build(deps): bump the gomod group across 1 directory with 5 updates

[dependabot]

Bumps the gomod group with 4 updates in the / directory: github.com/go-jose/go-jose/v3, github.com/hashicorp/terraform-plugin-sdk/v2, github.com/hashicorp/terraform-plugin-testing and golang.org/x/oauth2.

Updates github.com/go-jose/go-jose/v3 from 3.0.4 to 3.0.5

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

v3.0.5

What's Changed

Fixes GHSA-78h2-9frx-2jm8

We recommend migrating from v3 to v4, and we will stop support v3 in the near future.

Full Changelog: go-jose/go-jose@v3.0.4...v3.0.5

Commits

• be2f654 ci: update Go versions for GHA workflows (#221)
• 0246416 Merge commit from fork
• See full diff in compare view

Updates github.com/hashicorp/terraform-plugin-sdk/v2 from 2.38.2 to 2.40.1

Release notes

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's releases.

v2.40.1

BUG FIXES:

• helper/schema: Fixed a bug that caused spurious diffs in the plan when resource identity is set but didn't change. (#1582)

v2.40.0

NOTES:

• This release moves the resource configuration generation logic for the -generate-config-out flag from Terraform Core to the SDKv2 for Terraform v1.14.0 and above. There should be no functionality changes for resource configuration generation in this release. (#1559)
• This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#1564)

v2.39.0

ENHANCEMENTS:

• helper/schema: Added support for deprecation messages on attributes and blocks, which are now populated from the Schema's Deprecated field and passed through to the protocol layer (#1553)

Changelog

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's changelog.

2.40.1 (April 28, 2026)

BUG FIXES:

• helper/schema: Fixed a bug that caused spurious diffs in the plan when resource identity is set but didn't change. (#1582)

2.40.0 (March 10, 2026)

NOTES:

• This release moves the resource configuration generation logic for the -generate-config-out flag from Terraform Core to the SDKv2 for Terraform v1.14.0 and above. There should be no functionality changes for resource configuration generation in this release. (#1559)
• This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#1564)

2.39.0 (February 27, 2026)

ENHANCEMENTS:

• helper/schema: Added support for deprecation messages on attributes and blocks, which are now populated from the Schema's Deprecated field and passed through to the protocol layer (#1553)

Commits

• e6c7dc4 Update changelog
• e631b05 Update meta package SDKVersion
• b9a310b Backport #1582 and 1581 to v2.40.x (#1583)
• dde4384 Update changelog
• 9136f3a Update meta package SDKVersion
• 86877a0 Implement GenerateResourceConfig RPC and existing Terraform default logic (#...
• 3643171 [Chore] Upgrade Go version to 1.25 (#1564)
• 9c60d2f build(deps): bump github.com/hashicorp/copywrite in /tools (#1563)
• 328ad99 build(deps): bump github.com/cloudflare/circl in /tools (#1561)
• ff0698e build(deps): bump the github-actions group across 1 directory with 4 updates ...
• Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-testing from 1.14.0 to 1.16.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-testing's releases.

v1.16.0

FEATURES:

• querycheck: Add new ExpectTotalLengthForMatching querycheck for validating the number of found resources for multiple list blocks (#607)
• helper/resource: Added new GenerateConfig testing mode to TestStep which can be used to test the generated resource configuration during ImportState testing mode. (#638)

ENHANCEMENTS:

• helper/resource: Added DefaultWorkspaceOnly to enable testing state store implementations that don't support multiple workspaces. This is achieved by only running Terraform commands with the default workspace. (#633)

BUG FIXES:

• querycheck: Fix behaviour of ExpectLength querycheck to match on the provided resource address before comparing the count (#604)
• querycheck: Fix behaviour of ExpectLengthAtLeast querycheck to match on the provided resource address before comparing the count (#607)
• dep: updated hc-install dependency to 0.9.4 to prevent openpgp key expiration errors. (#647)

v1.15.0

NOTES:

• This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#629)

FEATURES:

• helper/resource: Added new StateStore testing mode to TestStep, which can be used to smoke test Terraform state storage. (#591)

BUG FIXES:

• helper/resource: Test steps in Config mode using Destroy: true and Check functions will now create an additional destroy plan prior to running terraform apply to avoid a potential "Saved Plan is Stale" error from Terraform. (#602)
• helper/resource: Test steps in Config mode using the TF_ACC_REFRESH_AFTER_APPLY compatibility flag will not refresh if ExpectNonEmptyPlan is true. (#602)

v1.14.1

BUG FIXES:

• Backport: Remove the redundant post-apply refresh triggered by resource/refreshAfterApply so acceptance tests avoid an extra refresh cycle. (#641)

Changelog

Sourced from github.com/hashicorp/terraform-plugin-testing's changelog.

1.16.0 (April 23, 2026)

FEATURES:

• querycheck: Add new ExpectTotalLengthForMatching querycheck for validating the number of found resources for multiple list blocks (#607)
• helper/resource: Added new GenerateConfig testing mode to TestStep which can be used to test the generated resource configuration during ImportState testing mode. (#638)

ENHANCEMENTS:

• helper/resource: Added DefaultWorkspaceOnly to enable testing state store implementations that don't support multiple workspaces. This is achieved by only running Terraform commands with the default workspace. (#633)

BUG FIXES:

• querycheck: Fix behaviour of ExpectLength querycheck to match on the provided resource address before comparing the count (#604)
• querycheck: Fix behaviour of ExpectLengthAtLeast querycheck to match on the provided resource address before comparing the count (#607)
• dep: updated hc-install dependency to 0.9.4 to prevent openpgp key expiration errors. (#647)

1.15.0 (March 10, 2026)

NOTES:

• This Go module has been updated to Go 1.25 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#629)

FEATURES:

• helper/resource: Added new StateStore testing mode to TestStep, which can be used to smoke test Terraform state storage. (#591)

BUG FIXES:

• helper/resource: Test steps in Config mode using Destroy: true and Check functions will now create an additional destroy plan prior to running terraform apply to avoid a potential "Saved Plan is Stale" error from Terraform. (#602)
• helper/resource: Test steps in Config mode using the TF_ACC_REFRESH_AFTER_APPLY compatibility flag will not refresh if ExpectNonEmptyPlan is true. (#602)

Commits

• 54ba38b Update changelog
• 086f9cb Add changelog for hc-install dependency update (#649)
• 878c611 build(deps): Bump github.com/hashicorp/terraform-exec (#648)
• c492fcf build(deps): Bump github.com/hashicorp/hc-install from 0.9.3 to 0.9.4 (#646)
• c635147 build(deps): Bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 (#644)
• d854a0f build(deps): Bump the github-actions group with 2 updates (#643)
• 2684d0d build(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 (#642)
• 2699d69 Add GenerateConfig testing mode to ImportState testing (#638)
• 57e3cc1 build(deps): Bump actions/setup-go in the github-actions group (#639)
• 8ac7772 build(deps): Bump github.com/hashicorp/copywrite in /tools (#637)
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.48.0 to 0.50.0

Commits

• 03ca0dc go.mod: update golang.org/x dependencies
• 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm
• 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength
• 982eaa6 go.mod: update golang.org/x dependencies
• 159944f ssh,acme: clean up tautological/impossible nil conditions
• a408498 acme: only require prompt if server has terms of service
• cab0f71 all: upgrade go directive to at least 1.25.0 [generated]
• 2f26647 x509roots/fallback: update bundle
• See full diff in compare view

Updates golang.org/x/oauth2 from 0.35.0 to 0.36.0

Commits

• 4d954e6 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

[stevehipwell]

LGTM

[deiga]

@dependabot rebase

[deiga]

@dependabot rebase