[dependabot]

Bumps the gomod-dependencies group with 4 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/hashicorp/hc-install, github.com/hashicorp/terraform-exec and github.com/hashicorp/terraform-json.

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.1 to 1.24.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.24.0

1.24.0 (2026-11-02)

Features Added

• Added tracing.WrapTracer to decorate a tracer while preserving attribute override ordering.
• Added supporting infrastructure for SSE responses. This includes streaming types, runtime support, and fakes.
• Added arm.ResourceID.ValidateResourceTypeChain to validate complete resource-type ancestry.

Bugs Fixed

• Client tracing spans now redact the request URL in error descriptions using the pipeline's query parameter allow list.
• Retry logging now uses the pipeline's query parameter allow list and redacts request URLs in errors.

Other Changes

• Upgraded to Go 1.26.0.
• Upgraded dependencies.

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

• Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

• Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
• Replaced internal default HTTP client with the one from sdk/internal.

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

• Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.

Commits

• e0b565c Prep azcore@v1.24.0 for release (#27899)
• b8bc42d NO_CI update Go dependencies (#27894)
• 2a36830 Fix auto-release eligibility for shared CI triggers (#27883)
• abdfbaf Use global vars for Go versions (#27897)
• 3e18dc9 [AutoPR sdk-resourcemanager/netapp/armnetapp]-generated-from-SDK Generation -...
• 7ff7eca [AutoPR sdk-resourcemanager/aiinfraoptimization/armaiinfraoptimization]-gener...
• a4da5ab [AutoPR sdk-resourcemanager/hybridconnectivity/armhybridconnectivity]-generat...
• e948fd2 docs: fix typos underlaying -> underlying, similiar -> similar (#27446)
• 344629a [AutoPR sdk-resourcemanager/storagemover/armstoragemover]-generated-from-SDK ...
• 70dc4fa [AutoPR sdk-resourcemanager/privatetrafficmanager/armprivatetrafficmanager]-g...
• Additional commits viewable in compare view

Updates github.com/hashicorp/hc-install from 0.9.5 to 0.10.0

Release notes

Sourced from github.com/hashicorp/hc-install's releases.

v0.10.0

ENHANCEMENTS:

• Allow custom http.Client to be passed through #401
• product: Build Terraform w/ experimental features enabled #409
• releases: add ApiBaseURL to Versions and pass HTTPClient through #364

DEPENDENCIES:

• go: Bump compatibility from 1.25 to 1.26 (#406)
• deps: bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 (#414)
• deps: bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.2 (#381, #385, #396)
• deps: bump golang.org/x/crypto from 0.51.0 to 0.56.0 (#393, #399, #408)
• deps: bump golang.org/x/mod from 0.35.0 to 0.41.0 (#382, #388, #392, #397, #398, #404)
• deps: bump golang.org/x/net from 0.53.0 to 0.55.0 (#391)

Commits

• 088c565 Prepare for 0.10.0 release (#415)
• 99786b7 releases: add ApiBaseURL to Versions and pass HTTPClient through (#364)
• 65f3869 build(deps): bump hashicorp/actions-generate-metadata from 1.1.4 to 1.3.0 in ...
• a33c617 build(deps): bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 (#414)
• 235ea8f product: Build Terraform w/ experimental features enabled (#409)
• 4e54952 Allow custom http.Client to be passed through (#401)
• 0612422 deps: Update golang.org/x/crypto to v0.56.0 (#408)
• cc06bdf build(deps): bump golang.org/x/mod from 0.40.0 to 0.41.0 (#404)
• 6ffd20c go: Bump to 1.26 (#406)
• f26645f ci: Remove macOS hack (#405)
• Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-exec from 0.25.3 to 0.26.0

Release notes

Sourced from github.com/hashicorp/terraform-exec's releases.

v0.26.0

NOTES:

• bump Go compatibility from 1.25 to 1.26 (#612)

DEPENDENCIES:

• build(deps): bump github.com/hashicorp/hc-install from 0.9.5 to 0.10.0 (#614)
• build(deps): bump github.com/hashicorp/terraform-json from 0.28.0 to 0.29.0 (#616)

ENHANCEMENTS:

• Introduce WorkspaceListJSON method/command (#587)
• Introduce StateMigrateJSON method/command (#609)

BUG FIXES:

• fix: QueryJSON: Avoid overriding Terraform.Stdout (#619)

Changelog

Sourced from github.com/hashicorp/terraform-exec's changelog.

0.26.0 (October 30, 2026)

NOTES:

• bump Go compatibility from 1.25 to 1.26 (#612)

DEPENDENCIES:

• build(deps): bump github.com/hashicorp/hc-install from 0.9.5 to 0.10.0 (#614)
• build(deps): bump github.com/hashicorp/terraform-json from 0.28.0 to 0.29.0 (#616)

ENHANCEMENTS:

• Introduce WorkspaceListJSON method/command (#587)
• Introduce StateMigrateJSON method/command (#609)

BUG FIXES:

• fix: QueryJSON: Avoid overriding Terraform.Stdout (#619)

Commits

• 0a1f631 v0.26.0 [skip ci]
• 95d7028 Prepare Changelog for 0.26.0 (#621)
• f1b461b fix: Update workspace list implementation to tolerate warnings present in s...
• 4bbbd3f test: Fix assertions in TestGraph (#620)
• 0746aae tests: Remove Windows/CRLF workarounds (#618)
• 8c3720c QueryJSON: Avoid overriding Terraform.Stdout directly (#619)
• 13129d0 Introduce StateMigrateJSON method/command (#609)
• 2161eb4 tfexec/WorkspaceListJSON: Remove unused reattachment code (#617)
• b40ea90 Add support for workspace list -json (#587)
• 4552295 build(deps): bump github.com/hashicorp/terraform-json from 0.28.0 to 0.29.0 (...
• Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-json from 0.28.0 to 0.29.0

Release notes

Sourced from github.com/hashicorp/terraform-json's releases.

v0.29.0

ENHANCEMENTS:

• version: Allow parsing of a format_version field, added in Terraform 1.17 (#208)
• Add init_output log type for use when parsing logs from the init command (#181)
• logging: Add support for state migrate message types (#210)
• Add support for JSON output from workspace list command (#198)
• Enable parsing state_store_initialization_start JSON log message from init command (#212)

BUG FIXES:

• Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces are listed (#214)

Commits

• 8f4894d fix: Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces...
• 540e4c2 test: Enable parsing state_store_initialization_start JSON message, add te...
• 456fd35 refactor: Rename JSON message type constants to use Message prefix in name ...
• ebdaf2c logging: Add support for state migrate message types (#210)
• 5a1ca92 Add support for JSON output from workspace list (#198)
• e0b6807 feat: Add init_output log type for use when parsing a subset of logs from t...
• 1835ed6 version: Allow parsing of a format_version field, added in v1.17 (#208)
• f4ef996 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions-...
• 4a96b30 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in the github-actions-...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.