The following upstream API schema changes required corresponding provider schema updates. Existing state files load without user action (the plugin framework silently drops attributes that no longer exist in the schema), but Terraform configurations that still reference removed attributes must be updated before terraform plan will succeed.
hostname_tls_setting: the cloudflare_hostname_tls_setting data source now requires hostname as an input parameter instead of returning it as a computed attribute. The computed id attribute has been removed; use setting_id instead. (ece27fe)
image_variant: the computed variant nested attribute has been removed. The API no longer returns this wrapper object; the id, options, and never_require_signed_urls fields remain available at the top level. Remove any references to cloudflare_image_variant.<name>.variant from your configurations. (738bd28)
organization: the computed meta.flags nested attribute has been renamed to meta.tenant_flags. Two new computed sub-attributes (enterprise_capability, member_management) have been added. Update any references from .meta.flags to .meta.tenant_flags. (ece27fe)
zero_trust_access_ai_controls_mcp_portal: the allow_code_mode attribute is now deprecated and no longer computed with a default of true. Use the new code_mode attribute ("off", "opt_in", "default_on", "enforced") instead. Configurations that relied on the computed default must explicitly set code_mode or allow_code_mode. (ece27fe)
zero_trust_access_policy: the session_duration attribute is no longer computed with a default of "24h". It is now optional-only. Existing configurations that omitted session_duration and relied on the provider default will see a plan diff; explicitly set session_duration = "24h" to preserve the previous behavior. (ae4f5a1)
zero_trust_organization: the allowed_authenticators enum value ssh_piv_key has been renamed to piv_key, and a new value ssh_fido2_key has been added. Configurations using "ssh_piv_key" must be updated to "piv_key". (ece27fe)
zero_trust_resource_library_application: the id attribute type changed from String to Int64. The computed intel_id attribute has been removed. The hostnames, ip_subnets, port_protocols, support_domains, and supported attributes changed from List to Set (element ordering is no longer significant). These changes apply to both the resource data source and the list data source. (ece27fe)
zero_trust_resource_library_category: the id attribute type changed from String to Int64 on both the data source and list data source. (ece27fe)
zero_trust_tunnel_cloudflared: the computed is_pending_reconnect attribute has been removed from connections. The upstream API no longer returns this field. Remove any references to connections[*].is_pending_reconnect from your configurations. (ece27fe)
zero_trust_tunnel_warp_connector: the computed is_pending_reconnect attribute has been removed from connections, matching the zero_trust_tunnel_cloudflared change above. (ece27fe)
New Resources
cloudflare_ct_alerting: onboard new Terraform resource for Certificate Transparency alerting (ece27fe)
cloudflare_precursor: onboard new Terraform resource for Precursor (ece27fe)
New Data Sources
cloudflare_hostname_tls_settings: add list data source for hostname TLS settings (ece27fe)
The following upstream API schema changes required corresponding provider schema updates. Existing state files load without user action (the plugin framework silently drops attributes that no longer exist in the schema), but Terraform configurations that still reference removed attributes must be updated before terraform plan will succeed.
ai_search_instance: the source_params.web_crawler.crawl_options block has been removed. Cloudflare's AI Search API dropped this field from its public schema in June 2026 and no longer accepts it, so keeping it in the provider would surface as a runtime API error rather than a plan-time error. Remove any crawl_options { ... } block from your cloudflare_ai_search_instance configurations. (0843c7f)
zero_trust_access_ai_controls_mcp_portal: the servers attribute changed from a list to a set. HCL syntax is unchanged (servers = [ ... ]), but element ordering is no longer significant — Terraform will no longer plan a change when only the order of servers entries differs, and any code that relied on stable list ordering (e.g. element(..., 0)) may need to be updated. (099fc24)
Notes
managed_transforms:managed_request_headers and managed_response_headers are now Optional instead of Required. Existing configurations that set both blocks keep working unchanged; you may now omit either block if you don't need to manage those transforms. (928173)
New Resources
cloudflare_moq_relay: onboard new Terraform resource for Media over QUIC (MoQ) relays (9f2678c)
Features
d1_database: add v4-to-v5 state upgrader (32f42b1)
custom_origin_trust_store: fix certificate drift with normalization (42de890)
custom_ssl: fix patch cert replacement and send bundle_method (bebe53b)
dlp_predefined_profile: eliminate perpetual entries and enabled_entries drift (92dcfc0)
dns_record: avoid unnecessary drift for ipv4_only and ipv6_only attributes (3df5e03)
dns_record: remove private_routing default value (ada77b4)
drift: preserve prior state for optional fields not returned by API (access_rule, gateway_policy, gateway_settings, zone_dnssec, dlp_predefined_profile) (b717f4d)
leaked_credential_check_rule: handle empty ID from v4 provider state migration (70f0337)
certificate_pack: add terraform config for CRUD support. This ensures proper Terraform resource ID handling for path parameters in API calls. (081f32a)
leaked_credentials_check: Add GET endpoint for leaked_credentials_check/detections (feafd9c)
zero_trust_access_group: v4 to v5 migration acceptance tests (9c877c7)
zero_trust_access_mtls_hostname_settings: use v2 migrator (b14aa6d)
zero_trust_dlp_custom_entry: support upload_status (7dc0fe3)
zero_trust_dlp_entry: support upload_status (7dc0fe3)
zero_trust_dlp_integration_entry: support upload_status (7dc0fe3)
zero_trust_dlp_predefined_entry: support upload_status (7dc0fe3)
zero_trust_gateway_policy: support forensic_copy (5741fd0)
zero_trust_list: support additional types (category, location, device) (5741fd0)
Bug Fixes
access_rules: Add validation to prevent state drift. Ideally we'd use Semantic Equality but since that isn't an option, this will remove a foot-gun. (4457791)
The 5.13 release includes major updates to the cloudflare_api_token resource to eliminate configuration drift caused by policy ordering differences in the Cloudflare API.
policies are now a Set; order is ignored to prevent drift.
When defining a policy, resources must use jsonencode(); all policy resource values must now be JSON-encoded strings.
Removed fields: id, name, and meta have been removed from policy blocks.
Required Action (v5.13+)
Customers looking to upgrade to v5.13+ must update all cloudflare_api_token & cloudflare_account_token resources to wrap policy resource values in jsonencode()
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [cloudflare](https://registry.terraform.io/providers/cloudflare/cloudflare) ([source](https://github.com/cloudflare/terraform-provider-cloudflare)) | required_provider | minor | `~> 5` → `>= 5` |
---
### Release Notes
<details>
<summary>cloudflare/terraform-provider-cloudflare (cloudflare)</summary>
### [`v5.24.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5240-2026-08-20)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.23.0...v5.24.0)
Full Changelog: [v5.23.0...v5.24.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.23.0...v5.24.0)
##### BREAKING CHANGES
The following upstream API schema changes required corresponding provider schema updates. Existing state files load without user action (the plugin framework silently drops attributes that no longer exist in the schema), but Terraform **configurations** that still reference removed attributes must be updated before `terraform plan` will succeed.
- **hostname\_tls\_setting:** the `cloudflare_hostname_tls_setting` data source now requires `hostname` as an input parameter instead of returning it as a computed attribute. The computed `id` attribute has been removed; use `setting_id` instead. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **image\_variant:** the computed `variant` nested attribute has been removed. The API no longer returns this wrapper object; the `id`, `options`, and `never_require_signed_urls` fields remain available at the top level. Remove any references to `cloudflare_image_variant.<name>.variant` from your configurations. ([738bd28](https://github.com/cloudflare/terraform-provider-cloudflare/commit/738bd28e14408e9012fd6487e6e4c8e46bf397ea))
- **organization:** the computed `meta.flags` nested attribute has been renamed to `meta.tenant_flags`. Two new computed sub-attributes (`enterprise_capability`, `member_management`) have been added. Update any references from `.meta.flags` to `.meta.tenant_flags`. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_access\_ai\_controls\_mcp\_portal:** the `allow_code_mode` attribute is now deprecated and no longer computed with a default of `true`. Use the new `code_mode` attribute (`"off"`, `"opt_in"`, `"default_on"`, `"enforced"`) instead. Configurations that relied on the computed default must explicitly set `code_mode` or `allow_code_mode`. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_access\_policy:** the `session_duration` attribute is no longer computed with a default of `"24h"`. It is now optional-only. Existing configurations that omitted `session_duration` and relied on the provider default will see a plan diff; explicitly set `session_duration = "24h"` to preserve the previous behavior. ([ae4f5a1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae4f5a1d14cfda92bee0471a976e0b597ebce880))
- **zero\_trust\_organization:** the `allowed_authenticators` enum value `ssh_piv_key` has been renamed to `piv_key`, and a new value `ssh_fido2_key` has been added. Configurations using `"ssh_piv_key"` must be updated to `"piv_key"`. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_resource\_library\_application:** the `id` attribute type changed from `String` to `Int64`. The computed `intel_id` attribute has been removed. The `hostnames`, `ip_subnets`, `port_protocols`, `support_domains`, and `supported` attributes changed from `List` to `Set` (element ordering is no longer significant). These changes apply to both the resource data source and the list data source. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_resource\_library\_category:** the `id` attribute type changed from `String` to `Int64` on both the data source and list data source. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_tunnel\_cloudflared:** the computed `is_pending_reconnect` attribute has been removed from `connections`. The upstream API no longer returns this field. Remove any references to `connections[*].is_pending_reconnect` from your configurations. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_tunnel\_warp\_connector:** the computed `is_pending_reconnect` attribute has been removed from `connections`, matching the `zero_trust_tunnel_cloudflared` change above. ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
##### New Resources
- **cloudflare\_ct\_alerting:** onboard new Terraform resource for Certificate Transparency alerting ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **cloudflare\_precursor:** onboard new Terraform resource for Precursor ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
##### New Data Sources
- **cloudflare\_hostname\_tls\_settings:** add list data source for hostname TLS settings ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
##### Features
- bump Go SDK version to v7.9.0 ([79c7d4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/79c7d4fe441405d3df953c1e43f6ace406aad52b))
- **ai\_gateway:** add `log_classification` attribute and `unified` billing mode ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **ai\_search\_instance:** add `discover_options` for link-following web crawler configuration ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **ai\_search\_namespace:** add `public_endpoint_params` with MCP, rate limiting, custom domains, and chat completions configuration ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **cloud\_connector\_rules:** add `oci_storage` cloud provider type ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **d1\_database:** add `us` location restriction value ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **load\_balancer\_pool:** add `health_sources` attribute for regional health steering ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **ruleset:** add vary parameter to set\_cache\_settings action ([e9cdc20](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e9cdc20b27501bb7368df444818a6717ae625142))
- **waiting\_room:** add Latvian (`lv-LV`) language support ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **worker:** add `preview_url_suffix` and `url` computed attributes to subdomain block ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **worker\_version:** add `messaging` binding type ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_access\_ai\_controls\_mcp\_portal:** add `code_mode` attribute for granular Code Mode policy control ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_access\_ai\_controls\_mcp\_server:** add `authentication_status` computed attribute ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_access\_application:** add worker destination types for Access ([118fe39](https://github.com/cloudflare/terraform-provider-cloudflare/commit/118fe3907372ad9d185025cfa6e6d64b31f83028))
- **zero\_trust\_access\_custom\_page:** add `contract_version`, `warnings`, and new `type` values (`login`, `interstitial`) ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_access\_service\_token:** add `enabled` attribute to control service token activation ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_dlp\_\*\_entry:** add computed `deprecated` attribute to all DLP entry resources and data sources ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zero\_trust\_organization:** add `warp_auth_non_browser_401` attribute for non-browser 401 responses ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
- **zone\_setting:** add `webmcp_enabled` and `webmcp_packs` setting IDs ([ece27fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ece27fee47f3fb7229d16fc73354ea755b96b285))
##### Bug Fixes
- guard against nil pointer dereference in dynamic semantic equality ([d82bbd5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d82bbd5a71ca2f22fba036dcc44c5c7c3ad41a88))
- **image\_variant:** fix nested variant response deserialization ([738bd28](https://github.com/cloudflare/terraform-provider-cloudflare/commit/738bd28e14408e9012fd6487e6e4c8e46bf397ea))
- port v5.23.0 regression fixes from GitHub main ([ae4f5a1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae4f5a1d14cfda92bee0471a976e0b597ebce880))
- remove duplicate declarations causing build failures ([dc360d2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc360d2a4f35974478397468eaf45ac5372144bc))
##### Documentation
- **image\_variant:** update resource documentation ([bab4b71](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bab4b71bcb0a9228e86786e26bb4c6b393a39c2f))
- regenerate provider documentation ([79c7d4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/79c7d4fe441405d3df953c1e43f6ace406aad52b))
- restore .md extensions on internal guide cross-links ([f51c9d6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f51c9d656039454555755b050b2619967f3e02ca))
### [`v5.23.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5230-2026-07-30)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.22.0...v5.23.0)
Full Changelog: [v5.22.0...v5.23.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.22.0...v5.23.0)
##### New Data Sources
- **cloudflare\_zero\_trust\_dlp\_custom\_prompt\_topic:** add data source for DLP custom prompt topics ([ae6a505](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae6a505c6e))
- **cloudflare\_zero\_trust\_dlp\_custom\_prompt\_topics:** add list data source for DLP custom prompt topics ([ae6a505](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae6a505c6e))
##### Features
- bump Go SDK version to v7.8.0 ([ae6a505](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae6a505c6e))
- **hyperdrive\_config:** add v4 to v5 state migration ([cdd5ca6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cdd5ca697d))
- **turnstile\_widget:** add `deployed_via` and `last_modified_via` computed fields, and default `offlabel` to `false` ([5952e95](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5952e9599f))
- **zero\_trust\_device\_default\_profile:** add `global_acceleration` block for configuring custom tunnel and API endpoints ([5952e95](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5952e9599f))
- **zero\_trust\_gateway\_policy:** add `delete_headers` support in request header modification settings ([5952e95](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5952e9599f))
##### Bug Fixes
- **d1\_database:** initialize read\_replication in state upgrader to prevent 400 error ([298799b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/298799b3e0))
- **load\_balancer\_pool:** preserve origins order to prevent perpetual drift ([aad09cc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/aad09ccc39))
- **zero\_trust\_access\_ai\_controls\_mcp\_portal:** migrate servers state from list to set ([9766b3a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9766b3a5e4))
- **zero\_trust\_access\_policy:** resolve perpetual diff by calling normalization in CRUD ([497f06b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/497f06bdbd))
- **zero\_trust\_device\_custom\_profile:** resolve perpetual drift on default, include, target\_tests, and exclude nested attributes ([f74cecf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f74cecf3ae))
- **zero\_trust\_device\_custom\_profile:** address review feedback on normalization ([969b35d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/969b35dbef))
- **zero\_trust\_dex\_test:** remove stale model fields that caused value conversion panics during resource operations ([fd43d83](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fd43d83bfe))
- **zero\_trust\_organization:** normalize mfa\_required\_for\_all\_apps to prevent perpetual diff ([001c28e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/001c28eab4))
- **workers\_custom\_domain:** populate computed fields from a post-create read to prevent import drift ([fd43d83](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fd43d83bfe))
- **pages\_project:** fix `source.config` drift for API-populated fields by preserving computed state values ([c63f15e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c63f15e1fa))
##### Chores
- add .terraform-registry for ownership transfer ([d33bc90](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d33bc904d8))
- **internal:** codegen related update ([ae6a505](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae6a505c6e))
##### Documentation
- add workers\_secret migration guidance with tf-migrate support ([524b26a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/524b26a608))
- fix account\_subscription examples ([2ebc7db](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2ebc7db73b))
- **migration-guide:** add table of contents to v5 migration guide ([e11e8a4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e11e8a41b5))
- regenerate provider documentation ([4656c9f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4656c9f412))
- resolve AI review doc warnings ([691131e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/691131e7e1))
### [`v5.22.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5220-2026-07-09)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.21.1...v5.22.0)
Full Changelog: [v5.21.1...v5.22.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.21.1...v5.22.0)
##### ⚠ BREAKING CHANGES
The following upstream API schema changes required corresponding provider schema updates. Existing state files load without user action (the plugin framework silently drops attributes that no longer exist in the schema), but Terraform **configurations** that still reference removed attributes must be updated before `terraform plan` will succeed.
- **ai\_search\_instance:** the `source_params.web_crawler.crawl_options` block has been removed. Cloudflare's AI Search API dropped this field from its public schema in June 2026 and no longer accepts it, so keeping it in the provider would surface as a runtime API error rather than a plan-time error. Remove any `crawl_options { ... }` block from your `cloudflare_ai_search_instance` configurations. ([0843c7f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0843c7fddb))
- **zero\_trust\_access\_ai\_controls\_mcp\_portal:** the `servers` attribute changed from a list to a set. HCL syntax is unchanged (`servers = [ ... ]`), but element ordering is no longer significant — Terraform will no longer plan a change when only the order of `servers` entries differs, and any code that relied on stable list ordering (e.g. `element(..., 0)`) may need to be updated. ([099fc24](https://github.com/cloudflare/terraform-provider-cloudflare/commit/099fc248c2))
##### Notes
- **managed\_transforms:** `managed_request_headers` and `managed_response_headers` are now `Optional` instead of `Required`. Existing configurations that set both blocks keep working unchanged; you may now omit either block if you don't need to manage those transforms. ([928173](https://github.com/cloudflare/terraform-provider-cloudflare/commit/928173931c))
##### New Resources
- **cloudflare\_moq\_relay:** onboard new Terraform resource for Media over QUIC (MoQ) relays ([9f2678c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9f2678c139))
##### Features
- **d1\_database:** add v4-to-v5 state upgrader ([32f42b1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/32f42b15e2))
- **d1\_database:** add CRUD acceptance tests ([3491e69](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3491e698c5))
- **hyperdrive\_config:** add comprehensive acceptance tests ([59399bb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/59399bb0bc))
- **oauth:** add oauth\_client resource CRUD support ([154668f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/154668f077))
- **workers\_custom\_domain:** add acceptance tests for resource, data sources, and import ([26e0092](https://github.com/cloudflare/terraform-provider-cloudflare/commit/26e009263e))
- **workers\_script:** add exports and package\_dependencies to schema ([c15cef1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c15cef131c))
- **zero\_trust\_access\_application:** add `file` as valid RDP connection\_rules value ([2659e30](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2659e30cd1))
- **zero\_trust\_access\_short\_lived\_certificate:** add MoveState handler for access\_ca\_certificate rename (v4 -> v5 auto-migration) ([90f3324](https://github.com/cloudflare/terraform-provider-cloudflare/commit/90f3324dd4))
##### Bug Fixes
- **dns\_record:** dedupe schema key and drop unused import ([8faa422](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8faa422842))
- **dns\_record:** revert Meta model to jsontypes.Normalized to match schema ([c0eea18](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c0eea18adb))
- **docs:** add .md extension to migration guide links ([7546f3e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7546f3e944))
- **hyperdrive\_config:** address review feedback ([92ce892](https://github.com/cloudflare/terraform-provider-cloudflare/commit/92ce892f1c))
- **load\_balancer\_pool:** remove phantom flatten\_cname from v4 source model ([baa1b92](https://github.com/cloudflare/terraform-provider-cloudflare/commit/baa1b9267b))
- **migration:** correct v4 test configs and migration test harness for access\_ca\_certificate ([2c47cf7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2c47cf740f))
- **moq\_relay:** add schema Version: 500 ([890b9f9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/890b9f97e0))
- **oauth:** remove custom oauth visibility change ([6b4a0ed](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6b4a0ed61e))
- **ruleset:** add asset\_name to v4 source schema so v4->v5 state upgrader parses correctly ([baa1b92](https://github.com/cloudflare/terraform-provider-cloudflare/commit/baa1b9267b))
- **worker\_version:** add CustomType to assets schema to match model ([7e7e0d3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7e7e0d346d))
- **worker\_version:** use NestedObject accessors for Assets field ([78d419f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/78d419f944))
- **workers\_custom\_domain:** address review feedback ([3271949](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3271949dc5))
- **workers\_script:** resolve duplicate cache\_options tag ([c15cef1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c15cef131c))
- **zero\_trust\_list:** handle ambiguous schema\_version=0 state (v4 vs v5) ([c010f78](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c010f78ee9))
##### Chores
- **api:** force regen of moq\_relay and email\_routing\_rule ([a9e500a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a9e500ac4f))
- **ci:** add 30m timeout to unit test shards ([635637b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/635637bf38))
- **ci:** trigger acceptance tests on release-tf-\* branches ([5921d00](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5921d001ad))
- **go.mod:** pin cloudflare-go to release-770 branch head for v5.22.0 ([05272f3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/05272f309f))
- **internal:** codegen related update ([c7a96ca](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c7a96ca692))
- use 'next' for Terraform builds ([30c04e6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/30c04e6241))
##### Documentation
- **list:** fix missing comma in resource and data source examples ([bfe1c34](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bfe1c3471c))
- regenerate provider docs; fix provider address and .stats.yml ([cbde062](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cbde062d62))
- update documentation for moved blocks to Terraform 1.8 ([d93208d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d93208bdf5))
- **v5-migration:** document session\_duration behavior change for access policies ([90c58a7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/90c58a77cc))
- **v5-upgrade:** add destructive-behavior warning for app-scoped policy migration ([1e832d6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1e832d6a33))
- **v5-upgrade:** document zone\_id removal for access policies ([831f0bb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/831f0bbef9))
### [`v5.21.1`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5211-2026-06-23)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.21.0...v5.21.1)
Full Changelog: [v5.21.0...v5.21.1](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.21.0...v5.21.1)
##### Bug Fixes
- **worker:** stop sending propagation\_policy when not configured ([#​7192](https://github.com/cloudflare/terraform-provider-cloudflare/issues/7192)) ([31d9a31](https://github.com/cloudflare/terraform-provider-cloudflare/commit/31d9a31e1a1cd743f74aa6728cf899a6e83270a0))
### [`v5.21.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5210-2026-06-19)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.20.0...v5.21.0)
Full Changelog: [v5.20.0...v5.21.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.20.0...v5.21.0)
##### Features
- add new resources from staging-next ([e104922](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e10492221fdee30ffb10a438a1dfff62c6ab0126))
##### Bug Fixes
- add missing no-op state upgraders for version 0 -> 500 ([692a0c6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/692a0c6a4d1fc0f9239ca8f11b9cb8855e41c3e4)), closes [#​7181](https://github.com/cloudflare/terraform-provider-cloudflare/issues/7181)
- restore account\_id and zone\_id as required on 156 resources ([62024cf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/62024cfc80a171b236e14946dfdfee5b1289e5d2))
- **workers\_script:** add missing propagation\_policy to observability traces schema ([78448d8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/78448d877959879ec5f2d059b6a26b0e6dea1c95))
- **zone:** only sweep zones containing the cftftest prefix ([293ab21](https://github.com/cloudflare/terraform-provider-cloudflare/commit/293ab2145bf50a6a35012a2a061b94571892d196))
##### Chores
- Add acceptance tests for DLP data classification resources ([b85f20c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b85f20cb104acc625ca5402f6463277938b33369))
- **ci:** optimize CI workflow runtime ([7aa373f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7aa373fd6badec68d59f2a4218f5400274b085ea))
- clean up ([e36c8a3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e36c8a37ceac0c41b62eef795dd7d7901672545a))
##### Documentation
- add docs for v5.20.1 release ([712db1d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/712db1df4a62d39a4c49e2d7953211a532efdb5e))
### [`v5.20.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5200-2026-06-13)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.19.1...v5.20.0)
Full Changelog: [v5.19.1...v5.20.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.19.1...v5.20.0)
##### Features
- add 11 new resources/data-sources from staging-next ([faab405](https://github.com/cloudflare/terraform-provider-cloudflare/commit/faab40574cfdbf9e60763d1b1cd059503061c16d))
- add acceptance tests for google\_tag\_gateway resource ([f89e15f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f89e15ff5565d7d91b546bae5fcb3a375f84c0d3))
- add acceptance tests for virtual\_networks on zero\_trust\_device\_custom\_profile ([0625153](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0625153946c7c914550496b33e93ad41fec8eaec))
- add state upgraders for email\_security\_block\_sender + impersonation\_registry ([bc22174](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bc221743c5aa33af7328d72b6f526c1bc1ed0c78))
- chore: skip failing deployment\_groups tests ([614c726](https://github.com/cloudflare/terraform-provider-cloudflare/commit/614c72625b4d059230c4d5a334ab1e249657bf69))
- chore: skip failing Go SDK tests for workers bulk secret update ([69d2591](https://github.com/cloudflare/terraform-provider-cloudflare/commit/69d2591ebc7ceab0d08c3c9316204078566e3266))
- chore: use cloudflare-go v7.5.0 in Terraform build ([fd1ab3e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fd1ab3e4b93000f09aaee55eec1df8cdaa74f3c7))
- chore: use released Go SDK for Terraform build ([e31d0f5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e31d0f569fa9f42e6afdee5485a01b19e344d8db))
- chore: use released Go SDK for Terraform build ([858be78](https://github.com/cloudflare/terraform-provider-cloudflare/commit/858be7851a62ba657d0516820f8319b3648fcd5e))
- feat: add custom\_csrs Stainless config (zone + account) ([0c37d4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0c37d4f4aedd3721e371a9de2ca78d9fcb68abcd))
- feat: add custom\_csrs Stainless config (zone + account) ([408836e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/408836e0894d5811e02d469ab6571098e49b8d74))
- feat: add resource library endpoints inside zero trust ([8f71612](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8f71612f9ab0ba1e46204495eeb5ef82cc1389e6))
- feat: move google\_tag\_gateway terraform resource from staging to production ([b4f6126](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b4f6126ea79c4d5c9d959ff2629f7a8c6e1c78a3))
- feat(api): add zero\_trust\_device\_deployment\_groups resource ([3de6e62](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3de6e6232f023f21e5149bcc68d4b3d695a7469e))
- feat(api): add zero\_trust\_device\_deployment\_groups resource ([c852320](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8523200bebffe7edfc2898d5a2facecacd51df8))
- feat(cache): add create (POST) method for smart\_tiered\_cache ([26568ea](https://github.com/cloudflare/terraform-provider-cloudflare/commit/26568ea656348b7ea9b64f1120c389b0abb4ce53))
- feat(cache): Update OPCR config to v2 endpoints (CACHE-13523) ([278c81f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/278c81fcf087a9178db058172370e4e6d7f31033))
- feat(dex): add device ISPs endpoint mapping ([4c7ad2c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c7ad2ce669c11c0d667d37e70d1114fdc621e3e))
- feat(dlp): add custom prompt topics endpoint \[production] ([7732fd9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7732fd9cecaa58374c42491682fc9951a3b44a53))
- feat(dlp): add custom prompt topics endpoint \[production] ([305dab6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/305dab63f3cbd22774ffce4ff1fd46b73e31f829))
- feat(dlp): promote classification Stainless config to main ([d8803bd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d8803bdf8c6f5dbc5bb2db65c1580ceb79958c93))
- feat(flagship): add Flagship feature flag API resource mappings ([2b149cf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b149cfc3f3e06a6b74b573066897ee5e1222ff1))
- feat(resource\_sharing): add Terraform resource definitions for shares ([d83b268](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d83b2682d8dc328010359f33784b4dff5e4a9cf5))
- feat(snippets): add terraform id\_property annotations for snippet and snippet\_rules ([1781d02](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1781d0201d07ad2d906eca234ef48b5e27f741c1))
- fix(iam): remove standalone\_api from oauth\_scopes subresource ([8af9cd0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8af9cd03be655164ea9074d17a8e51c6e1831cff))
##### Bug Fixes
- **account\_member:** missing upgrade path from v5.0-v5.15 ([d5c2a93](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d5c2a937869fca45806cf2852e81d7a0936b0bd5))
- add no-drift plan checks and domain precheck ([e4eaf52](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4eaf527dc710f6d867415bc5ba157942469f800))
- add read\_only field to identity provider migration target model ([ac4ec4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ac4ec4fe7a10d8f6219a1a24a6134693f06fa474))
- align migration target models + schemas to fix parity tests ([f5ea496](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f5ea496c3410820eadf9cf4c7a1bc5d2d1521ddf))
- **authenticated\_origin\_pulls\_settings:** nil pointer panic ([cf8099b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cf8099bb0f00b77f025102645e7fd8ebde8dfb0a))
- **bot\_management:** restore content\_bots\_protection handling in model.go ([d559753](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d55975366308f3988478391bd1c55465b58b757a))
- derive zone name from Read instead of missing API field ([0d5feef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0d5feef2076b43177d489841dfb95c6f380a6e19))
- **dns\_record:** prevent FQDN normalization from swallowing name shortening changes ([2131622](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2131622f77333dc4d650e59b6f5007b5963007f7))
- **email\_security\_trusted\_domains:** align model JSON tags with Optional schema ([5ee457f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5ee457f5e67bc926e7ef7435765285673aca8055))
- **email:** missed Optional revert + email\_security\_trusted\_domains state upgrader ([8f3ddad](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8f3ddad6004cdc3ffef20274b87893f6d2dda878))
- gracefully handle nil pointer dereference when config has attributes\_flat during migration ([589384d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/589384daff6113e19ea36f6b2b9024705c986097))
- **leaked\_credential\_check\_rule:** skip tests that require product enablement ([fc2d109](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fc2d10965c8c822a01db18d92a1c30b9fd5949f1))
- **list:** nullify empty nested objects to prevent inconsistent result after apply ([7bcee4b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7bcee4b36b2b1700b49ed4abb037b942b00537db))
- **load\_balancer\_pool:** accept early-v5 object-shape state at schema\_version=0 ([23050e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/23050e18196ec5fbe9842898cda02b0378fc91d5)), closes [#​7098](https://github.com/cloudflare/terraform-provider-cloudflare/issues/7098)
- **load\_balancer\_pool:** add UseStateForUnknown for load\_shedding attribute to prevent drift ([3fc31ee](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3fc31ee817d0b4defebdacadc500d17eefcadacc))
- **r2\_custom\_domain:** restore degraded-response handling in resource.go ([b3d01a0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b3d01a00c91cf9ba8afeeeb0a418fbb27bf7ee2d))
- **regional\_hostname:** update cloudflare-go imports from v6 to v7 ([d4211c4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d4211c4d55a4851e2f3d195dee02a34671bc0c09))
- register regional\_hostname in provider.go ([3a87345](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3a87345eaed8147a3b7ce5091328cbb0d39c1e9c))
- resolve pre-existing v6/v7 and codegen-drift build errors ([27aed32](https://github.com/cloudflare/terraform-provider-cloudflare/commit/27aed3244897870171063173b14140da4e14874a))
- restore handwritten code stripped from staging-next codegen for acceptance tests ([6920a59](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6920a591d4baf73fb250f34d1836dea777ae4fd8))
- restore production files lost to codegen drift on staging-next ([1bba117](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1bba117a46ed23c777f01bf37e9144d18e8b8b6c))
- restore site\_id/queue\_id path tags to 'required' in data source models ([56b6a34](https://github.com/cloudflare/terraform-provider-cloudflare/commit/56b6a3400b2f5c6c96a5b2a7020adaa9f3f40be6))
- **secrets\_store:** fix model/schema parity and guard acceptance tests ([dde9b24](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dde9b2444b4d7fd68d61ddba410639ee2e9b712a))
- set initial schema version to 500 for all new resources ([ef71ba4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ef71ba4d0c241b7c75abc28047cef8b2ddc68285))
- **spectrum\_application:** accept early-v5 object-shape state at schema\_version=0 ([bdcaa79](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bdcaa79a4e876d02dbc4fbb3e490d1955ae4c031)), closes [#​7098](https://github.com/cloudflare/terraform-provider-cloudflare/issues/7098)
- **tests:** bump v6→v7 imports in restored hand-written tests ([4cf7eff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf7eff7ea74e90c7bae17f10fafc6090a488007))
- treeshaking required fields from optional ([94198f3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/94198f3ebfe2f17bd409e2790b0a06daa4059532))
- undo two over-corrections from previous batch ([08a3561](https://github.com/cloudflare/terraform-provider-cloudflare/commit/08a35617d09aee7d7ac2a92f63ee989d52ce0439))
- update go.sum and fix RecipientNewParams field rename ([931cb9f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/931cb9f9a3d5da926c293d01ba3f29a289dfc346))
- **worker\_version:** restore handwritten D1 database\_id handling ([ed78cd0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ed78cd0046da9260227c3c3bb68a4016206d85b4))
- **worker:** add propagation\_policy to grandparent observability Default ([c815f52](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c815f52c30ccddd7eaee37fd9312f40a3fc3ee74))
- **worker:** include propagation\_policy in observability.traces parent Default + update data source test ([541fe77](https://github.com/cloudflare/terraform-provider-cloudflare/commit/541fe77c8fa4a6c57348a9180db7968f7bac5160))
- **worker:** preserve observability.traces.propagation\_policy across reads ([458854e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/458854e614ab17e1b77c6732d251845647bddac7))
- **workers\_custom\_domain:** Missing CertId field in state migration ([17d852f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/17d852f3e02aed1aa614f40f901763afbc390dab))
- **workers\_script:** restore annotations Computed + workers\_triggered\_by ([d3d033a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d3d033a55c3d1bf7069cb3457c8936c6c88893f3))
- **workers\_script:** restore annotations Read workaround stripped by staging-next codegen ([d4f824f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d4f824f4bd9d96fcb39ba9bb6a6379eaa091e337))
- **zero\_trust\_access\_application:** skip MFA infrastructure test ([4dd2f87](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4dd2f87449f259e9ca302dc7088c21721cab7b24))
- **zero\_trust\_access\_identity\_provider:** add UseStateForUnknown to SAML-only config fields ([451e078](https://github.com/cloudflare/terraform-provider-cloudflare/commit/451e0784eb481e9b06f984e8ead4f2d5b042df2e))
- **zero\_trust\_access\_identity\_provider:** change read\_only from computed to optional ([b760efe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b760efe799acb88b1148b0acf17dde0447ba1d2b))
- **zero\_trust\_access\_identity\_provider:** drop universal Default on SAML-only config fields ([f297a75](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f297a75c4ca56ef2840dbe367591c9f5b4570c01))
- **zero\_trust\_access\_identity\_provider:** use UseNonNullStateForUnknown on scim\_config.scim\_base\_url ([55a8860](https://github.com/cloudflare/terraform-provider-cloudflare/commit/55a88601bfccf4615e8ffbfb2b52edc7cbe710cc))
- **zero\_trust\_access\_identity\_provider:** use UseNonNullStateForUnknown on scim\_config.secret ([4dab13d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4dab13deb6fbf06942cd786368a0ab429fcee358))
- **zero\_trust\_access\_policy:** Missing common\_names transform in migration ([ce95d8c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ce95d8cb58d044e288f655b0a6a5d2bdfe5348c4))
- **zero\_trust\_access\_policy:** populate account\_id when migrating zone-scoped v4 state ([513a91c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/513a91c3d7d77f7b8f0d04ac0d2f400f059b289c))
- **zero\_trust\_dlp\_predefined\_profile:** skip tests that require account-level OCR ([caed432](https://github.com/cloudflare/terraform-provider-cloudflare/commit/caed4327e504f11d7a50458fd844f88d800c2b3a))
##### Reverts
- **token:** drop custom.go restore to let PR [#​7148](https://github.com/cloudflare/terraform-provider-cloudflare/issues/7148) land cleanly ([04f46b5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/04f46b588bb75d6052cc39a53219ab81c6ae53ee))
##### Chores
- add feature request issue template ([eee01fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/eee01fed4500a84e00b78b03f7998942ee8df02b))
- **api\_token:** skip test not supported by account ([5056f63](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5056f63ea234c9f0f36fd1d21df55582ec811beb))
- **api:** update composite API spec ([fdcb705](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fdcb705cf83024c7fa710bfbbb405504dc01e5bf))
- **api:** update composite API spec ([b4ace62](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b4ace62d847df6966deacaf1a71a094089d0ac44))
- **api:** update composite API spec ([408be20](https://github.com/cloudflare/terraform-provider-cloudflare/commit/408be20f56710525431f23452f0d2d100caaa45a))
- **api:** update composite API spec ([37e67c1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/37e67c10bb46017cdcb5163f3ee2b1766073e128))
- **api:** update composite API spec ([5f2a7bd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5f2a7bd61f12b672058a4ecdeac3dc268c07f284))
- **api:** update composite API spec ([06e6ffc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/06e6ffc1854bdde477430cfcdb3aff5edcd955f2))
- **api:** update composite API spec ([63b0963](https://github.com/cloudflare/terraform-provider-cloudflare/commit/63b0963dd10e5a2382e01c66f0b169b2d7842229))
- **api:** update composite API spec ([d634850](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d634850a6a5beba39a681a4f13a236c08d8e44e6))
- **api:** update composite API spec ([0861a6a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0861a6af984f4c6622b93337c99c3c3f6e1437d4))
- **api:** update composite API spec ([7d350ac](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7d350ac1747998472eb2d30ff369818cf79c4186))
- **api:** update composite API spec ([14e308c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/14e308c2dc1d0409d5381d6dab5994bdb2260cd2))
- **api:** update composite API spec ([9376903](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9376903e476c05f50d94940cb96232f678cfff42))
- **api:** update composite API spec ([a83865d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a83865d2c9520ddbf8f588115acd3f467cccac4e))
- **api:** update composite API spec ([1c1ae98](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1c1ae9880bcd358dfdd4d561fd3aa7f82e4601a8))
- **api:** update composite API spec ([17d1f43](https://github.com/cloudflare/terraform-provider-cloudflare/commit/17d1f43f88e3f3d9cdd5cb0ae5b9b5fc0ed1ce26))
- **api:** update composite API spec ([7537630](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7537630abf70cfbc43b02da16bc4ac1d2e22f2cc))
- **api:** update composite API spec ([630c740](https://github.com/cloudflare/terraform-provider-cloudflare/commit/630c7403d76e293616498c0420114f39f5700386))
- **api:** update composite API spec ([921b330](https://github.com/cloudflare/terraform-provider-cloudflare/commit/921b33085ee58f5a18aeaefb9565abee877f4a14))
- **api:** update composite API spec ([61b0057](https://github.com/cloudflare/terraform-provider-cloudflare/commit/61b005797b219cb764ee631d4a533d5b23fee15c))
- **api:** update composite API spec ([007d65d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/007d65d6aaaae9a936ef1de0f01c68bd69f97968))
- **api:** update composite API spec ([87325df](https://github.com/cloudflare/terraform-provider-cloudflare/commit/87325dfc3b546491188f00250fa5da60c6bba04e))
- **api:** update composite API spec ([5b6f63b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5b6f63bc5f566d1303dded19112d8f20f8d785ee))
- **api:** update composite API spec ([796b467](https://github.com/cloudflare/terraform-provider-cloudflare/commit/796b46789864d5ec062cc0460a0d2bb19be97de1))
- **api:** update composite API spec ([29cb63f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/29cb63f512f1c478d36ea025123ec7d6986d9496))
- **api:** update composite API spec ([6fb099e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6fb099ef5ec77bf0d788916fac6742a7c1444baf))
- **api:** update composite API spec ([c0f463a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c0f463a1001c6953ba7dbaff3e25fb94e43a16a6))
- **api:** update composite API spec ([4b4f4e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4b4f4e1cbf18836e17ca922eda7939aa3cf8373a))
- **api:** update composite API spec ([cced166](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cced1666f474e34406b3f5c38ce3001b8393c823))
- **api:** update composite API spec ([1f0ef10](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f0ef100da6df079011195deea65adc9e4372912))
- **api:** update composite API spec ([3d0cc20](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3d0cc20875f7a054ddd5a02a2ca2312052b017b9))
- **api:** update composite API spec ([3bfa07f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3bfa07fed1ee01e47960888152786cf66ad6ef7c))
- **api:** update composite API spec ([b8d2fcb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b8d2fcb36099bc3d17476f950a4350452d941844))
- **api:** update composite API spec ([87be50c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/87be50ccd8ffe684e94e0999cf3a5693ffab3a97))
- **api:** update composite API spec ([0165de6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0165de6e6f48e0d1dfcebf3fa39e4b8ea6ce96c1))
- **api:** update composite API spec ([9cf975a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9cf975a7a925c993b74a5d290ff0ff6612814099))
- **api:** update composite API spec ([f0f1f80](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f0f1f80ca2ad14c199fb4cddcd7d9ea4fd174eb7))
- **api:** update composite API spec ([04bd66d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/04bd66da618edadfd36847e988e8c559ec0502da))
- **api:** update composite API spec ([2309417](https://github.com/cloudflare/terraform-provider-cloudflare/commit/23094175aadb2544c05daf3bdcb11a71ca5c7f3a))
- clarify description in feature request template ([892847a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/892847a8d2dcdd571315fc4e915b2619e68563e2))
- **deps:** migrate from cloudflare-go/v6 to /v7 ([6d752b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6d752b6c42e1baa20f1738b3acacf607124270c7))
- docs and examples ([cd5cd44](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cd5cd446bc08ccf00fb74f1b7ec23a2e1c04d1fc))
- generate docs ([420ed0b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/420ed0b3c81219d726d29450afa153c25dd2061e))
- **internal:** codegen related update ([61c4f94](https://github.com/cloudflare/terraform-provider-cloudflare/commit/61c4f94fbf74eb1ef34fd826bbdfba31a6695acf))
- **internal:** codegen related update ([22d50b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/22d50b7eaeb3007c2e18af5287df59d97f094244))
- **internal:** codegen related update ([6000928](https://github.com/cloudflare/terraform-provider-cloudflare/commit/600092811c7295cd60146ceac5af3bf4b256a6e6))
- **internal:** codegen related update ([8d83c78](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d83c78f671e67fc974753c23050dac756b09096))
- **internal:** codegen related update ([f564ed6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f564ed6133bfa42ddecdb83be734d68986e32878))
- **internal:** codegen related update ([9b7e360](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9b7e36082ab029d1cd18cd61932678e5169a30e3))
- **internal:** codegen related update ([9666ea8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9666ea8db2f1d33bb8843e0f16c1b0a1b1317786))
- **internal:** codegen related update ([0419104](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0419104e43251681878788ae70bbfdde2c01b0db))
- **internal:** codegen related update ([4e2a053](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4e2a053a442d22245e2d7928b94aed759ea3bd39))
- **internal:** codegen related update ([5f7e773](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5f7e7735397bc242322d9e68c834e7b9e38eebb3))
- **internal:** codegen related update ([0ea98f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0ea98f0691edd6aeeb6ccad91a1858bc4140d061))
- restore schema version ([470abf1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/470abf1495cbde9f7388778b15859f1161cb5d06))
- revert unwanted generated code ([5e2e81d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5e2e81df0bb927f2fb703b59248186ba6545d480))
- use 'next' for Terraform builds ([5e3bd48](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5e3bd484385ce8eac1801964bd5dfa7445c9be8e))
- use v7 ([a9b2b8e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a9b2b8e49d5b08e42be8f18abe11c185664bc02d))
- use v7 for all test; 2 resources have missing methods in v7 so use v6 for those two resources ([1c6e86c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1c6e86cd033d84c29261152e95a6721f7554333c))
- **zero\_trust\_device\_custom\_profile:** skip virtual network test ([48cc36f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/48cc36f8935d4ed3432c73fa06457172562fe0f1))
##### Documentation
- regenerate provider docs ([e86855d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e86855d55c5856d7db4240051930f4fbf87754a4))
- **zero\_trust\_access\_application:** document in-place migration for policy UUIDs ([555fa3f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/555fa3f8abcf25957444c7e021a3f28b62ab8ff9))
##### Refactors
- extract MoveState nil guard into shared helper ([737caf9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/737caf988bc0384be0d6f6e8c6065260246317e1))
### [`v5.19.1`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5191-2026-04-30)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.19.0...v5.19.1)
Full Changelog: [v5.19.0...v5.19.1](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.19.0...v5.19.1)
##### Features
- add user\_group and user\_group\_members acceptance tests + custom delete ([7f2420e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7f2420e4ff30913fbccd781daec2fefe81d58153))
##### Bug Fixes
- **iam:** tokens migrations ([52c5675](https://github.com/cloudflare/terraform-provider-cloudflare/commit/52c5675f26280d959f744105ef499bd14512153c))
- **list\_item:** ambigous schema while upgrade ([8d75670](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d756709f38ebe663fc803f60d9a62ac6c56c022))
- **zero\_trust\_access\_group:** fix v4 migration of same name ([918f9b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/918f9b6b7fcbd1e7968eeeb2ba11b838f0cc5500))
##### Chores
- unskip rate limited test for future ([5f785f9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5f785f9d60dacd889e2b8ab904b714c994971fef))
- **zone\_settings:** document available settings ([26711da](https://github.com/cloudflare/terraform-provider-cloudflare/commit/26711da0255734b93c1e5b1543aa736f6c6444a9))
- **zone\_settings:** document available settings dynamically ([a885ddc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a885ddc027f9e53f76d4d9827540a0577c2e1f82))
### [`v5.19.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5190-2026-04-24)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.18.0...v5.19.0)
Full Changelog: [v5.18.0...v5.19.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.18.0...v5.19.0)
##### New Resources
- **cloudflare\_ai\_gateway:** Manage AI Gateway instances ([e8d7f3b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8d7f3b5c51d065547da603003ab6abfad8a3f35))
- **cloudflare\_certificate\_authorities\_hostname\_associations:** Manage mTLS certificate hostname associations ([97df6f2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/97df6f2ae0e71d2d3b2b15aa78c4a49cdb7c5e4a))
- **cloudflare\_custom\_page\_asset:** Manage custom page assets ([8b71d20](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8b71d20fa9d3a9bb4f94906b1368d05d952fc3e8))
- **cloudflare\_pipeline:** Manage Cloudflare Pipelines ([de21a25](https://github.com/cloudflare/terraform-provider-cloudflare/commit/de21a25782311ecb11b31baa5317b0e2fa7b5533))
- **cloudflare\_r2\_data\_catalog:** Manage R2 Data Catalog ([e8d7f3b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8d7f3b5c51d065547da603003ab6abfad8a3f35))
- **cloudflare\_user\_group:** Manage user groups ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
- **cloudflare\_user\_group\_members:** Manage user group memberships ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
- **cloudflare\_vulnerability\_scanner\_credential:** Manage vulnerability scanner credentials ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
- **cloudflare\_vulnerability\_scanner\_credential\_set:** Manage vulnerability scanner credential sets ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
- **cloudflare\_vulnerability\_scanner\_target\_environment:** Manage vulnerability scanner target environments ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
- **cloudflare\_workers\_observability\_destination:** Manage Workers Observability destinations ([312d3af](https://github.com/cloudflare/terraform-provider-cloudflare/commit/312d3af720046f7d26a4d46fc073d81b92a5fd8b))
- **cloudflare\_zero\_trust\_device\_ip\_profile:** Manage Zero Trust device IP profiles ([7b251d2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7b251d2c48d90b908cfd3876ef8f05d8718cb74e))
- **cloudflare\_zero\_trust\_device\_subnet:** Manage Zero Trust device subnets ([ebb8216](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ebb8216d2cc8553eaee82ebb3941655a26ad2369))
- **cloudflare\_zero\_trust\_dlp\_settings:** Manage Zero Trust DLP settings ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
##### Features
- **account:** state upgrader for v4 to v5 migration ([82ee06e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/82ee06ee50cfef3532ed15702dc25e5b36fe47e0))
- **account\_member:** state upgrader for v4 to v5 migration ([62d0ea7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/62d0ea7e78d4a84115d8afb3a4830a4c81bf94b0))
- **account\_token:** state upgrader for v4 to v5 migration ([a0469d7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a0469d70ba10ecd180dd29a90202a3fa8ac1b814))
- **authenticated\_origin\_pulls:** state upgrader for v4 to v5 migration ([c4054b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c4054b729aaed023ff5b9b4b2b36ac07dc8c7cf1))
- **authenticated\_origin\_pulls\_hostname\_certificate:** state upgrader for v4 to v5 migration ([c4054b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c4054b729aaed023ff5b9b4b2b36ac07dc8c7cf1))
- **byo\_ip\_prefix:** state upgrader for v4 to v5 migration ([8d58cab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d58cab26e1bb24cf76b1e03a72e5fc6bde748e1))
- **custom\_hostname:** state upgrader for v4 to v5 migration ([24e4f0e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/24e4f0695c80be7b1a2e42fce7f4cae7e24f3069))
- **custom\_ssl:** state upgrader for v4 to v5 migration ([ada4f8f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ada4f8f9abb87b85c9b06f6113ed63b9efa5be71))
- **leaked\_credential\_check:** state upgrader for v4 to v5 migration ([9372a7d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9372a7d086f5a14cc9a53d04b3fc8bc12b9e4e65))
- **leaked\_credential\_check\_rule:** state upgrader for v4 to v5 migration ([745f1e2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/745f1e2da2a99f99fa4c40a78d08e37f6c0ade39))
- **logpush\_ownership\_challenge:** state upgrader for v4 to v5 migration ([25785268](https://github.com/cloudflare/terraform-provider-cloudflare/commit/25785268b788178b86cd2facdd08ee721c643021))
- **mtls\_certificate:** state upgrader for v4 to v5 migration ([70d46e0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/70d46e062c5f0dc4f1f74698f1653990adb784dd))
- **observatory\_scheduled\_test:** state upgrader for v4 to v5 migration ([a2883c9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a2883c99a3fa50ca0ebbca2f1def5a1a4e9d0a8a))
- **pages\_domain:** state upgrader for v4 to v5 migration ([91c6024](https://github.com/cloudflare/terraform-provider-cloudflare/commit/91c6024f5f35d01b99e5be4e16e2a6f22d43de41))
- **regional\_tiered\_cache:** state upgrader for v4 to v5 migration ([430edbd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/430edbd9e0f1a19d5d1e5fae9e5b6b73c5c37a9d))
- **ruleset:** add `content_converter` and `redirects_for_ai_training` support to configuration rules ([726b8e7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/726b8e7caf75c26eed7ea37d11aed28fe3ecf96d))
- **turnstile\_widget:** state upgrader for v4 to v5 migration ([94b9515](https://github.com/cloudflare/terraform-provider-cloudflare/commit/94b95154e00e5c1b00bebe1ea4f34490eab8f4f7))
- **workers\_custom\_domain:** state upgrader for v4 to v5 migration ([6a40c69](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6a40c691a90c029a4c89374ef4e3a6ff27a61356))
- **zero\_trust\_device\_custom\_profile:** state upgrader for v4 to v5 migration ([77090dc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/77090dccad76e5a922cde79a0b5984b3caf6691e))
- **zero\_trust\_device\_default\_profile:** state upgrader for v4 to v5 migration ([77090dc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/77090dccad76e5a922cde79a0b5984b3caf6691e))
- **zero\_trust\_device\_posture\_integration:** state upgrader for v4 to v5 migration ([32bc328](https://github.com/cloudflare/terraform-provider-cloudflare/commit/32bc328c0118b8918a459ed12e0c189cd3ad2754))
- **zero\_trust\_gateway\_certificate:** state upgrader for v4 to v5 migration ([ceff5a4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ceff5a4bafba29287f912c8f8abbe36eec898c5f))
- **zero\_trust\_gateway\_settings:** state upgrader for v4 to v5 migration ([3dae4a3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3dae4a3c4cd1ecac9436d14b9ef53e441d80bb29))
- **zero\_trust\_gateway\_logging:** make importable ([c5d144b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c5d144b47ecea8c19008c428e781381097082dca))
- **zero\_trust\_organization:** state upgrader for v4 to v5 migration ([9eb3a25](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9eb3a25d1de4db93b7e1d3db804d0bdf3e61c3e9))
- **zero\_trust\_tunnel\_cloudflared\_virtual\_network:** state upgrader for v4 to v5 migration ([1f0f135](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f0f135e5405f7bf3932e29368613c7ad76c7187))
- **zone\_setting:** state upgrader for v4 to v5 migration ([7ba7600](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7ba7600a34e74cf44436afb7bdbee7bc42e51051))
- add browser rendering devtools methods ([7f83203](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7f83203672e22fcaea93df4d38da7198f248306d))
- bump go sdk version ([070ea0b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/070ea0b08cd0c1dad4a5f8d35e030480e06aebe3))
- enable treeshaking and client options for setting zone and account IDs ([43b90cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/43b90cb66b95e1bec092d9a0fa720fd9586374f9))
- promote AI Gateway Terraform config from staging to main ([75baa04](https://github.com/cloudflare/terraform-provider-cloudflare/commit/75baa0460c1615c979e8373f62999fff1d72b985))
##### Bug Fixes
- **account\_member:** add UseStateForUnknown to status field to prevent drift ([841d6f9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/841d6f9d5407b14378a2f72f6e0c9567d27bd4fb))
- **ai\_search\_instance:** restore original defaults for cache and cache\_threshold ([d28ee6b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d28ee6bf434cfb606ce6bb58a50c6de03fc1179e))
- **apijson:** return empty object from MarshalForPatch when no fields are serialisable ([270fe86](https://github.com/cloudflare/terraform-provider-cloudflare/commit/270fe8655e01380754229d46a9354da89e20131a))
- **authenticated\_origin\_pulls\_settings:** fix no prior schema and no-op upgrade ([9804de7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9804de7d7af7d78b35ea6777fccca69ef8259cff))
- **certificate\_pack:** initialize empty lists instead of null in state upgrader to prevent drift ([2017a43](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2017a43ee6c37d392fc2fbb551da8ca21718309d))
- **client\_certificate:** fix CSR drift with normalization ([a755419](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a755419efaa6e32983e43c52078ed30da48802b7))
- **custom\_hostname:** allow ssl as null ([6e17010](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6e1701022d80a9c748c213f9aecd65ea9dca9970))
- **custom\_hostname\_fallback\_origin:** eventual consistency ([d55a74a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d55a74a78b9d77387441cab0e9222329e2469b4c))
- **custom\_origin\_trust\_store:** fix certificate drift with normalization ([42de890](https://github.com/cloudflare/terraform-provider-cloudflare/commit/42de890912b6293345902462e09e378dc561e742))
- **custom\_ssl:** fix patch cert replacement and send bundle\_method ([bebe53b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bebe53b3194a3443cd57aa5e77e131206b9614b0))
- **dlp\_predefined\_profile:** eliminate perpetual entries and enabled\_entries drift ([92dcfc0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/92dcfc0a15bb72251138c805896abb9e52a4c59f))
- **dns\_record:** avoid unnecessary drift for ipv4\_only and ipv6\_only attributes ([3df5e03](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3df5e03d527234fa1d9483d498a2416440031286))
- **dns\_record:** remove private\_routing default value ([ada77b4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ada77b42a12f574cf1a139f2d17f3b48df9abc1b))
- **drift:** preserve prior state for optional fields not returned by API (access\_rule, gateway\_policy, gateway\_settings, zone\_dnssec, dlp\_predefined\_profile) ([b717f4d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b717f4deb9cef6a80d9ebdc736bfa8afecbc4fa6))
- **leaked\_credential\_check\_rule:** handle empty ID from v4 provider state migration ([70f0337](https://github.com/cloudflare/terraform-provider-cloudflare/commit/70f033709710d4462cd50ecef2c115461587d268))
- **list\_item:** remove context ([69f751d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/69f751d43a18f284760c1a7f421e69f2d1783be8))
- **logpush\_job:** update model for migration ([b789273](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b789273b164ac964777c88c7f6ccb1659018b586))
- **logpush\_job:** fix acceptance tests failing due to destination re-validation on PUT ([87243a1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/87243a1d088b5e5aa841ed99a6b24bcf19aa09a3))
- **managed\_transforms:** remove unavailable rule and fix nil pointer in state upgrade ([d14644e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d14644e80f92156e2e11601c157778685e635d7c))
- **migrations:** handle ambiguous schema\_version state for v4/v5 coexistence ([2b6246f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b6246f77ef08be396d5910c7e33a896dce11ae5))
- **page\_rule:** properly encode automatic\_https\_rewrites ([47ebbf4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/47ebbf4a7f44cbea2ff4958bd4fc292d9d26802d))
- provider credential fields marked sensitive and validation regex updated ([5f6ff4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5f6ff4f905b7c219433fc570bb4a47e2be5fc7c2))
- **r2:** add degraded-response handling to the R2 custom domain resource ([c8d0e0f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8d0e0f96e9edc4ccf4611376a349623bdd426a0))
- **ruleset:** restore phase-entrypoint fallbacks ([b92500b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b92500b854743dddda3ba14de7ac40f4358a88a4))
- **ruleset:** add redirects\_for\_ai\_training to v4 action parameters model ([16470fa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/16470faa78de35630cc609b9314e21c26c488cf8))
- **tokens:** change from set to list for token policies ([9937847](https://github.com/cloudflare/terraform-provider-cloudflare/commit/99378479e6942549ebcee9fa78ed5f6d19158def))
- **tokens:** handle revoked and expired tokens ([63319ed](https://github.com/cloudflare/terraform-provider-cloudflare/commit/63319ed1e0e00cf803095e49ee7550213dd68ee3))
- UpgradeFromV0 handles both v4 and early-v5 state formats ([b09f658](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b09f658974dc2a171f5296d535224a7c857c9099))
- use raw JSON deserialization in UpgradeState handlers ([0e93ea6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0e93ea6527b1b9455119eaf55057c210acaae09e))
- **workers\_custom\_domain:** handle HTTP 200 no content header ([ea0ca97](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ea0ca978e837ae110437faa3e552f2f0d01f6277))
- **workers\_script:** add missing ratelimit binding type to schema validator ([30c49a6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/30c49a62ac62f32f3133ef86f76e2d399f8e2b4a))
- **workers\_script:** model drift ([5ae89c4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5ae89c4d3f39954f9bbdeaeee8bb742d5fb3248c))
- **zero\_trust\_access\_identity\_provider:** boolean drifts ([421bb50](https://github.com/cloudflare/terraform-provider-cloudflare/commit/421bb50fac73c0a08f14537f927daee3d8a80340))
- **zero\_trust\_access\_policy:** nil pointer panic in state upgrader ([ebe2b68](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ebe2b68beeeeaec39515685a38b6918554e650aa))
- **zero\_trust\_access\_policy:** normalize transforms and use raw JSON deserialization for state upgrade ([18c2ae3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/18c2ae30d9ca570da28bef519e4493237a0c6e52))
- **zero\_trust\_device\_managed\_networks:** upgrade resource state ([7c14bf5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7c14bf5852fafadcf81be45f8062b6485d73bd06))
- **zero\_trust\_device\_posture\_rule:** schema default removed intentionally ([eef56df](https://github.com/cloudflare/terraform-provider-cloudflare/commit/eef56df8fedd26b6da15889baf90b72e48937c97))
- **zero\_trust\_gateway\_policy:** make filters Computed+Optional to prevent drift ([8f52f45](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8f52f45fa117bed9f266ab133226455dda63c95a))
- **zero\_trust\_gateway\_settings:** breaking changes and reset to clean defaults ([b5ca509](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b5ca5093543bc2e8ddc91112d87477249bef5163))
- **zero\_trust\_tunnel\_cloudflared\_config:** dont use init ([090ff6a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/090ff6a7b4a437c7b808bc4d28db1f2f81a8bc64))
##### Chores
- **api:** update composite API spec ([db5b37e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/db5b37ead1f962ecfc1ac45d8ceae2d3719a3b67))
- **cmd/migrate:** deprecated in favor of [tf-migrate](https://github.com/cloudflare/tf-migrate); will be removed in a future release ([#​7062](https://github.com/cloudflare/terraform-provider-cloudflare/pull/7062))
- **docs:** caveats and callouts ([31c0d88](https://github.com/cloudflare/terraform-provider-cloudflare/commit/31c0d8868ea9c68c66c98544634897d29e880a20))
- **internal:** codegen related update ([4cf8755](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cf87559008f8405516875008a269110f10ab114))
- update tf-migrate version ([d023e25](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d023e255df901616b8e1f0be3283cab37ed1db33))
##### Documentation
- remove TBD wording from deprecation timeline ([bce670f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bce670f579ac8295d37d4d843b20d6d8ca1cd338))
### [`v5.18.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5180-2026-03-01)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.17.0...v5.18.0)
Full Changelog: [v5.17.0...v5.18.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.17.0...v5.18.0)
##### Features
- **access\_rule:** support state upgraders for migration ([67fd741](https://github.com/cloudflare/terraform-provider-cloudflare/commit/67fd741bb6e7571155bb2e6387e5471ad07851be))
- **api\_shield\_operation:** state upgrader ([ecd51d4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ecd51d4a88a6bf4cc123dc1352b01796522dd236))
- **api\_token:** state upgrader ([ac5eb62](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ac5eb62249b9991118565aea7b64230820ece63f))
- **authenticated\_origin\_pulls\_certificate:** v4 to v5 migration ([8d9930d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d9930db24602235b55d9761a69bfdf7e4530338))
- **bot\_management:** state upgrader ([4d9ee27](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4d9ee27f71a0756d683ec7eecfceb7d233e1c7f8))
- chore: clean up removed endpoint from config ([52f120d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/52f120d0ccf58cc95382d80832d7ccfbb61b8e2d))
- chore: update cloudflare-go dependency to `next` ([c92a4cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c92a4cbdfcf6050dbc91fbde669ed2df57609bd3))
- chore: use Go SDK v6.8.0 for release ([b695914](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b6959143d83c984fd25a8117f918111df17673d6))
- feat: GIN-1439: Add gateway PAC files ([9de415f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9de415fa1f74d35643d6340fc5453a14b6cb68bb))
- feat(client\_certificate): enable terraform for client\_certificates ([58f6a08](https://github.com/cloudflare/terraform-provider-cloudflare/commit/58f6a0814f1372d7f875ccc212b1e459cf434d53))
- feat(custom\_origin\_trust\_store): enable custom\_origin\_trust\_store ([1c0f313](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1c0f3131d1c217a492767e770afc51cc4060acff))
- feat(stainless): AUTH-7071 Complete Access Users endpoint ([2d4101d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2d4101d99025b60eda75422c7c1393c7e1fc86e6))
- fix: add 'rdp' as an initialism ([9aa6e67](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9aa6e677a1f93c7acd2122d7765c7a7cf7371fb1))
- **list\_item:** state upgrader ([70b70c5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/70b70c55ece61434eacc18b7c3130130cd210ee8))
- **list:** state upgrader ([41def2f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/41def2f0c022f28764a41e821653830a2f5463c8))
- **logpull\_retention:** support state upgrader [#​6754](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6754) ([78409e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/78409e1a1e25f2c2d00f98d3d10187020ee11b52))
- **logpush\_job:** support state upgrader ([275efd5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/275efd5f9d408a0f638e00755e4e94bb66cb54cc))
- **managed\_transforms:** state upgrader ([8de2938](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8de293824204dfae3452a98a53e771adbc2939d2))
- **notication\_policy:** state upgrader ([dbcbda8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dbcbda8325d1ddc694450dbedcaa0c5a120e8b5b))
- **regional\_hostname:** state upgrader ([ed98d9e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ed98d9e371dd48c9bd79e8402ba2213192cc99ed))
- **ruleset:** add new actions for http\_response\_cache\_settings phase ([beeb49e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/beeb49e64fdc1f604c5c3dcf6831bb3a8a401cfd))
- **snippet\_rules:** use state upgrade ([91a7d1a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/91a7d1a5ca1f234f4986e59d1f8b85f4d97abe95))
- **snippet:** use state upgrade ([dbc8107](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dbc8107ba664ff7bf4e50678a1f81961c4143060))
- **spectrum\_application:** state upgrader ([0957f09](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0957f09c1c1ce7f8ba2d20de9101df3e4e1d4fb4))
- state upgrader ([bbd68e0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bbd68e0a8fec3b709b2d912050707d302acec040))
- **url\_normalization\_settings:** state upgrader ([f933791](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f93379102d79eaa100235005e9a4bd9b1bbf3ea2))
- **workers\_kv\_namespace:** add state upgrader logic ([695a1e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/695a1e120e8ae6b0a1efcb1253776cfdba1292c7))
- **workers\_route:** implement state upgrader ([cef2a35](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cef2a35e2accf1d64f2a3629cbdeeabdfd5dae74))
- **workers\_script:** implement state upgrader and move state ([f7e20f8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f7e20f8f59f21f92a49c642fc2967b0f76a1d27f))
- **zero\_trust\_access\_application:** state upgrader ([5427fd9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5427fd922b02e8455d2c93053485a78131d981f3))
- **zero\_trust\_access\_group:** add state upgrader logic and tests ([5d0c09f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5d0c09ff8b64c2e656103694f4d67ca4a825d857))
- **zero\_trust\_access\_identity\_provider:** state upgraders ([c8c88f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8c88f08ed77458584177d8fa45ec01df93153a3))
- **zero\_trust\_access\_mtls\_certificate:** state upgraders ([15c5b8e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/15c5b8eb945916040778bbf3fb438ae9b7bbcf51))
- **zero\_trust\_access\_mtls\_hostname\_settings:** state upgraders ([fe7a900](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fe7a9001470d04b83b77391c1f81c79137ca85c1))
- **zero\_trust\_device\_managed\_networks:** state upgrader ([0ee822f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0ee822fa0353771f65eb5bafab96bf16b498399f))
- **zero\_trust\_device\_posture\_rule:** state upgrader ([e4bdf6b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4bdf6b106e223b8a040886d1d4e98239c947704))
- **zero\_trust\_dex\_test:** state upgrader ([4b61d73](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4b61d7375a233a7fef640b69c1e55c31e1ce0f37))
- **zero\_trust\_dlp\_custom\_profile:** state upgrader ([ca47a4d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ca47a4dad6873e3f2176ccc6447b4fd97f10f240))
- **zero\_trust\_dlp\_entries:** feat no-op state upgraders ([808c706](https://github.com/cloudflare/terraform-provider-cloudflare/commit/808c706677b543c5d0002ddb3c03001767067bc2))
- **zero\_trust\_dlp\_predefined\_profile:** state upgrader ([71278f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/71278f038358c2ab74f2a4fd1c04dea0b602cdbe))
- **zero\_trust\_gateway\_policy:** state upgrader ([cb4ff67](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cb4ff67ddcd0217b67f392ce917fcd40cbdb8e25))
- **zero\_trust\_list:** implement state upgrader ([5134e5c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5134e5c424b9d8d8060b0650705a2e4b0ac116ef))
- **zero\_trust\_tunnel\_cloudflared\_config:** support state upgrader ([a79e6ea](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a79e6ea972c7b42fee43ac81f93190cf4ed34c7f))
- **zero\_trust\_tunnel\_cloudflared\_route:** state upgrader ([40289a3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/40289a3dc14f78cbae89281959df1ac0b4a94137))
- **zone\_dnssec:** add state upgrader logic ([1103393](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1103393ffa9ef8699110d483b677743e4906c4a1))
- **zone\_subscription:** add state upgraders for zone\_subscription ([3512262](https://github.com/cloudflare/terraform-provider-cloudflare/commit/35122626cda792c71d1dcbff57bb6b17f21aa5c8))
- **zone:** add resource state migrations ([049e9a9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/049e9a948d5abd6dca39292a91e05f1dad3fa8a6))
##### Bug Fixes
- authenticated\_origin\_pulls\_certificate and authenticated\_origin\_pulls\_hostname\_certificate model and schema ([8287f8a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8287f8a7bea4cf88cd95ce1dc78e217ca173b7d4))
- **custom\_ssl:** 'deploy' default removed due to entitlements requirement ([267abd5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/267abd584ad64c891defd1d7bd8d487fe0914685))
- **docs:** v5 migration for authenticated\_origin\_pulls (zone and hostname) ([917dc79](https://github.com/cloudflare/terraform-provider-cloudflare/commit/917dc7919d99ea8d09a1d6151f61a5c42c76ec64))
- **docs:** v5 migration for authenticated\_origin\_pulls certs (zone and hostname) ([502766d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/502766d9dc73c0d5dfa45fcdef9d9a9b67e525bb))
- handling case where directory is null ([72f78a7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/72f78a7c64a224ec27a76a529abd02db7619698c))
- **list:** published version ([4f695aa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4f695aabd99fddc518b61f15bb609dc3f71cbe87))
- **load\_balancer:** improve recurring drift in origins attribute ([248c746](https://github.com/cloudflare/terraform-provider-cloudflare/commit/248c746ecb253ff07f9ec8ff966cd113bd20e6b8))
- **migrations:** use local provider for v5 migration tests ([de0b294](https://github.com/cloudflare/terraform-provider-cloudflare/commit/de0b294374d19411e292f8f56d1dbb78c11e559a))
- **queue:** migration model ([c9f3274](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c9f3274877313fae9e856fdad01465eaa4776996))
- revert snippet\_rules data source deletion ([f489eb8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f489eb87c3eb39b85dc573bc695e71b503c25a14))
- **spectrum\_application:** ips are computed optional ([9281cdb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9281cdbaf2e34f1a057bba172436afde49222449))
- **spectrum\_application:** update 'ips' type and configurability in the model ([f8742f3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f8742f316b4fdd4d4e1d3603634881cd5c7dedb7))
- **workers\_script:** include the original migration which existed ([10b1b41](https://github.com/cloudflare/terraform-provider-cloudflare/commit/10b1b41c7e6ae26ed4a4ae2ef503b9daaa39987e))
- **workers\_script:** placement in union schema ([53ee900](https://github.com/cloudflare/terraform-provider-cloudflare/commit/53ee900b42d978abe946aef5c7f161601c83d539))
- **workers\_script:** schema and model after merge conflict? ([892c0d0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/892c0d07fdd83573ccd7213d43a723df6b449263))
- **zero\_trust\_access\_group:** normalization for include, exclude and require ([ec84aaf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ec84aaf5e00006c270656b7528ea4c0626e0e79e))
- **zero\_trust\_device\_posture\_rule:** model schema parity and gate ([f18d0a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f18d0a8c04a770cf1bb972f30ca6a88c4b531615))
- **zero\_trust\_dlp\_custom\_profile:** migration model ([dae6782](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dae6782850b919b73b4ea7765d6d1a2b5d9f8fbe))
- **zero\_trust\_dlp\_custom\_profile:** schema model parity ([adda119](https://github.com/cloudflare/terraform-provider-cloudflare/commit/adda1194175318ef8af5193bb838713463fe1d68))
- **zero\_trust\_organization:** remove default values from attributes causing drift ([d408f2e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d408f2e03277a8a16af58cac0bf1e1d56a4b3627))
##### Chores
- **api:** update composite API spec ([ff602e7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ff602e7d1e14b6006fd6099c6f9a1daeb1dcc340))
- **api:** update composite API spec ([e767186](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e7671863d9360d67dc56c0bf3b2e4cc030586b23))
- **api:** update composite API spec ([81aacfa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/81aacfa2aebd2f1343aea3b55715c62baf807394))
- **api:** update composite API spec ([776c452](https://github.com/cloudflare/terraform-provider-cloudflare/commit/776c4527df4ee95ea7c7553c2a718a7f4ba81ad6))
- **api:** update composite API spec ([efbdf3f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/efbdf3f740e8d20805a41eb53213ab30af2c332f))
- **api:** update composite API spec ([2d79225](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2d792255804db580948ba6c430afa21af9bd1d13))
- **api:** update composite API spec ([565a842](https://github.com/cloudflare/terraform-provider-cloudflare/commit/565a842fe82bd64532796b88d942435dc953a6b7))
- **api:** update composite API spec ([259a7bd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/259a7bd920298263cb4af3bfdf3975e83e99108e))
- **api:** update composite API spec ([deadfa0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/deadfa0c0cfb93048cae70b1654dd033f1d783f3))
- **api:** update composite API spec ([1e91bbe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1e91bbef7531367d41af68a0260ecc68bbb35b68))
- **api:** update composite API spec ([d09e587](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d09e587cf74edef9fa852fe5f9c4eb26983e727a))
- **api:** update composite API spec ([239b2b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/239b2b6d1080bf5f10f451f941678ec62cc44b55))
- **api:** update composite API spec ([cc8abe5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cc8abe588e0134920063059bd5bcad45c84685de))
- **api:** update composite API spec ([424518f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/424518f35cd460d2f39d25ed6547a31711e3cc88))
- **api:** update composite API spec ([d444521](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d444521c0039b667b886045279f6d554e78d0eef))
- **api:** update composite API spec ([404b7b2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/404b7b27fab0052e243466ff7aae057006c03a88))
- **api:** update composite API spec ([9a9324f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9a9324f950f38bd698fdc4d471eddadb34d3fad4))
- **api:** update composite API spec ([ec1d34e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ec1d34e1a043716fef28cd0f46b89714e3d1e645))
- **api:** update composite API spec ([1bf0f08](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1bf0f08352b0488fd3af0d3e410b25b7939244ab))
- **custom\_pages:** add state upgraders logic ([8feda78](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8feda78e3873d5c861a1fd67c932ed9c32eff137))
- **docs:** update documentation ([968a766](https://github.com/cloudflare/terraform-provider-cloudflare/commit/968a766cf767c2125827fc3efa129c5cc4b23fc4))
- **docs:** update example and doc ([9ea618c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9ea618c56d6ab8cc9602b51bb4d22785f5b341da))
- **internal:** codegen related update ([d39697f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d39697f9dab2f38b60d596d0a50c9d6663134053))
- **internal:** codegen related update ([86e94df](https://github.com/cloudflare/terraform-provider-cloudflare/commit/86e94dfc8f9397a4c591bd7eefeb92ce123fdfaf))
- **internal:** codegen related update ([f212c64](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f212c6476a22c78762d2cd3b23985bcb6e772dd1))
- **internal:** codegen related update ([bbe88b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bbe88b605d3a66f31a4b45eda56c1ba8c31dba8e))
- **internal:** codegen related update ([938118d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/938118d973581102d108507499889d25e7ec7f23))
- **internal:** codegen related update ([d2b1e8d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d2b1e8d662f43f0b07116169ed8696bac92b182d))
- **internal:** codegen related update ([2129377](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2129377bba1e0babc71d2cfa0c35d51f83c85ab8))
- **internal:** codegen related update ([ce10e25](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ce10e25e2bb32fb8d49e9d2d8b62a6544d205f53))
- **internal:** codegen related update ([4c2f9b0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c2f9b08cf5407b4f041d6b1af13a06306cde355))
- **internal:** codegen related update ([0d936f6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0d936f6802599d32b56c40e4f7083a59f9cf6779))
- **internal:** codegen related update ([5b18851](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5b18851dad731c4d27f727681b7a446ddc1eb0ba))
- **internal:** codegen related update ([02f6d57](https://github.com/cloudflare/terraform-provider-cloudflare/commit/02f6d57efd08eeb97ac5f8647f3bc0d978e01ea6))
- **internal:** codegen related update ([bd4f014](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bd4f0143364fff306c7aec1151c0b54a59b48af9))
- **internal:** codegen related update ([5142372](https://github.com/cloudflare/terraform-provider-cloudflare/commit/514237265ad014a5ffa4851a79acc2713adad47b))
- **internal:** codegen related update ([7b6808b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7b6808b2a6a29464fc1db207be9391e9a8c839da))
- **internal:** codegen related update ([2ca23ba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2ca23ba285701e099cdbf356f252f98bf33e6f17))
- **internal:** codegen related update ([285a90d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/285a90d0be5166c40558ea7d221994c426d214a6))
- **internal:** codegen related update ([4b0cdeb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4b0cdeb6b39e45ff4b8d6b4d5d0180bf4de7e27c))
- **internal:** codegen related update ([c84470e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c84470e9c4c85c54c8a0b9f8bc7f360273c2e956))
- **internal:** codegen related update ([a992736](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a992736cbdff906e0751859a1c1584694e64f3ea))
- **internal:** codegen related update ([4ae01ef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4ae01ef12f0f5a0c52729001298e286461f87c01))
- **internal:** codegen related update ([e37a7e7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e37a7e7a6c388c589e0f6f3861146b0cc9268f76))
- **internal:** codegen related update ([3553499](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3553499ebd39e855edc66717e554752722e5a99c))
- **internal:** codegen related update ([bba5c6f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bba5c6f5560a93c51075077a73799f9d927d6591))
- **internal:** codegen related update ([85859b2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/85859b24758c1957394c89e873d79cc4ac02eac9))
- **internal:** codegen related update ([90ffea1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/90ffea17668ecff3e4b7617795b4daddbcc3ef4e))
- **load\_balancer\_monitor:** implement v4->v5 state migration ([ae47e9c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae47e9c8accd729691d049f92e89a53e8e49786e))
- **load\_balancer:** implement v4->v5 state migration ([14fb2e5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/14fb2e5e9246ba3dcd16346c0e52c3388a8cfa60))
- **notification\_policy\_webhooks:** support state upgrader ([1f223f6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f223f6db29957ff1c04b243984b25c1de18d60d))
- **queue\_consumer:** support state upgraders ([c28386e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c28386ecae24f5ed2f39d3777aaed3ccf7a5d459))
- **queue\_consumer:** support state upgraders ([67c546d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/67c546d4cfde645894c464d76b92cd55c5ecf455))
- **queue:** support state upgraders ([109c401](https://github.com/cloudflare/terraform-provider-cloudflare/commit/109c40173a22a71a5fd7cac477388c0682299cb1))
- **resources:** don't trigger upgrade ([92d92bc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/92d92bc0c893d279b723e891084ada684f76a33f))
- **snippets:** clean up unused funcs ([c8fdb9a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8fdb9a475d0f63c496709d1020de45704d10e96))
- **workers\_kv:** adjust for state upgraders logic ([493975f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/493975f2df6f80472fb5e0404aabbb669eb79419))
- **zero\_trust\_access\_group:** enable cross resource dependent test ([7798310](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7798310f9293ae65a20cd1633db9172af8c31376))
- **zero\_trust\_dlp\_custom\_profile:** cleanup ([de457ca](https://github.com/cloudflare/terraform-provider-cloudflare/commit/de457ca87b7382d4400910920b8ce9e26096a008))
- **zero\_trust\_dlp\_predefined\_profile:** cleanup ([10c57a5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/10c57a5070f97ba4bc1d0bbbc8c65a272443fa47))
- **zone\_subscription:** update test ([8d58520](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d58520b5debeb7d2dd1595ba3ca0eff1b8bb75d))
- **zone:** add test cases ([f227117](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f2271170bfaec61213ad31ab7489bfe075f9caf2))
##### Documentation
- update docs again for v5.18.0 ([6b459d5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6b459d554bd5e2de5ce1a9e0f7be0fea45174e1a))
- update docs for v5.18.0 ([d98474e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d98474ead50b998ee8568bd07e66b5ca03103c48))
##### Refactors
- **zero\_trust\_access\_policy:** match directory structure ([43f639a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/43f639a9b7cedbb590a448ac846238f94eb69163))
### [`v5.17.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5170-2026-02-12)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.16.0...v5.17.0)
Full Changelog: [v5.16.0...v5.17.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.16.0...v5.17.0)
##### Features
- **account:** add RequiresReplace modifier to unit.id field ([7cbb327](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7cbb327a2a7cad8bcf244f657096909f7ce24765))
- bump schema verion in prep for state upgraders ([a721535](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a721535073e12add55daada31971a1006cf67609))
- bump schema verion in prep for state upgraders ([a721535](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a721535073e12add55daada31971a1006cf67609))
- chore: bump cloudflare-go dependency for TF ([3b4de30](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3b4de30bfce5836bca5c685468200052262d961b))
- chore: skip codegen in authenticated\_origin\_pulls\_certificate ([22d11ab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/22d11ab2767d2df0d73a45cccc7003c54ffeb4de))
- chore: skip codegen in authenticated\_origin\_pulls\_hostname\_certificate ([0fdd92e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0fdd92e3c18164f5d8ee48b85efc73d439b0903e))
- chore: skip codegen in hostnames authenticated\_origin\_pulls ([82aab9d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/82aab9dd3ed8abfb7a325aeb6aa9acda8c79aded))
- chore: skip codegen in mtls\_certificates ([1b14224](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1b14224fa7f0d8c64713be3666b50f54ace2b0aa))
- chore: use 'next' branch of Go SDK in Terraform ([809a3f3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/809a3f35a77e6215a25a10ee19cae72b0fee089e))
- **custom\_hostname\_fallback\_origin:** add comprehensive lifecycle test ([054611a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/054611a5a9acd19a9579a1fb0442908664e0cab1))
- **custom\_hostname\_fallback\_origin:** add migration tests and state upgrader logic ([855ef8a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/855ef8ab43335ca6c4f12ae8f1d3dc96a1c2e4fe))
- **custom\_hostname\_fallback\_origin:** add v4 to v5 migration tests ([0542720](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0542720ee6e0edc9c6c053ac8fe27758903dd8bc))
- feat(api): RAG-586: enable terraform for AI Search instances and tokens ([fe5239d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fe5239dc1843aa9971ef6c2d212a1380864bda42))
- feat(radar): add BGP RPKI ASPA endpoints and fix SDK casings ([e6a03b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e6a03b6cfe7f1c3f37e7dc473c378a32f259e542))
- fix: authenticated\_origin\_pulls\_settings missing id configuration ([abe9087](https://github.com/cloudflare/terraform-provider-cloudflare/commit/abe90874ce84cdf75183eef48b71e2575ea3ed23))
- fix(total\_tls): use upsert pattern for singleton zone setting ([1a79609](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1a7960980159bf96d83849781b93281d86ea69a0))
- **leaked\_credential\_check:** add import functionality. add tests for import ([76e44f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/76e44f06b3ed6ebe99d57fb43e80bd62eaf22e92))
- **pages\_project:** use state upgraders ([db96be7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/db96be719de784be82407b1ed1e930c31d78c3ff))
- refactor(terraform): restructure origin\_tls\_client\_auth to peer subresources ([6c12fea](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6c12fead7f3fa947ce4c8bd2a488bb0b001b6cd3))
- state upgrader ([deee33f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/deee33f27c3d3aaf697502d809db504197946bce))
- state upgrader ([d8e4529](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d8e45293ee7a8b0ab44cad0e21fd751d0adc0966))
- tiered caching state upgrader ([d9d2c74](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d9d2c7495b112f50b675c73538ee22f6991b51c1))
- tiered caching state upgrader ([d9d2c74](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d9d2c7495b112f50b675c73538ee22f6991b51c1))
- **tiered\_cache:** use state upgraders ([8cb061c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8cb061cc17fb8e1d3a7e73d5b8aead90670c2b45))
- **turstile\_widget:** add v4 to v5 migration tests ([a1e27af](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a1e27afe229e2812ab7b5e570eb78066b134d6dd))
- **zero\_trust\_organization:** add migration test ([1032e4e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1032e4e4d26c1c27aa0470c2e3413afe783ec7a8))
##### Bug Fixes
- **account:** map managed\_by.parent\_org\_id to unid.id in unmarshall and add acctests ([a282d8e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a282d8ebc04f4c8a222f17be0e95e4b5811cc280))
- address PR review comments ([62598d7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/62598d7881e6f4d95aa1cf9ed281e57e69da0e5d))
- **authenticated\_origin\_pulls\_certificate:** add certificate normalization to prevent drift ([9fa8e39](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9fa8e398f41c9c1f514d34a7fa9f1c54e312f788))
- authenticated\_origin\_pulls\_hostname\_certificate resource and tests ([3380cf9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3380cf9402f13f2331f891900779c1aba0b7c0a0))
- **authenticated\_origin\_pulls:** handle array response and implement full lifecycle ([e4c82b8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4c82b80b52d1fb1e59a2ad10b994f2ea9c3c9e8))
- **byo\_ip\_prefix:** skip LOA tests ([892bce0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/892bce0fa1608dacc10a2fd95d7228729dbd92da))
- **changelog:** update changelog to reflect reality ([519c85e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/519c85e946616c2953f69210b39c75f00ef71aae))
- **cloudflare\_zero\_trust\_device\_posture\_rule:** update tests to match API ([b2aad0d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b2aad0d2f783765fb517cd3831a5c04dc120f5de))
- mtls\_certificates resource and test ([fc44f27](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fc44f27ac8b022668ae30dace74e01d1cb6cfb62))
- prevent unnecessary diffs on consecutive applies for hyperdrive\_config ([8755bf9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8755bf9d36e1b994821a3e7a4893845083023f48))
- skip tests requiring account creation ([f6d48e9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f6d48e91768e57c20220655bfde0927244d7f1dc))
- upgrade scenario ([e3831be](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e3831be2a55016b8b793d9ed0b0a69c95338350f))
- **workers\_script:** add support for placement mode/status ([1bc17fa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1bc17fa9505b9fcd61a2788631e219bb385a2404))
- **workers\_script:** schema and migration model ([a9a0e05](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a9a0e05aef4bfd68571d82c70739ee23045f7adc))
- **zero\_trust\_access\_application:** update v4 version on migration tests ([45a825e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/45a825ef3cb0f9f26ce5f5cbd2e343344f277a76))
- **zero\_trust\_organization:** fix plan issues ([f6a9369](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f6a9369b2ec94809b4af2215a58148f3af1f2b04))
##### Reverts
- **pages\_project:** "fix(pages\_project) build\_config to computed optional" ([b9c13c9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b9c13c9dfb341d9fd7ff49c47c217730afec9abd))
##### Chores
- add CODEOWNERS ([3abbb08](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3abbb0810b16d8607653d7be8e1cacd372f758f1))
- **api:** update composite API spec ([febe2db](https://github.com/cloudflare/terraform-provider-cloudflare/commit/febe2dbbc31925d272eff89ee2d1b1e92d397d9d))
- **api:** update composite API spec ([71cb6a6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/71cb6a6eae73a2044a6badfdd0b0a217e491c755))
- **api:** update composite API spec ([6c428d6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6c428d63484325a37ad06e9a7d3a6c34a21b6bab))
- **api:** update composite API spec ([eda1841](https://github.com/cloudflare/terraform-provider-cloudflare/commit/eda18417c14fb36ae5b388f921b3a4aec85b8873))
- **api:** update composite API spec ([7cda136](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7cda13631cd61429fe31ae218acbfd3c3f4086ad))
- **api:** update composite API spec ([935193b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/935193b9fe40afb63fd84c754492e449bc44c0ec))
- **api:** update composite API spec ([7e45f8d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7e45f8d3387ee72cd6ed9dbddf952baea82ec6f2))
- **api:** update composite API spec ([e42ae97](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e42ae970902c0fc301d02abc9f7a0f6f6e72a7dd))
- **api:** update composite API spec ([48153bd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/48153bdb0aab7df12687ba89df46cc6296b7d8f4))
- fix model/schema parity ([b00bd10](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b00bd10113cab088d813d8e4af6bc37ac16bc949))
- improve contribution guide ([85584b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/85584b7ab508fb75cf5ee9213aa87b8a7f18e86f))
- **internal:** codegen related update ([22b09ad](https://github.com/cloudflare/terraform-provider-cloudflare/commit/22b09ad9fa6dc225a3775789a78acafc86f36440))
- **internal:** codegen related update ([f587465](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f58746535590d01a8187c91b0f91840e9e172184))
- **internal:** codegen related update ([0bca406](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0bca406972fd6dbb80f0e4ad47fae821eb0118b9))
- **internal:** codegen related update ([3ca7e23](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3ca7e2369fc79c0e5d3826789dfc802d9ed9a1bf))
- **internal:** codegen related update ([02605c2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/02605c2fef1424144cb76f7a7b3f63eb282328bc))
- **internal:** codegen related update ([366fb6d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/366fb6dfeaabebf886b7af745c9e81b6511add37))
- **internal:** codegen related update ([f55e1be](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f55e1be426a02aeb91b443c86cb8f41252096fea))
- **internal:** codegen related update ([33bc656](https://github.com/cloudflare/terraform-provider-cloudflare/commit/33bc656b6040957eda8ccf78ef56aff3b12ba92a))
- **internal:** codegen related update ([6eb4afc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6eb4afc5cbdaed3ced0b7df7370693174465b3cb))
- **internal:** codegen related update ([636b4f8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/636b4f87a20bd5f9a268b3538f0fa201777973cb))
- **internal:** codegen related update ([067536c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/067536cc6679054154595cb38f0950b3dfc5ede8))
- **internal:** codegen related update ([1af8451](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1af8451f59e0666eb0569b68c0009ff28a3ffbe6))
- **internal:** codegen related update ([f36071f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f36071f283fcaf7132d8a8f0a15f70d3e5ff51da))
- **internal:** codegen related update ([246ffcd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/246ffcd06f0e96f6b2bc526ffdc69e79336a6615))
- **internal:** codegen related update ([471df29](https://github.com/cloudflare/terraform-provider-cloudflare/commit/471df296970cdd0590c4472793c4b58e58d3a397))
- **internal:** codegen related update ([0211418](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0211418984d901b0617c0842e92a99aa1a727f7f))
- **internal:** codegen related update ([2bcbbd5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2bcbbd5d2f2aa17267a10042e864ad7fca0b41ed))
- **internal:** codegen related update ([09f9d99](https://github.com/cloudflare/terraform-provider-cloudflare/commit/09f9d998f1fb0ec5aa4c3f866168bcbf367cda0b))
- **internal:** fix sdk ([be5dbc6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/be5dbc607749265a7b61e4cb8ea2f8ce3f56e6dc))
- minimum upgrade test ([25504d0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/25504d07a16acf813ede162cfdb4b82cfa4e31c1))
- **tests:** no more state file ([f439772](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f4397726105510b9949e913eb9b67ed9441b816e))
- Update CHANGELOG.md ([f4a1b58](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f4a1b588006049af00ad051c35c1b9453649a0e8))
##### Documentation
- clarify certificate normalization issue in test comments ([8bddab1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8bddab1a3ea46348d9cb3d048bc8aa33ff6d8707))
- regerate docs ([fc702d9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fc702d9ada1ebada24a4c7a272150c0ecd2bba80))
##### Refactors
- refactor stateupgraders ([c950153](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c950153f645aa0db7a68249771926c862a84ad6b))
### [`v5.16.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5160-2026-01-20)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.15.0...v5.16.0)
Full Changelog: [v5.15.0...v5.16.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.15.0...v5.16.0)
##### Features
- **custom\_pages:** add "waf\_challenge" as new supported error page type identifier in both resource and data source schemas
- **list:** enhance CIDR validator to check for normalized CIDR notation requiring network address for IPv4 and IPv6
- **magic\_wan\_gre\_tunnel:** add automatic\_return\_routing attribute for automatic routing control
- **magic\_wan\_gre\_tunnel:** add BGP configuration support with new BGP model attribute
- **magic\_wan\_gre\_tunnel:** add bgp\_status computed attribute for BGP connection status information
- **magic\_wan\_gre\_tunnel:** enhance schema with BGP-related attributes and validators
- **magic\_wan\_ipsec\_tunnel:** add automatic\_return\_routing attribute for automatic routing control
- **magic\_wan\_ipsec\_tunnel:** add BGP configuration support with new BGP model attribute
- **magic\_wan\_ipsec\_tunnel:** add bgp\_status computed attribute for BGP connection status information
- **magic\_wan\_ipsec\_tunnel:** add custom\_remote\_identities attribute for custom identity configuration
- **magic\_wan\_ipsec\_tunnel:** enhance schema with BGP and identity-related attributes
- **ruleset:** add request body buffering support
- **ruleset:** enhance ruleset data source with additional configuration options
- **workers\_script:** add observability logs attributes to list data source model
- **workers\_script:** enhance list data source schema with additional configuration options
##### Bug Fixes
- **dns\_record:** remove unnecessary fmt.Sprintf wrapper around LoadTestCase call in test configuration helper function
- **load\_balancer:** fix session\_affinity\_ttl type expectations to match Float64 in initial creation and Int64 after migration
- **workers\_kv:** handle special characters correctly in URL encoding
##### Documentation
- **account\_subscription:** update schema description for rate\_plan.sets attribute to clarify it returns an array of strings
- **api\_shield:** add resource-level description for API Shield management of auth ID characteristics
- **api\_shield:** enhance auth\_id\_characteristics.name attribute description to include JWT token configuration format requirements
- **api\_shield:** specify JSONPath expression format for JWT claim locations
- **hyperdrive\_config:** add description attribute to name attribute explaining its purpose in dashboard and API identification
- **hyperdrive\_config:** apply description improvements across resource, data source, and list data source schemas
- **hyperdrive\_config:** improve schema descriptions for cache settings to clarify default values
- **hyperdrive\_config:** update port description to clarify defaults for different database types
### [`v5.15.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5150-2025-12-19)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.14.0...v5.15.0)
Full Changelog: [v5.14.0...v5.15.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.14.0...v5.15.0)
##### Features
- **ai\_search:** add AI Search endpoints ([6f02adb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6f02adb420e872457f71f95b49cb527663388915))
- **certificate\_pack:** add terraform config for CRUD support. This ensures proper Terraform resource ID handling for path parameters in API calls. ([081f32a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/081f32acab4ce9a194a7ff51c8e9fcabd349895a))
- **leaked\_credentials\_check:** Add GET endpoint for leaked\_credentials\_check/detections ([feafd9c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/feafd9c466ec90a2874f2cd6b3316b41f52fd37a))
- **worker\_version:** support `startup_time_ms` ([286ab55](https://github.com/cloudflare/terraform-provider-cloudflare/commit/286ab55bea8d5be0faa5a2b5b8b157e4a2214eba))
- **zero\_trust\_access\_group:** v4 to v5 migration acceptance tests ([9c877c7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9c877c7f60c8e58cc3f32539e650f1b908a4e628))
- **zero\_trust\_access\_mtls\_hostname\_settings:** use v2 migrator ([b14aa6d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b14aa6df7598aaf56c7261c1eb4a8e4c2f1d08ab))
- **zero\_trust\_dlp\_custom\_entry:** support `upload_status` ([7dc0fe3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7dc0fe3b23726ead8dc075f86728a0540846d90c))
- **zero\_trust\_dlp\_entry:** support `upload_status` ([7dc0fe3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7dc0fe3b23726ead8dc075f86728a0540846d90c))
- **zero\_trust\_dlp\_integration\_entry:** support `upload_status` ([7dc0fe3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7dc0fe3b23726ead8dc075f86728a0540846d90c))
- **zero\_trust\_dlp\_predefined\_entry:** support `upload_status` ([7dc0fe3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7dc0fe3b23726ead8dc075f86728a0540846d90c))
- **zero\_trust\_gateway\_policy:** support `forensic_copy` ([5741fd0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5741fd0ed9f7270d20731cc47ec45eb0403a628b))
- **zero\_trust\_list:** support additional types (category, location, device) ([5741fd0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5741fd0ed9f7270d20731cc47ec45eb0403a628b))
##### Bug Fixes
- **access\_rules:** Add validation to prevent state drift. Ideally we'd use Semantic Equality but since that isn't an option, this will remove a foot-gun. ([4457791](https://github.com/cloudflare/terraform-provider-cloudflare/commit/44577911b3cbe45de6279aefa657bdee73c0794d))
- **cloudflare\_pages\_project:** addressing drift issues ([6edffcf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6edffcfcf187fdc9b10b624b9a9b90aed2fb2b2e)) ([3db318e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3db318e747423bf10ce587d9149e90edcd8a77b0))
- **cloudflare\_worker:** can be cleanly imported ([4859b52](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4859b52968bb25570b680df9813f8e07fd50728f))
- **cloudflare\_worker:** ensure clean imports ([5b525bc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5b525bc478a4e2c9c0d4fd659b92cc7f7c18016a))
- **list\_items:** Add validation for IP List items to avoid inconsistent state ([b6733dc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b6733dc4be909a5ab35895a88e519fc2582ccada))
- **zero\_trust\_access\_application:** remove all conditions from sweeper ([3197f1a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3197f1aed61be326d507d9e9e3b795b9f1d18fd7))
- map missing fields during spectrum resource import ([#​6495](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6495)) ([ddb4e72](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ddb4e722b82c735825a549d651a9da219c142efa))
- update invalid codegen ([d365b98](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d365b9859fddf385220c1e716e8c226651d28905)) ([92f5c9e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/92f5c9e07afec5e2f31a7299fa84b73938530796))
##### Chores
- **certificate\_pack:** `hosts` is now a set, not a list ([286ab55](https://github.com/cloudflare/terraform-provider-cloudflare/commit/286ab55bea8d5be0faa5a2b5b8b157e4a2214eba))
- **ci:** split acceptance tests into 37 parallel groups for faster ([8c6212b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8c6212b4c4694b9b7ce625e77ffbc2cf35725708))
- **healthcheck:** add test for expected\_body default value ([c5afb48](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c5afb48dfd8e7faeea6d5e60aec4e7e75a1a9b6b)) ([e99b43f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e99b43fb877cfc5b80872e8ad20b8d6cf85827c2))
- **magic\_wan\_ipsec\_tunnel:** remove `custom_remote_entities` ([286ab55](https://github.com/cloudflare/terraform-provider-cloudflare/commit/286ab55bea8d5be0faa5a2b5b8b157e4a2214eba))
- **queue\_consumer:** Test data fixes for queue consumer acceptance tests ([1b92700](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1b92700491da5d189435f9ea37c899970d303dc9))
- update go to point to next ([25d640a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/25d640a4d4b60b23504fae2ceb3250a432dde8af))
- update regional hostnames migration test to use new migrator ([d5ac65f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d5ac65f0965a896508ba2f5ceb2ba87efe3bb049))
- update test to use new migrator ([d5ac65f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d5ac65f0965a896508ba2f5ceb2ba87efe3bb049)) ([ec875bb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ec875bb95701ce155ed64a19c7d5b8ccb4f56fd6))
##### Documentation
- Deprecate API Shield Schema Validation resources ([366e1b8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/366e1b8cd631ff8e1b7fc1230def2c13d0aea680))
- generate provider docs ([c23342e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c23342ed882222c0067d24508c45b89e5c258931))
##### Refactors
- **healthcheck:** consolidate tests and expand update coverage ([b747d21](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b747d21c01d1d8694e0bfac507c07e27ba22c239)) ([7fa38b3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7fa38b34fc27c856d01a8607237a896648d0b13c))
### [`v5.14.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5140-2025-12-06)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.13.0...v5.14.0)
Full Changelog: [v5.13.0...v5.14.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.13.0...v5.14.0)
##### Features
- add v4->v5 migration tests for pages\_project and adjust schema ([#​6506](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6506)) ([6de0179](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6de0179a033543e4e63053b9db68185f4e4f2c78))
- chore: point Terraform to Go 'next' ([af9a5f8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/af9a5f896f4e65e9808a2b6458279b9a7ff935fe))
- chore: update go sdk to v6.4.0 for provider release ([63cb021](https://github.com/cloudflare/terraform-provider-cloudflare/commit/63cb021ec8318c4aefaacadc025c90d8ef3e618d))
- chore(api\_shield\_discovery\_operation): Deprecate api\_shield\_discovery\_operation ([7dc0a63](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7dc0a63e0fa3de74d8877788ff787294cb603c07))
- feat: BOTS-7562 add bot management feedback endpoints to stainless config (prod) ([f5112e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f5112e1e4d4fe53b9e0ec96aa27f69fb7706099b))
- feat(r2\_data\_catalog): Configure SDKs/Terraform to use R2 Data Catalog routes ([5beb50b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5beb50b30d7d012afae92f8f652e005955d4e430))
- feat(radar): Add origins endpoints to public api docs ([ee51e5f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ee51e5f19c5f1f3cd4d2c07acdcf0f368c635c4d))
- improve and standardize sweepers ([#​6501](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6501)) ([03fb2d2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/03fb2d2f4999ca24b9597093f25fd1dbc0f671b7))
##### Bug Fixes
- **account\_members:** making member policies a set ([#​6488](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6488)) ([f3ecaa5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f3ecaa5938486865698b3956848a8e5f0f6c9054))
- decoder and tests ([#​6516](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6516)) ([4c3e2db](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c3e2db3ec31638d423d0ecc971e5c5ea54298ec))
- decoder, build ([#​6514](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6514)) ([1935459](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1935459b88e1ec7d656148d92aee6ea45557ce3c))
- **pages\_project:** non empty refresh plans ([#​6515](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6515)) ([bc526ff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bc526ffcf5091195cc143cbf774013b84728296c))
- **pages\_project:** use correct field name in test sweeper ([6dc0e53](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6dc0e538754b84e8e31d0c1b7bd8c0e291161811))
- r2 sweeper ([#​6512](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6512)) ([fec953c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fec953c98e8764e5b1ed3dc1906d02206718928e))
- **tests:** resolve SDK v6 migration test failures ([#​6507](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6507)) ([bad9716](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bad971609bfb7ddc8d78de6935b747f350f1ae55))
- update import signature to accept account\_id/subscription\_id in order to import account subscription ([#​6510](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6510)) ([c2db582](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c2db582ed27a6e8ac3de6461dba011496b687d05))
- **utils:** test assertions ([4c3e2db](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c3e2db3ec31638d423d0ecc971e5c5ea54298ec))
- **workers\_kv:** ignore value import state verify ([#​6521](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6521)) ([c3e3f89](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c3e3f892bcd0d1426eb398688b1f5f8c84144b57))
- **workers\_script:** No longer treating the migrations attribute as WriteOnly ([#​6489](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6489)) ([dc60e38](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc60e3883002db7eb9036265aa4000a08a1eb2b6))
- **workers\_script:** resource drift when worker has unmanaged secret ([#​6504](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6504)) ([505c0fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/505c0fe78b4f096ed3547f7b564ea5788a64a644))
- **zero\_trust\_device\_posture\_rule:** preserve input.version and other fields ([#​6500](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6500)) ([4c4e54b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c4e54bdfdfa2c6ce584322cd2ae8562269b4a98))
- **zero\_trust\_device\_posture\_rule:** preserve input.version and other fields ([#​6503](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6503)) ([d45be9a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d45be9a3b6276bee2c9f4413e141db6d5d1fa596))
- **zero\_trust\_dlp\_custom\_profile:** add sweepers for dlp\_custom\_profile ([cbcb325](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cbcb325271e91d6c3a0bb832eb0c347198d9ce6c))
- **zone\_subscription|account\_subscription:** add partners\_ent as valid enum for rate\_plan.id ([#​6505](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6505)) ([2a70fb4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2a70fb49ccc28e5309f7096d1ebc34866c2f07f3))
- **zone:** datasource model schema parity ([#​6487](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6487)) ([861c68f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/861c68fcb37627371673e60dfcbc7bf09638e28e))
##### Chores
- **account\_member:** dont run acceptance with env variable ([4c3e2db](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c3e2db3ec31638d423d0ecc971e5c5ea54298ec))
- **account\_member:** fix check for env var ([#​6517](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6517)) ([07e9aa5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/07e9aa5ef6327499731b17ac334f2f9d4cf3f4bf))
- **account\_member:** skip until user is dsr enabled ([#​6522](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6522)) ([dd7c2fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dd7c2fea55e1dc10953b57c2d3792b2e97a8e68e))
- **account\_tokens:** adding a simple CRUD test ([#​6484](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6484)) ([6869538](https://github.com/cloudflare/terraform-provider-cloudflare/commit/68695382141a2b097c051b38a32fabf5368c2ad9))
- **api:** update composite API spec ([71fc050](https://github.com/cloudflare/terraform-provider-cloudflare/commit/71fc0502fe85faaabd599348b8f46930fa0bd15f))
- **api:** update composite API spec ([68d017a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/68d017a1dd2379d7f4c22b83b9ee31e146971b54))
- **cloudflare\_api\_shield\_operation:** Add acceptance tests ([#​6491](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6491)) ([37e1fdf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/37e1fdf9d72b9d853e4ba7b751f2680db5abb9f6))
- **docs:** update documentation ([#​6523](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6523)) ([a060e61](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a060e61e9882b706ad6386bc2d1ffc8ac295166d))
- **internal:** codegen related update ([923ea1d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/923ea1db2a8accfd846990947a49f44a1e209ea4))
- **internal:** codegen related update ([a110cbe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a110cbe76756173711fbc50c6c13c143d53ae625))
- **internal:** codegen related update ([7b36c06](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7b36c06f10f0fee20c5935b20f6817f7f91d2442))
- **internal:** codegen related update ([c789f91](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c789f91d6ba5c773ad152945114ab6b020949616))
- **internal:** codegen related update ([a91faa6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a91faa61eca4c2cf4ea23aff7f14667e9b042de7))
- **internal:** codegen related update ([dfa745a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dfa745abb71b94428ff1140f592a48cb7eca8969))
- **internal:** codegen related update ([fb3ef1b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fb3ef1b5b7fe827753ba82f4f08381bf951f5dbf))
- **internal:** codegen related update ([504e8b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/504e8b61e19091d8f2e66f37889311256cf6590b))
- **internal:** codegen related update ([550d77c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/550d77c15980feac28e1df2b6fc52473d81f57e6))
- **logpush\_job:** add v4 to v5 migration tests ([#​6483](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6483)) ([2e4b8a0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2e4b8a090ca9741cd6f7e5861305f82ac582b63d))
- **tests:** cloud connector rules parity tests and add connectivity\_directory\_service tests ([#​6513](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6513)) ([5341c82](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5341c824679002c0168d3ce8696022aec30ff33e))
- update changelog ([#​6480](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6480)) ([adba156](https://github.com/cloudflare/terraform-provider-cloudflare/commit/adba156599c44b43277c7d4b5694f3ccde2408a3))
- update changelog ([#​6525](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6525)) ([b026b4d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b026b4d32a8c394823d91be0a4ed156252ff5fcd))
- **zero\_trust\_device\_default\_profile\_local\_domain\_fallback:** add tests ([#​6464](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6464)) ([365cb71](https://github.com/cloudflare/terraform-provider-cloudflare/commit/365cb71b906fca75c2be9fedf38f5269eaa0f4dd))
- **zero\_trust\_device\_default|custom\_profile:** acceptance test coverage ([#​6511](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6511)) ([8e4ec1a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8e4ec1a9e376ac294707db9fc320a8855be0ba89))
- **zero\_trust\_device\_managed\_networks:** add tests ([#​6463](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6463)) ([e9b6783](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e9b67835cbf10fb76282b2526f732f13aa13ca06))
- **zero\_trust\_device\_posture\_integration:** update tests for to test with Crowdstrike ([#​6470](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6470)) ([e360d6f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e360d6f414799181c76c9eb7b6aaeb51239a2632))
- **zone:** update migration tests ([#​6468](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6468)) ([8ff53df](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ff53dfe672acc0dc3b9538a613de77e96517e0e))
### [`v5.13.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5130-2025-11-21)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.12.0...v5.13.0)
Full Changelog: [v5.12.0...v5.13.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.12.0...v5.13.0)
##### ⚠ BREAKING CHANGES: cloudflare\_api\_token & cloudflare\_account\_token Schema Update
The 5.13 release includes major updates to the cloudflare\_api\_token resource to eliminate configuration drift caused by policy ordering differences in the Cloudflare API.
Fixes: [#​6092](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6092)
**Whats changed**
- policies are now a Set; order is ignored to prevent drift.
- When defining a policy, resources must use jsonencode(); all policy resource values must now be JSON-encoded strings.
- Removed fields: id, name, and meta have been removed from policy blocks.
**Required Action (v5.13+)**
Customers looking to upgrade to v5.13+ must update all cloudflare\_api\_token & cloudflare\_account\_token resources to wrap policy resource values in jsonencode()
Before:
```
resources = {
"com.cloudflare.api.account.${var.cf_account_id}" = "*"
}
```
After:
```
resources = jsonencode({
"com.cloudflare.api.account.${var.cf_account_id}" = "*"
})
```
- **account\_token:** token policy order and nested resources ([#​6440](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6440))
##### Features
- add new resources and data sources ([7ce3dec](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7ce3dec8fc5b65116750b8bf8209c2ec612d6a61))
- **api\_token+account\_tokens:** state upgrader and schema bump ([#​6472](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6472)) ([42f7db2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/42f7db27659337230aa03094d050c8ebbcbdc24c))
- chore(build): point Terraform to released Go v6.3.0 ([6d06b46](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6d06b462491797af17f086193bbf32ccdffdd4b5))
- **docs:** make docs explicit when a resource does not have import support ([02699f6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/02699f65c082555c54b84288f23eda2272708144))
- **magic\_transit\_connector:** support self-serve license key ([#​6398](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6398)) ([a6ec134](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a6ec1340765d2d9e980ded2b66dce847c142523f))
- **worker\_version:** add content\_base64 support ([6ff643f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6ff643fda6f0171a07fcd0070fc0e4716f1b1563))
- **worker\_version:** boolean support for run\_worker\_first ([#​6407](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6407)) ([116a67b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/116a67bdfaf481200152380a627cd1de8397b1c9))
- **workers\_script\_subdomains:** add import support ([#​6375](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6375)) ([40f7ed8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/40f7ed8b34adfa42c4dad22ce6e2b0c90d40c8c0))
- **zero\_trust\_access\_application:** add proxy\_endpoint for ZT Access Application ([#​6453](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6453)) ([177f20a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/177f20a46ce5f36d8f1eef70893e76ddb4a3ef05))
- **zero\_trust\_dlp\_predefined\_profile:** Switch DLP Predefined Profile endpoints, introduce enabled\_entries attribute ([bc69569](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bc695692c86c5af9cfa4a13ce2c6ac5bd38a3538))
- **zero\_trust\_tunnel\_cloudflared:** v4 to v5 migration tests ([#​6461](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6461)) ([ffa0fef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ffa0fef80e7175346c6b48f92c3cb0ea89be1d37))
##### Bug Fixes
- **account\_token:** token policy order and nested resources ([#​6440](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6440)) ([86c5972](https://github.com/cloudflare/terraform-provider-cloudflare/commit/86c5972edc65d6190f8fc52f5da2d07a99d0bef0))
- allow r2\_bucket\_event\_notification to be applied twice without failing ([#​6419](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6419)) ([6fbd4c5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6fbd4c5aeb0f89b935e770dc3fa5c1d89661894f))
- **cloudflare\_worker+cloudflare\_worker\_version:** import for the resources ([#​6357](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6357)) ([b98e0be](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b98e0be8d6bbd4f04afbb61c98c36b0ecfa0bea4))
- **dns\_record:** inconsistent apply error ([#​6452](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6452)) ([f289994](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f289994d58720ec58fc186534a1a5e82776624bc))
- **pages\_domain:** resource tests ([#​6338](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6338)) ([d769e29](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d769e2930016efa73c8e0ac2b4b620a107d03f7d))
- **pages\_project:** unintended resource state drift ([#​6377](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6377)) ([1a3955a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1a3955ad49a4a3d74bb0d5faf08acb0f77d4921b))
- **queue\_consumer:** id population ([#​6181](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6181)) ([f3c6498](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f3c6498d16e402044160ad38993de188061405fc))
- **workers\_kv:** multipart request ([#​6367](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6367)) ([65f8c19](https://github.com/cloudflare/terraform-provider-cloudflare/commit/65f8c19a2269f19d88f4f6edd14c4980ad53c9ac))
- **workers\_kv:** updating workers metadata attribute to be read from endpoint ([#​6386](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6386)) ([3a35757](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3a35757dff9b6dfdadbd422d36d877e0eec63926))
- **workers\_script\_subdomain:** add note to cloudflare\_workers\_script\_subdomain about redundancy with cloudflare\_worker ([#​6383](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6383)) ([9cc9b59](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9cc9b59cb8b79ce8a0cb3988b353e45cd7be07ec))
- **workers\_script:** allow config.run\_worker\_first to accept list input ([fab567c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fab567cc3191feecf1c19d6e4d91125c08dc6121))
- **zero\_trust\_device\_custom\_profile\_local\_domain\_fallback:** drift issues ([#​6365](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6365)) ([65c0c18](https://github.com/cloudflare/terraform-provider-cloudflare/commit/65c0c1895587b6f61404a04d748ea2ffd5317442))
- **zero\_trust\_device\_custom\_profile:** resolve drift issues ([#​6364](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6364)) ([4cd2cbd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cd2cbdd93dbd622cf7f2a29d56f4bf01896a0a5))
- **zero\_trust\_dex\_test:** correct configurability for 'targeted' attribute to fix drift ([cd81178](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cd81178f30e800af3345822d5eee478419d6cd14))
- **zero\_trust\_tunnel\_cloudflared\_config:** remove warp\_routing from cloudflared\_config ([#​6471](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6471)) ([dc9d557](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc9d557149289f0bc33d28bb7e31f54dd42e1c82))
##### Chores
- **account\_member:** add migration test ([#​6425](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6425)) ([967a972](https://github.com/cloudflare/terraform-provider-cloudflare/commit/967a9727cd7d0b49e5c3ae1f6a6acee66a925186))
- **byoip:** integrate generated changes for BYOIP resources ([432160e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/432160ef04c30bb13072a2eec84231c197432e69))
- **certificate\_pack:** docs show safe rotation instructions ([#​6388](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6388)) ([3d37264](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3d3726408c21561acdd1f908a33f2178660ab489))
- **ci:** clean up leftover files in resources ([#​6474](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6474)) ([e8aee72](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8aee72c5b9f4a966d1da283af2f3cc941be8ad7))
- **ci:** drop migration tests from CI ([#​6476](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6476)) ([968565f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/968565ffa098127bf03c354ea148222c6aa4438b))
- **ci:** fix tests ran on release PR ([#​6478](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6478)) ([0b43c46](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0b43c464a1178d97e083445b2031f3a3f6d178ee))
- **ci:** fixes for parity tests and build failures ([#​6475](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6475)) ([3561876](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3561876f17b34f79c16b1a36bab3b2e3129bdeca))
- **ci:** modify sweepers ([#​6479](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6479)) ([4c8915d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c8915d6202277724beaf13417eeaae519ad2070))
- **ci:** skip flaky test in CI ([fb14d86](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fb14d86b0354e9717caeed87c8b749625fb09f86))
- **cloudflare\_zero\_trust\_dlp\_custom\_profile:** migration test and ignore order as set ([#​6428](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6428)) ([1659ff3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1659ff3ee3fa9fd90bc9bba674a2d16927a4e5fe))
- **d1:** integrate generated changes for D1 resources ([cfa3472](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cfa347232730294a359da2eb6187899d56e973ce))
- **dns\_record:** improve dns sweepers ([#​6430](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6430)) ([5e62468](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5e62468963235dfce1cc4d8a87e35063d5203197))
- **docs:** document configurations and examples ([#​6449](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6449)) ([59430e0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/59430e0b7bd2a4371e9a817ddf7105690859b40d))
- **docs:** generate docs and examples ([cdd77ec](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cdd77eca036fcdb6b7ae2ad27cbbc851c5eca95c))
- **email\_routing:** improved email routing sweepers ([#​6429](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6429)) ([133c81e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/133c81e0b3880071ebec216d558b348676e3b301))
- **iam:** integrate generated changes for IAM resources ([a87806e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a87806ed569c98ae6b301cec30641ffb492b9317))
- include new sections for pr template ([#​6395](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6395)) ([81c07e1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/81c07e12fc2b2aafbd919af71b2154c16083bf3e))
- **load\_balancing:** integrate generated changes for Load Balancing resources ([4c6b34d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4c6b34de2bc8a1d191a49d9321dcc6eced60c3a8))
- **logpull\_retention:** add migration test for ([#​6426](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6426)) ([529f313](https://github.com/cloudflare/terraform-provider-cloudflare/commit/529f31392cc783af1091604900b0611d7385a731))
- **logpull\_retention:** update acceptance test ([#​6277](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6277)) ([3766b3f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3766b3f3346f3f89d23c6613dad98dd7a8a5ed13))
- **logpush\_job:** add import tests for resource ([#​6402](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6402)) ([cded8ec](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cded8ece37d62b4443ce7da1267d964ed42b7215))
- **logpush:** integrate generated changes for Logpush resources ([06e8446](https://github.com/cloudflare/terraform-provider-cloudflare/commit/06e8446a2c4c253efe4e4687e237edc4158c3392))
- **notification\_policy\_webhook:** add migration test for notification-policy-webhook ([#​6443](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6443)) ([742d647](https://github.com/cloudflare/terraform-provider-cloudflare/commit/742d64789205f1ac9d177c57b9e97b0ddf6a5a45))
- **pages:** integrate generated changes for Pages resources ([64855ea](https://github.com/cloudflare/terraform-provider-cloudflare/commit/64855ea4cf8a9396def48d97ceb30bbc0b36b62d))
- **queue\_consumer:** testdata refactor ([d301974](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d3019745c45fc43ecb1a74f500f846dbce2fce08))
- **r2\_bucket:** v4 to v5 migration tests for cloudflare\_r2\_bucket ([#​6437](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6437)) ([99ed1ee](https://github.com/cloudflare/terraform-provider-cloudflare/commit/99ed1ee0f3e8cb761f5e6e712f42ee87bf109039))
- **sso\_connector:** add acceptance tests ([#​6427](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6427)) ([8b54303](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8b54303138b0a96a2023d15a3f9da59492ebfbae))
- **stainless:** integrate changes from unpinned codegen version ([9cb3b8e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9cb3b8eb7dc6334d8d2ac808cc6adeb02129ca8a))
- **test:** acceptance tests for token validation resources ([#​6417](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6417)) ([4d94bdd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4d94bddb8f952072a1b4d5fdfd08ac6a5cc01457))
- **test:** add schema and token validation acceptance tests to CI ([#​6421](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6421)) ([b805abc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b805abcf0b6b134bd51c5218d2c22e99d8d28a37))
- **test:** increase legacy migrator test coverage ([#​6401](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6401)) ([9a8c48a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9a8c48a29df316d319ac84b2b7aa561181e513b2))
- **universal\_ssl\_setting:** add acceptance tests for universal\_ssl\_setting ([2601c45](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2601c4542dc6e354552d1b1e2ff2052d5757eea4))
- **worker:** integrate generated changes for Worker resources ([1da2bf2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1da2bf2b663cd086539b9edbde127a970e6b60cd))
- **workers\_kv\_namespace:** v4 to v5 migration tests for workers\_kv\_namespace ([#​6424](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6424)) ([433010f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/433010f2dba43c4ab909126aff351332220b4907))
- **workers\_kv:** v4 to v5 migration tests for workers\_kv ([#​6435](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6435)) ([58ca912](https://github.com/cloudflare/terraform-provider-cloudflare/commit/58ca912c521729cc9ff0453f589279ec6da9b7c6))
- **workers\_script:** add workers scripts sweeper ([#​6351](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6351)) ([f439a08](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f439a086e8120b84193e70fa6e426fedb9895b79))
- **workers\_script:** fix resource name in TestAccCloudflareWorkerScript\_ModuleWithDurableObject ([614d8d3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/614d8d3765984e424d5628ad4fd2356bbe422746))
- **workers\_script:** fix resource names in tests ([788e73a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/788e73a5a2a1ef43a02ee75ceb1b7da3a05e5ce8))
- **workers:** integrate generated changes for Workers resources ([ab0a330](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ab0a3303f4268783c8b78dc2fda0d1517afc2d16))
- **zero\_trust\_access\_service\_token:** add migration test for zero\_trust\_access\_service\_token ([#​6416](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6416)) ([c77d5d5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c77d5d5d2eafc852db0468c13fb880f9a4127e28))
- **zero\_trust\_gateway\_policy:** v4 to v5 migration for zero\_trust\_gateway\_policy ([#​6413](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6413)) ([1c1952b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1c1952b61300569bfbfcb731abfe817bcce33fd9))
- **zero\_trust\_list:** v4 to v5 migration tests for zero trust list records ([#​6400](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6400)) ([6ed55d6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6ed55d6787ca377c42ddef59fe700b46139cf262))
- **zero\_trust\_tunnel\_cloudflared\_route:** v4 to v5 migration tests for zero\_trust\_tunnel\_cloudflared\_route ([#​6409](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6409)) ([5dc2094](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5dc20940902b3f72594f15b91a7f2f1088dfee94))
- **zero\_trust, cfone:** integrate generated changes for ZT and CFONE resources ([b7131b2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b7131b2be2a9fd36b05d71cb4d05182d4b044fa2))
- **zone\_dnssec:** v4 to v5 migration tests for zone\_dnssec ([#​6432](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6432)) ([86abd1f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/86abd1f906b03547e04ad66d185d052461d82251))
- **zone\_settings:** acceptance test to repro issue [#​6363](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6363) ([#​6445](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6445)) ([707c154](https://github.com/cloudflare/terraform-provider-cloudflare/commit/707c1542f7e97c800bef0dfdd0170a7f0594ea33))
- **zones:** data source tests ([#​6414](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6414)) ([4d58e56](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4d58e5631cd10b685c7b0b63230ef4a0d6b18a6f))
- **zt\_access:** add sweepers for policy and service token ([#​6465](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6465)) ([9f4fa94](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9f4fa949610bf27ae4b179cd28232e26be7610b6))
### [`v5.12.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5120-2025-10-30)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.11.0...v5.12.0)
Full Changelog: [v5.11.0...v5.12.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.11.0...v5.12.0)
##### Features
- chore: pin cloudflare-go for provider release ([61a33f9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/61a33f92db2c788262c166e259b6477aa06cdbb1))
- chore: use cloudflare-go\@​next for the 'next' branch ([8d8ff6d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d8ff6d20993ab3127b3fcdbb2f17a93835ca70d))
- chore(abuse): rename path parameter ([cbda07b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cbda07b16992d4007ab38f27ec0ac7ca54bde7a4))
- ci: remove zero\_trust\_connectivity\_directory\_service ([23bd535](https://github.com/cloudflare/terraform-provider-cloudflare/commit/23bd5354dfccdc00fd5e38e877e65406abc6a7be))
- ci: trigger prod build ([fffdf5a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fffdf5af95668db4c444856d3fe1b0b3e5b32bc4))
- feat: add connectivity directory service APIs to openapi.stainless.yml ([1a6b304](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1a6b304bdf7e0c442b5b651c749fe8f924f17bc4))
- feat: SDKs for Organizations and OrganizationsProfile ([1f6eae3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f6eae3469f83e99c02cc744462e2c7e0236fed3))
- feat(api): add mcp portals endpoints ([1e317de](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1e317dedc0b09f66aea05652cc8c72b2980ecfd0))
- feat(radar): add new group by dimension endpoints; deprecate to\_markdown endpoint ([bcb58cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bcb58cb92cbae33ffca77c7646955c5f3ea9e47d))
- fix(content\_scanning): content scanning terraform resource ([03b7004](https://github.com/cloudflare/terraform-provider-cloudflare/commit/03b7004e74ba50c2b968133ba5ef37e07781bd58))
- fix(workers\_domain): treat `PUT /workers/domains` as a create operation ([8ff0c7d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ff0c7df085a37d62e5e86b76f262a462a60b9fc))
- modernize zero\_trust\_tunnel\_cloudflared\_config tests and fix warp\_routing ([#​6294](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6294)) ([36d38a6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/36d38a602dd53d537c8c1f25ee18910e39bdc36c))
- modernize zero\_trust\_tunnel\_cloudflared\_virtual\_network tests and improve ([#​6293](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6293)) ([1b0f6d6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1b0f6d6c3bd2d22b7ac40a006a20ded3105ffe46))
- **zero\_trust\_access\_application:** Add support for MCP & MCP\_PORTAL ([#​6326](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6326)) ([9524b60](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9524b60fe59daf86654df29d1fb545eb01b22be3))
##### Bug Fixes
- **account\_member:** update policies test by selecting correct resource group ([#​6352](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6352)) ([693dc9d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/693dc9d47daefaa66cb168cc955a2f7d682d43e0))
- **cloudflare\_r2\_bucket\_sippy:** attribute name in example ([#​6336](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6336)) ([208bf81](https://github.com/cloudflare/terraform-provider-cloudflare/commit/208bf815dd926c3304ef18b7a7aaeb607e0b0adc))
- **cloudflare\_worker\_version:** replace when module content\_sha256 value changes ([#​6335](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6335)) ([e31395d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e31395df73343dd51ab36673fb4bd69845890b42))
- **cloudflare\_workers\_script:** Update docs note for resource ([#​6304](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6304)) ([f7b4cef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f7b4cef7a44b5514567661aedb71b1185454d7f7))
- **cloudflare\_workflow:** download dependencies for workflow resource acceptance tests ([#​6302](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6302)) ([84bade9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/84bade9cb649961e9e732ad04147581cb60cddb6))
- correctly detect more ID attributes for data sources ([d5f4e7d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d5f4e7d6eec6e710e24482f7241a8e1ccfc3a836))
- **custom\_pages:** fix broken tests ([#​6372](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6372)) ([95f344e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/95f344edeca21a7cc25c54649c0bff395a8377c5))
- **custom\_pages:** update type enumerations ([#​6369](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6369)) ([8bd0d09](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8bd0d091d26aa0b8122f4c595b35977215361d95))
- enable skipped gateway policy tests and simplify quarantine test ([#​6296](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6296)) ([b220f2b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b220f2b369693b44fcb3b42ead3ba9e9682c5295))
- ensure model/schema parity across several resources ([#​6379](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6379)) ([418aedd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/418aedd21e9cf5d68346b3592a3e2706526d0111))
- fix zero\_trust\_dex\_test tests ([#​6301](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6301)) ([0345a4d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0345a4d1ba765e87083ddc807e2d913ec1d54d80))
- **internal:** correctly generate schema according to annotations ([529f0ff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/529f0ff681b8048401af9d66399584a29ae5fe34))
- **migrate:** add target flag to specify resources ([#​6324](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6324)) ([1b94fcd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1b94fcd43ac7f6351db5a961d91c49133b8e64ae))
- **notification\_policy:** address drift due to unordered lists, converted to sets ([#​6316](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6316)) ([7eabe67](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7eabe67756ea6d3239983712473c2fce7e60fef1))
- read by id data sources should have required IDs ([1ca9485](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1ca94850ae165054d84f1e913a091b30f1a3199e))
- restore missing testdata ([#​6378](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6378)) ([5cb8dc6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5cb8dc6c807eba0eafc2727d917d423c1e208d6b))
- **workers\_version:** inconsistent binding order causing inconsistent result after apply ([#​6342](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6342)) ([1de79a4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1de79a4749ed56ba8f8611d4c02ba51eb0779479))
- **zero\_trust\_access\_service\_token:** client secret versioning ([#​6328](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6328)) ([d6b7107](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d6b71074f87354cd7c3f336ead970f12b324480f))
- **zero\_trust\_dex\_test:** ensure model/schema parity ([#​6370](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6370)) ([066ae4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/066ae4f6b74cfaab4a7c92701a1542fdb436afc7))
- **zero\_trust\_dex\_test:** fix duplicate key, imports ([#​6366](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6366)) ([15c05d0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/15c05d05fb6264ef700265b28813bd935f26643b))
- **zero\_trust\_dlp\_custom\_profile:** fix read, refresh, import ([#​6391](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6391)) ([3154453](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3154453269561d9fb523795bb20fa90296ef74fe))
- **zero\_trust\_tunnel\_cloudflared\_virtual\_network:** fix sweeper panics ([#​6392](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6392)) ([c190bc7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c190bc7de6bc3c6b4a8f01e8e9ca789910143044))
##### Chores
- **api\_shield:** Acceptance tests increase coverage ([#​6325](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6325)) ([3e957c7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3e957c79552895fbc0eb94312acd2eee36bf76e1))
- **api:** update composite API spec ([6d91d6b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6d91d6b476f631f3399d04e048232635ced4c066))
- **api:** update composite API spec ([a1e1df9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a1e1df96caec9d444d3be22251d924166c0039e8))
- **api:** update composite API spec ([1b9a680](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1b9a680746943a309142173ec3f4619f33efa376))
- **api:** update composite API spec ([c53a1f5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c53a1f5a8f8126c07480357e9aeef4da3fc7d46f))
- **api:** update composite API spec ([ae642c6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae642c691b141c31d9c7617cb3fd9d70bd325948))
- **api:** update composite API spec ([86ea5b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/86ea5b74700debeb7367a1fd9a78fc19fe9fc7f6))
- **api:** update composite API spec ([5bf96b0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5bf96b03ccfb01e2bab3ce2ac6443aefe3627336))
- **api:** update composite API spec ([07f3913](https://github.com/cloudflare/terraform-provider-cloudflare/commit/07f39134d760d2ed73a5745675a7206bab98c9be))
- **api:** update composite API spec ([f7c9b47](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f7c9b479a715600aa528efc916de03f7f00d1c7b))
- **api:** update composite API spec ([1519d61](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1519d612068ee8090a7af9ad8abf52e6c1ee2393))
- **api:** update composite API spec ([a78ff01](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a78ff01d1ffa25203b89a94e2462fa164bd75d69))
- **api:** update composite API spec ([fa156c0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fa156c0dc68e9b3d7ad599459f8743e4b3841e89))
- **api:** update composite API spec ([6f4ab90](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6f4ab9039465f94bcabc9fb17d871b941adf44ef))
- **api:** update composite API spec ([9455823](https://github.com/cloudflare/terraform-provider-cloudflare/commit/94558236a26d5932e2a31ad789be51d2023286a6))
- **api:** update composite API spec ([e482a4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e482a4fd14feb2115848d35d54d9bbd4be8010e8))
- **api:** update composite API spec ([98e3585](https://github.com/cloudflare/terraform-provider-cloudflare/commit/98e35853ebf455eb7c8b2d4d49c6050879c0815b))
- **api:** update composite API spec ([d552b8c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d552b8c3da10dfc391ff0dc9970279938364d4fa))
- **api:** update composite API spec ([46b4930](https://github.com/cloudflare/terraform-provider-cloudflare/commit/46b493034b2c404c2df76e95ebb38109157c44f9))
- **api:** update composite API spec ([34eddaf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/34eddaf6d4d712f8dc03931abf53b01c69af8f5b))
- **api:** update composite API spec ([50139f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/50139f07060123fe6f4a649a95188dec72afd711))
- **api:** update composite API spec ([b151882](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b151882d0951dc0ca43c2ae9f9684c47a8b46869))
- **api:** update composite API spec ([5892196](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5892196685804345b76c30b7043bdab22fa242d6))
- **api:** update composite API spec ([2ef377f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2ef377fe46e3ecb45142596f64a18c8f2380b8db))
- **api:** update composite API spec ([0f029be](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0f029be579b741ef19edfe3de5f6e26e90b03852))
- **api:** update composite API spec ([5483722](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5483722930ba2b3e1381ee9c04b91705cf825343))
- **api:** update composite API spec ([19ec88c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/19ec88cc4e7c86493e6711a62cfb9745b47b3ece))
- **api:** update composite API spec ([3a0fbe7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3a0fbe72169678eda0951c5c64aca0d9f990e03a))
- **api:** update composite API spec ([0ef1be1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0ef1be173722846c7d8b86f1a8e8c27d2973bb47))
- **api:** update composite API spec ([605134b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/605134b2bcddde335729bf114fb456d7229e34e0))
- **api:** update composite API spec ([d134c57](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d134c57fcd15db2c450c725de539c2de83e49796))
- **api:** update composite API spec ([0f0b7ff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0f0b7ffe7362d3b1a1f3df12908f239b49277915))
- **api:** update composite API spec ([aebfa72](https://github.com/cloudflare/terraform-provider-cloudflare/commit/aebfa720a4f8bbc49fb39c11cfe2d49edfc99de4))
- **api:** update composite API spec ([a37714a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a37714a14ecd2c878d4827b895d3d1df581da12d))
- **api:** update composite API spec ([e600699](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e600699285ea43f6638a87c12f6817c14ec460dd))
- **api:** update composite API spec ([938d787](https://github.com/cloudflare/terraform-provider-cloudflare/commit/938d78753398b28db1c916e9a7b2522649fac746))
- **api:** update composite API spec ([8ef0127](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ef012715a63cf4682a0f40b5900b65519b5f781))
- **api:** update composite API spec ([8ab046d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ab046d1a456f6188e814b123cc131693b3356ea))
- **api:** update composite API spec ([37a7311](https://github.com/cloudflare/terraform-provider-cloudflare/commit/37a7311176aef8954695f0e29c5283f06053862c))
- **api:** update composite API spec ([038e76d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/038e76d092ab67ca07a805a256cd1c8726aeb498))
- **api:** update composite API spec ([80fc0cd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/80fc0cd8e491a0ac60ee32c0b32774f4f8abe6bb))
- **api:** update composite API spec ([ddb3468](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ddb3468edb2b89acdcb9e1eb263f52e2bdee45b1))
- **api:** update composite API spec ([88b0b8e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/88b0b8e83a075a347ba562533bd20544a6a5bd7c))
- **api:** update composite API spec ([cd64df6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cd64df678a53949708ba9d849a8b489a00c75186))
- **api:** update composite API spec ([41b75fb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/41b75fb77bb6cf07f17539b2283d11d23f9a70ff))
- **api:** update composite API spec ([3a7c0a5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3a7c0a5b5d4db53f85690cf24c8e0cace86aae70))
- **api:** update composite API spec ([9c45892](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9c458925f39090f7ff08054debad13d67e20a7ce))
- **api:** update composite API spec ([4e791c5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4e791c5697e3636477517cd6a61389ad310d6c09))
- **api:** update composite API spec ([39816af](https://github.com/cloudflare/terraform-provider-cloudflare/commit/39816af0d8baa0ff00881fdaea1bf99073ca70a9))
- **api:** update composite API spec ([d156eef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d156eef049aa2bce0a31b5549c03be958aba3c15))
- **api:** update composite API spec ([b2bd81b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b2bd81b5ad50d06a8fb54b3279cd9ffea7492394))
- **api:** update composite API spec ([1111340](https://github.com/cloudflare/terraform-provider-cloudflare/commit/11113407d951e3d6b98ddb8dc01980e7131546b9))
- **api:** update composite API spec ([938003c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/938003c6afedda89407aa7f0e842193a965f41f9))
- **api:** update composite API spec ([0b7e283](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0b7e2834c004a44d7e025b368d7514016a4edfa2))
- **api:** update composite API spec ([2e958fb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2e958fbf25520b3f38c32c94c81d1098147ea866))
- **api:** update composite API spec ([138735c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/138735c2ce18b9345dbcda986284dcab27697aea))
- **api:** update composite API spec ([002fd57](https://github.com/cloudflare/terraform-provider-cloudflare/commit/002fd573cc71af999c7a6ccf76d72742d213ae18))
- **api:** update composite API spec ([302fa30](https://github.com/cloudflare/terraform-provider-cloudflare/commit/302fa302bdbb9314598eb187b4824877a5b88d54))
- **api:** update composite API spec ([0294b5e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0294b5ee5549ee484e162798d844c4e2812a0c20))
- **api:** update composite API spec ([ddb7a1c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ddb7a1cfea66b7402536dddb07c4f9f4d7b4ea1d))
- **api:** update composite API spec ([4cba4b4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cba4b44aa939c17a1931ddbc4fdcc9c45f7bde7))
- **api:** update composite API spec ([c88075f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c88075ff98ca945364ce2e6d0e0cb226584f0062))
- **api:** update composite API spec ([23b810f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/23b810fac56a2ccb781863d2e85bf47f1e752ea9))
- **api:** update composite API spec ([8590d26](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8590d2634b29df912c7831bb4fd912a76f091d67))
- **api:** update composite API spec ([2fa0344](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2fa03442859d09b943fd9cc24d0302699e18b2fd))
- **api:** update composite API spec ([e01d191](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e01d191fb48a5ecc52044347bbf468175d5db2b6))
- **api:** update composite API spec ([0b9c36d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0b9c36d397cc77c6334a6143d3de326eab67271e))
- **api:** update composite API spec ([644ff5f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/644ff5f2abc4d9dc6582e47f41a5c1c8ad87ac4a))
- **api:** update composite API spec ([fd946b1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fd946b1eb24916daaa10ee86f0c69a8092de81fe))
- **api:** update composite API spec ([5b54f0d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5b54f0da6c840ea6b6b5c079b41da732b45a2e10))
- **api:** update composite API spec ([0421b6a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0421b6a436786d6623646f470d5d33cd0a0fd440))
- **api:** update composite API spec ([d0f7eb4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d0f7eb487eb31eefebdaff92b61879eea36fcf6f))
- **api:** update composite API spec ([e8a2650](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8a2650765ddf2aafda18e93e7f739484087b561))
- **api:** update composite API spec ([d0784b3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d0784b3e77bee624a73d1443242bd1e3927ee63b))
- **api:** update composite API spec ([3490350](https://github.com/cloudflare/terraform-provider-cloudflare/commit/349035066ad623182690511b3b01a96ce7185c33))
- **api:** update composite API spec ([c009139](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c0091397a7cbaffefaf6fb941cc8cdf96f8a36fd))
- **api:** update composite API spec ([385cc44](https://github.com/cloudflare/terraform-provider-cloudflare/commit/385cc44b8ee9c9ef5a5c0662d75667be0a4ec107))
- **api:** update composite API spec ([7dc37da](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7dc37da6a4774e339a7b29302c79b74de2ec8cc2))
- **api:** update composite API spec ([3fc4cf6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3fc4cf6a55c43b0cfdd3af1df0815da408f94500))
- **api:** update composite API spec ([d812ed9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d812ed90d0e153f04ee877de77a0aab68d21c458))
- **api:** update composite API spec ([35aca13](https://github.com/cloudflare/terraform-provider-cloudflare/commit/35aca139e0baf5129b332c7af2b15f524517a5cd))
- **api:** update composite API spec ([f610c3e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f610c3ee159af9d45afb79e9290faf60f6e4c30d))
- **api:** update composite API spec ([b435318](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b4353183a097c6d2aebe5f475d4494b6c7740edf))
- fix errors in `cloudflare_pages_project` acceptance tests ([#​6318](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6318)) ([cb63e28](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cb63e287bd9d9de94296ea09580819c0c2e97f39))
- **internal:** codegen related update ([010cc1e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/010cc1ec5f1b9301727d152be6ace1564d760a73))
- **internal:** codegen related update ([fde5364](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fde5364da82867155855e56d7464857079db31bc))
- **internal:** codegen related update ([b451331](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b45133159bf3ba69e9147fba1c7640f4375b28a8))
- **internal:** codegen related update ([cf23a89](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cf23a893f24ff84d6afa34a4cfafe948ed906f4c))
- **internal:** codegen related update ([f577253](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f5772534cf758bae7e7e63516470dae0bfdd0262))
- **internal:** codegen related update ([70652b4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/70652b459d1de7c429faf4eec5c96fc23885ed6f))
- **internal:** codegen related update ([0504080](https://github.com/cloudflare/terraform-provider-cloudflare/commit/050408034c02c935d48996ca29f5bc31be7a7d6c))
- **logpush\_jobs:** Add tests from basic to full fields, and changes on omitempty field ([#​6337](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6337)) ([696abcd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/696abcdcb07701aeec498562b920133631a35d4a))
- **organization\_profile:** add org id env variable for acceptance tests ([#​6382](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6382)) ([37468a7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/37468a7048fe9de782a2f9f1a021219e8b6bcea6))
- **organizations and organization\_profiles:** Acceptance Tests and wait after create ([#​6329](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6329)) ([ecfd9bf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ecfd9bf837632e8fcb0505c5bca3feadd952d6d8))
- **organizations:** wire up acceptance test in CI ([#​6349](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6349)) ([c1cbe9e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c1cbe9ef6a093be08917be984b5a507057275373))
- **pages\_project:** only sweep pages projects resources created during testing ([#​6298](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6298)) ([1a2daa3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1a2daa3495620ecb6e285580649aab935565f6f0))
- **pages\_project:** update CLOUDFLARE\_PAGES\_OWNER and CLOUDFLARE\_PAGES\_REPO used for acceptance tests ([#​6300](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6300)) ([939499e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/939499e29181e0e0e8ca962e33165c95127bfffd))
- **queue:** Acceptance tests ([#​6339](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6339)) ([d9eb75d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d9eb75d148a750ad03ec8fdc56220a888b2ea082))
- **r2\_bucket\_lock, r2\_bucket\_lifecycle:** add acceptance tests ([#​6299](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6299)) ([1fdbd28](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1fdbd28c65c693b64a59fcc66584fb51c7c8014f))
- update pr template ([#​6359](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6359)) ([a062c51](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a062c514692e10093c6ad7bf9d3e99e95dd9eb97))
- **zero\_trust\_connectivity\_directory\_service:** Add wvpc / connectivity directory servic acceptance tests ([#​6334](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6334)) ([63e78d5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/63e78d560602556d40e984dafc0f3e4d2270cd07))
- **zero\_trust\_dlp\_custom\_profile:** shared\_entries acceptance tests ([#​6317](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6317)) ([83cf87b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/83cf87b8976dce8076c44639b54ae265cdb1e8a7))
- **zero\_trust\_network\_hostname\_route:** Add acceptance tests for Hostname Routes ([#​6282](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6282)) ([0ec769b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0ec769b0cc2b7f50a8935c4d3051abe36dec8442))
- **zerot trust dl resources:** Add acceptance tests for DLP resources (rebased version of !5751) ([#​6233](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6233)) ([cbd0568](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cbd05686898c5d34c0162e7d1b03fb6701e8e370))
##### Documentation
- generate provider documentation ([#​6394](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6394)) ([44843f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/44843f07ce50df850203cde084b5377faae96cea))
- generate terraform documentation ([#​6384](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6384)) ([6bffa7c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6bffa7c23f5d42826b818052e5581745464530dd))
### [`v5.11.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5110-2025-10-02)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.10.1...v5.11.0)
Full Changelog: [v5.10.1...v5.11.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.10.1...v5.11.0)
##### Features
- add `assets.directory` attribute for handling assets uploads in `cloudflare_workers_script` and `cloudflare_worker_version` resources ([#​6160](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6160)) ([50168e5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/50168e591001f93e21250419dd4953b602a2f952))
- add comprehensive test coverage for cloudflare\_zero\_trust\_list types and ([#​6258](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6258)) ([6d2746c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6d2746c8903ee50b14b72491e8f074659de9b11a))
- add missing services to CI test runner ([#​6271](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6271)) ([1477df8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1477df8afdb6b80c5be8c69d612df2fed861f666))
- added capability for `dynamicvalidator` to do arbitrary semantic equivalence check ([e1faeb8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e1faeb8b1a41d396454b59635292def7f3bdcbbc))
- Add custom origin trust store support ([175f4f5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/175f4f5b049d62ac9ec8a830d96bba5c346577df))
- Add Terraform resource for Workflows ([7533c05](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7533c054484b6993fcef60d4beb9ab2787474d32))
- Add leaked credential check resources ([c6be1c6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c6be1c6d5388b5c867f86ebb57e8e25dea3a2e75))
- Update worker and access application schemas ([ed096e0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ed096e0a5309bd08bb12c046043457b3a3ba34db))
- Adding new self-service SSO APIs ([007bdbc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/007bdbcf314df94887def4f37df6c1f73b772319))
- Changing SSO update from put to patch ([f67fbd5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f67fbd522ccf3eae431cd3bb8b46b3223a951a61))
- Rename duplicate parameter in the to\_markdown subresource ([07ccc50](https://github.com/cloudflare/terraform-provider-cloudflare/commit/07ccc503b60e2de61db07dda02feeda7249b313e))
- Add to\_markdown subresource to AI resource ([1a71265](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1a7126548ce7f6237261c01ff17ee5443e05fee8))
##### Bug Fixes
- bugfix for setting JSON keys with special characters ([9a106e3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9a106e3db2abf6f741c972866cbb669d0871bbde))
- **build:** fix broken builds on 'next' ([#​6280](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6280)) ([2224d8a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2224d8acc57f13dbcbef4299fcb08592eb3045bc))
- **build:** revert cache resources to released state ([#​6289](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6289)) ([e62250c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e62250c0e4b59a12bd73849f0a7581e815c9a9e9))
- case-insensitive location handling for R2 bucket resources ([#​6026](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6026)) ([78c33ff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/78c33ff9a2028c064c42f74b87eb8e9ecc7129e8))
- cloudflare\_workers\_custom\_domain failing to update ([#​6082](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6082)) ([46203a3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/46203a3d7045d529697b357c8c4d1f3e07201619))
- fix acceptance tests in CI ([#​6286](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6286)) ([c0a9e89](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c0a9e89c3410374f426cab0ac90a9bc14dce70c4))
- Fix zero trust access application acceptance tests ([#​6243](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6243)) ([4a2cbdb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4a2cbdba426906e310be791c309ebda4d66935b5))
- **list\_item:** source url validation ([#​6226](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6226)) ([70abffa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/70abffa560bdc74f0901bfb2582ff9b85f2ecd28))
- **migrate:** concatenate static and dynamic rules blocks ([#​6215](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6215)) ([be571d8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/be571d890da1cd2dabac44d649edd55a9ba4949c))
- **migrate:** page rules status defaults ([#​6212](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6212)) ([42a83d1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/42a83d1a1f03264a3a67124c78abef16027d6c05))
- **migrate:** zt access app default type ([#​6218](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6218)) ([cea98f8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cea98f8705d40ac2cf4b83171212b33d6a97fa4b))
- **r2\_bucket:** case-insensitive location comparison and preserve state case in R2 bucket resource ([#​6211](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6211)) ([5babbb1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5babbb109a968f8d18c78e2ad5a3dd52ac47fd2c))
- resolve compilation and schema parity errors across multiple services ([#​6241](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6241)) ([052cab8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/052cab85afa97d2b0637578af85e75aeff40d0f8))
- resolve compilation errors in zero\_trust\_access\_application and workers\_script ([#​6230](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6230)) ([2b78333](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b78333e76ac7a9eec9c06796fe396451100274b))
- resolve provider schema validation errors and R2 bucket test failures ([#​6222](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6222)) ([2df6eb1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2df6eb168aae57f85a2553490f7e79e19e19a57c))
- resolve zero trust test failures from computed attribute refresh drift ([#​6224](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6224)) ([5351c6a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5351c6a041f2cdb0f160438b862088509f3a3c2d))
- **ruleset:** allow rewrite rules to set an empty URL query string ([#​6256](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6256)) ([b177cc0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b177cc0ad8e6fd9a0f48687e4ad078656f1ef86b))
- workers script migration ([#​6210](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6210)) ([dca249e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dca249eb5737fdb76a958cbe0ad72967031666d9))
##### Chores
- add easy sweeper script ([#​6220](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6220)) ([7fe36e5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7fe36e5d453663cb3885bc104588c3baec0283f6))
- do not install brew dependencies in ./scripts/bootstrap by default ([44f11c3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/44f11c339bf4d86a5a0cdcdf75c746c17675bd66))
- ensure `tfplugindocs` always use `/var/tmp` for compilation on linux ([3ccb727](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3ccb727887e38def156f225983cc1c5b1cdec004))
- improve example values ([1ac2c1e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1ac2c1e71426edace6009b9a4a5b018c92cc7122))
- **logpush\_jobs:** Switch to Plan and State Checks from legacy Checks for logpush\_jobs resource ([#​6083](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6083)) ([5933a83](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5933a83c26663fc36f7f7c7b3eb39116af9a0aa6))
- **mcp:** allow pointing `docs_search` tool at other URLs ([195dbf4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/195dbf40ef6e5955a7ce800fb65e280d292d8837))
- **migrate:** remove debug statements from migration tool ([#​6223](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6223)) ([b50ee7c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b50ee7cc3d9c0b310d63c0c452d053d306234ef1))
- run migration tests with sweepers ([#​6209](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6209)) ([489795d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/489795d1a78f8a41c12701c253088f5ea9d4abc4))
- run workers\_kv and regional\_hostname tests in CI ([#​6240](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6240)) ([5433d6b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5433d6b2b69c8e0e71a5327cabf2b1589d63518c))
- skip mtls migration test ([#​6207](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6207)) ([1730fa2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1730fa26cb6ad6739f99ad3ec6b9989b434f1812))
- **test:** use no-grit by default when running migration tests ([#​6214](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6214)) ([267dfc2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/267dfc2e3d13311e0b60afd205006ca0c5785e8b))
- **zero\_trust\_dex\_test:** Updated acceptance tests ([#​6183](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6183)) ([cd7af0a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cd7af0a4c3adb14e2b199e0702da0e3ca3d3dd6b))
- Point to next version ([ac09de9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ac09de93f8bde47288cdaadb2fc413afcadae4b4))
- modernize and expand cloudflare\_zero\_trust\_access\_service\_token test ([#​6260](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6260)) ([79e891e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/79e891e2e2f3f948224bcf06c118e08904f7ccd1))
- Modernize and expand test coverage for zero\_trust\_device\_posture\_rule ([#​6259](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6259)) ([6666597](https://github.com/cloudflare/terraform-provider-cloudflare/commit/666659775bb190582da9269a0b2766db2ea9141c))
- modernize and expand test coverage for zero\_trust\_gateway\_policy ([#​6266](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6266)) ([9ad5fc1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9ad5fc1f2501a68546a8b4d96f8982113e1320ef))
- Modernize and expand test coverage for zero\_trust\_tunnel\_cloudflared\_route ([#​6264](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6264)) ([2c4a1e3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2c4a1e316dd13fa6cbe4e22c2070cd70215e2c5c))
- modernize and fix cloudflare\_zone\_dnssec tests with comprehensive ([#​6254](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6254)) ([d70cdd1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d70cdd1193c06549a517b41c93a9c28f990599c1))
- modernize and improve cloudflare\_pages\_project test coverage ([#​6274](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6274)) ([ebdbece](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ebdbece27887d249eeffdc91116797a5c46b509c))
- sweepers for workers\_kv and zero\_trust\_list ([#​6281](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6281)) ([2ed457a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2ed457a406bd7faee78fa5183000c37ccdba6454))
- Update example values ([c889ef1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c889ef143db19299190ab1947a43dd8d169ea49e))
- Use cloudflare-go v6.1.0 for v5.11.0 release ([5ae607d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5ae607d0ff5e95eaa3c18634aae1106be9d31842))
- Fix config for disabling codegen in access\_application ([75d8d6b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/75d8d6bcb15616f9a28d518e30847e8e37345d68))
- **api:** update composite API spec ([ee08de7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ee08de70b1ae501491d81c7633e98c63df6e438a), [b75aafd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b75aafd6710e78d08f478213d3b8d0c42ad12af4), [d140041](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d1400414d003a7d85a23e00e3c0327190ff12d4f), [d22865a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d22865aad1674bf86130e6faee4746480131dccc), [cbf8d12](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cbf8d12fa47ece5b5f09a011286b5707b43f353c), [1b987a0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1b987a0893529c54356ba1f0945f9ea22ecb9f7b), [d98c4cc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d98c4ccda843b468f3a5223bb92283146928df88), [02f821d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/02f821df0e613e80d7a2d6569f90106dfbd2b90b), [f965e4c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f965e4cd825b50ca2bba7a3d424dcacad11983a1), [9663d30](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9663d30d86181c611d23e8a558b7b58754b77999), [7839869](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7839869aa7af2723d3ce69942aa6305f178dec82), [d15f035](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d15f035fecf11ddaee1cb70fa6cbd2177c985dd7), [2a0c724](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2a0c7249a6ba9b95b43971627658780ba3d805b8), [ca18700](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ca1870030b1980509ebdeca8154fb761be4a6dfa), [7c43df9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7c43df913b5d8f5d5111a283a7bce2e35c250d4c), [0df0b82](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0df0b825cae7f19f04346de13ee1a027d17b4d06), [a50d130](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a50d1307db29ae8b6c7c1ff7725c8bf97f78a95b), [8fabca3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8fabca3d749ab94c3768897fa9b0059d166931cd), [00bb6e6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/00bb6e68964f6f9233422af5df5e4f8077dfd951), [f96417c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f96417c6d36ea4d52d6a18f4f64d4c3a40fd4a81), [86e8862](https://github.com/cloudflare/terraform-provider-cloudflare/commit/86e886284ed179bf9160d2c73bdb3a66d74b0380), [270f556](https://github.com/cloudflare/terraform-provider-cloudflare/commit/270f5561b02beea84b1622517123a5e500d10b01), [226cce5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/226cce5e08ee07449eecc300526b0b59cc92152d), [e8e7241](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8e724178a3059c34b91ae92e46a4419e73fb076), [f720dde](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f720dde7b797f7eed65a821291fec855741f4a1a), [125870b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/125870bb54773db07a53683fb926dee3478c41a7), [e4b3a36](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4b3a368f020f2171b38903a575f4ceec2dc96e3), \[[`e4c0f73`](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4c0f73)]\([`e4c0f73`](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4c0f73327) [`6b9f339`](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6b9f339161e2e8bc37fcf7e4ec8b4d)), [82c913f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/82c913f60fb38f3f8d855841176a33548673bb61), [64ff1f0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/64ff1f06354b31b0fab27bd841c8eb32be2cca75), [516b468](https://github.com/cloudflare/terraform-provider-cloudflare/commit/516b468aa5f7d4b33ebae7e4269478301c8e6eba), [b9b674c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b9b674c3f88f973ce3ecc9412ddfa08ff35a3c32), [0b6b710](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0b6b7107ec1c35662d38026aa5ded32b652a12dd), [fc1f691](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fc1f691bdab2ab9596f96d722c00447486e930d4), [7139af1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7139af1ace30e984d2033f5153276383454ad074), [81d79a5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/81d79a54d14b26ce7f33e4bb48c4a6910b7b9aba), [fcb14b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fcb14b63e771a88de7c423f0629a001752969d7e), [efebe55](https://github.com/cloudflare/terraform-provider-cloudflare/commit/efebe5571d49bcc4eab520e6094913bcc4603702), [c0fb2a4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c0fb2a47f2a8befafa7169df8e119257012caac5), [2978db8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2978db81702e425f7f8e4d17a64c1f6058e58426), [ced7790](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ced7790f730997ce51f8f10fbaea0f41e5d09427), [0ff7a11](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0ff7a1133179d0f7ed944cd838419779e88561db), [04c89cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/04c89cb6a22d7cc36636b47b2d772a77e0ef240a), [4acb7ab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4acb7ab62079e7c140111e236833772b8bc424ae), [04236ca](https://github.com/cloudflare/terraform-provider-cloudflare/commit/04236ca9926ed8c84242a69053116f82e58a75cf), [7636b30](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7636b3077e49a7b7a303f7ecf11cee01edacf0de), [5c2d985](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5c2d985a1c1de384de89c0f03d02219535951f57), [e52ffb1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e52ffb190c251376ed585f273b7ccba8636687eb), [133bb02](https://github.com/cloudflare/terraform-provider-cloudflare/commit/133bb020d8adc9e8e180f2c9d830e323522140b9), [3fd9175](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3fd91759c7b4214047a1469ec78394843a86c3ef), [b5f2c46](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b5f2c46ba266fb1cd3a392f438359e823ddf1699), [f52687d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f52687d91db396787ca0d150cb83f0c5b3415a41), [f1164d2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f1164d20453d9cce8f5b0a2effe37afc1f0e9afd), [e4a44a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e4a44a8af68e89ac6ce82ac2aeb66149b1e6f09f), [da6a341](https://github.com/cloudflare/terraform-provider-cloudflare/commit/da6a341e9912b9a128f5edcc674c91b982282972), [002316c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/002316ca9c4ebf5816b352ed61fc7bf0933a1f79))
- **internal:** codegen related update ([3457590](https://github.com/cloudflare/terraform-provider-cloudflare/commit/34575907e189e3fa4d65c0ef5640c7883470ff0a), [290fbad](https://github.com/cloudflare/terraform-provider-cloudflare/commit/290fbad69215e23603da96f6065a1e90bd5aefff), [8d68abc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d68abcb902560158bec06391b876af5935d2816), [ed99054](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ed99054c30a3fe86997b3d573ef344ca2d3771dd), [95603f6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/95603f6c0bbf2d294d606f28d0b1b3a9d991a84d), [e9b678b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e9b678bf9592f73ba26dab78de9e2254b88e8eb2), [2416723](https://github.com/cloudflare/terraform-provider-cloudflare/commit/24167238cd1e4050916ada729a785d387f2926da), [2e822a9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2e822a90a32f755f2805052377e8c190f3cd7d5b), [b02b92c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b02b92c0714cb134bf78bcf274a4974ba231f517), [7310778](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7310778d5d8511b8a21425d742b5269850415846), [7fb69e9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7fb69e978e01823fada800f94f203adb4f760e7e), [1f20a56](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f20a5669a2ed63e279bf16f3863cea91e1ea7f4), [4a181d7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4a181d7ba0b8e3e75881f1b221c2b27599fd93db), [c800edc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c800edc5e7f0c3bed3edc521c19add6e9099b74b), [3a74bdd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3a74bdde6bb1d58b17fa621b58f0da727d0b0ca9), [5fe113d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5fe113dcb36a8d1d390f5394d9c7d4925d8ea8a7))
### [`v5.10.1`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5101-2025-09-17)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.10.0...v5.10.1)
Full Changelog: [v5.10.0...v5.10.1](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.10.0...v5.10.1)
##### Features
- grit to go ([#​6162](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6162)) ([b3c4779](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b3c47796075888b92723ee8888bd8de9e3ab00b3))
##### Bug Fixes
- cloudflare\_load\_balancer transformation issues ([#​6171](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6171)) ([92f4a4a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/92f4a4ac3cdf493d0c543a6a234d74772f349236))
- fix grit in migration tests ([#​6175](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6175)) ([0a25a5e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0a25a5e05c3f63866e493839419a0a253ac19fee))
- fix zero trust access application state migration ([07a5d06](https://github.com/cloudflare/terraform-provider-cloudflare/commit/07a5d06b6ef6a8b1513ffb74ec7ce501e7c42b33))
- handling of nested arrays in ruleset migration ([#​6187](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6187)) ([a00b67f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a00b67f55cf19a0a7d963c16e29530a27e75983e))
- lb and lb pool config migration ([#​6170](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6170)) ([2af41f8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2af41f86cd166578f227f27ef4edbbb0d2feb4eb))
- lb monitor state migration ([#​6180](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6180)) ([c9811ba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c9811bad042a8cb312b7c4db1c734db65730140b))
- **migrate:** block transformations ([#​6203](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6203)) ([245166d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/245166d6f4b3e348d9d3b7f5cca55d9fc51e3f60))
- **migrate:** fix main\_module value migration ([#​6204](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6204)) ([fd24c07](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fd24c0743e745a5954ecc1e4a94a4415fbb5aa8f))
- **migrate:** improve `zone_setting` migrations ([#​6169](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6169)) ([6ba251f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6ba251f7c99e04588534399bd03d34aa7e88fd7b))
- remove 'disable\_railgun' from state after v4 migration ([#​6186](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6186)) ([453d774](https://github.com/cloudflare/terraform-provider-cloudflare/commit/453d774ee162565e2b080ba2291cb2f319eac3d1))
- remove zone settings with null values ([#​6201](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6201)) ([f99bac4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f99bac421f6ba694312357a963dfffb6fe431cc6))
- ruleset migration in nogrit ([#​6174](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6174)) ([ecb450d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ecb450d4adde5adb19a49bbbf5026d1995792705))
- ruleset migration issues ([#​6163](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6163)) ([44b653c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/44b653c81b591b3e865fe3d9cae6b88033914c48))
- ruleset migration issues ([#​6168](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6168)) ([11b3961](https://github.com/cloudflare/terraform-provider-cloudflare/commit/11b396108147fdad462bb0fb839f1f0766a7fc9b))
- ruleset state ([#​6191](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6191)) ([dfd36a2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dfd36a22b9c45f7d7a13855cfb8bbcdb0fa9ac3b))
- variable interpolation ([#​6193](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6193)) ([332de8d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/332de8dd71f5526cf55087428f5f069378198730))
- **workers\_script:** fix incorect model type of `run_worker_first` attribute ([#​6199](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6199)) ([13bf28d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/13bf28d11e16eebcbc7ef5c31e7152e47fd02df7))
- **zone\_setting:** ensure clean state after migrate ([#​6190](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6190)) ([41ae093](https://github.com/cloudflare/terraform-provider-cloudflare/commit/41ae0938374a3a8bde92c002b4a69ba06a60c73f))
##### Chores
- compare better ([#​6192](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6192)) ([ff67b9e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ff67b9ee390e7964ce0e79fc6cdaadee606d9486))
- enable mconn tests ([#​6166](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6166)) ([9c6653b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9c6653bab8b8b4ca35fe14bb24bdc68e4d39c268))
- limit max retries ([#​6173](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6173)) ([8c1c81c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8c1c81c76d97e932e91287700c44c844d15040cd))
- point transformations to gh/next ([#​6177](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6177)) ([c35109a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c35109a5d11d1e03b56f043e1491ccde577d8467))
- zero trust config issues ([#​6179](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6179)) ([07a5d06](https://github.com/cloudflare/terraform-provider-cloudflare/commit/07a5d06b6ef6a8b1513ffb74ec7ce501e7c42b33))
##### Documentation
- **list\_item:** add import documentation ([#​6202](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6202)) ([55e12bc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/55e12bc5b1faed26af312ddd129b9111073b21a7))
### [`v5.10.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#5100-2025-09-12)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.9.0...v5.10.0)
Full Changelog: [v5.9.0...v5.10.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.9.0...v5.10.0)
##### Features
- add 'ruleset' support in migration tool ([#​6104](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6104)) ([82158eb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/82158ebe9c2805b4cfe7533eda70008fbb5fcb12))
- add migration tool support for cloudflare\_snippet ([79e19d3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/79e19d31e7637e3f2904325d2f19ddbf17072829))
- add migration tool support for cloudflare\_snippet\_rules ([b1d4e92](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b1d4e92a4e8eca623713465085eefee4ef03b7ab))
- **cloudflare\_list:** add nested list items to data source ([0818c2d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0818c2dc98aea55e6777054040ebd131bf8dc370))
- **cloudflare\_list:** add nested set list items ([f96b922](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f96b92263421221105b973d506db71793ebe4c26))
- handle list items in v4 ([5c315f2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5c315f207f6c269ea6fd05509088e52bb50462d5))
- **internal:** support CustomMarshaler interface for encoding types ([3ce3cbc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3ce3cbc758bed234da930cbab5e21611850807b5))
- Merge branch 'vaishak/bump-sdk-version' into 'main' ([2d4ae17](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2d4ae176bc2668af22f36c93f99f296bf671d017))
- merge items into list ([0709233](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0709233a0d590f60fdf8f4cc66c3444fe12b7010))
- migrate list with embedded items from v4 to v5 ([40ff2dd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/40ff2dd685dbcf2d4301d6c96c84f0df761001c7))
- **migrate:** add comprehensive workers cross-resource reference support ([39032e3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/39032e3811883fc0e7c41de47fd9c2175de5ecb6))
- **migrate:** fix load\_balancer migration test ([#​6148](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6148)) ([1d21133](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1d2113344f04e88fea08449ab9f8db2f484f048b))
- **migrate:** implement comprehensive workers\_script v4→v5 bindings migration ([59d436b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/59d436bb1188180190c5abdea70ed556839604fe))
- **migrate:** implement remaining workers\_script binding migration fixes ([6324582](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6324582362020b435cd0da44fe225d577551970a))
- **migrate:** support migrations for workers\_route and workers\_script ([3308fa5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3308fa50c601ce533edf49a2625592cf47b99f4f))
- migration tests ([1e35d38](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1e35d38bfb048726717efe2e22dad796b6c0524a))
- migration tests ([8ec2d24](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ec2d246cdb149dbc729572f844d594e020a47db))
- modernize healthcheck tests ([74a358d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/74a358d018e66a2373ac6bb07d461c6841c30717))
- modernize notification\_policy\_webhooks tests ([bbab7d5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bbab7d571dda978540c6cb6b0f20021be6bc8929))
- modernize r2\_bucket tests ([ecf2609](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ecf2609108e1a408b0ce049c0b68f170c834f6d5))
- modernize zero\_trust\_dlp\_custom\_profile tests ([cb11079](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cb11079fc2ab25b214aeb5184a633d1a9deb85c0))
- modernize zero\_trust\_dlp\_entry tests ([6f0a6b1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6f0a6b1efa72b2028235eb74bb7590e684fdda92))
- modernize zero\_trust\_list tests ([27e8cab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/27e8cabaa116afba22318e11bafc1169893fd727))
- **ruleset:** validate action parameters are used with correct action ([578879e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/578879ee9b5475a8c4d9e0ed11152f490bd4bb47))
- **workers\_route, workers\_script:** implement migration for workers\_(script|route) ([ff3e68e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ff3e68e6fd1714084a97d29e694860d8a2603f53))
- **zone:** add v4 -> v5 migrations ([279070c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/279070c1f677a0bdc91bfdebb42c17e202bb54fe))
- **zone:** implement migrations ([717787a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/717787a5990fd07a4e603874835c18caa04cb2b5))
##### Bug Fixes
- broken test data and block attribute conversion ([#​6138](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6138)) ([6a07ac2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6a07ac20e6c919b1a4daaf27a4464711b20dc870))
- ci workflows ([ee2117a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ee2117a390f9e0deba1e9a8a09af9f5f8c189a0e))
- comment\_modified\_on drift in DNS records ([b5bdee4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b5bdee4baf0c6a30264306b23ec7aa1b89ea03da))
- discord failure ([8b8eb19](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8b8eb195f3209b58269b075fdd46be47b7df46c2))
- dns record empty states ([e8f418e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8f418e608e7cb463cf6aaaa403c10861e1c67c3))
- don't announce to discord ([9e7a495](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9e7a495ebb7c8f263a64c1dcd9f5067261159b75))
- dynamic 'origins' blocks migrations ([8d5de51](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8d5de517638d39293a1ef80728a4a45bf638badc))
- dynamic blocks and tests ([4d6855c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4d6855cc71bcc00331a50e2f2684150af09bfce3))
- fix snippets tests ([52dfe49](https://github.com/cloudflare/terraform-provider-cloudflare/commit/52dfe49e665354509a82dce898d24cf9c07b82fd))
- fix zero\_trust\_dlp\_entry acceptance tests ([5007122](https://github.com/cloudflare/terraform-provider-cloudflare/commit/50071226f18a74e58ed7e4eb87bd9b66ccb02611))
- inconsistent apply Issue [#​6076](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6076) ([#​6139](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6139)) ([0e9650f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0e9650fc1112739a315cdaebcd6157d8451251d2))
- **migrate:** add missing hyperdrive binding attribute renames ([fc6b137](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fc6b1376bc56cf945f36ff1d95f87c03c526bdb6))
- **migrate:** correct module transformation and clean up dead code tests ([c364035](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c36403502a8b55e7d3ee646e168e0157d9552010))
- **migrate:** custom\_pages state migrations ([8b4e1cf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8b4e1cf913cc6e3f6afd05fa579b53cb614ecdb3))
- **migrate:** implement dispatch\_namespace attribute to binding migration ([3a432dd](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3a432dd532647f6a02723d52eb7c8d50a278eb0c))
- **migrate:** implement module attribute to main\_module/body\_part migration ([dd94222](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dd9422222ed36a608c552c41f35a11f00ce0be75))
- **migrate:** implement workers\_secret cross-resource migration to secret\_text bindings ([5ff5c6c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5ff5c6c9971b416b91675291c14d7b227539b93d))
- migrations for config and state ([24e44b0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/24e44b0bd72f03974d1195bb3a9d3931a933d52b))
- more roboust retry logic for certificate tests ([#​6154](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6154)) ([25039bc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/25039bc51edb81b2ea20d132eea8da46be3535b2))
- nil dereference in `cloudflare_workers_script` resource ([#​6158](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6158)) ([bcfc129](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bcfc12947857b8a742b068b32707af4fcf86476a)), closes [#​6147](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6147)
- prevent resource type corruption in workers\_secret state migration ([abc0548](https://github.com/cloudflare/terraform-provider-cloudflare/commit/abc0548e62f82d7aa27122ce607ee501c063ee15))
- prevent resource type corruption in workers\_secret state migration ([adbbae2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/adbbae282527fff3f2afc9422e593072b77f5ecd))
- required field ttl ([b88e5b8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b88e5b8d4cf23ecca319d0b2807213d2e053db3a))
- resolve race condition in zero\_trust\_access\_mtls\_hostname\_settings migration tests ([#​6152](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6152)) ([9c6deef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9c6deef26dcb8c1141f7494517ee63aae5761e87))
- run spinnets in sequence ([0789979](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0789979eacf3d7350c4958bf12d260609aae6d56))
- skip acceptance tests in unit test scope ([#​6155](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6155)) ([e860eb5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e860eb515f334fc44f5df2d50cc5530f672a320c))
- snippet and load balancer migration tests ([#​6149](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6149)) ([a347ebc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a347ebccdb5b08a66a5ba98ba36b30b053d43955))
- state ([5742920](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5742920c0afafac57ee3f15da951661fc347d990))
- state test ([16c5fc2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/16c5fc2ec0b0fbcae1f048a134287c8d4a1eedd4))
- tests ([84f27a3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/84f27a375e4e11192dbc19902e0f28755af1cae6))
- tiered cache test ([408a4b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/408a4b6fc9a47fa21dc94aada71144e89115dc10))
- **workers\_script:** fix/improve bindings tests ([fca02f3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fca02f34d358d7d2f20a9ecbb5bb87718a4fe2bc))
- **workers\_script:** get tests passing again ([404a241](https://github.com/cloudflare/terraform-provider-cloudflare/commit/404a24114484ee16541875a96f5f1ed69ff01891))
- **workers\_script:** referenced attribute renames ([#​6136](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6136)) ([29d686c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/29d686c2ed811591522202ce28812b2c80771028))
- **workers\_script:** resolve binding order infinite loop in v5 provider ([a05f552](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a05f552a51ee3138cf584f4b7a36eeb90db1706c))
- zero trust access indetity provider migration ([7bc2a5d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7bc2a5d3e9dc0dfbb4621f99dd3657ac37732d58))
- zero trust access mtls certificate acceptance tests ([7e91d44](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7e91d44c17fa429c750ad05e9018f8df2806dbca))
- zero trust migrations ([ddc8642](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ddc8642939a84e9a7a71def40d5852f38146f2b1))
- zero\_trust\_access\_mtls\_certificate acceptance tests ([b163147](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b16314700cc13a3535304f0db4ba53f406fcec21))
- zero\_trust\_device\_custom\_profile sweeper ([f0ed7ca](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f0ed7caa94a44ee8b4fbc803875387c3de7022ff))
##### Chores
- **account\_member:** remove bad test ([21c670d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/21c670d3da4dd30d55b7a5ef68160b55139baa23))
- **account\_member:** update acceptance tests ([1988556](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1988556b720e4f7ab608d28709972c1837ced47c))
- **account\_token:** update acceptance tests ([1f6be84](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f6be843ca4b8d516fd7dcd2a9e3d532ab94ed0f))
- **account:** update acceptance tests ([1f49327](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1f49327a607052f4efed1bc052ebfab11ad39a69))
- add migration tool support for load\_balancer and load\_balancer\_pool ([a985fa0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a985fa0980c19940ed9ddb1b999c78a85a0be09a))
- **api\_token:** update acceptance tests ([5d02104](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5d02104c772bfa31428827e2c337e529ce4b8338))
- ci tests dependencies and job tracking ([a2142fb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a2142fb0d7c188df0a64f4bf3133d34586defc7e))
- enable more ci tests ([cd96052](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cd96052cfff30a17c8bc80baadd87dbf99644dd3))
- fix list item state migration ([#​6146](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6146)) ([7cc6425](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7cc6425756210ab2803fb3844fe1f27cc4cce47d))
- fix transformation source ([#​6157](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6157)) ([6cc2cfb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6cc2cfb2b2642bacb10d952a6826c854b6b77077))
- grit to go ([#​6143](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6143)) ([548f097](https://github.com/cloudflare/terraform-provider-cloudflare/commit/548f0974413728c5091b856967d4a2be3c7dbdf4))
- increase parallel jobs ([9f1a098](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9f1a098b378868c54865ddd9dd846fa6851c922c))
- increase retries ([#​6156](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6156)) ([309397c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/309397c3b2f074ce4eb55670eed6a0483e9d5b5c))
- remove files that are not needed ([064c780](https://github.com/cloudflare/terraform-provider-cloudflare/commit/064c780896778d03813d2fe86f4dea121ef34b3b))
- remove grit ([d840087](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d840087e04d87b146fb4677e387512b54bb659c6))
- remove grit for lists ([f7d6229](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f7d62295002beb894c5b4e2df24083cd08170720))
- remove skips ([adee34c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/adee34c10d4e009387f542de1ad6a4f23552852e))
- retry tests ([#​6150](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6150)) ([fc88bf8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fc88bf855232fcdfeec535692048391a0f8e1107))
- revert grit to go ([#​6159](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6159)) ([09bfa12](https://github.com/cloudflare/terraform-provider-cloudflare/commit/09bfa12a51658b0b3879d2916d703de46e661637))
- run goimport ([f837802](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f8378026a3283ee350503f98471f71ba2e0a9d7d))
- sequence magic tests ([#​6145](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6145)) ([156694c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/156694ccdb4326e0326385eba48f931fac3dd8a3))
- skip mconn test ([#​6161](https://github.com/cloudflare/terraform-provider-cloudflare/issues/6161)) ([e181aef](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e181aef8531e4ad75d2bcaaccb5aed27bc9c8567))
- tests ([47a4330](https://github.com/cloudflare/terraform-provider-cloudflare/commit/47a4330a2efd1f3d210f6a5e839295d9939aab87))
- **workers\_script:** add lots of missing bindings tests ([dc27751](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dc2775112f61adfd7e29ac56b5a7231ee6adc333))
- **workers\_script:** remove unused tests ([505c840](https://github.com/cloudflare/terraform-provider-cloudflare/commit/505c8405f93822f1d1a0acb2831eef0751c26ae0))
- **zone:** add migration tests ([b02bf9b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b02bf9b0fa8a40897f56dd33f68c80084c3122be))
##### Refactors
- **migrate:** add resource rename support to workers\_route and workers\_script ([35eaca1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/35eaca1b009cffb755e6700564f91af70bd2d78a))
- **migrate:** clean up duplicate bindings maps ([2393057](https://github.com/cloudflare/terraform-provider-cloudflare/commit/23930572971917df85bda1d7361bb8d91944d402))
### [`v5.9.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#590-2025-08-29)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.4...v5.9.0)
Full Changelog: [v5.8.4...v5.9.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.4...v5.9.0)
##### Features
- add comprehensive zero\_trust\_access\_group v4→v5 migration support ([44b55c1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/44b55c154c2f203db4ae742484281689d34dd6e4))
- add job IDs ([8bcdbd5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8bcdbd59a65932ea72e61517ce47d58fbf10c2cd))
- **api:** api update ([b9b17cf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b9b17cf612e3865ff8d78a19c748db65c9b8beb6))
- **api:** api update ([8ec5c0e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ec5c0e9e9a5f20caedeb67e25f3d53416755140))
- **api:** api update ([fb4eddb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/fb4eddbc189646deb65b91fca226c0f8e200d4a8))
- **api:** api update ([12c4328](https://github.com/cloudflare/terraform-provider-cloudflare/commit/12c4328bd833342ccda20fff0aad103062e58160))
- **api:** api update ([511614c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/511614ccc15b8507c7c36d7498e1cbc4f0975cfc))
- **api:** api update ([1d22129](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1d221295bcb9997e237ace7d37e274cdf959d7af))
- **api:** api update ([7391faf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7391faf90673b96356929cbdf809dcf23c1e9033))
- **api:** api update ([4fa333d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4fa333d1694c2d17a15d888f895b78169490a49e))
- **api:** api update ([5f93f24](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5f93f2451b21dce4760c019ac809d2659456256c))
- **api:** api update ([b584f87](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b584f872ba8497e30f966c2db110eaebb819cbb9))
- **api:** api update ([ff12699](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ff126990219cd5c4b9270888c4c5ca11b25559e3))
- **api:** api update ([ad38f3f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ad38f3f36905edd69e945b18dd3bb810ceec2634))
- **api:** api update ([51bbca9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/51bbca9400189e86632c59c645db5d858ea09906))
- **api:** api update ([d873115](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d87311597d69ba1151ce5ff0d4d4ba61ce981bb9))
- **api:** api update ([a6065ba](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a6065ba7e665a61c1154e551d03826f2370db939))
- **api:** api update ([2545b2c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2545b2cbef4c618aaca98ea4a5025749618f1270))
- **api:** api update ([abcd800](https://github.com/cloudflare/terraform-provider-cloudflare/commit/abcd8007805caa6927551780f805bd6b68f96f2c))
- **api:** api update ([9251429](https://github.com/cloudflare/terraform-provider-cloudflare/commit/925142939ca7ad9b4abdc4857195708d466a0973))
- **api:** api update ([4980f38](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4980f380b1b91b708ec3f7af82f688646a271310))
- **api:** api update ([76010ab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/76010ab284b1ca21fb47589759b06aed1b71d89e))
- **api:** api update ([627dfd8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/627dfd8603004d8728eb74a4892fa0ab78cda452))
- **api:** api update ([b6e00b8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b6e00b830a5e424a06ff2ad17aa07a7d769753af))
- **api:** api update ([8bfb0c4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8bfb0c4a9694278349313e20957cd00bdeb29f30))
- **api:** api update ([d614e59](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d614e5914d47b088fc4d05e9a559eb1745664821))
- **api:** api update ([b1cb9f3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b1cb9f3104a55c66ee201b8003d9be9565f492b2))
- **api:** api update ([098a710](https://github.com/cloudflare/terraform-provider-cloudflare/commit/098a710a0fcd535843d8a6ba869efed9bf1b4eed))
- **api:** api update ([da44c34](https://github.com/cloudflare/terraform-provider-cloudflare/commit/da44c34ed0c83d316557f40e34cb22ff189a16e5))
- **api:** api update ([276d413](https://github.com/cloudflare/terraform-provider-cloudflare/commit/276d4135214a67b1e263c76a43d3b33b761972c6))
- **api:** api update ([403f6a6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/403f6a60f718bcc73edea84bbfcf02d280eb0562))
- **api:** api update ([51788e7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/51788e7957c0c4dbb5d2ba5d88dd09a2a6b29973))
- **api:** api update ([841fa60](https://github.com/cloudflare/terraform-provider-cloudflare/commit/841fa60466aac847af13272c68a4af7c28a852c5))
- **api:** api update ([cfcd80d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cfcd80d3a0d35c4888023b5ca1ade754a3614490))
- **api:** api update ([8832c77](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8832c7792bdbc325df787d4c0ab1c3e47f665a53))
- **api:** api update ([f02e8ce](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f02e8ced752689e0deee321d82df5958707c5f02))
- **api:** api update ([bfd878b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bfd878b5e8f06a5ef0af387294b387750fb80957))
- implement automated v4→v5 migrations for zero trust access application ([344d995](https://github.com/cloudflare/terraform-provider-cloudflare/commit/344d995166dfa359a4336dfa98d6226fd6f3ecde))
- implement automated v4→v5 migrations for zero trust access policy ([204a2c0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/204a2c081ccbb17d997b63a568398d343c3fa1b2))
- implement comprehensive v4 to v5 migration for zero\_trust\_access\_group resources ([c63bd93](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c63bd93f05e50a6a00f4b6a2901688190dde2644))
- implement comprehensive v4→v5 migration for tiered\_cache resources ([1d763a9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1d763a9236a882f23625d322dcb3c7d76633edb8))
- migrate argo ([21bef66](https://github.com/cloudflare/terraform-provider-cloudflare/commit/21bef664571b2350338a23c8064c730c11f2489a))
- migrate state ([47c25c2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/47c25c2f405a0bfe93581a482f5aa60a85612d61))
- migrate state ([799e3c2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/799e3c2693d8eec516a87d3938e562d0868fbcea))
- **migrate:** fix access application domain\_type and destinations migration ([f572e62](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f572e62fa0cc26e19ffc6f6b9924322bdc8be04f))
- **migrate:** remove skip\_app\_launcher\_login\_page when type is not app\_launcher ([1cfa5ec](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1cfa5ecdda17b7b3a6dba17ab74183b40647b210))
- migrations for zero\_trust\_access\_application ([bb35c7c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bb35c7cfa814d9e705bd0709eddec2b6c1a17c3d))
- migrations for zero\_trust\_access\_identity\_provider ([75e412f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/75e412f7b4b5898832c62cc148cd79f9f43e751d))
- migrations for zero\_trust\_access\_mtls\_certificate ([4d547c5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4d547c5b9d4f1d691bbdb698ee31d03d87c47b6d))
- migrations for zero\_trust\_access\_mtls\_hostname\_settings ([82ff1cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/82ff1cb551385c8d27b5f4892e3abb5ef3fa5876))
- parallel test runs ([48d5c35](https://github.com/cloudflare/terraform-provider-cloudflare/commit/48d5c35864199deed796b2bf3decb4100b567731))
- **regional\_hostname:** support migration from v4 to v5 ([ffd589d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ffd589ddd8df640f703d5aaa89cd61d8d8cc613c))
- state upgrader ([ed2ad91](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ed2ad911cf4bb76b80ea137d8385e4a65f280eb6))
- sweeper for magic\_wan\_static\_route ([51728f9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/51728f9b2ec8141643de5102fb0b39d8154087c5))
- zero trust access policy migrations ([134df93](https://github.com/cloudflare/terraform-provider-cloudflare/commit/134df93b0fb081435dd3b57c6934379159fdd209))
##### Bug Fixes
- 'created\_on' API inconsistencies in LB pool ([e8d34db](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e8d34dbd324f9fe6b71c746514c76a92e69c8e34))
- access application model schema parity ([94311b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/94311b7b7e4e97928242bb7b14bd43727662ac7e))
- account\_member tests ([832a05a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/832a05aab2ddbfaf1deeca43aeac411d5a5edc80))
- api\_token ([3846ff9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3846ff980577ffce0064dc64e25f63a97ebe7dab))
- drift ([6e5659d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6e5659d04827587c6d33620cb5136b8e6f3f6516))
- dynamic type validators should handle int and floats correctly ([5ae1226](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5ae12261d7b25e7d0d3f18c38682ee00e0a45a2a))
- enable account\_member tests ([d3ba4ab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d3ba4abacc620728e1c8edb19b3d993841b0e50e))
- encoder crash for nested nils in dynamic types ([91e9782](https://github.com/cloudflare/terraform-provider-cloudflare/commit/91e97825e1abc5ef9fb5bc95127a69a0435ce5b0))
- enhance DNS record sweeper to prevent apex domain test conflicts ([4be8681](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4be86812c652245ad041961b49e417f0f3544a77))
- grit patterns ([736b9ac](https://github.com/cloudflare/terraform-provider-cloudflare/commit/736b9ac6b2361249529d12cc3ad335a6d81a5e57))
- grit patterns for dns records ([6e0785e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6e0785e7bc4d4d661dd5ae88ad2617759fa7f9c9))
- handle empty tags ([35ab9f7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/35ab9f7d0de7b0c9439df56ea6fd1490a405aee1))
- implement migration for ZT IDP in the migrate tool ([df2289e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/df2289e7cf65d2f1e7c96bc25671fdcc2d417fc3))
- **load\_balancer\_monitor:** Fix detected drift on refresh ([024f015](https://github.com/cloudflare/terraform-provider-cloudflare/commit/024f015b2ea7d39861b20249703dd01e3db93525))
- **load\_balancer:** Fix detected drift on refresh and update ([3d06582](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3d065828d926b39d839a62c8c0db52885a536f94))
- migrate for managed headers ([8398f4f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8398f4f79c8918919c0717718582a2fb7f767673))
- **migrate:** fix incorrect setting name for `0rtt` ([4943ca2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4943ca2fd8950d2eef892ce298cc9df7c7477f42))
- **migrate:** fix zone\_settings migrations ([d24ce96](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d24ce96b219cdd6ceaa0fec81c0fb3eeef47ba37))
- populate computed\_optional collections from API responses ([d6c64dc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d6c64dc8775540dc5179cf1d655b374fba0c22bc))
- properly handle null nested objects in customfield marshaling ([61c808d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/61c808dae7a7985dcb5b972b1db3c8168abecab8))
- remove state upgrade ([c6716e7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c6716e7f2178f9599141fc06a9b841bb4e74c260))
- resolve test failures in magic\_wan\_static\_route and ([11d91df](https://github.com/cloudflare/terraform-provider-cloudflare/commit/11d91df9134d2d72797449f1c51509d53924d1aa))
- resolve type mismatches in zero trust access policy and application migrations ([8e3b4b6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8e3b4b692b78037cfa9a5719d2d3cc99eea5b438))
- **test:** Add plan check validations to cloudflare\_zero\_trust\_tunnel\_cloudflared\_route resource ([c94fb5b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c94fb5b3ee300dcede4b3af592731df9131eafa7))
- **test:** add planmodifiers for dynamic type ([eaf6f17](https://github.com/cloudflare/terraform-provider-cloudflare/commit/eaf6f176f27a9b16cb0a472eb20c54ae0019a951))
- use planmodifier for zone\_settings value normalization ([468f59a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/468f59a09e3e39bca65766ba4b5748db04f3f3b8))
- wire up migrates ([54c3248](https://github.com/cloudflare/terraform-provider-cloudflare/commit/54c32485e50c001f0dc412f5ca863a8f41c8de35))
- zero trust access policy acceptance tests ([4804ca3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4804ca3281b66dff01379d7c4b35b5c810356dc9))
- **zero\_trust\_device\_custom\_profile\_local\_domain\_fallback:** fix recurring diffs and add acceptance tests for multiple domains ([c8e790a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8e790a4cd9915186ae2a7ec325ba4b78330b63d))
- **zero\_trust\_device\_custom\_profile:** fix recurring diffs and add acceptance tests ([2b358e6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b358e677e10cdfae0cb1b1a8d555d6fc2ade0ac))
- **zone\_setting:** remove grit patterns for `cloudflare_zone_settings_override` ([3b6edda](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3b6edda0c8bc158e869813445d45d814c7e07387))
##### Chores
- add load balancer acceptance tests to CI ([b9df93d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b9df93d96bd6d4fa782636d1905bcd1005195315))
- add sweeper for magic\_wan\_gre\_tunnel ([e31976a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e31976a31afb78a8af3561c5e4df1ac1c3c7b2fd))
- add tests for zero\_trust\_device\_custom\_profile ([cc567a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cc567a80c61bbbd8c09ce722b243c4cbff4d9f65))
- add zero trust device tests to CI ([bcff1a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bcff1a8460a2776db0943e28ae0bc55a0c621227))
- **api:** upload stainless config from cloudflare-config ([9a32393](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9a323936b477add84f6f71c96b06037e5ff1c803))
- **api:** upload stainless config from cloudflare-config ([00d150d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/00d150d5bba8878960146edf64fc2155f99df5ad))
- **api:** upload stainless config from cloudflare-config ([ca57125](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ca57125e28e043799f0f75de5869fb32fa37faeb))
- **api:** upload stainless config from cloudflare-config ([416b5c1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/416b5c10501e443a430709c52dc289bf0c1e47df))
- **ci:** skip ZT mTLS tests ([289ce58](https://github.com/cloudflare/terraform-provider-cloudflare/commit/289ce580ed52c572902d1a92f1598d3d5e9f0fee))
- **ci:** temporarily disable migration tests ([e1c5b3d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e1c5b3d4bd525f406ef49ecd4192d614c03adf0e))
- **ci:** temporarily disable migration tests ([8ab562f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8ab562f95690d41c7f5b9b9f5168a8fe09da7697))
- clean up ([0415065](https://github.com/cloudflare/terraform-provider-cloudflare/commit/04150656a680274cb09c7bcde729921a94a7b304))
- comment modified on test ([d403d5f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d403d5f86fe898b11ee7b815eff0c76b07489ff2))
- disable failing queue and r2bucket sweepers ([e1394a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e1394a8d5bd8231c6f80208fb02db03abba88736))
- **docs:** generate provider docs ([d86327b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d86327bbf93b3523bd8d33967a74ace9cc590c09))
- fix ci script ([5991be1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5991be1343d421535d4ed65515ec0c311e0dea0c))
- fix magic\_wan\_ipsec\_tunnel acceptance tests ([5f5b50a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5f5b50acd6b558cc74527e15161e74b31db3c5c5))
- fix sweepers for many resources ([c2f66f6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c2f66f627656a4a0b6a59c3387d37cbacc928dce))
- fix TestAccCloudflareAccessOrganization ([8b0e176](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8b0e176dea5760322c2de3cb3c812d09f79c055c))
- fix TestAccCloudflareAccessPolicy\_ApprovalGroup ([52ef60b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/52ef60bdca1bce374318734a016659da5557a566))
- fix workers\_script tests ([1116eac](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1116eac5d6df11f527f1a5bc8ece1cfe6730d2dd))
- fix zero\_trust\_access\_identity\_provider tests ([2575473](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2575473c8c14078ad437dfbf71fadb0a54de7d43))
- fix zero\_trust\_access\_mtls\_certificate acct tests ([a00f421](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a00f4214fe89327ed7b8f483162e226338b675b9))
- fix zero\_trust\_access\_mtls\_hostname\_settings tests ([166517f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/166517fe66cd791f8d4e3bbaa49d6946addb8e4e))
- fix zero\_trust\_tunnel\_cloudflared\_route ([0e961f7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0e961f705e585734b4b688cd2e0d7c2036e73879))
- fix zero\_trust\_tunnel\_cloudflared\_route tests ([3c51256](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3c512563e3cf3bf6d2442224f4239f5eee89e2fb))
- improve integrity test error messages ([2d410d2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2d410d2a1d985a9524785c7ace0277aa7b857fd0))
- increase ci test timeout ([5da9eab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5da9eabfbf2565a6e8aa7925c1d575f651da490b))
- increase number of ci jobs ([50ee749](https://github.com/cloudflare/terraform-provider-cloudflare/commit/50ee749e1ad231577b2f5280a52f58e6dc8555ce))
- **internal:** add test rule to lint for dynamic attributes that do not have planmodifier ([a725465](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a7254653b34797b0f754198606bd81a3a9160ce2))
- **internal:** codegen related update ([42115d7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/42115d73fae3501b50d6294ea4da8a9ab4c83eea))
- **internal:** codegen related update ([8feeada](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8feeadadde65c1ed8cd2d8dd91a16ba4612aed5c))
- **internal:** codegen related update ([17863a2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/17863a2c63d739ba555b5e16a131b691f39cf603))
- **internal:** codegen related update ([0bd098f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/0bd098f1f95585334dfc53d18e05039d48767884))
- **internal:** codegen related update ([4e59511](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4e59511354cb3aa567e614a0c82817693532bbef))
- **internal:** codegen related update ([55d5985](https://github.com/cloudflare/terraform-provider-cloudflare/commit/55d5985b2b44f137b7c28b6a76215a95edeae01f))
- **internal:** codegen related update ([5505692](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5505692abda33c286d1ce8b477dde524dfb506b7))
- **internal:** codegen related update ([7765dbf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7765dbf1da1fbd10743b3126bbe35702e481b326))
- **internal:** codegen related update ([1748ea8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1748ea867919cb8ee1dd7db097d4b1378fd0e271))
- **internal:** codegen related update ([e0eff5c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e0eff5c3080169222b05858178063469b25c2d2f))
- **internal:** codegen related update ([cde67a4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cde67a40224cc2633d715f3897f0006748fc3ff5))
- **internal:** codegen related update ([5d2fe3d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5d2fe3d3d1b788b25912d8696947439814b2c384))
- **internal:** codegen related update ([a9610ce](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a9610ce8a3ef636a6bb069f7fbd70c037671076b))
- **internal:** codegen related update ([90aa9c5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/90aa9c5558e8a1e15cb9e3153973e4b55b8af78d))
- **internal:** codegen related update ([2b37de1](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b37de16009c5664d9bb4a895f691ef5b9c167de))
- **internal:** codegen related update ([b27f531](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b27f53154750aae21dd4c44eb4dd70e23dd6f157))
- **internal:** codegen related update ([2275aa2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2275aa2d73e17e0f8ae0dd28f98f3e61ae4554d2))
- **internal:** codegen related update ([4cbcff5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/4cbcff5fba7acf268ab5c46e79f93914d2dd8f6d))
- **internal:** codegen related update ([2136d08](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2136d086ba77d5107e86f1acb09b5ccead821cb1))
- **load\_balancer\_pool:** fix test data and skip broken test ([3be61aa](https://github.com/cloudflare/terraform-provider-cloudflare/commit/3be61aa1458c0277d01b3be5e06d9dc2cf40912b))
- merge acct GH steps into a single step ([d27710c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d27710c5a7d8842d86024f3a084df981388cf3aa))
- more tests and drift ([f1cc4ac](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f1cc4ac5ea0828f3572908ecf3cc8f46a00679f2))
- parallel ci test runs ([260a5b9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/260a5b924262eb8148137034d8baf8a10ac555e5))
- remove state upgraders ([ca04b97](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ca04b97d91894b16587304dffa968a089eb79dce))
- remove version from schema ([73f2e17](https://github.com/cloudflare/terraform-provider-cloudflare/commit/73f2e1738bb14f3d2e17ba4ef5fa2af23023fdd7))
- run sweeper before any test run ([5bac861](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5bac86115fcb271aa2678814c228fd25ce914938))
- separate acceptance and migration tests ([e466442](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e46644276c1dbeeff03c007d1351ad584973a89f))
- skip failing ruleset test ([7746f2b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7746f2b951e2d32fdaf07dd61e224d7fa39d6122))
- skip failing sweepers ([46810fe](https://github.com/cloudflare/terraform-provider-cloudflare/commit/46810fe3991ced4886bebdfd9f609b4a53793928))
- update all cf-go v5 -> v6 imports ([2cd840f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2cd840f7569c3ea822364017ea44bafd454edd7d))
- we can have only 3 parallel jobs ([588c710](https://github.com/cloudflare/terraform-provider-cloudflare/commit/588c710a12dde2bb78a57b5f02d86acc90f88ed9))
- wire up migrate commands ([b574a2a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b574a2a6250ec3ad514f9e8ff845533daf643dea))
- zero\_trust\_access\_mtls\_certificate tests ([07e374e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/07e374e6a32c00a2a0acfba3c805b8528af62347))
### [`v5.8.4`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#584-2025-08-15)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.2...v5.8.4)
Full Changelog: [v5.8.3...v5.8.4](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.3...v5.8.4)
##### Bug Fixes
- **cloudflare\_ruleset:** update for consistency with OpenAPI schema ([837da07](https://github.com/cloudflare/terraform-provider-cloudflare/commit/837da07e1faed0507eae00f602414eac1b1e9f05))
##### Chores
- don't announce to discord ([1816fff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1816ffff2ec85325ca622ef1aa72a51b6d2ca9c6))
- generate docs for 5.8.4 release ([ae12b37](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ae12b37d0dff361d7aa463f593a94bca01668c2f))
- only include ones that have tests ([ebc40cf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ebc40cf77c63951364b2b186e93ff19f4374faec))
- run one by one ([1185be7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/1185be75c053efa6d04a4d57491ac0be861bf2f8))
### [`v5.8.2`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#582-2025-08-01)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.7.1...v5.8.2)
Full Changelog: [v5.8.1...v5.8.2](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.8.1...v5.8.2)
##### Features
- **api:** api update ([54b3c10](https://github.com/cloudflare/terraform-provider-cloudflare/commit/54b3c1027b30ae9ad6f388a64ea04941faea6774))
- **api:** api update ([8666096](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8666096e375e55731b286f30f3b722ad70761c1e))
##### Chores
- update model for zt gateway settings ([a084e1b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a084e1bfbf36e6fe1b3799d585d20542f792c0f0))
### [`v5.7.1`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#571-2025-07-15)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.7.0...v5.7.1)
Full Changelog: [v5.7.0...v5.7.1](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.7.0...v5.7.1)
##### Bug Fixes
- **api:** Fix update/read path parameter for zone subscription ([c763edf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c763edf824d7c624a5386d5d0c9c4f10dc7dbb15))
##### Chores
- **internal:** version bump ([5d9412c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5d9412ca93034ed24c449ccaa4b5347680d26b99))
- **internal:** version bump ([93e874a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/93e874ac0a2edfa8d72e4eda2b53b1c0cec8c760))
- **internal:** version bump ([5fa684d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5fa684de7c86bd7774940ad8ec191331f769fd6f))
- **internal:** version bump ([68327f2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/68327f2dde2b2ce5b4178c09d9d01c305335a950))
### [`v5.7.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#570-2025-07-14)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.6.0...v5.7.0)
Full Changelog: [v5.6.0...v5.7.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.6.0...v5.7.0)
##### Features
- **api:** Add 'zero\_trust\_tunnel\_warp\_connector' Terraform resource ([204d752](https://github.com/cloudflare/terraform-provider-cloudflare/commit/204d7529af116f0d3104da3de798142e8d75917d))
- **api:** Add DELETE and POST routes for Magic Connector ([b3c8c0a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b3c8c0a2ec82ae06423277f1f23376d61799d0e1))
- **api:** api update ([85a1a2f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/85a1a2f3bdab52cb663d81bee0012cae79a6d560))
- **api:** api update ([c20c04c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c20c04cb8992b98e94a62b507a9933040f8c5e1b))
- **api:** api update ([f936dc9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f936dc9259deecfff96a63bff7deef5d03d8d645))
- **api:** api update ([a5634a8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a5634a8547f3f9ca714f000d2f8511cdfcdc4bb6))
- **api:** api update ([d7e118c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d7e118c41bd6187321e7346075699fb8c0dc0125))
- **api:** api update ([7a1200e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7a1200ebe55933f6dcadb0c198cfdf3250c2b75d))
- **api:** api update ([97ea6d6](https://github.com/cloudflare/terraform-provider-cloudflare/commit/97ea6d6100946c3c5581e256b71ddc2403613677))
- **api:** api update ([75e1515](https://github.com/cloudflare/terraform-provider-cloudflare/commit/75e151546d902d622e91ce7a2713c5efa89b92b9))
- **api:** api update ([223c0ff](https://github.com/cloudflare/terraform-provider-cloudflare/commit/223c0ff085394facb2b22ff958429c2571601a75))
- **api:** api update ([7e9304b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7e9304b15fb637574a72729b76596cb8e536070e))
- **api:** api update ([b98281d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b98281d9d84966e39f0b3b1c96d7d0d652c676f5))
- **api:** api update ([d94fb1f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d94fb1f2b8959a0893066fdb4ff28e624d98224e))
- **api:** api update ([7861f45](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7861f45da923902abad48efaa1a02ec3dab5989e))
- **api:** api update ([534cc05](https://github.com/cloudflare/terraform-provider-cloudflare/commit/534cc05eed010839f29d05c5c7e7df843ebb4938))
- **api:** api update ([39676a0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/39676a0de28e699286354db0cae59ba083860ebc))
- **api:** api update ([c449ded](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c449dedccade8be6fb9c8b1ac02e293bb9cae709))
- **api:** api update ([de3965a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/de3965a07b17feda13b99b91e2330e22803288d7))
- **api:** api update ([ab0e41a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ab0e41a010524202c0efb3558d369b4c666cb744))
- **api:** api update ([c8168f2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8168f2009890904f7aca4ac189a632d379885a9))
- **api:** api update ([371b58e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/371b58e01eba0b306b193697f5d99660ff7e064e))
- new option to send computed values back to server ([2b9c5d5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b9c5d5bc52f6da073a288142e7af58187f4422f))
- **workers\_script:** support `content_file` and `content_sha256` attribute pair as alternative to `content` ([6c850b0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6c850b0bb397f4bb18abd51d7ddfe1d46575fcec))
- **zero\_trust\_dlp:** Added individual resources and new routes ([2b7185f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2b7185fce3cf74d1a8dfedc459dcc2fc2fa351cb))
##### Bug Fixes
- assertion ([58392a5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/58392a5141bc557a14988e8ea822b144002b1fd5))
- ci jobs ([8fd4d84](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8fd4d8471e0d72caa393e2b52d3c7b3e27db6574))
- ci run setup ([b38f788](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b38f78828f0da27815a86e68f21d5a79bc23f95d))
- **ci:** release-doctor — report correct token name ([87e54a5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/87e54a55bf0e7cde2bc1ee44960d58486a357ebc))
- **logpull\_retention:** Fix Terraform ID property ([de3811f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/de3811f0f618118051b3a473c2b1042b95321c65))
- null nested attribute decoding ([5ba7d5b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/5ba7d5bf759b16d487c3279c6d4df825092b253a))
- **terraform:** strip leading/trailing underscores from attribute names ([e00ca4b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e00ca4b1d504633efcb7c6d47e8b8664b149b5f2))
- **zone\_subscription:** Fix incorrect path identifier on Update and Read ([e00223d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e00223d0a3d7db40fe65c7ef73111059993c03e4))
##### Chores
- **api:** Specify default value for Zone Lockdown 'paused' property ([808598c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/808598caf1d203221c1dc9670582d8c03c42da6f))
- **api:** Specify default value for Zone Lockdown 'paused' property ([072f9f7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/072f9f7f18d637c2294e78dd0487dccc75fb5bbd))
- **ci:** only run for pushes and fork pull requests ([df566b9](https://github.com/cloudflare/terraform-provider-cloudflare/commit/df566b932510480199bd777106fdc97a727c7450))
- **config:** bump cloudflare-go ([8671c9a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/8671c9af5f95a6e689aff515b3d96d11eb1a0ebd))
- **internal:** codegen related update ([70ba827](https://github.com/cloudflare/terraform-provider-cloudflare/commit/70ba8274bdf4037784f5bbc0aa0e83afd33506d9))
- **internal:** codegen related update ([f29c24a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f29c24aa73da1644f611a2b58d266c930f938f93))
- run steps on failure ([c7360a5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c7360a56e7a4c305b63431907b59da3d84a8a542))
- skip flaky list item tests due to rate limit ([85f5b78](https://github.com/cloudflare/terraform-provider-cloudflare/commit/85f5b780a075d6894a47722ddb1882232ddc078f))
- skip flaky list item tests due to rate limit ([c980fdc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c980fdc0553bf89ec7571a36c9a0786fdd49c009))
- **test:** Fix acceptance test runner ([c964479](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c9644793b092dd3e2f60c6f9abdb616c3542e49f))
- **test:** Fix model parity tests ([52446ec](https://github.com/cloudflare/terraform-provider-cloudflare/commit/52446eced05e34eabba827971bdbad4f00e146b6))
- **test:** Skip GRE tunnel tests ([7278846](https://github.com/cloudflare/terraform-provider-cloudflare/commit/72788461f0e4a0727670966585f877f22fea2ccf))
- **test:** Skip magic tests when we don't have the right environment ([c8c505b](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c8c505bb8002907211224c674415f65506e1f653))
- **test:** Skip some Access IDP tests ([9e13c6f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9e13c6fbf5aa7d5ef694ea6786b0714614337ebb))
- **test:** Skip some rulesets tests ([263f43c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/263f43c31c6d0ee82f61e485a387ea2228d2ca50))
- **test:** Skip TestAccCloudflareAPIShieldBasic ([b5a6ba3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b5a6ba3a7da82463b4d5147bed9ebd0871a8c0e8))
- **test:** Skip TestAccCloudflareAPITokenData ([11f728d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/11f728d8a47c330c5122f1997cc3713526af36d5))
- **test:** Skip TestAccCloudflareTeamsList\_LottaListItems ([7e6c4da](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7e6c4da4777897892b8c746ab177f729f9b4a264))
- **test:** Skip zone lockdown tests ([bfe7436](https://github.com/cloudflare/terraform-provider-cloudflare/commit/bfe7436517c2a58675dcc7fbee5b026cb2b42d5d))
- **test:** Skip zone subscription tests ([a533043](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a533043ab06e32c147f6574fbf5d589722ab3acd))
- update docs ([884dcd8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/884dcd816133381abf6c4edf309f56e36c80b02a))
- update docs ([cd30cb5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/cd30cb5f311c9941bf58b9c901c8317cd4776084))
- **zone\_subscription:** Fix ID property configuration ([b762cf2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b762cf2484097dbe26d01b9a7dff99d90a1bb4d2))
### [`v5.6.0`](https://github.com/cloudflare/terraform-provider-cloudflare/blob/HEAD/CHANGELOG.md#560-2025-06-17)
[Compare Source](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.5.0...v5.6.0)
Full Changelog: [v5.5.0...v5.6.0](https://github.com/cloudflare/terraform-provider-cloudflare/compare/v5.5.0...v5.6.0)
##### Features
- **api:** Add IAM User Groups and AutoRAG ([56dcaf3](https://github.com/cloudflare/terraform-provider-cloudflare/commit/56dcaf31aebbfe8ae99f87c2a0b2fe38d83ecde8))
- **api:** api update ([f5f9fab](https://github.com/cloudflare/terraform-provider-cloudflare/commit/f5f9fab8354232c7033163aad87cee972e847d07))
- **api:** api update ([16f59b7](https://github.com/cloudflare/terraform-provider-cloudflare/commit/16f59b7ca68f59576d0f1a4afdd419f903bc9ac2))
- **api:** api update ([38cc34f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/38cc34fea8002cd1c5c83617f60c46c2de01ca06))
- **api:** api update ([87dfb9f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/87dfb9f059e9984aa36b5e97d09bd155f1370c37))
- **api:** api update ([9d65aaf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/9d65aaf7d3e22702c79aba0ed4479116910aaf3c))
- **api:** api update ([db05444](https://github.com/cloudflare/terraform-provider-cloudflare/commit/db0544438c9f56acf0c4be302789daa0e0f991b7))
- **api:** api update ([d373046](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d373046d31d1b8c58551be0a0337e0352a63ff6c))
- **api:** api update ([7f788ec](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7f788ecb6311aff5bc6fa9bf99afa3bf6c6fd777))
- **api:** api update ([c412337](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c4123371db02b61b2d7cbbdf9c863797153f575e))
- **api:** api update ([39a8871](https://github.com/cloudflare/terraform-provider-cloudflare/commit/39a88712180bf132d3ebf9b81983677af9bc21e5))
- **api:** api update ([7af8e9c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7af8e9c1d92dfaeb220cb971570ce81f555720f1))
- **api:** api update ([10873d4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/10873d41e2f2ab50245265a2d512a500e2d3f264))
- **api:** api update ([b298896](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b298896494cc12a127083f12796bb27629225ce0))
- **api:** api update ([2f3e6c2](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2f3e6c25eed2d21a0464f3f795ea073d802791a5))
- **api:** api update ([280f050](https://github.com/cloudflare/terraform-provider-cloudflare/commit/280f050d22739a9351e58a76f9f9432bd85e3fd8))
- **api:** api update ([df6b8bf](https://github.com/cloudflare/terraform-provider-cloudflare/commit/df6b8bfe1635c5b1809564a15c6ed0c1a39375f2))
- **api:** api update ([557f7d0](https://github.com/cloudflare/terraform-provider-cloudflare/commit/557f7d0a022fdd6dbc0da0bae8e0ac2325fbe831))
- **api:** api update ([b53ba74](https://github.com/cloudflare/terraform-provider-cloudflare/commit/b53ba74d449817f94ae28d437c732b1a5692d68f))
- **api:** api update ([971ca4a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/971ca4a579c8a50655a1afc9719d191c4a99e3f8))
- **api:** api update ([ef92b4a](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ef92b4a7e62baac6c4dfe58064f87ec44cd12549))
- **api:** api update ([79649c8](https://github.com/cloudflare/terraform-provider-cloudflare/commit/79649c8ba974f224895979b8f2d4ee42ae8d297c))
- **api:** api update ([dbc97dc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/dbc97dc1e0008c9f56a9e1c3bc5c99d8efdff7d1))
- **api:** api update ([d09845d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/d09845d053e978111aaa8a9c180439fdeb32ede3))
- **client:** support environments property from Stainless config ([2e9ad1c](https://github.com/cloudflare/terraform-provider-cloudflare/commit/2e9ad1c69772948c177c9620953d195a1acdd7ef))
- **schema\_validation:** add terraform resource mappings ([e2f968e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e2f968ef5ed32c60b9c06c66ffb1cedc790221ac))
- support import when resource ID is in read method request body ([500f710](https://github.com/cloudflare/terraform-provider-cloudflare/commit/500f7109d0422f084c30944c81685db9ce61db1a))
##### Bug Fixes
- add missing properties ([a21b2bc](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a21b2bc74d9287580756feb9479075acca78e65b))
- **api:** Update zone subscription paths ([e021998](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e02199818cc018d91895786add49c977d33aa21a))
- page rule panic [#​5577](https://github.com/cloudflare/terraform-provider-cloudflare/issues/5577) ([a3c643d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/a3c643d61dd8bbd01bcdc4e7a588214da5ebe612))
- **schema:** better support top-level arrays in paginated responses ([e6331d5](https://github.com/cloudflare/terraform-provider-cloudflare/commit/e6331d547930bcafffbbcb31a1ab2dc1b53e5b73))
- **static\_route:** API can accept single routes now ([ac52503](https://github.com/cloudflare/terraform-provider-cloudflare/commit/ac52503e070b2a448130c638eff82be5c3814d72))
- **WDAPI:** Fix 'id\_property' for zero\_trust\_device\_default\_profile\_local\_domain\_fallback ([c409fd4](https://github.com/cloudflare/terraform-provider-cloudflare/commit/c409fd42a57a6f32f09e27067e2f23e7497d8e03))
##### Chores
- **api:** TTL is required on DNS records ([6f3f1cb](https://github.com/cloudflare/terraform-provider-cloudflare/commit/6f3f1cbb648aed9944084869630cb6b9c48eea2e))
- **api:** Update Go SDK version for Terraform provider ([27e835d](https://github.com/cloudflare/terraform-provider-cloudflare/commit/27e835d0840e136c5689abebd23d43f5bc690329))
- **api:** Update Go SDK version for Terraform provider ([082cf15](https://github.com/cloudflare/terraform-provider-cloudflare/commit/082cf158dbed6ae55c81d9a2df602aacda2830fe))
- bump deps to avoid GetResourceIdentitySchemas errors for Terraform CLI v1.12+ ([7bceb8f](https://github.com/cloudflare/terraform-provider-cloudflare/commit/7bceb8f53cdf0388c096c0c64c735856112a0ea2))
- **ci:** enable for pull requests ([779c686](https://github.com/cloudflare/terraform-provider-cloudflare/commit/779c686271ad03cede6b31c60554de91988a8e56))
- **internal:** codegen related update ([24c025e](https://github.com/cloudflare/terraform-provider-cloudflare/commit/24c025e3c38f0df5e8ed4aea6f099e95b1e19dbe))
- **internal:** codegen related update ([50b8e95](https://github.com/cloudflare/terraform-provider-cloudflare/commit/50b8e95ee60a57f72ff7c34f2c7380b4f4f8442e))
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMjkuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjQxLjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
~> 5→>= 5Release Notes
cloudflare/terraform-provider-cloudflare (cloudflare)
v5.24.0Compare Source
Full Changelog: v5.23.0...v5.24.0
BREAKING CHANGES
The following upstream API schema changes required corresponding provider schema updates. Existing state files load without user action (the plugin framework silently drops attributes that no longer exist in the schema), but Terraform configurations that still reference removed attributes must be updated before
terraform planwill succeed.cloudflare_hostname_tls_settingdata source now requireshostnameas an input parameter instead of returning it as a computed attribute. The computedidattribute has been removed; usesetting_idinstead. (ece27fe)variantnested attribute has been removed. The API no longer returns this wrapper object; theid,options, andnever_require_signed_urlsfields remain available at the top level. Remove any references tocloudflare_image_variant.<name>.variantfrom your configurations. (738bd28)meta.flagsnested attribute has been renamed tometa.tenant_flags. Two new computed sub-attributes (enterprise_capability,member_management) have been added. Update any references from.meta.flagsto.meta.tenant_flags. (ece27fe)allow_code_modeattribute is now deprecated and no longer computed with a default oftrue. Use the newcode_modeattribute ("off","opt_in","default_on","enforced") instead. Configurations that relied on the computed default must explicitly setcode_modeorallow_code_mode. (ece27fe)session_durationattribute is no longer computed with a default of"24h". It is now optional-only. Existing configurations that omittedsession_durationand relied on the provider default will see a plan diff; explicitly setsession_duration = "24h"to preserve the previous behavior. (ae4f5a1)allowed_authenticatorsenum valuessh_piv_keyhas been renamed topiv_key, and a new valuessh_fido2_keyhas been added. Configurations using"ssh_piv_key"must be updated to"piv_key". (ece27fe)idattribute type changed fromStringtoInt64. The computedintel_idattribute has been removed. Thehostnames,ip_subnets,port_protocols,support_domains, andsupportedattributes changed fromListtoSet(element ordering is no longer significant). These changes apply to both the resource data source and the list data source. (ece27fe)idattribute type changed fromStringtoInt64on both the data source and list data source. (ece27fe)is_pending_reconnectattribute has been removed fromconnections. The upstream API no longer returns this field. Remove any references toconnections[*].is_pending_reconnectfrom your configurations. (ece27fe)is_pending_reconnectattribute has been removed fromconnections, matching thezero_trust_tunnel_cloudflaredchange above. (ece27fe)New Resources
New Data Sources
Features
log_classificationattribute andunifiedbilling mode (ece27fe)discover_optionsfor link-following web crawler configuration (ece27fe)public_endpoint_paramswith MCP, rate limiting, custom domains, and chat completions configuration (ece27fe)oci_storagecloud provider type (ece27fe)uslocation restriction value (ece27fe)health_sourcesattribute for regional health steering (ece27fe)lv-LV) language support (ece27fe)preview_url_suffixandurlcomputed attributes to subdomain block (ece27fe)messagingbinding type (ece27fe)code_modeattribute for granular Code Mode policy control (ece27fe)authentication_statuscomputed attribute (ece27fe)contract_version,warnings, and newtypevalues (login,interstitial) (ece27fe)enabledattribute to control service token activation (ece27fe)deprecatedattribute to all DLP entry resources and data sources (ece27fe)warp_auth_non_browser_401attribute for non-browser 401 responses (ece27fe)webmcp_enabledandwebmcp_packssetting IDs (ece27fe)Bug Fixes
Documentation
v5.23.0Compare Source
Full Changelog: v5.22.0...v5.23.0
New Data Sources
Features
deployed_viaandlast_modified_viacomputed fields, and defaultofflabeltofalse(5952e95)global_accelerationblock for configuring custom tunnel and API endpoints (5952e95)delete_headerssupport in request header modification settings (5952e95)Bug Fixes
source.configdrift for API-populated fields by preserving computed state values (c63f15e)Chores
Documentation
v5.22.0Compare Source
Full Changelog: v5.21.1...v5.22.0
⚠ BREAKING CHANGES
The following upstream API schema changes required corresponding provider schema updates. Existing state files load without user action (the plugin framework silently drops attributes that no longer exist in the schema), but Terraform configurations that still reference removed attributes must be updated before
terraform planwill succeed.source_params.web_crawler.crawl_optionsblock has been removed. Cloudflare's AI Search API dropped this field from its public schema in June 2026 and no longer accepts it, so keeping it in the provider would surface as a runtime API error rather than a plan-time error. Remove anycrawl_options { ... }block from yourcloudflare_ai_search_instanceconfigurations. (0843c7f)serversattribute changed from a list to a set. HCL syntax is unchanged (servers = [ ... ]), but element ordering is no longer significant — Terraform will no longer plan a change when only the order ofserversentries differs, and any code that relied on stable list ordering (e.g.element(..., 0)) may need to be updated. (099fc24)Notes
managed_request_headersandmanaged_response_headersare nowOptionalinstead ofRequired. Existing configurations that set both blocks keep working unchanged; you may now omit either block if you don't need to manage those transforms. (928173)New Resources
Features
fileas valid RDP connection_rules value (2659e30)Bug Fixes
Chores
Documentation
v5.21.1Compare Source
Full Changelog: v5.21.0...v5.21.1
Bug Fixes
v5.21.0Compare Source
Full Changelog: v5.20.0...v5.21.0
Features
Bug Fixes
Chores
Documentation
v5.20.0Compare Source
Full Changelog: v5.19.1...v5.20.0
Features
Bug Fixes
Reverts
Chores
Documentation
Refactors
v5.19.1Compare Source
Full Changelog: v5.19.0...v5.19.1
Features
Bug Fixes
Chores
v5.19.0Compare Source
Full Changelog: v5.18.0...v5.19.0
New Resources
Features
content_converterandredirects_for_ai_trainingsupport to configuration rules (726b8e7)Bug Fixes
Chores
Documentation
v5.18.0Compare Source
Full Changelog: v5.17.0...v5.18.0
Features
next(c92a4cb)Bug Fixes
Chores
Documentation
Refactors
v5.17.0Compare Source
Full Changelog: v5.16.0...v5.17.0
Features
Bug Fixes
Reverts
Chores
Documentation
Refactors
v5.16.0Compare Source
Full Changelog: v5.15.0...v5.16.0
Features
Bug Fixes
Documentation
v5.15.0Compare Source
Full Changelog: v5.14.0...v5.15.0
Features
startup_time_ms(286ab55)upload_status(7dc0fe3)upload_status(7dc0fe3)upload_status(7dc0fe3)upload_status(7dc0fe3)forensic_copy(5741fd0)Bug Fixes
Chores
hostsis now a set, not a list (286ab55)custom_remote_entities(286ab55)Documentation
Refactors
v5.14.0Compare Source
Full Changelog: v5.13.0...v5.14.0
Features
Bug Fixes
Chores
v5.13.0Compare Source
Full Changelog: v5.12.0...v5.13.0
⚠ BREAKING CHANGES: cloudflare_api_token & cloudflare_account_token Schema Update
The 5.13 release includes major updates to the cloudflare_api_token resource to eliminate configuration drift caused by policy ordering differences in the Cloudflare API.
Fixes: #6092
Whats changed
Required Action (v5.13+)
Customers looking to upgrade to v5.13+ must update all cloudflare_api_token & cloudflare_account_token resources to wrap policy resource values in jsonencode()
Before:
After:
Features
Bug Fixes
Chores
v5.12.0Compare Source
Full Changelog: v5.11.0...v5.12.0
Features
PUT /workers/domainsas a create operation (8ff0c7d)Bug Fixes
Chores
cloudflare_pages_projectacceptance tests (#6318) (cb63e28)Documentation
v5.11.0Compare Source
Full Changelog: v5.10.1...v5.11.0
Features
assets.directoryattribute for handling assets uploads incloudflare_workers_scriptandcloudflare_worker_versionresources (#6160) (50168e5)dynamicvalidatorto do arbitrary semantic equivalence check (e1faeb8)Bug Fixes
Chores
tfplugindocsalways use/var/tmpfor compilation on linux (3ccb727)docs_searchtool at other URLs (195dbf4)e4c0f73](e4c0f736b9f339), 82c913f, 64ff1f0, 516b468, b9b674c, 0b6b710, fc1f691, 7139af1, 81d79a5, fcb14b6, efebe55, c0fb2a4, 2978db8, ced7790, 0ff7a11, 04c89cb, 4acb7ab, 04236ca, 7636b30, 5c2d985, e52ffb1, 133bb02, 3fd9175, b5f2c46, f52687d, f1164d2, e4a44a8, da6a341, 002316c)v5.10.1Compare Source
Full Changelog: v5.10.0...v5.10.1
Features
Bug Fixes
zone_settingmigrations (#6169) (6ba251f)run_worker_firstattribute (#6199) (13bf28d)Chores
Documentation
v5.10.0Compare Source
Full Changelog: v5.9.0...v5.10.0
Features
Bug Fixes
cloudflare_workers_scriptresource (#6158) (bcfc129), closes #6147Chores
Refactors
v5.9.0Compare Source
Full Changelog: v5.8.4...v5.9.0
Features
Bug Fixes
0rtt(4943ca2)cloudflare_zone_settings_override(3b6edda)Chores
v5.8.4Compare Source
Full Changelog: v5.8.3...v5.8.4
Bug Fixes
Chores
v5.8.2Compare Source
Full Changelog: v5.8.1...v5.8.2
Features
Chores
v5.7.1Compare Source
Full Changelog: v5.7.0...v5.7.1
Bug Fixes
Chores
v5.7.0Compare Source
Full Changelog: v5.6.0...v5.7.0
Features
content_fileandcontent_sha256attribute pair as alternative tocontent(6c850b0)Bug Fixes
Chores
v5.6.0Compare Source
Full Changelog: v5.5.0...v5.6.0
Features
Bug Fixes
Chores
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.
View command line instructions
Checkout
From your project repository, check out a new branch and test the changes.