chore(deps): bump azure/azapi from 2.8.0 to 2.12.0 in /modules/terraform/azure

[dependabot]

Bumps azure/azapi from 2.8.0 to 2.12.0.

Release notes

Sourced from azure/azapi's releases.

v2.12.0

ENHANCEMENTS:

• azapi provider: Support preserve_resource_id_casing feature flag (default false). When enabled, if the resource ID the provider would write back to state differs from the existing state value only by casing, the existing casing is preserved. This avoids spurious Unexpected Identity Change errors and diffs when consumers (or upstream modules) rely on a specific casing the Azure API may not preserve. Only the id and resource_id attributes are affected. Can also be sourced from the ARM_PRESERVE_RESOURCE_ID_CASING environment variable (GH-1122).
• azapi provider: Publish official windows_arm64 provider binaries (GH-1148).
• azapi_resource resource: Re-introduce the ignore_body_changes property to ignore changes to specified fields in the request body (GH-1192).
• azapi_data_plane_resource resource: Allow name to be optional based on the URL format (GH-1178).
• azapi_data_plane_resource resource: Support Key Vault certificates (GH-1174).

BUG FIXES:

• Strip UTF-8 BOM prefix from JSON responses (GH-1190).
• Preserve azapi_resource state for an in-flight Create interrupted by SIGINT (GH-1183).
• Fix MoveState target identity for azurerm resource moves (GH-1175).
• Fix OIDC token file path logic (GH-1164).

v2.11.0

ENHANCEMENTS:

• azapi_resource_action resource: Support sensitive body for resource actions (GH-1150).
• azapi_resource: Import now falls back to up to three most recent indexed API versions when a 400 or 404 response is returned without an explicit api-version (GH-1093).
• azapi provider: Support PFX modern encryption for client certificate authentication (GH-1151).
• azapi client: Return the last retryable error instead of context deadline exceeded when retries fail (GH-1079).
• Acquire a policy token when a request is blocked by an invoke policy (GH-1145).
• Update bicep types to Azure/azure-rest-api-specs revision 51d53915b5f31b10e6645c136807b9d95f9f09d1 (GH-1159).
• Improve the bicep types update process (GH-1155).

BUG FIXES:

• Fix Missing Resource Identity After Read after upgrading from v2.7.0 when a resource is deleted outside Terraform (GH-1050).
• Fix azapi_resource_action output handling when updating existing actions (GH-1158).
• Fix azapi_resource_action output being set incorrectly while the action is executing (GH-1168).
• Fix ResourceClient CreateOrUpdate to return the initial PUT body correctly (GH-1160).

v2.10.0

ENHANCEMENTS:

• azapi provider: Preflight validation is now enabled on resource update operations (previously only on create) (GH-1112).
• azapi provider: Preflight validation now requires only read permission instead of write permission (GH-1112).
• Bump Go version to 1.25.8 (GH-1082).
• Bump terraform-plugin-framework from v1.16.1 to v1.19.0 (GH-1081).
• Add example for Microsoft.RedHatOpenShift/openShiftClusters (GH-1083).

BUG FIXES:

• Fix a panic when comparing a non-empty configured list with an empty remote list during no-op change detection (GH-1125).

v2.9.0

ENHANCEMENTS:

• azapi_update_resource resource: Support replace_triggers_external_values argument to trigger resource replacement based on external values.

... (truncated)

Changelog

Sourced from azure/azapi's changelog.

v2.12.0

ENHANCEMENTS:

• azapi provider: Support preserve_resource_id_casing feature flag (default false). When enabled, if the resource ID the provider would write back to state differs from the existing state value only by casing, the existing casing is preserved. This avoids spurious Unexpected Identity Change errors and diffs when consumers (or upstream modules) rely on a specific casing the Azure API may not preserve. Only the id and resource_id attributes are affected. Can also be sourced from the ARM_PRESERVE_RESOURCE_ID_CASING environment variable (GH-1122).
• azapi provider: Publish official windows_arm64 provider binaries (GH-1148).
• azapi_resource resource: Re-introduce the ignore_body_changes property to ignore changes to specified fields in the request body (GH-1192).
• azapi_data_plane_resource resource: Allow name to be optional based on the URL format (GH-1178).
• azapi_data_plane_resource resource: Support Key Vault certificates (GH-1174).

BUG FIXES:

• Strip UTF-8 BOM prefix from JSON responses (GH-1190).
• Preserve azapi_resource state for an in-flight Create interrupted by SIGINT (GH-1183).
• Fix MoveState target identity for azurerm resource moves (GH-1175).
• Fix OIDC token file path logic (GH-1164).

v2.11.0

ENHANCEMENTS:

• azapi_resource_action resource: Support sensitive body for resource actions (GH-1150).
• azapi_resource: Import now falls back to up to three most recent indexed API versions when a 400 or 404 response is returned without an explicit api-version (GH-1093).
• azapi provider: Support PFX modern encryption for client certificate authentication (GH-1151).
• azapi client: Return the last retryable error instead of context deadline exceeded when retries fail (GH-1079).
• Acquire a policy token when a request is blocked by an invoke policy (GH-1145).
• Update bicep types to Azure/azure-rest-api-specs revision 51d53915b5f31b10e6645c136807b9d95f9f09d1 (GH-1159).
• Improve the bicep types update process (GH-1155).

BUG FIXES:

• Fix Missing Resource Identity After Read after upgrading from v2.7.0 when a resource is deleted outside Terraform (GH-1050).
• Fix azapi_resource_action output handling when updating existing actions (GH-1158).
• Fix azapi_resource_action output being set incorrectly while the action is executing (GH-1168).
• Fix ResourceClient CreateOrUpdate to return the initial PUT body correctly (GH-1160).

v2.10.0

ENHANCEMENTS:

• azapi provider: Preflight validation is now enabled on resource update operations (previously only on create) (GH-1112).
• azapi provider: Preflight validation now requires only read permission instead of write permission (GH-1112).
• Bump Go version to 1.25.8 (GH-1082).
• Bump terraform-plugin-framework from v1.16.1 to v1.19.0 (GH-1081).
• Add example for Microsoft.RedHatOpenShift/openShiftClusters (GH-1083).

BUG FIXES:

• Fix a panic when comparing a non-empty configured list with an empty remote list during no-op change detection (GH-1125).

... (truncated)

Commits

• 52241c9 Update bicep types to Azure/azure-rest-api-specs revision 0744f52a86919d243ba...
• c080464 Update changelog for 2.12 release (#1195)
• 7d923f6 Add preserve_resource_id_casing provider feature flag (#1122)
• e774e61 azapi_resource: re-introduce ignore_body_changes property (#1192)
• b057c50 Strip UTF-8 BOM prefix from JSON responses (#1190)
• d8f3a4d Bump github.com/hashicorp/terraform-plugin-log from 0.10.0 to 0.11.0 in the g...
• 9cdbd49 Bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 in the gomod-dependenc...
• 5229b84 chore: Cleanup acquire policy token test suppression (#1186)
• 4fae1b3 Preserve azapi_resource state for in-flight Create interrupted by SIGINT (#1183)
• 4201949 Use test data location in preflight child resource acctest (#1181)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

For reviewers only: reply /run-tf-integration to trigger the terraform integration pipeline before approving the PR.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the Azure azapi Terraform provider constraint for the Azure module.

Changes:

• Bumps Azure/azapi provider version from 2.8.0 to 2.12.0.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.