Update Terraform azurerm to v5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
azurerm (source)	required_provider	major	4.81.0 → 5.1.0

---

Release Notes

hashicorp/terraform-provider-azurerm (azurerm)

v5.1.0

Compare Source

ENHANCEMENTS:

• dependencies: azurerm_linux_virtual_machine_scale_set - update to API version 2025-04-01 (#​31586)
• dependencies: azurerm_orchestrated_virtual_machine_scale_set - update to API version 2025-04-01 (#​31586)
• dependencies: azurerm_virtual_machine_scale_set - update to API version 2025-04-01 (#​31586)
• dependencies: azurerm_virtual_machine_scale_set_extension - update to API version 2025-04-01 (#​31586)
• dependencies: azurerm_windows_virtual_machine_scale_set - update to API version 2025-04-01 (#​31586)
• dependencies: codesigning - update to API version 2025-10-13 (#​31714)
• azurerm_linux_virtual_machine - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#​32885)
• azurerm_linux_virtual_machine_scale_set - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#​32885)
• azurerm_managed_devops_pool - add support for the CreatorOnly value to azure_devops_organization.permission.kind property (#​32753)
• azurerm_windows_virtual_machine - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#​32885)
• azurerm_windows_virtual_machine_scale_set - encryption_at_host_enabled can now be set to true when os_disk.security_encryption_type is set to DiskWithVMGuestState (#​32885)

BUG FIXES:

• azurerm_cdn_frontdoor_batch_ruleset - parse rule.actions.route_configuration_override.origin_group.cdn_frontdoor_origin_group_id case-insensitively and normalize the resulting value to prevent diffs (#​32980)
• azurerm_cdn_frontdoor_route - parse cdn_frontdoor_origin_group_id case-insensitively and normalize the resulting value to prevent diffs (#​32980)
• azurerm_cdn_frontdoor_secret - fix an incorrect type assertion (#​32982)
• azurerm_dev_center_project - parse dev_center_id case-insensitively and normalize the resulting value to prevent diffs (#​32798)
• azurerm_eventhub - now prevents the status property from being set to SendDisabled on create (#​33071)
• azurerm_storage_container - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#​32978)
• azurerm_storage_queue - extend state migration to handle a malformed resource_manager_id (#​32979)
• azurerm_storage_share - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#​33075)

v5.0.1

Compare Source

5.0.1 (July 30, 2026)

NOTES:

In addition to the bug fixes below, a number of resource documentation pages and the 5.0-upgrade-guide have been updated.

BUG FIXES:

• azurerm_cdn_frontdoor_origin - fix a regression that prevented valid values as input to private_link.private_link_target_id (#​32912)
• azurerm_storage_queue - add a state migration for the id field, fixing the upgrade path from 4.x to 5.x (#​32914)
• azurerm_storage_table_entity - add a state migration for the storage_table_id field, fixing the upgrade path from 4.x to 5.x (#​32929)

v5.0.0

Compare Source

NOTES:

• Major Version: Version 5.0 of the Azure Provider is a major version - some behaviours have changed and some deprecated fields/resources have been removed - please refer to the 5.0 upgrade guide for more information.
• When upgrading to v5.0 of the AzureRM Provider, we recommend upgrading to the latest version of Terraform Core (which can be found here).

FEATURES:

• New Action: azurerm_web_app_set_slot_distribution (#​32364)
• New Datasource adds azurerm_kubernetes_automatic_cluster_datasource (#​32881)

ENHANCEMENTS:

• dependencies: grpc update to 1.82.1 (#​32852)
• dependencies: loadbalancers - update to API version 2025-01-01 (#​32644)
• azurerm_cognitive_account_rai_policy - the content_filter.severity_threshold property is now optional (#​32100)
• azurerm_container_registry - the trust_policy_enabled property has been deprecated and removed from the provider (#​32752)
• azurerm_dashboard_grafana - the 11 value for the grafana_major_version property has been deprecated and the property now supports 13 (#​32777)
• azurerm_log_analytics_workspace - add support for the internet_ingestion_access_type and internet_query_access_type properties (#​32562)
• azurerm_subnet - add support for the network_security_group_id_wo and network_security_group_id_wo_version properties (#​32847)
• azurerm_subnet - add support for the route_table_id_wo and route_table_id_wo_version properties (#​32847)
• azurerm_subnet - export the network_security_group_id property (#​32847)
• azurerm_subnet - export the route_table_id property (#​32847)
• azurerm_windows_web_app - add support for ~24 to site_config.application_stack.node_version (#​32840)
• azurerm_windows_web_app_slot - add support for ~24 to site_config.application_stack.node_version (#​32840)
• cdn - migrate to go-azure-sdk (#​32849)
• sentinel - migrate to go-azure-sdk (#​32759)

---

Configuration

📅 Schedule: (in timezone Europe/London)

• Branch creation
  • "after 7am and before 11am every weekday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.