Update hashicorp/azurerm requirement from ~> 4.68.0 to ~> 4.69.0 in /terraform in the terraform group

[dependabot]

Updates the requirements on hashicorp/azurerm to permit the latest version.
Updates hashicorp/azurerm to 4.69.0

Release notes

Sourced from hashicorp/azurerm's releases.

v4.69.0

4.69.0 (April 16, 2026)

FEATURES:

• New List Resource: azurerm_traffic_manager_profile (#31977)
• New List Resource: azurerm_web_pubsub (#32126)
• New Resource: azurerm_automation_runtime_environment_package (#32022)
• New Resource: azurerm_container_app_environment_managed_certificate (#31137)

ENHANCEMENTS:

• dependencies: Go - update to 1.25.9 (#32148)
• dependencies: kubernetesconfiguration/fluxconfiguration - update to API version 2025-04-01 (#32080)
• Data Source: azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#32108)
• Data Source: azurerm_storage_account_blob_container_sas - expand permissions block to include new fields (#32149)
• Data Source: azurerm_storage_account_sas - expand permissions block to include new fields (#32149)
• Data Source: azurerm_storage_share - export the rbac_scope_id property (#31194)
• azurerm_bot_channels_registration - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#30457)
• azurerm_cdn_frontdoor_route - the cdn_frontdoor_origin_ids property is now optional, allowing users to use the depends_on meta-argument instead (#29350)
• azurerm_cognitive_deployment - the rai_policy_name property is now Optional + Computed as Azure returns a value when not set in the creation request (#32131)
• azurerm_container_app - add support for identity_id property in custom_scale_rule block (#29777)
• azurerm_key_vault - added object-name max length validation for all key vault entries (keys, secrets, certs, etc) (#30665)
• azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#32108)
• azurerm_kubernetes_flux_configuration - the git_repository.provider property now supports GitHub (#32080)
• azurerm_monitor_scheduled_query_rules_alert_v2 - add support for email_subject within action block (#32132)
• azurerm_storage_share - export the rbac_scope_id property (#31194)

BUG FIXES:

• azurerm_linux_virtual_machine - parse os_managed_disk_id insensitively as Azure returns static segments cased inconsistently (#32145)
• azurerm_private_dns_resolver_inbound_endpoint - the ip_configurations.private_ip_address, ip_configurations.private_ip_allocation_method, and ip_configurations.subnet_id properties are now ForceNew as the API does not allow updating these values (#31088)

Changelog

Sourced from hashicorp/azurerm's changelog.

4.69.0 (April 16, 2026)

FEATURES:

• New List Resource: azurerm_traffic_manager_profile (#31977)
• New List Resource: azurerm_web_pubsub (#32126)
• New Resource: azurerm_automation_runtime_environment_package (#32022)
• New Resource: azurerm_container_app_environment_managed_certificate (#31137)

ENHANCEMENTS:

• dependencies: Go - update to 1.25.9 (#32148)
• dependencies: kubernetesconfiguration/fluxconfiguration - update to API version 2025-04-01 (#32080)
• Data Source: azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#32108)
• Data Source: azurerm_storage_account_blob_container_sas - expand permissions block to include new fields (#32149)
• Data Source: azurerm_storage_account_sas - expand permissions block to include new fields (#32149)
• Data Source: azurerm_storage_share - export the rbac_scope_id property (#31194)
• azurerm_bot_channels_registration - add support for the microsoft_app_type, microsoft_app_tenant_id, and microsoft_app_user_assigned_identity_id properties (#30457)
• azurerm_cdn_frontdoor_route - the cdn_frontdoor_origin_ids property is now optional, allowing users to use the depends_on meta-argument instead (#29350)
• azurerm_cognitive_deployment - the rai_policy_name property is now Optional + Computed as Azure returns a value when not set in the creation request (#32131)
• azurerm_container_app - add support for identity_id property in custom_scale_rule block (#29777)
• azurerm_key_vault - added object-name max length validation for all key vault entries (keys, secrets, certs, etc) (#30665)
• azurerm_kubernetes_cluster_node_pool - export the node_image_version property (#32108)
• azurerm_kubernetes_flux_configuration - the git_repository.provider property now supports GitHub (#32080)
• azurerm_monitor_scheduled_query_rules_alert_v2 - add support for email_subject within action block (#32132)
• azurerm_storage_share - export the rbac_scope_id property (#31194)

