fix(deps): update all non-major dependencies

This MR contains the following updates:

Package	Type	Update	Change
gitlab (source)	required_provider	minor	18.0.0 -> 18.5.0
gitlab.developers.cam.ac.uk/uis/gcp-cloud-run-app/devops	module	patch	10.6.1 -> 10.6.3
uis/devops/continuous-delivery/ci-templates	repository	minor	v7.19.2 -> v7.20.3

---

Release Notes

gitlabhq/terraform-provider-gitlab (gitlab)

v18.5.0

Compare Source

FEATURES (2 changes)

• datasource/gitlab_project_approval_rules: Add New Data Source for GitLab Project Approval Rules by @​markwork (merge request)
• resource/gitlab_group_service_account: Add support for custom timeouts to gitlab_group_service_account by @​PatrickRice (merge request)

IMPROVEMENTS (2 changes)

• datasource/gitlab_projects: Deprecate datasource gitlab_projects._links by @​heidi.berry (merge request)
• resource/gitlab_project: Add project resource group default process mode by @​n.h.long.9697 (merge request)

DOCUMENTATION (2 changes)

• Add missing deprecation notices to some resources and datasources by @​heidi.berry (merge request)
• Ensure deprecation notices properly display in the docs by @​heidi.berry (merge request)

BUG FIXES (3 changes)

• resource/gitlab_application_settings: Fix mapping package_metadata_purl_types in update by @​elC0mpa (merge request)
• resource/gitlab_project_membership: expires_at now validates that the date is not in the past, which previously caused an API error by @​elC0mpa (merge request)
• resource/gitlab_project_membership,resource/gitlab_group_membership: member_role_id will now be removed if not specified in the config, allowing users to revert to base roles by @​elC0mpa (merge request)

v18.4.1

Compare Source

IMPROVEMENTS (1 change)

• Bumped GitLab client-go dependency to v0.148.0 to improve default retry policy (merge request)

v18.4.0

Compare Source

FEATURES (2 changes)

• resource/gitlab_group_level_mr_approvals: Add group level merge request approvals resource by @​heidi.berry (merge request)
• resource/gitlab_project_external_status_check: Add new resource for project external status checks by @​mness (merge request)

IMPROVEMENTS (1 change)

• resource/gitlab_project_hook: Update docs to indicate which version of GitLab is required to use custom headers by @​heidi.berry (merge request)

BUG FIXES (2 changes)

• resource/gitlab_group_service_account: Wait for group service account users to be deleted during destroy by @​heidi.berry (merge request)
• resource/gitlab_group_share_group: Add feature flag information for using custom roles by @​heidi.berry (merge request)

v18.3.0

Compare Source

FEATURES (3 changes)

• Add new gitlab_group_deploy_token and gitlab_project_deploy_token resources. The existing generic gitlab_deploy_token resource has now been deprecated. by @​mness (merge request)
• Add new gitlab_group_saml_links datasource by @​heidi.berry (merge request)
• Support client-go config file for provider authentication. See more information here: https://gitlab.com/gitlab-org/api/client-go#use-the-config-package-experimental by @​timofurrer (merge request)

IMPROVEMENTS (6 changes)

• resource/gitlab_project_level_notifications: Update to handle unknown value validation by @​PatrickRice (merge request)
• resource/gitlab_group: Add support for administrator to project_creation_level by @​aldo.salas1 (merge request)
• resource/gitlab_group_security_policy_attachments: This resource now checks permissions prior to adding the policy, and fails with a informative error if permissions are missing by @​PatrickRice (merge request)
• resource/gitlab_project_security_policy_attachments: This resource now checks permissions prior to adding the policy, and fails with a informative error if permissions are missing by @​PatrickRice (merge request)
• resource/gitlab_deploy_token: Add support for previously missing scope options by @​mness (merge request)
• resource/gitlab_instance_service_account: Allow instance service accounts to be created without username and/or name by @​heidi.berry (merge request)

BUG FIXES (6 changes)

• resource/gitlab_global_level_notifications: Update to handle unknown value validation by @​PatrickRice (merge request)
• resource/gitlab_project_level_notifications: Update to handle unknown value validation by @​PatrickRice (merge request)
• resource/gitlab_project_protected_environment: Fix error in protected environment using unknown deploy attributes by @​PatrickRice (merge request)
• resource/gitlab_project_integration_github: Fix a provider panic that occurs when importing a non-existent integration by @​heidi.berry (merge request)
• resource/gitlab_group_dependency_proxy: Fixed a bug where importing using an import block caused an immediate replace by @​PatrickRice (merge request)
• resource/gitlab_group: Fixed an issue with permanently_remove_on_delete that occurred when deleting groups on GitLab versions later than 18.0 by @​heidi.berry (merge request)

v18.2.0

Compare Source

FEATURES (2 changes)

• datasource/gitlab_project_access_tokens: Allows retrieving project access tokens by @​ruben.aleman (merge request)
• resource/gitlab_project_container_registry_protection: Allows managing container registry protections for a project by @​hristiyan.ivanov (merge request)

IMPROVEMENTS (5 changes)

• resource/gitlab_project: Added support for ci_push_repository_for_job_token_allowed by @​danilobuerger (merge request)
• resource/gitlab_group_hook: Add emoji_events support by @​lllkq546449541 (merge request)
• resource/gitlab_project_protected_environment: Create new deploy_access_levels_attribute using an object list instead of nested blocks to enable easier operations with other resources. The existing deploy_access_levels is deprecated and will be removed in 19.0. by @​heidi.berry (merge request)
• resource/gitlab_group_service_account: Allow using custom emails with group service accounts by @​heidi.berry (merge request)
• resource/gitlab_branch_protection: Add admin push access level support by @​netflash (merge request)

BUG FIXES (2 change)

• resource/gitlab_project_label: Fixed a bug that caused a plan operation when a named color was used instead of a hex by @​heidi.berry (merge request)
• access token resources: Fixed a bug where using an unknown value for scopes caused an error by @​PatrickRice (merge request)

v18.1.1

Compare Source

BUG FIXES (1 change)

• resource/gitlab_group_service_account_access_token: Fix a bug when using scopes with an unknown set, resulting in an error message about the provider by @​heidi.berry (merge request)

v18.1.0

Compare Source

FEATURES (3 changes)

• resource/gitlab_project_merge_request_note: New resource allows creating merge request notes by @​heidi.berry (merge request)
• resource/gitlab_application_appearance: New resource allows managing instance-wide application appearance by @​heidi.berry (merge request)
• datasource/gitlab_project_merge_requests: New datasource allows listing project merge requests by @​heidi.berry (merge request)

IMPROVEMENTS (15 changes)

• resource/gitlab_project: Add support for ci_forward_deployment_rollback_allowed by @​paroose (merge request)
• resource/gitlab_project: Add support for auto_duo_code_review_enabled by @​mness (merge request)
• resource/gitlab_project: Add branches option to project resource when forking by @​Taucher2003 (merge request)
• resource/gitlab_group_saml_link: Update group access level list for SAML group links to include planner by @​heidi.berry (merge request)
• resource/gitlab_deploy_key: Add support for expires_at, allowing expiring project deploy keys by @​heidi.berry (merge request)
• resource/gitlab_project_integration_mattermost: Rename mattermost integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_emails_on_push: Rename emails on push integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_external_wiki: Rename external wiki integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_custom_issue_tracker: Rename custom issue tracker integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_jenkins: Rename jenkins integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_project_integration_harbor: Rename harbor integration resource to clarify that it's project-level. The old resource name is now deprecated. by @​heidi.berry (merge request)
• resource/gitlab_group_service_account_access_token: Add support creating service account tokens with no expiry by @​heidi.berry (merge request)
• resource/gitlab_project_job_token_scopes: The enabled attribute will now attempt to check the instance enforce_ci_inbound_job_token_scope_enabled prior to allowing a user to set the value to false, and will fail at plan time instead of apply time if the enabled setting conflicts with instance settings. by @​PatrickRice (merge request)
• datasource/gitlab_user: Add experimental support for email_exact_match, which will always return an exact match on the email. This will override the fuzzy matching of the GitLab search API when no users match the given email. by @​ricardo.bartels (merge request)
• multiple resources: Add missing examples to resources by @​heidi.berry (merge request)

DOCUMENTATION (2 changes)

• Add missing deprecation notices (merge request)
• Ensure deprecation notices come out in the docs (merge request)

BUG FIXES (3 changes)

• resource/gitlab_branch: Add warning to use lifecycle ignore_changes for gitlab_branch.ref by @​heidi.berry (merge request)
• resource/gitlab_project: If a project import fails, the specific import error will now be surfaces to the user by @​heidi.berry (merge request)
• multiple label resources: Fixed an issue where using label color names would cause an error by @​heidi.berry (merge request)

uis/devops/infra/terraform/gcp-cloud-run-app (gitlab.developers.cam.ac.uk/uis/gcp-cloud-run-app/devops)

v10.6.3

Compare Source

Bug Fixes

• deps: update devops base image logan-terraform to 7b93797 (0d19c17)
• deps: update terraform googlecloudplatform/lb-http/google to v14 (8dd2427)

v10.6.2

Compare Source

Bug Fixes

• deps: update all non-major dependencies (53ffafa)

uis/devops/continuous-delivery/ci-templates (uis/devops/continuous-delivery/ci-templates)

v7.20.3: 7.20.3

Compare Source

7.20.3 (2025-11-03)

Bug Fixes

• use only needed bits of Terraform-Module.gitlab-ci.yml to avoid duplicate jobs (ff646a0)

v7.20.2: 7.20.2

Compare Source

7.20.2 (2025-10-30)

Bug Fixes

• check-latest-tag-in-changelog: skip job if tag is an alpha or beta release (210ffd5)

v7.20.1: 7.20.1

Compare Source

7.20.1 (2025-10-29)

Bug Fixes

• allow no test coverage in maven (40db7bf)

v7.20.0: 7.20.0

Compare Source

7.20.0 (2025-10-28)

Features

• add code coverage to maven jobs (53c1345)

---

Configuration

📅 Schedule: Branch creation - Monday through Friday ( * * * * 1-5 ) in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻️ Rebasing: Whenever MR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This MR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.