Update Terraform cloudflare to v5.20.0

[renovate]

This PR contains the following updates:

Package	Type	Change	Pending
cloudflare (source)	required_provider	5.19.1 → 5.20.0	5.21.0

---

Release Notes

cloudflare/terraform-provider-cloudflare (cloudflare)

v5.20.0

Compare Source

Full Changelog: v5.19.1...v5.20.0

Features

• add 11 new resources/data-sources from staging-next (faab405)
• add acceptance tests for google_tag_gateway resource (f89e15f)
• add acceptance tests for virtual_networks on zero_trust_device_custom_profile (0625153)
• add state upgraders for email_security_block_sender + impersonation_registry (bc22174)
• chore: skip failing deployment_groups tests (614c726)
• chore: skip failing Go SDK tests for workers bulk secret update (69d2591)
• chore: use cloudflare-go v7.5.0 in Terraform build (fd1ab3e)
• chore: use released Go SDK for Terraform build (e31d0f5)
• chore: use released Go SDK for Terraform build (858be78)
• feat: add custom_csrs Stainless config (zone + account) (0c37d4f)
• feat: add custom_csrs Stainless config (zone + account) (408836e)
• feat: add resource library endpoints inside zero trust (8f71612)
• feat: move google_tag_gateway terraform resource from staging to production (b4f6126)
• feat(api): add zero_trust_device_deployment_groups resource (3de6e62)
• feat(api): add zero_trust_device_deployment_groups resource (c852320)
• feat(cache): add create (POST) method for smart_tiered_cache (26568ea)
• feat(cache): Update OPCR config to v2 endpoints (CACHE-13523) (278c81f)
• feat(dex): add device ISPs endpoint mapping (4c7ad2c)
• feat(dlp): add custom prompt topics endpoint [production] (7732fd9)
• feat(dlp): add custom prompt topics endpoint [production] (305dab6)
• feat(dlp): promote classification Stainless config to main (d8803bd)
• feat(flagship): add Flagship feature flag API resource mappings (2b149cf)
• feat(resource_sharing): add Terraform resource definitions for shares (d83b268)
• feat(snippets): add terraform id_property annotations for snippet and snippet_rules (1781d02)
• fix(iam): remove standalone_api from oauth_scopes subresource (8af9cd0)

Bug Fixes

• account_member: missing upgrade path from v5.0-v5.15 (d5c2a93)
• add no-drift plan checks and domain precheck (e4eaf52)
• add read_only field to identity provider migration target model (ac4ec4f)
• align migration target models + schemas to fix parity tests (f5ea496)
• authenticated_origin_pulls_settings: nil pointer panic (cf8099b)
• bot_management: restore content_bots_protection handling in model.go (d559753)
• derive zone name from Read instead of missing API field (0d5feef)
• dns_record: prevent FQDN normalization from swallowing name shortening changes (2131622)
• email_security_trusted_domains: align model JSON tags with Optional schema (5ee457f)
• email: missed Optional revert + email_security_trusted_domains state upgrader (8f3ddad)
• gracefully handle nil pointer dereference when config has attributes_flat during migration (589384d)
• leaked_credential_check_rule: skip tests that require product enablement (fc2d109)
• list: nullify empty nested objects to prevent inconsistent result after apply (7bcee4b)
• load_balancer_pool: accept early-v5 object-shape state at schema_version=0 (23050e1), closes #​7098
• load_balancer_pool: add UseStateForUnknown for load_shedding attribute to prevent drift (3fc31ee)
• r2_custom_domain: restore degraded-response handling in resource.go (b3d01a0)
• regional_hostname: update cloudflare-go imports from v6 to v7 (d4211c4)
• register regional_hostname in provider.go (3a87345)
• resolve pre-existing v6/v7 and codegen-drift build errors (27aed32)
• restore handwritten code stripped from staging-next codegen for acceptance tests (6920a59)
• restore production files lost to codegen drift on staging-next (1bba117)
• restore site_id/queue_id path tags to 'required' in data source models (56b6a34)
• secrets_store: fix model/schema parity and guard acceptance tests (dde9b24)
• set initial schema version to 500 for all new resources (ef71ba4)
• spectrum_application: accept early-v5 object-shape state at schema_version=0 (bdcaa79), closes #​7098
• tests: bump v6→v7 imports in restored hand-written tests (4cf7eff)
• treeshaking required fields from optional (94198f3)
• undo two over-corrections from previous batch (08a3561)
• update go.sum and fix RecipientNewParams field rename (931cb9f)
• worker_version: restore handwritten D1 database_id handling (ed78cd0)
• worker: add propagation_policy to grandparent observability Default (c815f52)
• worker: include propagation_policy in observability.traces parent Default + update data source test (541fe77)
• worker: preserve observability.traces.propagation_policy across reads (458854e)
• workers_custom_domain: Missing CertId field in state migration (17d852f)
• workers_script: restore annotations Computed + workers_triggered_by (d3d033a)
• workers_script: restore annotations Read workaround stripped by staging-next codegen (d4f824f)
• zero_trust_access_application: skip MFA infrastructure test (4dd2f87)
• zero_trust_access_identity_provider: add UseStateForUnknown to SAML-only config fields (451e078)
• zero_trust_access_identity_provider: change read_only from computed to optional (b760efe)
• zero_trust_access_identity_provider: drop universal Default on SAML-only config fields (f297a75)
• zero_trust_access_identity_provider: use UseNonNullStateForUnknown on scim_config.scim_base_url (55a8860)
• zero_trust_access_identity_provider: use UseNonNullStateForUnknown on scim_config.secret (4dab13d)
• zero_trust_access_policy: Missing common_names transform in migration (ce95d8c)
• zero_trust_access_policy: populate account_id when migrating zone-scoped v4 state (513a91c)
• zero_trust_dlp_predefined_profile: skip tests that require account-level OCR (caed432)

Reverts

• token: drop custom.go restore to let PR #​7148 land cleanly (04f46b5)

Chores

• add feature request issue template (eee01fe)
• api_token: skip test not supported by account (5056f63)
• api: update composite API spec (fdcb705)
• api: update composite API spec (b4ace62)
• api: update composite API spec (408be20)
• api: update composite API spec (37e67c1)
• api: update composite API spec (5f2a7bd)
• api: update composite API spec (06e6ffc)
• api: update composite API spec (63b0963)
• api: update composite API spec (d634850)
• api: update composite API spec (0861a6a)
• api: update composite API spec (7d350ac)
• api: update composite API spec (14e308c)
• api: update composite API spec (9376903)
• api: update composite API spec (a83865d)
• api: update composite API spec (1c1ae98)
• api: update composite API spec (17d1f43)
• api: update composite API spec (7537630)
• api: update composite API spec (630c740)
• api: update composite API spec (921b330)
• api: update composite API spec (61b0057)
• api: update composite API spec (007d65d)
• api: update composite API spec (87325df)
• api: update composite API spec (5b6f63b)
• api: update composite API spec (796b467)
• api: update composite API spec (29cb63f)
• api: update composite API spec (6fb099e)
• api: update composite API spec (c0f463a)
• api: update composite API spec (4b4f4e1)
• api: update composite API spec (cced166)
• api: update composite API spec (1f0ef10)
• api: update composite API spec (3d0cc20)
• api: update composite API spec (3bfa07f)
• api: update composite API spec (b8d2fcb)
• api: update composite API spec (87be50c)
• api: update composite API spec (0165de6)
• api: update composite API spec (9cf975a)
• api: update composite API spec (f0f1f80)
• api: update composite API spec (04bd66d)
• api: update composite API spec (2309417)
• clarify description in feature request template (892847a)
• deps: migrate from cloudflare-go/v6 to /v7 (6d752b6)
• docs and examples (cd5cd44)
• generate docs (420ed0b)
• internal: codegen related update (61c4f94)
• internal: codegen related update (22d50b7)
• internal: codegen related update (6000928)
• internal: codegen related update (8d83c78)
• internal: codegen related update (f564ed6)
• internal: codegen related update (9b7e360)
• internal: codegen related update (9666ea8)
• internal: codegen related update (0419104)
• internal: codegen related update (4e2a053)
• internal: codegen related update (5f7e773)
• internal: codegen related update (0ea98f0)
• restore schema version (470abf1)
• revert unwanted generated code (5e2e81d)
• use 'next' for Terraform builds (5e3bd48)
• use v7 (a9b2b8e)
• use v7 for all test; 2 resources have missing methods in v7 so use v6 for those two resources (1c6e86c)
• zero_trust_device_custom_profile: skip virtual network test (48cc36f)

Documentation

• regenerate provider docs (e86855d)
• zero_trust_access_application: document in-place migration for policy UUIDs (555fa3f)

Refactors

• extract MoveState nil guard into shared helper (737caf9)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

GitLab Pipeline Action

General information

Link to pipeline: https://gitlab.com/code0-tech/infrastructure/mensa/-/pipelines/2621101607

Status: Passed
Duration: 2 minutes

Job summaries

tf-plan:server_administration

No changes. Your infrastructure matches the configuration.

tf-plan:github

No changes. Your infrastructure matches the configuration.

tf-plan:main

No changes. Your infrastructure matches the configuration.