Update Terraform azurerm to v4.12.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	minor	4.10.0 -> 4.12.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v4.12.0

Compare Source

FEATURES:

• New Data Source: azurerm_mssql_managed_database (#​27026)

BUG FIXES:

• azurerm_application_insights_api_key - fix condition that nil checks the list of available API keys to prevent an indefinate loop when keys created outside of Terraform are present (#​28037)
• azurerm_data_factory_linked_service_azure_sql_database - send tenant_id only if it has been specified (#​28120)
• azurerm_eventgrid_event_subscription - fix crash when flattening advanced_filter (#​28110)
• azurerm_virtual_network_gateway - fix crash issue when specifying root_certificate or revoked_certificate (#​28099)

ENHANCEMENTS:

• dependencies - update go-azure-sdk to v0.20241128.1112539 (#​28137)
• containerapps - update api version to 2024-03-01 (#​28074)
• Search - update api version to 2024-06-01-preview (#​27803)
• Data Source: azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• Data Source: azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_container_registry_task - add validation on cpu as well as on agent_pool_nameand agent_setting (#​28098)
• azurerm_databricks_workspace - add support for the enhanced_security_compliance block (#​26606)
• azurerm_eventhub - deprecate namespace_name and resource_group_name in favour of namespace_id (#​28055)
• azurerm_logic_app_standard - add support for the public_network_access property (#​27913)
• azurerm_search_service - add support for the customer_managed_key_encryption_compliance_status property (#​27478)
• azurerm_cosmosdb_account - add support for value EnableNoSQLFullTextSearch in the capabilities.name property (#​28114)

v4.11.0

Compare Source

NOTES:

• New ephemeral resources azurerm_key_vault_certificate and azurerm_key_vault_secret now support ephemeral values

FEATURES:

• New Ephemeral Resource: azurerm_key_vault_certificate (#​28083)
• New Ephemeral Resource: azurerm_key_vault_secret (#​28083)
• New Resource: azurerm_eventgrid_namespace (#​27682)

ENHANCEMENTS:

• dependencies: update hashicorp/go-azure-sdk to v0.20241118.1115603 (#​28075)
• batch - upgrade api version to 2024-07-01 (#​27982)
• containerregistry - upgrade api version to 2023-11-01-preview (#​27983)
• azurerm_application_gateway - 1.1 is now accepted as a valid rule_set_version in the waf_configuration block (#​28039)
• azurerm_arc_machine - add support for the identity and tags properties (#​27987)
• azurerm_container_app - secret.name now accepts up to 253 characters and . (#​27935)
• azurerm_network_manager - scope_accesses now accepts Routing (#​28033)
• azurerm_network_watcher_flow_log - add support for the target_resource_id property (#​26015)
• azurerm_role_assignment - condition_version will be defaulted to 2.0 when condition has been set (#​27189)
• azurerm_subnet - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_virtual_network - Informatica.DataManagement/organizations is a valid service_delegation (#​27993)
• azurerm_web_application_firewall_policy - 1.1 is now accepted as a valid version for Microsoft_BotManagerRuleSet rule types (#​28039)

BUG FIXES:

• azurerm_api_management - public_ip_address_id is no longer required when zone has been set (#​27976)
• azurerm_api_management_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_api_management_api_diagnostic - raise and error when operation_name_format is used with and identity that is not applicationinsights (#​27630)
• azurerm_application_gateway - rewrite_rule_set can be supplied when using Basic sku (#​28011)
• azurerm_container_registry_token_password - correctly mark as gone if container registry token doesn't exist (#​27232)
• azurerm_kusto_cluster - allowed_fqdn and allowed_ip_ranges can now be set to empty lists (#​27529)
• azurerm_linux_function_app_slot - create content settings when using a consumpton plan (#​25412)
• azurerm_virtual_network_gatway - updating ip_configuration now recreates the resource (#​27828)

---

Configuration

📅 Schedule: Branch creation - "after 7am and before 11am every weekday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[hmcts-jenkins-j-to-z]

Plan Result (aat)

No changes. Your infrastructure matches the configuration.