BUG FIXES:

• azurerm_linux_virtual_machine - parse os_managed_disk_id insensitively as Azure returns static segments cased inconsistently (#32145)
• azurerm_private_dns_resolver_inbound_endpoint - the ip_configurations.private_ip_address, ip_configurations.private_ip_allocation_method, and ip_configurations.subnet_id properties are now ForceNew as the API does not allow updating these values (#31088)

4.68.0 (April 09, 2026)

FEATURES:

• New Data Source: azurerm_managed_devops_pool (#28325)
• New List Resource: azurerm_private_dns_cname_record (#31833)
• New Resource: azurerm_data_protection_backup_instance_data_lake_storage (#32044)
• New Resource: azurerm_managed_devops_pool (#28325)

ENHANCEMENTS:

• dependencies: go-azure-sdk - upgrade to v0.20260407.1111603 (#32112)
• Data Source: azurerm_bastion_host - export private_only_enabled (#32042)
• Data Source: azurerm_key_vault - improve validation for the name field to prevent apply time errors (#30453)
• Data Source: azurerm_mssql_managed_instance - add support for the general_purpose_v2_enabled property (#29303)
• azurerm_app_configuration_feature - Add support for custom_filter (#30160)
• azurerm_bastion_host - add support for a "Private-only" deployment and export private_only_enabled (#32042)
• azurerm_cosmosdb_account - add support for the EnableFabricNetworkAclBypass capability (#31836)

... (truncated)

Commits

• ca5680b CHANGELOG.md for 4.69.0 (#32147)
• 9d542e6 azurerm_bot_service_azure_bot - fix acctest, make microsoft_app_type requir...
• 54102ed azurerm_bot_channels_registration - add microsoft_app_type, `microsoft_app_...
• 09b6cfa bugfix: user-agent version header says dev instead of actual provider versi...
• 8e67ab2 consumption: convert budget resources to use typed models with Decode/Encode ...
• dd083a5 List and identity implementation - azurerm_web_pubsub (#32126)
• 5956955 kubernetes_cluster_node_pool_data_source.go : add node_image_version (#32...
• f894a39 New Resource: azurerm_container_app_environment_managed_certificate (#31137)
• bc0dbf4 Resource Identity and List : trafficmanager (#31977)
• 1adc9a2 azurerm_key_vault - Add key vault object name length validation (#30665)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Scanned Files

None

[github-actions]

⛔ Superseded — A newer run has replaced this result.

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

	Count
➕ Add	7

📋 Resource Details

Action	Resource
➕ Create	azurerm_linux_function_app.function_app
➕ Create	azurerm_monitor_activity_log_alert.rg_resource_health
➕ Create	azurerm_monitor_metric_alert.dead_letter_messages
➕ Create	azurerm_monitor_metric_alert.queue_backlog
➕ Create	azurerm_role_assignment.app_to_storage
➕ Create	azurerm_storage_account.function_app_storage
➕ Create	random_id.environment_id

[github-actions]

🏗️ Terraform Plan

🌍 Environment: dev

✅ Validate — Passed

✅ Plan

	Count
➕ Add	7

📋 Resource Details

Action	Resource
➕ Create	azurerm_linux_function_app.function_app
➕ Create	azurerm_monitor_activity_log_alert.rg_resource_health
➕ Create	azurerm_monitor_metric_alert.dead_letter_messages
➕ Create	azurerm_monitor_metric_alert.queue_backlog
➕ Create	azurerm_role_assignment.app_to_storage
➕ Create	azurerm_storage_account.function_app_storage
➕ Create	random_id.environment_id

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud