chore(deps): update ghcr.io/coder/code-server docker tag to v4.131.0

[renovate]

This PR contains the following updates:

Package	Update	Change
ghcr.io/coder/code-server	minor	4.130.0 → 4.131.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[autonomous-bancey]

Plan Result (generate_ansible_inventory)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (prod_twingate)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 5 to add, 3 to change, 4 to destroy.

• Create
  • time_rotating.service_account_key_rotation
• Update
  • azurerm_key_vault_secret.service_account_key["AzureDevOps"]
  • azurerm_key_vault_secret.service_account_key["Pelican"]
  • azurerm_key_vault_secret.service_account_key["Pterodactyl"]
• Replace
  • time_static.service_account_key_rotation

Change Result (Click me)

  # azurerm_key_vault_secret.service_account_key["AzureDevOps"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-07-28T14:06:23Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-AzureDevOps-SA-Key/c82006259ea3456b801d427b3a766054"
        name                    = "Twingate-AzureDevOps-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.service_account_key["Pelican"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-07-28T14:06:23Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-Pelican-SA-Key/88f2573a7bde4758b17069e597529262"
        name                    = "Twingate-Pelican-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.service_account_key["Pterodactyl"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-07-28T14:06:23Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-Pterodactyl-SA-Key/65fc2792807742cb87ecdc8919214ac9"
        name                    = "Twingate-Pterodactyl-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # time_rotating.service_account_key_rotation will be created
  + resource "time_rotating" "service_account_key_rotation" {
      + day              = (known after apply)
      + hour             = (known after apply)
      + id               = (known after apply)
      + minute           = (known after apply)
      + month            = (known after apply)
      + rfc3339          = (known after apply)
      + rotation_days    = 7
      + rotation_rfc3339 = (known after apply)
      + second           = (known after apply)
      + unix             = (known after apply)
      + year             = (known after apply)
    }

  # time_static.service_account_key_rotation must be replaced
-/+ resource "time_static" "service_account_key_rotation" {
      ~ day     = 28 -> (known after apply)
      ~ hour    = 14 -> (known after apply)
      ~ id      = "2026-07-28T14:06:23Z" -> (known after apply)
      ~ minute  = 6 -> (known after apply)
      ~ month   = 7 -> (known after apply)
      ~ rfc3339 = "2026-07-28T14:06:23Z" -> (known after apply) # forces replacement
      ~ second  = 23 -> (known after apply)
      ~ unix    = 1785247583 -> (known after apply)
      ~ year    = 2026 -> (known after apply)
    }

  # twingate_service_account_key.this["AzureDevOps"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6X3ZndUl5WmRMcmRsV191V2lXa0pWaVRGRTJCbjRMUksxNUxzVkhYU0dUTQ==" -> (known after apply)
      ~ is_active          = true -> (known after apply)
        name               = "AzureDevOps Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

  # twingate_service_account_key.this["Pelican"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6ZldhTXBxckJkV2dHR2JUR3pRQkpVZlZ5a3hrWFU5NW5rbG5TdkdiS21YOA==" -> (known after apply)
      ~ is_active          = true -> (known after apply)
        name               = "Pelican Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

  # twingate_service_account_key.this["Pterodactyl"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6M1Z0NUR1Mm1BZGR0MS1WQ2k4THJmNWtORU5uaHE2cGRycEFNdjlTSXlzZw==" -> (known after apply)
      ~ is_active          = true -> (known after apply)
        name               = "Pterodactyl Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

Plan: 5 to add, 3 to change, 4 to destroy.

ℹ️ Objects have changed outside of Terraform

This feature was introduced from Terraform v0.15.4.

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # time_rotating.service_account_key_rotation has been deleted
  - resource "time_rotating" "service_account_key_rotation" {
        id               = "2026-07-28T14:06:23Z"
      - rfc3339          = "2026-07-28T14:06:23Z" -> null
        # (9 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the

[autonomous-bancey]

Plan Result (prod_dns)

Plan: 0 to add, 2 to change, 0 to destroy.

• Update
  • module.adguard_gamora.adguard_config.config
  • module.adguard_thanos.adguard_config.config

Change Result (Click me)

  # module.adguard_gamora.adguard_config.config will be updated in-place
  ~ resource "adguard_config" "config" {
      ~ dhcp                            = {
          ~ ipv4_settings = {
              ~ lease_duration = 86400 -> 0
                # (4 unchanged attributes hidden)
            }
            # (3 unchanged attributes hidden)
        }
        id                              = "1"
      ~ last_updated                    = "Wednesday, 29-Jul-26 21:38:20 UTC" -> (known after apply)
      ~ tls                             = {
          ~ dns_names          = [] -> (known after apply)
          ~ issuer             = null -> (known after apply)
          ~ key_type           = null -> (known after apply)
          ~ not_after          = null -> (known after apply)
          ~ not_before         = null -> (known after apply)
          ~ private_key_saved  = false -> (known after apply)
          ~ subject            = null -> (known after apply)
          ~ valid_cert         = false -> (known after apply)
          ~ valid_chain        = false -> (known after apply)
          ~ valid_key          = false -> (known after apply)
          ~ valid_pair         = false -> (known after apply)
          ~ warning_validation = null -> (known after apply)
            # (9 unchanged attributes hidden)
        }
        # (9 unchanged attributes hidden)
    }

  # module.adguard_thanos.adguard_config.config will be updated in-place
  ~ resource "adguard_config" "config" {
      ~ dhcp                            = {
          ~ ipv4_settings = {
              ~ lease_duration = 86400 -> 0
                # (4 unchanged attributes hidden)
            }
            # (3 unchanged attributes hidden)
        }
        id                              = "1"
      ~ last_updated                    = "Wednesday, 29-Jul-26 21:38:21 UTC" -> (known after apply)
      ~ tls                             = {
          ~ dns_names          = [] -> (known after apply)
          ~ issuer             = null -> (known after apply)
          ~ key_type           = null -> (known after apply)
          ~ not_after          = null -> (known after apply)
          ~ not_before         = null -> (known after apply)
          ~ private_key_saved  = false -> (known after apply)
          ~ subject            = null -> (known after apply)
          ~ valid_cert         = false -> (known after apply)
          ~ valid_chain        = false -> (known after apply)
          ~ valid_key          = false -> (known after apply)
          ~ valid_pair         = false -> (known after apply)
          ~ warning_validation = null -> (known after apply)
            # (9 unchanged attributes hidden)
        }
        # (9 unchanged attributes hidden)
    }

Plan: 0 to add, 2 to change, 0 to destroy.

[autonomous-bancey]

Plan Result (tiny_virtual_machines)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 10 to add, 1 to change, 10 to destroy.

• Update
  • module.tiny_containers["matter-server"].proxmox_virtual_environment_container.this
• Replace
  • proxmox_virtual_environment_download_file.tiny_images["hela-jammy-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["hela-noble-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["hela-resolute-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["loki-jammy-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["loki-noble-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["loki-resolute-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["thor-jammy-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["thor-noble-server-cloudimg-amd64.img"]
  • proxmox_virtual_environment_download_file.tiny_images["thor-resolute-server-cloudimg-amd64.img"]
  • terraform_data.ansible["matter-server"]

Change Result (Click me)

  # proxmox_virtual_environment_download_file.tiny_images["hela-jammy-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/jammy-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 733930496 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["hela-noble-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/noble-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 624105472 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["hela-resolute-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/resolute-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 859994624 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["loki-jammy-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/jammy-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 733930496 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["loki-noble-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/noble-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 624105472 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["loki-resolute-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/resolute-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 859994624 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["thor-jammy-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/jammy-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 733930496 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["thor-noble-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/noble-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 624105472 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # proxmox_virtual_environment_download_file.tiny_images["thor-resolute-server-cloudimg-amd64.img"] must be replaced
-/+ resource "proxmox_virtual_environment_download_file" "tiny_images" {
      ~ id                  = "local:iso/resolute-server-cloudimg-amd64.img" -> (known after apply)
      ~ size                = 859994624 -> (known after apply) # forces replacement
        # (9 unchanged attributes hidden)
    }

  # terraform_data.ansible["matter-server"] must be replaced
-/+ resource "terraform_data" "ansible" {
      ~ id               = "4fb4763f-3374-d364-c166-eecc70abf181" -> (known after apply)
      ~ triggers_replace = [
            "23-02-2026-0830",
          ~ <<-EOT
                ---
                - name: Deploy Matter Server and Thread Border Router on LXC Container
                  hosts: matter-server
                  become: true
                  gather_facts: true
                
                  tasks:
                    - name: Update apt cache
                      ansible.builtin.apt:
                        update_cache: true
                        cache_valid_time: 3600
                
                    - name: Install required packages
                      ansible.builtin.apt:
                        name:
                          - ca-certificates
                          - curl
                          - gnupg
                          - lsb-release
                        state: present
                
                    - name: Add Docker GPG key
                      ansible.builtin.apt_key:
                        url: https://download.docker.com/linux/ubuntu/gpg
                        state: present
                        keyring: /etc/apt/keyrings/docker.gpg
                
                    - name: Add Docker repository
                      ansible.builtin.apt_repository:
                        repo: "deb [arch=amd64 signed-by=/etc/apt/keyrings/docker.gpg] https://download.docker.com/linux/ubuntu {{ ansible_distribution_release }} stable"
                        state: present
                        filename: docker
                
                    - name: Install Docker
                      ansible.builtin.apt:
                        name:
                          - docker-ce
                          - docker-ce-cli
                          - containerd.io
                          - docker-buildx-plugin
                          - docker-compose-plugin
                        state: present
                        update_cache: true
                
                    - name: Ensure Docker service is started and enabled
                      ansible.builtin.systemd:
                        name: docker
                        state: started
                        enabled: true
                
                    - name: Create Matter Server data directory
                      ansible.builtin.file:
                        path: /opt/matter-server/data
                        state: directory
                        mode: '0755'
                
                    - name: Create OTBR (Thread Border Router) data directory
                      ansible.builtin.file:
                        path: /opt/matter-server/otbr-data
                        state: directory
                        mode: '0755'
                
              +     # OTBR (network_mode: host) enables IPv6 forwarding on its infra interface
              +     # (eth0) as part of its border-routing role. Linux silently stops
              +     # processing incoming Router Advertisements on any interface once
              +     # forwarding is enabled for it, unless accept_ra is explicitly set to 2
              +     # to override that — without this, OTBR never sees UniFi's RAs on the
              +     # Services VLAN and its border-routing manager can't function correctly.
              +     - name: Enable IPv6 forwarding and RA processing for OTBR's border-routing role
              +       ansible.posix.sysctl:
              +         name: "{{ item.name }}"
              +         value: "{{ item.value }}"
              +         state: present
              +         sysctl_set: true
              +         reload: true
              +       loop:
              +         - { name: 'net.ipv6.conf.all.forwarding', value: '1' }
              +         - { name: 'net.ipv4.conf.all.forwarding', value: '1' }
              +         - { name: 'net.ipv6.conf.all.accept_ra', value: '2' }
              +         - { name: 'net.ipv6.conf.all.accept_ra_rt_info_max_plen', value: '64' }
              + 
                    - name: Create Matter Server Docker Compose file
                      ansible.builtin.copy:
                        dest: /opt/matter-server/docker-compose.yaml
                        mode: '0644'
                        content: |
                          version: '3.8'
                          services:
                            matter-server:
                              image: ghcr.io/matter-js/python-matter-server:stable
                              container_name: matter-server
                              restart: unless-stopped
                              network_mode: host
                              security_opt:
                                - apparmor:unconfined
                              volumes:
                                - /opt/matter-server/data:/data
                                - /run/dbus:/run/dbus:ro
                              command: --storage-path /data --paa-root-cert-dir /data/credentials
                              environment:
                                - TZ=Europe/London
                
                            # Thread Border Router for the SLZB-MR1U's second (Thread) radio.
                            # Runs alongside matter-server on the same host so mDNS discovery
                            # of the Thread border agent works without cross-subnet reflection
                            # (the SLZB-MR1U's Zigbee/Thread radios live on 10.151.13.0/24,
                            # this LXC is on 10.151.14.0/24).
                            otbr:
                              image: bnutzer/otbr-tcp:latest
                              container_name: otbr
                              restart: unless-stopped
                              privileged: true
                              network_mode: host
                              devices:
                                - /dev/net/tun
                              volumes:
                                - /opt/matter-server/otbr-data:/var/lib/thread
                              environment:
                                - TZ=Europe/London
                                # SLZB-MR1U's Thread radio (RCP), exposed over the network
                                # separately from its Zigbee radio (10.151.13.6:6638, used
                                # by zigbee2mqtt).
                                - RCP_HOST=10.151.13.6
                                - RCP_PORT=7638
                                - RCP_BAUDRATE=460800
                                - OTBR_WEB_ENABLE=1
                
                    - name: Start Matter Server and OTBR containers
                      ansible.builtin.command:
                        cmd: docker compose up -d
                        chdir: /opt/matter-server
                      register: docker_compose_result
                      changed_when: "'Started' in docker_compose_result.stdout or 'Creating' in docker_compose_result.stdout"
                
                    - name: Wait for Matter Server to be ready
                      ansible.builtin.wait_for:
                        port: 5580
                        delay: 5
                        timeout: 60
                
                    - name: Wait for OTBR web interface to be ready
                      ansible.builtin.wait_for:
                        port: 8080
                        delay: 5
                        timeout: 60
                
                    - name: Display container status
                      ansible.builtin.command:
                        cmd: docker compose ps
                        chdir: /opt/matter-server
                      register: compose_ps
                      changed_when: false
                
                    - name: Show container status
                      ansible.builtin.debug:
                        var: compose_ps.stdout_lines
            EOT,
        ]
    }

  # module.tiny_containers["matter-server"].proxmox_virtual_environment_container.this will be updated in-place
  ~ resource "proxmox_virtual_environment_container" "this" {
        id                    = "260"
        tags                  = [
            "terraform",
        ]
        # (17 unchanged attributes hidden)

      ~ initialization {
            # (2 unchanged attributes hidden)

          ~ ip_config {
              + ipv6 {
                  + address = "auto"
                }

                # (1 unchanged block hidden)
            }

            # (1 unchanged block hidden)
        }

        # (8 unchanged blocks hidden)
    }

Plan: 10 to add, 1 to change, 10 to destroy.

ℹ️ Objects have changed outside of Terraform

This feature was introduced from Terraform v0.15.4.

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # module.tiny_k8s_virtual_machines["hela-tiny-master0"].proxmox_virtual_environment_vm.vm has changed
  ~ resource "proxmox_virtual_environment_vm" "vm" {
        id                                   = "200"
      ~ mac_addresses                        = [
            # (4 unchanged elements hidden)
            "2A:27:E9:95:E3:1E",
          ~ "8A:63:3A:05:CC:DF" -> "02:DF:B1:B8:48:08",
          ~ "02:DF:B1:B8:48:08" -> "DA:FA:EE:88:8C:13",
        ]
        name                                 = "tiny-master0"
        tags                                 = [
            "k8s",
            "k8s-control-plane",
            "terraform",
        ]
        # (35 unchanged attributes hidden)

        # (7 unchanged blocks hidden)
    }

  # module.tiny_k8s_virtual_machines["hela-tiny-node0"].proxmox_virtual_environment_vm.vm has changed
  ~ resource "proxmox_virtual_environment_vm" "vm" {
        id                                   = "220"
      ~ mac_addresses                        = [
            # (11 unchanged elements hidden)
            "1E:33:D5:54:A5:DF",
          ~ "F2:30:16:71:0D:88" -> "36:D5:12:4F:4E:E3",
          ~ "36:D5:12:4F:4E:E3" -> "C6:19:1E:38:35:5F",
          ~ "C6:19:1E:38:35:5F" -> "C2:7F:3B:01:30:1E",
          ~ "8A:25:5A:EB:1C:74" -> "16:50:C0:DF:32:C9",
          ~ "C2:7F:3B:01:30:1E" -> "4E:95:05:77:28:D5",
          ~ "16:50:C0:DF:32:C9" -> "AE:D4:EB:0F:60:F0",
          ~ "4E:95:05:77:28:D5" -> "4E:CC:C0:56:58:4F",
          ~ "AE:D4:EB:0F:60:F0" -> "1A:AA:CA:D6:DE:4A",
          ~ "4E:CC:C0:56:58:4F" -> "BE:08:6E:1E:3D:B9",
          ~ "7A:B4:B0:25:0B:B8" -> "EE:5F:AB:17:4A:E6",
        ]
        name                                 = "tiny-node0"
        tags                                 = [
            "k8s",
            "k8s-worker",
            "terraform",
        ]
        # (35 unchanged attributes hidden)

        # (7 unchanged blocks hidden)
    }

  # module.tiny_k8s_virtual_machines["loki-tiny-master1"].proxmox_virtual_environment_vm.vm has changed
  ~ resource "proxmox_virtual_environment_vm" "vm" {
        id                                   = "201"
      ~ mac_addresses                        = [
            # (4 unchanged elements hidden)
            "1A:BC:35:E4:8A:36",
          ~ "7A:D1:9D:F0:D4:E5" -> "72:70:0E:BE:BA:B3",
          ~ "72:70:0E:BE:BA:B3" -> "F2:4B:1A:AE:14:1D",
        ]
        name                                 = "tiny-master1"
        tags                                 = [
            "k8s",
            "k8s-control-plane",
            "terraform",
        ]
        # (35 unchanged attributes hidden)

        # (7 unchanged blocks hidden)
    }

  # module.tiny_k8s_virtual_machines["loki-tiny-node1"].proxmox_virtual_environment_vm.vm has changed
  ~ resource "proxmox_virtual_environment_vm" "vm" {
        id                                   = "221"
      ~ mac_addresses                        = [
            # (8 unchanged elements hidden)
            "9A:FD:D5:A9:2B:A8",
          ~ "8A:16:FA:6B:3C:0E" -> "E2:E7:45:66:45:F2",
          ~ "22:5A:0B:C5:FE:F4" -> "6A:4B:EC:D8:4C:80",
          ~ "E2:E7:45:66:45:F2" -> "76:71:E2:EE:B3:79",
          ~ "6A:4B:EC:D8:4C:80" -> "76:9B:7F:B4:60:11",
          ~ "76:71:E2:EE:B3:79" -> "16:C1:CC:F6:1F:33",
          ~ "76:9B:7F:B4:60:11" -> "4A:72:D3:64:EE:9D",
            "46:C1:9B:96:E4:18",
          ~ "EE:47:72:39:D4:34" -> "8A:B2:62:44:18:8E",
            "EA:59:3E:2C:89:ED",
        ]
        name                                 = "tiny-node1"
        tags                                 = [
            "k8s",
            "k8s-worker",
            "terraform",
        ]
        # (35 unchanged attributes hidden)

        # (7 unchanged blocks hidden)
    }

  # module.tiny_k8s_virtual_machines["thor-tiny-master2"].proxmox_virtual_environment_vm.vm has changed
  ~ resource "proxmox_virtual_environment_vm" "vm" {
        id                                   = "202"
      ~ mac_addresses                        = [
            # (4 unchanged elements hidden)
            "FE:0E:97:60:8E:FC",
          ~ "F6:9A:07:40:4A:C9" -> "5E:19:9A:AE:45:28",
          ~ "5E:19:9A:AE:45:28" -> "92:BA:6D:EF:82:99",
        ]
        name                                 = "tiny-master2"
        tags                                 = [
            "k8s",
            "k8s-control-plane",
            "terraform",
        ]
        # (35 unchanged attributes hidden)

        # (7 unchanged blocks hidden)
    }

  # module.tiny_k8s_virtual_machines["thor-tiny-node2"].proxmox_virtual_environment_vm.vm has changed
  ~ resource "proxmox_virtual_environment_vm" "vm" {
        id                                   = "222"
      ~ mac_addresses                        = [
            # (5 unchanged elements hidden)
            "26:F7:23:CA:9E:6B",
          ~ "56:4F:6F:4D:F1:AB" -> "2E:30:F1:64:A8:23",
          ~ "2E:30:F1:64:A8:23" -> "D2:97:7D:15:F7:98",
          ~ "D2:97:7D:15:F7:98" -> "EA:E7:BF:66:0D:EF",
          ~ "EA:E7:BF:66:0D:EF" -> "5E:AF:E5:57:25:BF",
          ~ "5E:AF:E5:57:25:BF" -> "76:79:21:D1:83:0E",
          ~ "76:79:21:D1:83:0E" -> "DE:7D:21:65:1D:CD",
          ~ "DE:7D:21:65:1D:CD" -> "DE:0F:35:AB:97:39",
          ~ "DE:0F:35:AB:97:39" -> "C2:C1:47:3F:CD:B6",
          ~ "C2:C1:47:3F:CD:B6" -> "86:C7:18:3B:EE:D1",
          ~ "86:C7:18:3B:EE:D1" -> "56:2C:10:86:C6:6E",
          ~ "DA:B5:A3:25:37:88" -> "26:17:B5:83:44:E7",
          ~ "9A:A1:96:36:4A:B4" -> "96:54:4C:3A:20:01",
          ~ "7E:01:79:A4:1A:26" -> "32:C9:5C:31:C7:07",
          ~ "56:2C:10:86:C6:6E" -> "3E:BE:18:92:DC:A4",
        ]
        name                                 = "tiny-node2"
        tags                                 = [
            "k8s",
            "k8s-worker",
            "terraform",
        ]
        # (35 unchanged attributes hidden)

        # (7 unchanged blocks hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the