chore(deps): update hashicorp/azurerm requirement from >= 4.60.0, < 5.0.0 to >= 4.60.0, < 5.7.1 in /infra in the terraform group across 1 directory

[dependabot]

Updates the requirements on hashicorp/azurerm to permit the latest version.
Updates hashicorp/azurerm to 5.7.0

Release notes

Sourced from hashicorp/azurerm's releases.

v5.7.0

5.7.0 (September 24, 2026)

FEATURES:

• New List Resource: azurerm_private_dns_resolver_forwarding_rule (#33313)
• New List Resource: azurerm_windows_virtual_machine (#33332)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260917.1142820 (#33495)
• dependencies: network - update API version to 2025-07-01 (#33441)
• Data Source: azurerm_linux_web_app - export the virtual_network_image_pull_enabled property (#33316)
• Data Source: azurerm_network_interface - export the auxiliary_mode, auxiliary_sku, edge_zone, and internal_domain_name_suffix properties (#33204)
• Data Source: azurerm_public_ip - export the domain_name_label_scope, edge_zone, public_ip_prefix_id, and sku_tier properties (#33193)
• Data Source: azurerm_service_plan - export the premium_plan_auto_scale_enabled property (#33300)
• Data Source: azurerm_storage_blob - export the cache_control and source_uri properties (#33318)
• Data Source: azurerm_traffic_manager_profile - export the maximum_return property (#33346)
• Data Source: azurerm_web_pubsub - export the live_trace and identity properties (#33373)
• azurerm_kubernetes_cluster_node_pool - add Windows2025 as a valid value for the os_sku property (#33463)
• azurerm_kubernetes_cluster - add Windows2025 as a valid value for the os_sku property (#33463)

BUG FIXES:

• Data Source: azurerm_kubernetes_cluster - fix a panic caused by a nil pointer dereference while flattening agent_pool_profile (#33488)
• azurerm_postgresql_flexible_server - fix cluster block read for replica create_mode (#33082)

Changelog

Sourced from hashicorp/azurerm's changelog.

v5.7.0 (September 24, 2026)

FEATURES:

• New List Resource: azurerm_private_dns_resolver_forwarding_rule (#33313)
• New List Resource: azurerm_windows_virtual_machine (#33332)

ENHANCEMENTS:

• dependencies: go-azure-sdk - update to v0.20260917.1142820 (#33495)
• dependencies: network - update API version to 2025-07-01 (#33441)
• Data Source: azurerm_linux_web_app - export the virtual_network_image_pull_enabled property (#33316)
• Data Source: azurerm_network_interface - export the auxiliary_mode, auxiliary_sku, edge_zone, and internal_domain_name_suffix properties (#33204)
• Data Source: azurerm_public_ip - export the domain_name_label_scope, edge_zone, public_ip_prefix_id, and sku_tier properties (#33193)
• Data Source: azurerm_service_plan - export the premium_plan_auto_scale_enabled property (#33300)
• Data Source: azurerm_storage_blob - export the cache_control and source_uri properties (#33318)
• Data Source: azurerm_traffic_manager_profile - export the maximum_return property (#33346)
• Data Source: azurerm_web_pubsub - export the live_trace and identity properties (#33373)
• azurerm_kubernetes_cluster_node_pool - add Windows2025 as a valid value for the os_sku property (#33463)
• azurerm_kubernetes_cluster - add Windows2025 as a valid value for the os_sku property (#33463)

BUG FIXES:

• Data Source: azurerm_kubernetes_cluster - fix a panic caused by a nil pointer dereference while flattening agent_pool_profile (#33488)
• azurerm_postgresql_flexible_server - fix cluster block read for replica create_mode (#33082)

5.6.0 (September 17, 2026)

FEATURES:

• New List Resource: azurerm_batch_account (#33252)
• New List Resource: azurerm_cdn_frontdoor_origin_group (#33334)
• New Resource: azurerm_storage_discovery_workspace (#31479)

ENHANCEMENTS:

• dependencies: containers - update API version to 2026-05-01 (#32688)
• dependencies: go-azure-sdk - update to v0.20260910.1141000 (#33413)
• dependencies: qumulo - update API version to 2026-04-16 (#33421)
• dependencies: servicebus - update to API version 2026-01-01 (#33450)
• azurerm_iothub_device_update_instance - add support for the connection_string_wo and connection_string_wo_version properties (#33448)
• azurerm_linux_function_app - add support for the end_to_end_tls_encryption_enabled property (#31135)
• azurerm_linux_function_app_slot - add support for the end_to_end_tls_encryption_enabled property (#31135)
• azurerm_linux_web_app - add support for the end_to_end_tls_encryption_enabled property (#31135)
• azurerm_linux_web_app_slot - add support for the end_to_end_tls_encryption_enabled property (#31135)
• azurerm_mongo_cluster - Support new property network_bypass_mode (#33168)
• azurerm_servicebus_namespace - add support for the 1.3 value to the minimum_tls_version property (#33457)
• azurerm_windows_function_app - add support for the end_to_end_tls_encryption_enabled property (#31135)
• azurerm_windows_function_app_slot - add support for the end_to_end_tls_encryption_enabled property (#31135)
• azurerm_windows_web_app - add support for the end_to_end_tls_encryption_enabled property (#31135)

... (truncated)

Commits

• 10b7426 5.7.0 release changelog (#33509)
• b6ac0f2 fix 5.0 upgrade guide (#33508)
• 0f50c7a postgresql_flexible_server: fix perpetual replace of replica caused by cluste...
• b4c3634 CI - update terraform core version to 1.16 for latest actions feature sup...
• 6735d45 update network sdk API version to 2025-07-01: containers, datafactory, `s...
• bfc2300 update network sdk API version to 2025-07-01: cdn, mssql, `recoveryservic...
• c582857 private_dns_resolver_forwarding_rule - Add list support (#33313)
• 5e91774 windows_virtual_machine - add List Resource support (#33332)
• c1df0f2 update network sdk API version to 2025-07-01: loadbalancer, databricks (#...
• fbd5885 update network sdk API version to 2025-07-01: appservice, cognitive, `com...
• Additional commits viewable in compare view

[dependabot]

Labels

The following labels could not be found: dependencies. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[github-code-quality]

Code Coverage Overview

Languages: PowerShell

PowerShell / code-coverage-agent

The overall line coverage in commit 7d0e68d in the dependabot/terraform... branch remains at 84%, unchanged from commit 4d20035 in the main branch.

---

_{Updated September 28, 2026 06:29 UTC}

[github-actions]

Test results

   21 files  +  6  1 657 suites  +156   54m 8s ⏱️ + 21m 39s
2 793 tests +137  2 787 ✅ +132   6 💤 + 5  0 ❌ ±0 
8 529 runs  +630  8 486 ✅ +615  43 💤 +15  0 ❌ ±0 

Results for commit 7d0e68d. ± Comparison against base commit 4d20035.

This pull request removes 48 and adds 184 tests. Note that renamed tests count towards both.

Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("*AVM_APP_BOT_LOGIN*","12345","configured
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication("complete execution-value readback",2,0)
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication("final publication readback",5,1)
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication("pre-write TEST_BAMI_MODULE_PATHS",3,0)
Resolve-RepositorySyncStateConfiguration.rejects invalid storage names("-leading-hyphen","*state container*","ContainerName")
Resolve-RepositorySyncStateConfiguration.rejects invalid storage names("UpperCaseAccount","*state storage account*","StorageAccountName")
Resolve-RepositorySyncStateConfiguration.rejects invalid storage names("double--hyphen","*state container*","ContainerName")
Resolve-RepositorySyncStateConfiguration.rejects invalid storage names("state/path","*state container*","ContainerName")
Resolve-RepositorySyncStateConfiguration.rejects invalid storage names("too-long-storage-account-name","*state storage account*","StorageAccountName")
Shared candidate identity, scope, and commit history guards.rejects unsafe candidate identities or pre-enabled auto-merge("Other/repository","baseRepo","full_name")
…

Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("","configured-bot[bot]","*AVM_APP_BOT_USER_ID*")
Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("*AVM_APP_BOT_LOGIN*","12345","configured
bot[bot]")
Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("0","configured-bot[bot]","*AVM_APP_BOT_USER_ID*")
Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("12345","","*AVM_APP_BOT_LOGIN*")
Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("12345","configured
bot[bot]","*AVM_APP_BOT_LOGIN*")
Configured repository-sync bot identity.rejects missing or invalid configuration before it can be used("abc","configured-bot[bot]","*AVM_APP_BOT_USER_ID*")
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication("complete execution-value readback",0,2)
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication("final publication readback",1,5)
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication("pre-write TEST_BAMI_MODULE_PATHS",0,3)
Guarded nonsecret Bicep variable publication.detects drift at the complete readback, immediately before the selector, and after publication(0,2,"complete execution-value readback")
…

♻️ This comment has been updated with latest results.