Update Terraform cloudflare to v5.26.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
cloudflare (source)	required_provider	minor	5.24.0 → 5.26.0

---

Release Notes

cloudflare/terraform-provider-cloudflare (cloudflare)

v5.26.0

Compare Source

Full Changelog: v5.25.0...v5.26.0

Features

New Resources

• cloudflare_field_extractor: Field Extractor
• cloudflare_magic_wan_bgp_filter_profile: Magic WAN BGP Filter Profile
• cloudflare_zero_trust_casb_policy: Zero Trust CASB Policy
• cloudflare_zero_trust_casb_webhook: Zero Trust CASB Webhook
• cloudflare_zero_trust_connectivity_settings: Zero Trust Connectivity Settings
• cloudflare_zone_tracing: Zone Tracing
• cloudflare_zone_tracing_rules: Zone Tracing Rules

New Data Sources

• cloudflare_field_extractor: Field Extractor
• cloudflare_magic_wan_bgp_filter_profile: Magic WAN BGP Filter Profile
• cloudflare_magic_wan_bgp_filter_profiles: Magic WAN BGP Filter Profiles (list)
• cloudflare_zero_trust_casb_policy: Zero Trust CASB Policy
• cloudflare_zero_trust_casb_policies: Zero Trust CASB Policies (list)
• cloudflare_zero_trust_casb_webhook: Zero Trust CASB Webhook
• cloudflare_zero_trust_casb_webhooks: Zero Trust CASB Webhooks (list)
• cloudflare_zero_trust_connectivity_settings: Zero Trust Connectivity Settings
• cloudflare_zone_tracing: Zone Tracing
• cloudflare_zone_tracing_rules: Zone Tracing Rules

New Attributes

• cloudflare_magic_wan_gre_tunnel, cloudflare_magic_wan_ipsec_tunnel
  • bgp.import_filter_id: ID of the BGP filter profile applied to routes received from the customer
  • bgp.export_filter_id: ID of the BGP filter profile applied to routes advertised to the customer

Bug Fixes

• custom_ssl: mark private_key optional to unblock setting custom_csr_id
• email_routing_settings: add missing support_subaddress to resource schema
• load_balancer_monitor: correctly resolve ambiguous version-zero state during v4 to v5 migration
• page_rule: raise edge_cache_ttl maximum to allow one-year values
• provider: send user_agent_operator_suffix unquoted and read fallback from environment variable
• ruleset: normalize legacy query string wildcards during v4 to v5 migration
• zone_lockdown: drop UseNonNullStateForUnknown on created_on to prevent perpetual diff

v5.25.0

Compare Source

Full Changelog: v5.24.0...v5.25.0

Features

New Resources

• cloudflare_email_security_allow_policy: Cloud Email Security Allow Policy
• cloudflare_email_security_domain: Cloud Email Security Domain
• cloudflare_email_sending_subdomain: Email Sending Subdomain
• cloudflare_nel_setting: Network Error Logging Zone Setting
• cloudflare_zero_trust_resource_library_application: Zero Trust Resource Library Application

New Data Sources

• cloudflare_email_security_allow_policy: Cloud Email Security Allow Policy
• cloudflare_email_security_allow_policies: Cloud Email Security Allow Policies (list)
• cloudflare_email_security_domain: Cloud Email Security Domain
• cloudflare_email_security_domains: Cloud Email Security Domains (list)
• cloudflare_email_sending_subdomain: Email Sending Subdomain
• cloudflare_email_sending_subdomains: Email Sending Subdomains (list)
• cloudflare_nel_setting: Network Error Logging Zone Setting
• cloudflare_spectrum_protocols: Spectrum Protocols (list)

New Attributes

• cloudflare_ai_search_instance
  • aisearch_model: Workers AI model for AI search queries
  • embedding_model: Model used to generate text embeddings
  • reranking_model: Model used to rerank search results
  • rewrite_model: Workers AI model for query rewriting
  • summarization_model: Model used to summarize search results
• cloudflare_bot_management
  • bot_preference_sync_enabled: Sync bot preferences from AI Search, AI User, and AI Training zone settings
• cloudflare_content_scanning_expression
  • payload: Custom content extraction expression to locate content objects in requests
• cloudflare_email_routing_dns
  • support_subaddress: Whether plus-addressing is honored when matching routing rules
• cloudflare_magic_transit_connector
  • primary: Whether this connector is the primary connector for the site
  • site_id: Identifier of the Magic Transit site this connector belongs to
• cloudflare_oauth_client
  • optional_scopes: Scopes a user may decline during OAuth consent
• cloudflare_organization
  • account_creation_applies_tenant_defaults: Whether tenant defaults apply to newly created accounts
• cloudflare_pipeline_sink
  • format: Output data format configuration for the sink
  • schema: Schema definition for events in the data stream
• cloudflare_pipeline_stream
  • format: Data format configuration for stream events
  • schema: Schema definition for events in the data stream
• cloudflare_ruleset
  • origin_range_requests: Fetch large origin assets as a series of range requests
  • vary: Cache variation key configuration for set_cache_settings action
• cloudflare_stream_live_input
  • playback: HLS and DASH manifest URLs for live stream playback
• cloudflare_worker_version
  • identity: Enables Gateway identity for network bindings
• cloudflare_workers_kv_namespace
  • jurisdiction: Restrict KV data storage to a specific jurisdiction at creation time
• cloudflare_workers_script
  • files: Multipart WASM modules and binary files included in the Worker upload
• cloudflare_workflow
  • concurrency: Concurrency limit and active instance count for the workflow
• cloudflare_zero_trust_access_group
  • account_id: Account that owns the device posture integration (in posture sub-rules)
• cloudflare_zero_trust_access_identity_provider
  • force_authn: Asks the IdP to reauthenticate on each SAML request
  • max_sso_url_length: Maximum URL length accepted for SSO redirect

Bug Fixes

• bot_management: mark bot_preference_sync_enabled optional-only; Computed caused "unknown after apply" errors
• custom_pages: Update causing inconsistent apply results
• email_routing_dns: data source not returning any data (#​7130)
• email_security_block_sender: mark account_id as required in data sources
• image: fix create/update marshaling errors
• magic_transit_connector: add missing primary and site_id fields; mark account_id as required in data sources
• registrar_domain: mark account_id as required in list data source
• worker_version: correct response binding order to prevent plan drift (#​7115)
• set schema Version: 500 on new resources to enable correct state upgrade path

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.