Update Terraform github to v6.8.0

[renovate]

This PR contains the following updates:

Package	Type	Change
github (source)	required_provider	6.7.1 -> 6.8.0

---

Release Notes

integrations/terraform-provider-github (github)

v6.8.0

Compare Source

What's Changed

🚀 New Features

• fix/feature: Adds support for max_file_size, max_file_path_length, file_extension_restriction, and unknown rulesets for repos and orgs by @​nickfloyd in #​2821
• feat: Handle error management on resources when dealing with archived repos. by @​nickfloyd in #​2837
• feat: Update removal operations for related resources to now gracefully handle deleting archived repositories by @​nickfloyd in #​2844
• feat: support workflow permissions in repository by @​M0NsTeRRR in #​2309
• feat: implement missing data source github_actions_environment_public_key by @​nobbs in #​2500
• feat: Adds migration for destory-on-drift for actions organization secret to prevent state from getting out of sync with the schema by @​nickfloyd in #​2820
• feat: Adds DiffSuppressFunc and DiffSuppressOnRefresh to resources that have etag properties to suppress etag-related diffs by @​nickfloyd in #​2840
• feat: Max per page by @​dee-kryvenko in #​2703
• feat(core): add fork functionality by @​hminaee-tc in #​2678

🐛 Bugfixes

• fix: Add destroy-on-drift property to the GitHub Action Secret resource schema by @​nickfloyd in #​2832
• fix: error when updating ruleset without bypass actors by @​dblinkhorn in #​2824
• fix(resource/github_organization_custom_properties): allow for import by @​pippitt in #​2834
• fix: Support for Github Environment Secrets' Lifecycle Ignore Changes by @​bshore-bf in #​2651
• fix: update of github release by @​findmyname666 in #​2350
• fix: commit signoff is enforced by the organization by @​steveteuber in #​2763
• fix: Repository Custom Properties Refresh by @​SharpEdgeMarshall in #​2691
• fix: Check current default branch before modifying by @​stevehipwell in #​2863
• fix: import command syntax for GitHub custom property documentation by @​deiga in #​2871
• fix(issue-2873): send empty slice for bypass_actors to avoid 422 on null by @​VyacheslavPerfilyev in #​2875
• fix(transport): change rate limit log messages from DEBUG to WARN level by @​tdabasinskas in #​2687

🛠️ Maintenance

• maint: gofmt clean up by @​nickfloyd in #​2888
• maint: Update to go-github v67 by @​nickfloyd in #​2810
• build(deps): bump github/codeql-action from 3.28.0 to 4.31.0 by @​dependabot[bot] in #​2811
• build(deps): bump actions/checkout from 4.2.2 to 5.0.0 by @​dependabot[bot] in #​2812
• build(deps): bump actions/stale from 9.0.0 to 10.1.0 by @​dependabot[bot] in #​2813
• build(deps): bump actions/setup-go from 5.2.0 to 6.0.0 by @​dependabot[bot] in #​2814
• build(deps): bump peter-evans/create-or-update-comment from 4 to 5 by @​dependabot[bot] in #​2815
• build(deps): update several GitHub Actions to the next major versions by @​ViacheslavKudinov in #​2816
• build(deps): bump github/codeql-action from 4.31.0 to 4.31.2 in the github-actions group by @​dependabot[bot] in #​2860
• chore(Actions): Skip to run "Add issue to project" workflow on the forks by @​ViacheslavKudinov in #​2833
• chore: Tune Goreleaser config and workflow to address warnings by @​ViacheslavKudinov in #​2835
• chore(actions): Add scan of Actions workflows by CodeQL by @​ViacheslavKudinov in #​2859
• chore(actions): Add workflow that runs Terraform configuration validation by @​ViacheslavKudinov in #​2887
• chore(actions): Adds labeler Action to automatically add labels on PR:s by @​ViacheslavKudinov in #​2853
• chore(actions): Disable to run "Issue/PR response" workflow on forks by @​ViacheslavKudinov in #​2854
• chore(Actions): disable label synchronization in pull request labeler by @​ViacheslavKudinov in #​2879
• chore: Update pull request template checklist by @​nickfloyd in #​2827

📝 Documentation

• docs: Add destroy_on_drift docs to organization secret by @​nickfloyd in #​2825
• docs(github_repository_tag_protection): Remove documentation for the resource no longer supported by provider since v6.4.0 by @​ViacheslavKudinov in #​2826
• docs(github_organization_custom_role): Fix typo organization(_)repository by @​kohbis in #​2831
• docs: Adds do_not_enforce_on_create option for github_repository_ruleset docs by @​nenosrep in #​2667
• docs: Fix doc to revert wrong file deletion by @​ViacheslavKudinov in #​2847

New Contributors

• @​nenosrep made their first contribution in #​2667
• @​kohbis made their first contribution in #​2831
• @​deiga made their first contribution in #​2871
• @​VyacheslavPerfilyev made their first contribution in #​2875
• @​M0NsTeRRR made their first contribution in #​2309
• @​bshore-bf made their first contribution in #​2651
• @​nobbs made their first contribution in #​2500
• @​findmyname666 made their first contribution in #​2350
• @​steveteuber made their first contribution in #​2763
• @​tdabasinskas made their first contribution in #​2687
• @​hminaee-tc made their first contribution in #​2678

Full Changelog: integrations/terraform-provider-github@v6.7.0...v6.8.0

v6.7.5

Compare Source

[fix]: v6.7.4 causes Internal validation error during TF Init #​2855

Full Changelog: integrations/terraform-provider-github@v6.7.4...v6.7.5

v6.7.4

Compare Source

v6.7.4

⚠️ This release is deprecated, please use v6.7.5 instead

This patch appropriately handles the cases when a Terraform resource has an Update function defined (which was recently added), the Terraform SDK requires that any field that can change must either have ForceNew: true (meaning changes require resource recreation) or for that field to be a computed-only field.

The destroy_on_drift field is a provider config setting that controls how drift detection works - it's not a field that maps to the GitHub API. When implementations try to change this field Terraform will execute the plan properly but fail on the apply because the Update function didn't know how to handle the destroy_on_drift change.

Lastly reads now handle setting encrypted_value and plaintext_value to nil to trigger an update when the "stored" update dates do not match.

Full Changelog: integrations/terraform-provider-github@v6.7.3...v6.7.4

v6.7.3

Compare Source

v6.7.3

⚠️ This release is deprecated, please use v6.7.5 instead

This patch addresses the issue where the Update function was missed during the cherry pick for github_actions_secret resource.
Tests were also added to avoid regressions in the future.

Full Changelog: integrations/terraform-provider-github@v6.7.2...v6.7.3

v6.7.2

Compare Source

v6.7.2

⚠️ This release is deprecated, please use v6.7.5 instead

Note: This patch contains the addition of the destroy_on_drift property to github_actions_secret resource because the exact same issue was present there as well.

Bug Fixes

Fixed drift detection bug that caused "Provider produced inconsistent result" errors in github_actions_organization_secret and github_actions_secret resources. The bug occurred when secrets were modified externally - the timestamp wasn't being updated after drift detection, causing infinite loops of false positive drift detection. | #​2832

Features

Added destroy_on_drift property to github_actions_secret resource (repository-level secrets), and matches the functionality already available in github_actions_organization_secret. Also includes proper schema migration from v0 to v1 and ensures the property defaults to true for backward compatibility. | #​2832

Full Changelog: integrations/terraform-provider-github@v6.7.1...v6.7.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

GitLab Pipeline Action

General information

Link to pipeline: https://gitlab.com/code0-tech/infrastructure/mensa/-/pipelines/2155824189

Status: Passed
Duration: 2 minutes

Job summaries

tf-plan:server_administration

No changes. Your infrastructure matches the configuration.

tf-plan:github

No changes. Your infrastructure matches the configuration.

tf-plan:main

No changes. Your infrastructure matches the configuration.

[Taucher2003]

There have been quite a few bugs in the last versions and I already see an issue in their repository for this version for a resource that we use. Closing to not take the risk

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (6.8.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.