chore(deps): bump the terraform-providers group across 1 directory with 2 updates

[dependabot]

Bumps the terraform-providers group with 2 updates in the /src directory: hashicorp/vault and stackitcloud/stackit.

Updates hashicorp/vault from 5.7.0 to 5.9.0

Release notes

Sourced from hashicorp/vault's releases.

v5.9.0

5.9.0 (April 22, 2026)

BREAKING CHANGES:

• Renamed all Vault 2.0 pki-external-ca resources from version 5.8.0 to a common prefix of vault_pki_external_ca_. (#2838)

FEATURES:

• New Resources: Add support for OS Secrets Engine with vault_os_secret_backend, vault_os_secret_backend_host, and vault_os_secret_backend_account resources for managing operating system credentials via SSH. Requires Vault 2.0.0+. (#2865)
• New Resources: vault_rotation_policy for managing rotation policies. Requires Vault 2.0.0+. (#2844)
• Add support for vault_quota_config resource. (#2837)
• New Resources: Add support for Vault Key Management secrets engine with resources for managing KMS providers (AWS KMS, Azure Key Vault, GCP Cloud KMS), cryptographic keys, key distribution, replication, and rotation (Vault Enterprise). (#2802)
• New Resources: vault_alicloud_secret_backend, vault_alicloud_secret_backend_role, and ephemeral resource vault_alicloud_access_credentials for managing AliCloud secrets engine. (#2858, #2874)
• New Resource: vault_plugin_runtime for managing plugin runtimes in Vault's plugin runtimes catalog. Requires Vault 1.15 or later.(#2835)
• Add support for CORS configuration: vault_sys_config_cors resource and data source for managing and reading Vault's CORS (Cross-Origin Resource Sharing) settings. (#2849)
• New Ephemeral Resource: Add vault_generic_endpoint ephemeral resource with response field extraction from data, auth, wrap_info, and lease metadata.(#2830)

IMPROVEMENTS:

• vault_cf_auth_backend_config: Added cf_password_wo_version to trigger updates when only cf_password_wo changes.(#2878)
• vault_pki_secret_backend_config_acme: Added new fields that control the PKI ACME challenge worker IP ranges that they can connect. ([#2839]hashicorp/terraform-provider-vault#2839)
• Add support for metadata fields in azure_access_credentials and resource_azure_secret_backend_role resources. (#2734
• Add support for Enterprise Plugins in vault_plugin resource. (#2707)
• vault_ldap_secret_backend: Add self-managed support to ldap secrets engine. Requires Vault Enterprise 2.0+. (#2845)
• azure_static_role: Add support for importing existing credentials via new Vault import endpoint. (#2756)
• Updated dependencies:
  • cloud.google.com/go/auth v0.18.2 -> v0.20.0
  • cloud.google.com/go/cloudsqlconn v1.4.3 -> v1.20.2
  • cloud.google.com/go/iam v1.7.0 -> v1.9.0
  • filippo.io/edwards25519 v1.1.1 -> v1.2.0
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 -> v1.21.1
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 -> v1.12.0
  • github.com/aws/aws-sdk-go-v2 v1.41.5 -> v1.41.6
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21 -> v1.4.22
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 -> v2.7.22
  • github.com/aws/aws-sdk-go-v2/service/iam v1.53.7 -> v1.53.8
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 -> v1.13.8
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 -> v1.13.22
  • github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 -> v1.42.0
  • github.com/aws/smithy-go v1.24.3 -> v1.25.0
  • github.com/docker/docker v28.3.3+incompatible -> v28.5.2+incompatible
  • github.com/docker/go-connections v0.5.0 -> v0.7.0
  • github.com/fatih/color v1.18.0 -> v1.19.0
  • github.com/go-jose/go-jose/v3 v3.0.4 -> v3.0.5
  • github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
  • github.com/googleapis/gax-go/v2 v2.20.0 -> v2.21.0
  • github.com/hashicorp/consul/api v1.33.7 -> v1.34.1
  • github.com/hashicorp/go-secure-stdlib/plugincontainer v0.4.2 -> v0.5.0
  • github.com/hashicorp/terraform-plugin-mux v0.23.0 -> v0.23.1

... (truncated)

Changelog

Sourced from hashicorp/vault's changelog.

5.9.0 (April 22, 2026)

BREAKING CHANGES:

• Renamed all Vault 2.0 pki-external-ca resources from version 5.8.0 to a common prefix of vault_pki_external_ca_. (#2838)

FEATURES:

• New Resources: Add support for OS Secrets Engine with vault_os_secret_backend, vault_os_secret_backend_host, and vault_os_secret_backend_account resources for managing operating system credentials via SSH. Requires Vault 2.0.0+. (#2865)
• New Resources: vault_rotation_policy for managing rotation policies. Requires Vault 2.0.0+. (#2844)
• Add support for vault_quota_config resource. (#2837)
• New Resources: Add support for Vault Key Management secrets engine with resources for managing KMS providers (AWS KMS, Azure Key Vault, GCP Cloud KMS), cryptographic keys, key distribution, replication, and rotation (Vault Enterprise). (#2802)
• New Resources: vault_alicloud_secret_backend, vault_alicloud_secret_backend_role, and ephemeral resource vault_alicloud_access_credentials for managing AliCloud secrets engine. (#2858, #2874)
• New Resource: vault_plugin_runtime for managing plugin runtimes in Vault's plugin runtimes catalog. Requires Vault 1.15 or later.(#2835)
• Add support for CORS configuration: vault_sys_config_cors resource and data source for managing and reading Vault's CORS (Cross-Origin Resource Sharing) settings. (#2849)
• New Ephemeral Resource: Add vault_generic_endpoint ephemeral resource with response field extraction from data, auth, wrap_info, and lease metadata.(#2830)

