Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 30, 2025

Bumps integrations/github from 5.43.0 to 6.7.3.

Release notes

Sourced from integrations/github's releases.

v6.7.3

This patch addresses the issue where the Update function was missed during the cherry pick for github_actions_secret resource. Tests were also added to avoid regressions in the future.

Full Changelog: integrations/terraform-provider-github@v6.7.2...v6.7.3

v6.7.2

⚠️ This release is deprecated, please use v6.7.3 instead

Note: This patch contains the addition of the destroy_on_drift property to github_actions_secret resource because the exact same issue was present there as well.

Bug Fixes

Fixed drift detection bug that caused "Provider produced inconsistent result" errors in github_actions_organization_secret and github_actions_secret resources. The bug occurred when secrets were modified externally - the timestamp wasn't being updated after drift detection, causing infinite loops of false positive drift detection. | integrations/terraform-provider-github#2832

Features

Added destroy_on_drift property to github_actions_secret resource (repository-level secrets), and matches the functionality already available in github_actions_organization_secret. Also includes proper schema migration from v0 to v1 and ensures the property defaults to true for backward compatibility. | integrations/terraform-provider-github#2832

Full Changelog: integrations/terraform-provider-github@v6.7.1...v6.7.2

v6.7.1

⚠️ This release is deprecated, please use v6.7.3 instead

Bug Fixes

  • github_actions_organization_secret: Add state migration for destroy_on_drift field to fix regression from v6.7.0 (#2820)

This patch release fixes a regression introduced in v6.7.0 where existing github_actions_organization_secret resources would show invalid state for the new destroy_on_drift field.

The fix adds a schema migration that automatically sets destroy_on_drift=true for existing resources that don't have this field, preventing the need for manual state fixes.

Fixes: #2804

Full Changelog: integrations/terraform-provider-github@v6.7.0...v6.7.1

v6.7.0

What's Changed

🚀 New Features

... (truncated)

Commits
  • d26774d Add validation test to prevent regression of Update function requirement
  • e2fcaf5 Fix InternalValidate error: Add Update function to github_actions_secret - Fi...
  • 6537a52 Fixes merge drift issues with both org secrets and actions secrets
  • fe3ced8 Add schema migration
  • e3914b1 Add destroy-on-drift property to the GitHub Action Secret resource schema
  • c9df74c fix: Add state migration for github_actions_organization_secret destroy_on_dr...
  • efd6d02 feat: Add github_actions_organization_secret_repository resource (#2760)
  • d019d30 fix(resource/github_actions_environment_variable): handle existing variables ...
  • f549d17 fix: add support for DeployKey actor type in repository and organization ru...
  • 8bd287c test: add coverage for bypass_modes in rulesets (#2802)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [integrations/github](https://github.com/integrations/terraform-provider-github) from 5.43.0 to 6.7.3.
- [Release notes](https://github.com/integrations/terraform-provider-github/releases)
- [Changelog](https://github.com/integrations/terraform-provider-github/blob/main/CHANGELOG.md)
- [Commits](integrations/terraform-provider-github@v5.43.0...v6.7.3)

---
updated-dependencies:
- dependency-name: integrations/github
  dependency-version: 6.7.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code labels Oct 30, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2025

Superseded by #91.

@dependabot dependabot bot closed this Nov 3, 2025
@dependabot dependabot bot deleted the dependabot/terraform/integrations/github-6.7.3 branch November 3, 2025 17:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file terraform Pull requests that update terraform code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant