaly_detector (#49139)
• New Resource: aws_prometheus_scraper_logging_configuration (#47466)
• New Resource: aws_resiliencehubv2_policy (#48321)

ENHANCEMENTS:

• resource/aws_api_gateway_rest_api: Add configurable resource timeouts. (#49205)
• resource/aws_dx_connection: Add state attribute (#42150)
• resource/aws_ecs_capacity_provider: Add RESERVED as a valid value for managed_instances_provider.instance_launch_template.capacity_option_type (#48816)
• resource/aws_ecs_capacity_provider: Add local_storage_configuration attribute to managed_instances_provider.instance_launch_template (#47513)
• resource/aws_ecs_capacity_provider: Add managed_instances_provider.instance_launch_template.capacity_reservations argument (#48816)
• resource/aws_glue_catalog_table_optimizer: Add configuration.compaction_configuration argument (#43868)
• resource/aws_prometheus_scraper: Add Resource Identity support (#47466)
• resource/aws_prometheus_scraper: Add destination.cloudwatch configuration block for CloudWatch Metrics destination support (#49088)

BUG FIXES:

• resource/aws_api_gateway_rest_api: Wait for the REST API to reach an available state on create and update, and to be fully deleted on delete, preventing intermittent BadRequestException: There is already an update in progress errors (#49205)
• resource/aws_appstream_stack: Fix embed_host_domains not being sent to the AWS API on update, which caused a permanent plan diff when the argument was added or changed on an existing stack (#49015)
• resource/aws_bedrockagent_data_source: Fix validator incorrectly requiring bedrock_data_automation_configuration when parsing_strategy = "BEDROCK_DATA_AUTOMATION", a regression introduced in v6.56.0 (#49111)
• resource/aws_bedrockagentcore_agent_runtime: Allow : (colon) in the match_value_string and match_value_string_list attributes of authorizer_configuration.custom_jwt_authorizer.custom_claim.authorizing_claim_match_value.claim_match_value (#48437)
• resource/aws_bedrockagentcore_memory_strategy: Fix Value Conversion Error ... Received null value, however the target type cannot handle null values errors (#49188)
• resource/aws_bedrockagentcore_memory_strategy: Fix too many results: wanted 1, got 2 error when creating or updating a strategy on a memory that already has another strategy of a different type (#49250)
• resource/aws_bedrockagentcore_memory_strategy: Replace resource rather than erroring when configuration.consolidation, configuration.extraction, or configuration.reflection blocks are removed (#49188)
• resource/aws_ecs_service: Fix sigint_rollback falsely rolling back healthy deployments during wait_for_steady_state (#49077)
• resource/aws_ecs_service: Prevent non-EBS deployment volume configurations from being written to state (#48947)
• resource/aws_elasticache_replication_group: Fix perpetual diff when changes are pending for the next maintenance window (apply_immediately = false) (#48246)
• resource/aws_glue_catalog_table: Fix InvalidInputException: StorageDescriptor is not allowed error when creating or updating ATHENA-dialect views (#49156)
• resource/aws_glue_catalog_table: Fix InvalidInputException error when creating or updating SPARK-dialect views without an explicit storage_descriptor block (#49156)
• resource/aws_glue_catalog_table: Fix perpetual diff on view_definition.representations fields (validation_connection, view_original_text, view_expanded_text) that AWS Glue does not echo back for validated ATHENA views (#49156)
• resource/aws_iam_user: Retry destroying users when there are conflicts, and ignore non-errors during destroy (#49260)
• resource/aws_route53recoverycontrolconfig_safety_rule: Fix crash when the create operation returns an error (#49155)
• resource/aws_ssm_parameter: Correctly imports when passing ARN value. (#49134)
• resource/aws_ssm_parameter: Prevents errors when importing specific version. (#49134)

v6.57.1

6.57.1 (July 29, 2026)

NOTES:

... (truncated)

Changelog

Sourced from hashicorp/aws's changelog.

6.58.0 (August 5, 2026)

FEATURES:

• New List Resource: aws_mailmanager_rule_set (#49257)
• New List Resource: aws_prometheus_anomaly_detector (#49139)
• New List Resource: aws_prometheus_scraper (#47466)
• New List Resource: aws_prometheus_scraper_logging_configuration (#47466)
• New List Resource: aws_resiliencehubv2_policy (#48321)
• New Resource: aws_mailmanager_rule_set (#49257)
• New Resource: aws_prometheus_anomaly_detector (#49139)
• New Resource: aws_prometheus_scraper_logging_configuration (#47466)
• New Resource: aws_resiliencehubv2_policy (#48321)

ENHANCEMENTS:

• resource/aws_api_gateway_rest_api: Add configurable resource timeouts. (#49205)
• resource/aws_dx_connection: Add state attribute (#42150)
• resource/aws_ecs_capacity_provider: Add RESERVED as a valid value for managed_instances_provider.instance_launch_template.capacity_option_type (#48816)
• resource/aws_ecs_capacity_provider: Add local_storage_configuration attribute to managed_instances_provider.instance_launch_template (#47513)
• resource/aws_ecs_capacity_provider: Add managed_instances_provider.instance_launch_template.capacity_reservations argument (#48816)
• resource/aws_glue_catalog_table_optimizer: Add configuration.compaction_configuration argument (#43868)
• resource/aws_prometheus_scraper: Add Resource Identity support (#47466)
• resource/aws_prometheus_scraper: Add destination.cloudwatch configuration block for CloudWatch Metrics destination support (#49088)

BUG FIXES:

• resource/aws_api_gateway_rest_api: Wait for the REST API to reach an available state on create and update, and to be fully deleted on delete, preventing intermittent BadRequestException: There is already an update in progress errors (#49205)
• resource/aws_appstream_stack: Fix embed_host_domains not being sent to the AWS API on update, which caused a permanent plan diff when the argument was added or changed on an existing stack (#49015)
• resource/aws_bedrockagent_data_source: Fix validator incorrectly requiring bedrock_data_automation_configuration when parsing_strategy = "BEDROCK_DATA_AUTOMATION", a regression introduced in v6.56.0 (#49111)
• resource/aws_bedrockagentcore_agent_runtime: Allow : (colon) in the match_value_string and match_value_string_list attributes of authorizer_configuration.custom_jwt_authorizer.custom_claim.authorizing_claim_match_value.claim_match_value (#48437)
• resource/aws_bedrockagentcore_memory_strategy: Fix Value Conversion Error ... Received null value, however the target type cannot handle null values errors (#49188)
• resource/aws_bedrockagentcore_memory_strategy: Fix too many results: wanted 1, got 2 error when creating or updating a strategy on a memory that already has another strategy of a different type (#49250)
• resource/aws_bedrockagentcore_memory_strategy: Replace resource rather than erroring when configuration.consolidation, configuration.extraction, or configuration.reflection blocks are removed (#49188)
• resource/aws_ecs_service: Fix sigint_rollback falsely rolling back healthy deployments during wait_for_steady_state (#49077)
• resource/aws_ecs_service: Prevent non-EBS deployment volume configurations from being written to state (#48947)
• resource/aws_elasticache_replication_group: Fix perpetual diff when changes are pending for the next maintenance window (apply_immediately = false) (#48246)
• resource/aws_glue_catalog_table: Fix InvalidInputException: StorageDescriptor is not allowed error when creating or updating ATHENA-dialect views (#49156)
• resource/aws_glue_catalog_table: Fix InvalidInputException error when creating or updating SPARK-dialect views without an explicit storage_descriptor block (#49156)
• resource/aws_glue_catalog_table: Fix perpetual diff on view_definition.representations fields (validation_connection, view_original_text, view_expanded_text) that AWS Glue does not echo back for validated ATHENA views (#49156)
• resource/aws_iam_user: Retry destroying users when there are conflicts, and ignore non-errors during destroy (#49260)
• resource/aws_route53recoverycontrolconfig_safety_rule: Fix crash when the create operation returns an error (#49155)
• resource/aws_ssm_parameter: Correctly imports when passing ARN value. (#49134)
• resource/aws_ssm_parameter: Prevents errors when importing specific version. (#49134)

6.57.1 (July 29, 2026)

NOTES:

• resource/aws_bedrockagentcore_memory_strategy: The memory_execution_role_arn attribute has been deprecated. Use the memory_execution_role_arn attribute on the aws_bedrockagentcore_memory resource instead (#49140)

... (truncated)

Commits

• 9f8360a Merge pull request #49293 from hashicorp/t-update-changelog-version
• 3ce48e1 update changelog and bump version
• 160e3b4 Update CHANGELOG.md for #49292
• 92003ba Merge pull request #49292 from hashicorp/fix-changelog-for-49260
• 6e5e81b update changelog
• 424fe4c Merge pull request #49211 from hashicorp/changie/add-action-option
• 86cbb98 Update CHANGELOG.md for #49216
• d662c3f Update docs/design-decisions/changie-migration.md
• a60ee3e Merge pull request #49216 from hashicorp/changie/add-per-version-changelogs
• 093e5dd Merge pull request #48246 from sukumaar/f-elasticache-rg-pending-changes-issue
• Additional commits viewable in compare view

Updates hashicorp/awscc from 1.94.0 to 1.95.0

Release notes

Sourced from hashicorp/awscc's releases.

v1.95.0

1.95.0 (July 30, 2026)

FEATURES:

• New Data Source: awscc_backup_legal_hold
• New Data Source: awscc_backup_legal_holds
• New Data Source: awscc_certificatemanager_certificate
• New Data Source: awscc_certificatemanager_certificates
• New Data Source: awscc_ec2_transit_gateway_policy_table_entry
• New Data Source: awscc_msk_channel
• New Data Source: awscc_msk_channels
• New Data Source: awscc_networkflowmonitor_monitor
• New Data Source: awscc_networkflowmonitor_monitors
• New Data Source: awscc_quicksight_agent
• New Data Source: awscc_quicksight_space
• New Data Source: awscc_scn_dataset
• New Data Source: awscc_scn_namespace
• New Data Source: awscc_servicediscovery_service
• New Data Source: awscc_servicediscovery_services
• New Data Source: awscc_ssm_ops_item
• New Data Source: awscc_ssm_ops_items
• New List Resource: awscc_backup_legal_hold
• New List Resource: awscc_certificatemanager_certificate
• New List Resource: awscc_msk_channel
• New List Resource: awscc_networkflowmonitor_monitor
• New List Resource: awscc_servicediscovery_service
• New List Resource: awscc_ssm_ops_item
• New Resource: awscc_backup_legal_hold
• New Resource: awscc_certificatemanager_certificate
• New Resource: awscc_ec2_transit_gateway_policy_table_entry
• New Resource: awscc_msk_channel
• New Resource: awscc_networkflowmonitor_monitor
• New Resource: awscc_quicksight_agent
• New Resource: awscc_quicksight_space
• New Resource: awscc_scn_dataset
• New Resource: awscc_scn_namespace
• New Resource: awscc_servicediscovery_service
• New Resource: awscc_ssm_ops_item

Changelog

Sourced from hashicorp/awscc's changelog.

1.95.0 (July 30, 2026)

FEATURES:

• New Data Source: awscc_backup_legal_hold
• New Data Source: awscc_backup_legal_holds
• New Data Source: awscc_certificatemanager_certificate
• New Data Source: awscc_certificatemanager_certificates
• New Data Source: awscc_ec2_transit_gateway_policy_table_entry
• New Data Source: awscc_msk_channel
• New Data Source: awscc_msk_channels
• New Data Source: awscc_networkflowmonitor_monitor
• New Data Source: awscc_networkflowmonitor_monitors
• New Data Source: awscc_quicksight_agent
• New Data Source: awscc_quicksight_space
• New Data Source: awscc_scn_dataset
• New Data Source: awscc_scn_namespace
• New Data Source: awscc_servicediscovery_service
• New Data Source: awscc_servicediscovery_services
• New Data Source: awscc_ssm_ops_item
• New Data Source: awscc_ssm_ops_items
• New List Resource: awscc_backup_legal_hold
• New List Resource: awscc_certificatemanager_certificate
• New List Resource: awscc_msk_channel
• New List Resource: awscc_networkflowmonitor_monitor
• New List Resource: awscc_servicediscovery_service
• New List Resource: awscc_ssm_ops_item
• New Resource: awscc_backup_legal_hold
• New Resource: awscc_certificatemanager_certificate
• New Resource: awscc_ec2_transit_gateway_policy_table_entry
• New Resource: awscc_msk_channel
• New Resource: awscc_networkflowmonitor_monitor
• New Resource: awscc_quicksight_agent
• New Resource: awscc_quicksight_space
• New Resource: awscc_scn_dataset
• New Resource: awscc_scn_namespace
• New Resource: awscc_servicediscovery_service
• New Resource: awscc_ssm_ops_item

Commits

• 31b140a Merge pull request #3257 from hashicorp/deps_otel
• 7856b02 bump opentelemetry deps
• 96594f8 Merge pull request #3256 from hashicorp/2026-07-30-schema-updates
• 1677c16 2026-07-30 Documentation; Update generated documentation
• 69837a4 2026-07-30 CloudFormation schemas in us-east-1; Generate Terraform data sourc...
• 007b630 2026-07-30 CloudFormation schemas in us-east-1; Generate Terraform resource s...
• 663b4ab 2026-07-30 CloudFormation schemas in us-east-1; New schemas
• a15d613 2026-07-30 CloudFormation schemas in us-east-1; Refresh existing schemas
• 5268fdb Merge pull request #3252 from hashicorp/upgrade_go_1.26.5
• 5a7ef31 upgrade go version to 1.26.5
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Note

Provider lock files have been automatically updated

This Dependabot PR modified infra/shared/versions.tf, so the corresponding
.terraform.lock.hcl files have been automatically updated and committed.

The changes are ready for review and merge.

Important

The actions have not been run on this PR since the lock files were updated, because GHA won't run push actions when the commit has been made by a bot.
To get the CI checks to run, you will need to amend the PR:

1. Check out the PR branch locally: git checkout dependabot/terraform/infra/shared/main/terraform-all-dependencies-06eb1b994e
2. Pull the latest changes: git pull
3. Make a no-op amendment: git commit --amend --no-edit
4. Push the amended commit: git push --force-with-lease

This will trigger the CI checks to run with the updated lock files.

Warning

If dependabot has attempted to modify the PR (i.e. if there are new dependency updates available), comment @dependabot recreate and it'll recreate the PR from scratch (allowing the lock files to be updated correctly).