chore(deps): update terraform gitlab to v17 - autoclosed

This MR contains the following updates:

Package	Type	Update	Change
gitlab (source)	required_provider	major	~> 16.11 -> ~> 17.0

---

Release Notes

gitlabhq/terraform-provider-gitlab (gitlab)

v17.6.1

Compare Source

This release was tested against GitLab 17.6, 17.5, and 17.4 for both CE and EE

IMPROVEMENTS (1 change)

• resource/gitlab_group_service_account_token: Add support for rotation_configuration with a limited set of attributes by @​heidi.berry (merge request)

BUG FIXES (2 changes)

• resource/gitlab_project_compliance_frameworks: Fixed an issue where project compliance frameworks didn't delete compliance frameworks properly. Fixed a bug where compliance frameworks weren't set properly on a project where they were removed outside of TF by @​mness (merge request)
• resource/gitlab_group: Fixed an issue where an allowed_email_domain_list added outside of TF would be unset when upgrading the provider to 17.6 by @​PatrickRice (merge request)

v17.6.0

Compare Source

This release was tested against GitLab 17.6, 17.5, and 17.4 for both CE and EE

FEATURES (4 changes)

• New Resource resource/gitlab_project_compliance_frameworks: Add new resource gitlab_project_compliance_frameworks, allowing managing multiple compliance frameworks on a single project by @​mness (merge request)
• New Datasource datasource/gitlab_group_billable_member_memberships: Add new data source gitlab_group_billable_member_memberships by @​mdroessler (merge request)
• New Datasource datasource/gitlab_project_environments: Add new data source gitlab_project_environments by @​ruben.aleman (merge request)
• New Datasource data/gitlab_runners: Add new data source gitlab_runners by @​ruben.aleman (merge request)

IMPROVEMENTS (17 changes)

• docs: add import block examples to resources by @​ruben.aleman (merge request)
• data/gitlab_project: Add ci_pipeline_variables_minimum_role setting by @​hfyngvason (merge request)
• data/gitlab_projects: Add ci_pipeline_variables_minimum_role setting by @​hfyngvason (merge request)
• data/gitlab_metadata: Add external_kas_proxy_url setting by @​timofurrer (merge request)
• resource/gitlab_user_runner: Add maintenance_note setting by @​ruben.aleman (merge request)
• resource/gitlab_group: Add allowed_email_domains_list setting by @​jeremad (merge request)
• resource/gitlab_project: Add ci_pipeline_variables_minimum_role setting by @​hfyngvason (merge request)
• resource/gitlab_project_environment: Add support for multiple attributes related to cluster agents by @​timofurrer (merge request)
• resource/gitlab_project_hook: Add custom_headers support by @​PatrickRice (merge request)
• resource/gitlab_group_hook: Add custom_headers support by @​PatrickRice (merge request)
• resource/gitlab_branch_protection: Add deploy_key support to allowed_to_push by @​nicolas.boussuge.fintech (merge request)
• resource/gitlab_group_security_policy_attachment: Update documentation to make usage with compliance frameworks and policies more clear by @​odupre (merge request)
• resource/personal_access_token: Remove the "RequiresReplace()" modifier on rotation_config for access tokens by @​PatrickRice (merge request)
• resource/project_access_token: Remove the "RequiresReplace()" modifier on rotation_config for access tokens by @​PatrickRice (merge request)
• resource/group_access_token: Remove the "RequiresReplace()" modifier on rotation_config for access tokens by @​PatrickRice (merge request)
• resource/gitlab_service_account_access_token: Improve example documentation and include better information on required permissions for gitlab.com by @​heidi.berry (merge request)
• resource/gitlab_member_role: Add documentation examples and import examples by @​john.shimmin (merge request)

BUG FIXES (8 changes)

• resource/gitlab_group_label: Fix an issue where apply fails when changing the name attribute by @​krzywykrzych (merge request)
• resource/gitlab_application_settings: Fix panic when using valid_runner_registrars by @​PatrickRice (merge request)
• resource/gitlab_service_account_access_token: Fix an issue where non-admin tokens cannot use the service account access token resource by @​PatrickRice (merge request)
• resource/gitlab_service_account_access_token: Fix invalid HCL in the example by @​telliffoshea (merge request)
• resource/gitlab_member_role: Fix an issue where enabled_permissions could cause issues due to sorting by @​john.shimmin (merge request)
• resource/gitlab_group_access_token: Fix an issue where removing rotation_configuration after an apply operation caused a provider panic by @​PatrickRice (merge request)
• resource/gitlab_project_access_token: Fix an issue where removing rotation_configuration after an apply operation caused a provider panic by @​PatrickRice (merge request)
• resource/gitlab_personal_access_token: Fix an issue where removing rotation_configuration after an apply operation caused a provider panic by @​PatrickRice (merge request)

v17.5.0

Compare Source

This release was tested against GitLab 17.5, 17.4, and 17.3 for both CE and EE

FEATURES (4 changes)

• New Resource resource/gitlab_group_service_account: Allows creating service accounts for a gitlab group by @​michal.szczepek (merge request)
• New Resource resource/gitlab_group_service_account_token: Allows creating service account tokens for a service account by @​michal.szczepek (merge request)
• New Datasource data/gitlab_group_service_account: Allows creating service accounts for a gitlab group by @​michal.szczepek (merge request)
• New Datasource data/gitlab_group_provisioned_users: Allows listing users provisioned by an Identity Provider by @​nvh04121 (merge request)

IMPROVEMENTS (9 changes)

• provider/gitlab: Add support for headers to the provider to allow setting custom headers by @​ruben.aleman (merge request)
• resource/gitlab_application_settings: Add support for 20 additional new fields by @​Jitsusama (merge request)
• resource/gitlab_application_settings: Add support for 23 (for a total of 43 in 17.5) additional new fields by @​Jitsusama (merge request)
• resource/gitlab_project: Support allow_pipeline_trigger_approve_deployment by @​loozhengyuan (merge request)
• resource/gitlab_project: Support model_experiments_access_level and model_registry_access_level by @​jeremad (merge request)
• resource/gitlab_group: Add support for specifying the default branch by @​jae-sorcero (merge request)
• resource/gitlab_group: Add no one as a valid permissions when using default_branch_protection_defaults by @​jae-sorcero (merge request)
• resource/gitlab_personal_access_token: Add support for rotation_configuration by @​ruben.aleman (merge request)
• data/gitlab_pipeline_schedules: Add id for each schedule found using the datasource by @​nicolas.boussuge.fintech (merge request)

BUG FIXES (1 change)

• resource/gitlab_project: Only apply use_custom_template during creation if the value is true. Fixes an issue where using use_custom_template = false would cause a 500 error by @​PatrickRice (merge request)

v17.4.0

Compare Source

This release was tested against GitLab 17.4, 17.3, and 17.2 for both CE and EE

FEATURES (4 changes)

• New Resource resource/gitlab_member_role: Allows creating custom roles at an instance or group level by @​slaup1 (merge request)
• New Resource resource/user_impersonation_token: Adds support for generating an impersonation token with an admin user by @​slaup1 (merge request)
• New Datasource data/gitlab_protected_tag(s): Two new datasources allow retrieving a single tag or list of tags by project by @​mness (merge request)
• New Datasource data/gitlab_pipeline_schedule(s): Two new datasources allow retrieving a single pipeline schedule or list of pipeline scheduled by project by @​heidi.berry (merge request)

IMPROVEMENTS (12 changes)