IMPROVEMENTS:

• vault_cf_auth_backend_config: Added cf_password_wo_version to trigger updates when only cf_password_wo changes.(#2878)
• vault_pki_secret_backend_config_acme: Added new fields that control the PKI ACME challenge worker IP ranges that they can connect. ([#2839]hashicorp/terraform-provider-vault#2839)
• Add support for metadata fields in azure_access_credentials and resource_azure_secret_backend_role resources. (#2734)
• Add support for Enterprise Plugins in vault_plugin resource. (#2707)
• vault_ldap_secret_backend: Add self-managed support to ldap secrets engine. Requires Vault Enterprise 2.0+. (#2845)
• azure_static_role: Add support for importing existing credentials via new Vault import endpoint. (#2756)
• Updated dependencies:
  • cloud.google.com/go/auth v0.18.2 -> v0.20.0
  • cloud.google.com/go/cloudsqlconn v1.4.3 -> v1.20.2
  • cloud.google.com/go/iam v1.7.0 -> v1.9.0
  • filippo.io/edwards25519 v1.1.1 -> v1.2.0
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0 -> v1.21.1
  • github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 -> v1.12.0
  • github.com/aws/aws-sdk-go-v2 v1.41.5 -> v1.41.6
  • github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.21 -> v1.4.22
  • github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 -> v2.7.22
  • github.com/aws/aws-sdk-go-v2/service/iam v1.53.7 -> v1.53.8
  • github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7 -> v1.13.8
  • github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 -> v1.13.22
  • github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 -> v1.42.0
  • github.com/aws/smithy-go v1.24.3 -> v1.25.0
  • github.com/docker/docker v28.3.3+incompatible -> v28.5.2+incompatible
  • github.com/docker/go-connections v0.5.0 -> v0.7.0
  • github.com/fatih/color v1.18.0 -> v1.19.0
  • github.com/go-jose/go-jose/v3 v3.0.4 -> v3.0.5
  • github.com/go-jose/go-jose/v4 v4.1.3 -> v4.1.4
  • github.com/googleapis/gax-go/v2 v2.20.0 -> v2.21.0
  • github.com/hashicorp/consul/api v1.33.7 -> v1.34.1
  • github.com/hashicorp/go-secure-stdlib/plugincontainer v0.4.2 -> v0.5.0
  • github.com/hashicorp/terraform-plugin-mux v0.23.0 -> v0.23.1
  • github.com/hashicorp/vault/sdk v0.25.0 -> v0.25.1

... (truncated)

Commits

• 5e9fcd4 Prepare for v5.9.0 Release. (#2889)
• 522d38b Add support of OS Secrets Engine (#2865)
• 26b19b7 Add wo version field handling for Cloudfoundry (#2878)
• 9ba38c7 Add vault_generic_endpoint ephemeral resource with auth and wrap_info support...
• e922381 VAULT-37696: vault_plugin support for enterprise plugins (#2707)
• 35fdffe Update Azure Static Secrets to use new import endpoint (#2756) (#2884)
• e1561c6 Implement change detection for the write-only field in Alicloud Secret engine...
• 3674cbe auth/aws: Skip manual AssumeRole for web identity auth_login_aws flows. (#2850)
• 28ea471 Fix pki and pki-external-ca tests (#2880)
• 0d03c78 add vault_rotation_policy resource (#2844)
• Additional commits viewable in compare view

Updates stackitcloud/stackit from 0.93.0 to 0.94.0

Release notes

Sourced from stackitcloud/stackit's releases.

v0.94.0

Changelog

• 1f7f6a7ae21fb8a75133217bce1628eb10db9d90: chore(deps): bump goreleaser/goreleaser-action from 7 to 7.1.0 (#1428) (@​dependabot[bot])
• fd38cf5d02b855a37603b3f32d693eafca344a61: chore(deps): bump the stackit group with 20 updates (#1426) (@​dependabot[bot])
• 79b9da81ac42c91e3fcc2e9c19d1e9540e753678: chore(deps): bump the stackit group with 5 updates (#1421) (@​dependabot[bot])
• 1a8dc30e5478f9faeb73f2e30dc44ff553240a18: feat(cdn): add redirects in distribution resource (#1333) (@​matheuspolitano)
• aa4af71bae2f911d4115fae94a0f29599a608f28: feat(iam, secretsmanager): add secretsmanager IAM rolebinding datasources (#1416) (@​rubenhoenle)
• c902e6c43c7da84607f575d23e785e94aaba65ee: feat(sfs): onboard project lock resource (#1427) (@​marceljk)
• 3f23d306a9c152a30f0432b5db2f5cf068ba6fc8: feat(ske): add warning if node pool changes (#1423) (@​marceljk)
• 945dc15e9ed4a8ac07ddcf5037d73bea0bf66d70: fix(loadbalancer): state drift when use source ip address is false (#1415) (@​marceljk)

Commits

• aa4af71 feat(iam, secretsmanager): add secretsmanager IAM rolebinding datasources (#1...
• 1f7f6a7 chore(deps): bump goreleaser/goreleaser-action from 7 to 7.1.0 (#1428)
• fd38cf5 chore(deps): bump the stackit group with 20 updates (#1426)
• c902e6c feat(sfs): onboard project lock resource (#1427)
• 79b9da8 chore(deps): bump the stackit group with 5 updates (#1421)
• 3f23d30 feat(ske): add warning if node pool changes (#1423)
• 1a8dc30 feat(cdn): add redirects in distribution resource (#1333)
• 945dc15 fix(loadbalancer): state drift when use source ip address is false (#1415)
• See full diff in compare view