chore(deps): update terraform cloudflare to v4.37.0

This MR contains the following updates:

Package	Type	Update	Change	OpenSSF
cloudflare (source)	required_provider	minor	4.34.0 -> 4.37.0

---

Release Notes

cloudflare/terraform-provider-cloudflare (cloudflare)

v4.37.0

Compare Source

ENHANCEMENTS:

• resource/cloudflare_notification_policy: Add tunnel_name filter for Magic Health Checks (#​3417)

BUG FIXES:

• resource/cloudflare_r2_bucket: add validation to location hint to prevent invalid values from drifting (#​3441)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.21 to 1.27.22 (#​3404)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.22 to 1.27.23 (#​3412)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.23 to 1.27.24 (#​3437)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.21 to 1.17.22 (#​3404)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.22 to 1.17.23 (#​3412)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.23 to 1.17.24 (#​3437)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.56.1 to 1.57.0 (#​3404)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.57.0 to 1.57.1 (#​3412)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.30.0 to 1.30.1 (#​3412)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.57.1 to 1.58.0 in the aws group (#​3429)
• provider: bump github.com/cloudflare/cloudflare-go from 0.98.0 to 0.99.0 (#​3438)
• provider: bump github.com/hashicorp/terraform-plugin-framework from 1.9.0 to 1.10.0 (#​3445)
• provider: bump github.com/hashicorp/terraform-plugin-framework-validators from 0.12.0 to 0.13.0 (#​3447)
• provider: bump github.com/hashicorp/terraform-plugin-testing from 1.8.0 to 1.9.0 (#​3446)
• provider: bump golang.org/x/net from 0.26.0 to 0.27.0 (#​3442)

v4.36.0

Compare Source

NOTES:

• resource/zone_settings_override: deprecate mobile_redirect setting and include state migration to remove from local state. You should immediately remove the configuration from the resource to prevent permadiffs. (#​3337)

ENHANCEMENTS:

• resource/cloudflare_access_application: Support configuring OIDC SaaS access token lifetime (#​3353)

BUG FIXES:

• resource/cloudflare_list_item: fix crash when not using type = "redirect" due to attempting to compare nil (#​3368)
• resource/cloudflare_list_item: implement exact match for IP values to prevent overlapping IP prefixes from not being found (#​3368)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.19 (#​3360)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.19 to 1.27.20 (#​3362)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.20 to 1.27.21 (#​3364)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.18 to 1.17.19 (#​3360)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.19 to 1.17.20 (#​3362)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.20 to 1.17.21 (#​3364)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.1 to 1.55.2 (#​3360)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.2 to 1.56.0 (#​3362)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.56.0 to 1.56.1 (#​3364)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.27.2 to 1.28.0 (#​3360)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.28.0 to 1.29.0 (#​3362)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.29.0 to 1.30.0 (#​3364)
• provider: bump github.com/cloudflare/cloudflare-go from 0.97.0 to 0.98.0 (#​3365)
• provider: bump github.com/cloudflare/cloudflare-go/v2 from 2.2.0 to 2.3.0 (#​3363)
• provider: bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 in /tools (#​3395)

v4.35.0

Compare Source

ENHANCEMENTS:

• resource/cloudflare_access_application: Add Hybrid and Implicit flow support to OIDC SaaS Apps (#​3324)
• resource/cloudflare_access_organization: Fix 'name' being optional (#​3343)
• resource/cloudflare_load_balancer_pool: Add support for virtual_network_id (#​3333)
• resource/cloudflare_teams_account: add support for 'virtual_ip' (#​3321)
• resource/resource_cloudflare_zone: add support for 'vanity_name_servers' (#​3315)

BUG FIXES:

• resource/cloudflare_access_application: Fix bug requiring explicit account_id or zone_id (#​3352)
• resource/cloudflare_access_application: force recreation if SaaS app auth_type is changed (#​3332)
• resource/cloudflare_list_item: handle overlapping redirect source_url (#​3335)
• resource/cloudflare_logpush_job: Mirror API defaults for record_delimiter to include newline (#​3334)
• resource/cloudflare_waiting_room_event: fix panic when trying to import a resource (#​3351)

DEPENDENCIES:

• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.16 to 1.27.17 (#​3339)
• provider: bump github.com/aws/aws-sdk-go-v2/config from 1.27.17 to 1.27.18 (#​3350)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.16 to 1.17.17 (#​3339)
• provider: bump github.com/aws/aws-sdk-go-v2/credentials from 1.17.17 to 1.17.18 (#​3350)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.3 to 1.54.4 (#​3339)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.0 to 1.55.1 (#​3350)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.27.0 to 1.27.1 (#​3339)
• provider: bump github.com/aws/aws-sdk-go-v2 from 1.27.1 to 1.27.2 (#​3350)
• provider: bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.4 to 1.55.0 in the aws group (#​3346)
• provider: bump github.com/cloudflare/cloudflare-go from 0.96.0 to 0.97.0 (#​3347)
• provider: bump github.com/hashicorp/terraform-plugin-framework from 1.8.0 to 1.9.0 (#​3341)
• provider: bump golang.org/x/net from 0.25.0 to 0.26.0 (#​3342)
• provider: bump goreleaser/goreleaser-action from 5.1.0 to 6.0.0 (#​3345)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

---

• If you want to rebase/retry this MR, check this box

---

This MR has been generated by Renovate Bot. The local configuration can be found in the SI Renovate Bot repository.