• resource/gitlab_group: Add support for default_branch_protection_defaults by @​heidi.berry (merge request)
• resource/gitlab_group: Add support for reject_non_dco_commits by @​mness (merge request)
• resource/gitlab_project_approval_rule: Add support for report_type, allowing the creation of Coverage-Check rules by @​MDeVilliers1 (merge request)
• resource/gitlab_group_label: Update format of the resource ID to allow name updates by @​nvh04121 (merge request)
• resource/gitlab_group_label: Updating name no longer forces destroy/creation of the label by @​PatrickRice (merge request
• resource/gitlab_service_jira: Aligned fields to upstream API, adding support for 9 new fields by @​deepflame (merge request
• resource/gitlab_application_settings: Add support for 25 new fields by @​Jitsusama (merge request)
• resource/gitlab_project: Add support for pre_receive_secret_detection_enabled by @​PatrickRice (merge request)
• resource/gitlab_project: Add support for reject_non_dco_commits by @​mness (merge request)
• resource/gitlab_project_push_rules: Add support for reject_non_dco_commits by @​mness (merge request)
• resource/gitlab_user: Add support for extern_uid and external_provider by @​heidi.berry (merge request)
• docs/use-case-tech-lead-bootstrapping-small-team: Added new documentation to the provider with an example of creating a small team using GitLab by @​Jitsusama (merge request)

BUG FIXES (2 changes)

• resource/gitlab_user_runner: Fix an issue where managing an imported runner would fail with an error that token was unknown by @​PatrickRice (merge request)
• resource/gitlab_personal_access_token: Fix an issue where tokens with no expiration date encountered a provider error by @​PatrickRice (merge request)

v17.3.1

Compare Source

This release was tested against GitLab 17.3, 17.2, and 17.1 for both CE and EE

IMPROVEMENTS (1 change)

• The provider now uses an exponential backoff when no RateLimit-Reset headers are sent from GitLab by @​PatrickRice (merge request)

BUG FIXES (7 changes)

• resource/gitlab_project_access_token: Fixed an error when applying an update using a plan file that could cause the ID to return an error when rotating by @​PatrickRice (merge request)
• resource/gitlab_project_access_token: Fixed an error when applying an update using a plan from from a previous day to rotate an access token by @​PatrickRice (merge request)
• resource/gitlab_group_access_token: Fixed an error when applying an update using a plan file that could cause the ID to return an error when rotating by @​PatrickRice (merge request)
• resource/gitlab_group_access_token: Fixed an error when applying an update using a plan from from a previous day to rotate an access token by @​PatrickRice (merge request)
• resource/gitlab_group_protected_environment: Updated documentation for deploy_access_levels to be more specific by @​mness (merge request)
• resource/gitlab_project_protected_environment: Updated documentation for deploy_access_levels to be more specific by @​mness (merge request)
• resource/gitlab_group_saml_link: Updated documentation for access_level to be more descriptive when using custom roles by @​PatrickRice (merge request)

v17.3.0

Compare Source

This release was tested against GitLab 17.3, 17.2, and 17.1 for both CE and EE

IMPROVEMENTS (8 changes)

• New Resource resource/gitlab_group_security_policy_attachment: Add new resource for association security policy projects to a group by @​PatrickRice (merge request)
• New Datasource data/gitlab_group_ids: Add new datasource retrieving group ID, Full Path, or GraphQL ID based on group ID or Url-encoded path by @​PatrickRice (merge request)
• New Datasource data/gitlab_project_ids: Add new datasource retrieving project ID, Full Path, or GraphQL ID based on project ID or Url-encoded path by @​PatrickRice (merge request)
• resource/gitlab_project_job_token_scopes: Add support for target_group_ids, allowing groups to be used in the allow list by @​chapsuK (merge request)
• resource/gitlab_group: Add support for permanently_remove_on_delete, allowing groups to be permanently deleted on destroy instead of entering a waiting period by @​PatrickRice (merge request)
• resource/gitlab_application_settings: Add support for max_terraform_state_size_bytes, allowing configuration of terraform state size at an instance level by @​christian.affolter (merge request)
• resource/gitlab_project_push_rules: gitlab_project_push_rules will now take over ownership of existing push rules, since a default set is created on project creation by @​mness (merge request)
• resource/gitlab_project_job_token_scopes: Added support for project, allowing the use of the resource by project ID or url-encoded path by @​heidi.berry (merge request)

BUG FIXES (4 changes)

• resource/gitlab_group_access_token: Fix example to use the proper resource by @​blrz (merge request)
• resource/gitlab_group_security_policy_attachment: Fix example to use the proper resource by @​calebw (merge request)
• resource/gitlab_project_security_policy_attachment: Fix example to use the proper resource by @​calebw (merge request)
• resource/gitlab_user_runner: Fix description to remove typo in group_type by @​clemenschuaccso (merge request)

v17.2.0

Compare Source

This release was tested against GitLab 17.2, 17.1, and 17.0 for both CE and EE

BREAKING CHANGES (1 change)

Note: As a security related change, this breaking change is allowed outside a major release. If a non-sensitive token is required for migration purposes users can use the nonsensitive() TF function.

• resource/gitlab_cluster_agent_token: Mark GitLab cluster agent token as sensitive by @​CarbonCollins (merge request)

IMPROVEMENTS (1 change)

• New Resource resource/gitlab_project_security_policy_attachment: Add new resource for associating security policy projects to a project by @​PatrickRice (merge request)
• resource/gitlab_personal_access_token: Migrate gitlab_personal_access_token from SDK to TF Plugin Framework by @​theipster (merge request)

BUG FIXES (4 changes)

• resource/gitlab_deploy_key: Fix deploy key documentation reference to point to the correct resource for enabling a pre-existing deploy key by @​blrz (merge request)
• resource/gitlab_user_runner: Fix an issue with gitlab_user_runner causing inconsistent TF plans by @​PatrickRice (merge request)

v17.1.0

Compare Source

This release was tested against GitLab 17.1, 17.0, and 16.11 for both CE and EE

BUG FIXES (3 changes)

• resource/gitlab_project_job_token_scopes: Correct examples for resource project_job_token_scopes by @​heidi.berry (merge request)
• resource/gitlab_group_access_token: Fix an issue where using access tokens with a time provider caused segfaults by @​PatrickRice (merge request)
• resource/gitlab_project_access_token: Fix an issue where using access tokens with a time provider caused segfaults by @​PatrickRice (merge request)

IMPROVEMENTS (8 changes)

• New Resource resource/gitlab_telegram_integration: Implement Telegram Integration by @​alxrem (merge request)
• resource/gitlab_group_saml_link: Add ability to set custom roles on group SAML links by @​heidi.berry (merge request)
• resource/gitlab_integration_slack: Add confidential_note_channel to slack integration by @​0oMarko0 (merge request)
• resource/gitlab_personal_access_token: Implement manage_runner access token scope (merge request)
• resource/gitlab_personal_access_token: Mark expires_at attribute as optional by @​erezo9 (merge request)
• resource/gitlab_group_access_token: Fixed several documentation issues with access token resources by @​theipster (merge request)
• resource/gitlab_project_access_token: Fixed several documentation issues with access token resources by @​theipster (merge request)
• resource/gitlab_project: Update initialize_with_readme to add border case documentation by @​PatrickRice (merge request)

v17.0.1

Compare Source

This release was tested against GitLab 17.0, 16.11, and 16.10 for both CE and EE

BUG FIXES:

• Fixed an issue where sensitive tokens were not masked properly in debug log files (!1997)

v17.0.0

Compare Source

This release was tested against GitLab 17.0, 16.11, and 16.10 for both CE and EE

KNOWN ISSUES:

• gitlab_current_user returns an empty string for public_email (#​6305)

BREAKING CHANGES:

• resources/project_protected_environment: Removed support for required_approval_count field, use required_approvals in approval_rules or deploy_access_level instead (!1940)
• resources/group_protected_environment: Removed support for required_approval_count field, use required_approvals in approval_rules or deploy_access_level instead (!1940)
• resources/gitlab_group: Removed a version check related to commit_committer_check and reject_unsigned_commits that would prevent their use in versions prior to GitLab 16.4. If used with versions earlier than 16.4, these attributes will cause an error instead of being excluded. (!1937)
• resources/gitlab_group: Removed support for emails_disabled, use emails_enabled instead (!1929)
• resources/gitlab_project: Removed support for emails_disabled, use emails_enabled instead (!1929)
• resources/gitlab_pipeline_schedule: ref now requires the full ref instead of allowing the use of the short ref. If you previously used main, you now need to use refs/heads/main instead, for example (!1923)
• resources/gitlab_pipeline_trigger: token can no longer be imported. (!1905)
• resources/gitlab_pipeline_trigger: Updating the project attribute will now force the creation of a new pipeline trigger (!1905)
• data/gitlab_group(s): Removed support for emails_disabled, use emails_enabled instead (!1929)
• data/gitlab_project(s): Removed support for emails_disabled, use emails_enabled instead (!1929)
• data/gitlab_project(s): Removed support for public, use visibility instead (!1929)
• master is no longer a valid access level on any resource that supports the use of access levels. This impacts the resources listed below. (!1903)
  • gitlab_group_access_token
  • gitlab_group_ldap_link
  • gitlab_group_membership
  • gitlab_group_share_group
  • gitlab_project_access_token
  • gitlab_project_membership
  • gitlab_project_share_group

IMPROVEMENTS:

• New Resource resource/gitlab_integration_jenkins: Allows managing a project Jenkins integration (!1919)
• New Resource resource/gitlab_project_push_rules: Allows managing the lifecycle of push rules on a project (!1893)
• New Resource resource/gitlab_project_job_token_scopes: This resource sets a strict list of project job token scopes, and removes any job token scopes not managed by the resource. This can be useful to explicitly deny job token scopes on a project. (!1907)
• resources/gitlab_pipeline_schedule_variable: Added support for the use of variable_type (!1952)
• resources/gitlab_group: Added support for the use of commit_committer_name_check to the push_rules block (!1937)
• resources/gitlab_project: Added support for the use of commit_committer_name_check to the push_rules block (!1918)
• resources/gitlab_instance_variable: Added support for the use of description (!1950)
• resources/gitlab_user_runner: Added example documentation for this resource to make it easier to consume (!1928)
• resources/gitlab_application_settings: Add support for minimum_password_length to the resource (!1917)
• resources/gitlab_personal_access_token: Updated the API used to read personal access token data, which improves performance of this resource in situations where many tokens are being maintained, and improves reliability of the resource in high concurrency situations (!1908)
• data/gitlab_instance_variable: Added support for description (!1950)
• provider: Added documentation that the use of Project Access Tokens or Group Access Tokens may not work with all resources (!1928)

BUG FIXES:

• resources/gitlab_pipeline_schedule: Fixed a provider crash in situations where the scheduled pipeline fails to create (!1899)
• resources/gitlab_group: Fixed a provider error when attempting to create groups with push_rules on GitLab CE where push_rules are not supported (!1891)
• resources/gitlab_group_access_token: Fixed an issue with token rotation using rotation_configuration where tokens wouldn't rotate properly after expires_at was stored in state. Added additional debug logging for token rotation. (!1953)
• resources/gitlab_group_access_token: Fixed an issue with token rotation where manually managing expiration using expires_at would encounter an error after updating expires_at twice (!1916)
• resources/gitlab_project_access_token: Fixed an issue with token rotation using rotation_configuration where tokens wouldn't rotate properly after expires_at was stored in state. Added additional debug logging for token rotation. (!1953)
• resources/gitlab_project_access_token: Fixed an issue with token rotation where manually managing expiration using expires_at would encounter an error after updating expires_at twice (!1916)
• resources/gitlab_pipeline_trigger: Fixed a bug where applying TF with different users could corrupt the pipeline trigger token !1905

---

Configuration

Schedule: Branch creation - "* * * * 1-5" in timezone Europe/London, Automerge - At any time (no schedule defined).

Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot.