chore(deps): update terraform twingate to v4.3.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
twingate (source)	required_provider	patch	4.3.0 → 4.3.1

---

Release Notes

Twingate/terraform-provider-twingate (twingate)

v4.3.1

Compare Source

What's Changed

Fix inconsistent result after apply for access_group security_policy_id

• Fix inconsistent result after apply for access_group security_policy_id by @​dany74q in #​898

SSH gateway examples

• Add configurable Twingate URL to SSH gateway examples by @​minhtule in #​896

Other Upgrades and Fixes

• Bump actions/setup-go from 6 to 7 by @​dependabot[bot] in #​893
• Bump google.golang.org/grpc from 1.79.3 to 1.82.1 by @​dependabot[bot] in #​897
• Bump github.com/jarcoal/httpmock from 1.4.1 to 1.4.2 by @​dependabot[bot] in #​899
• Bump actions/stale from 10 to 11 by @​dependabot[bot] in #​900

New Contributors

• @​dany74q made their first contribution in #​898

Full Changelog: Twingate/terraform-provider-twingate@v4.3.0...v4.3.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[mergify]

🤖 LGTM! beep boop

[autonomous-bancey]

Plan Result (prod_twingate)

⚠️ Resource Deletion will happen

This plan contains resource delete operation. Please check the plan result very carefully!

Plan: 5 to add, 3 to change, 4 to destroy.

• Create
  • time_rotating.service_account_key_rotation
• Update
  • azurerm_key_vault_secret.service_account_key["AzureDevOps"]
  • azurerm_key_vault_secret.service_account_key["Pelican"]
  • azurerm_key_vault_secret.service_account_key["Pterodactyl"]
• Replace
  • time_static.service_account_key_rotation

Change Result (Click me)

  # azurerm_key_vault_secret.service_account_key["AzureDevOps"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-07-28T14:06:23Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-AzureDevOps-SA-Key/c82006259ea3456b801d427b3a766054"
        name                    = "Twingate-AzureDevOps-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.service_account_key["Pelican"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-07-28T14:06:23Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-Pelican-SA-Key/88f2573a7bde4758b17069e597529262"
        name                    = "Twingate-Pelican-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # azurerm_key_vault_secret.service_account_key["Pterodactyl"] will be updated in-place
  ~ resource "azurerm_key_vault_secret" "service_account_key" {
      ~ expiration_date         = "2026-07-28T14:06:23Z" -> (known after apply)
        id                      = "https://bancey-vault.vault.azure.net/secrets/Twingate-Pterodactyl-SA-Key/65fc2792807742cb87ecdc8919214ac9"
        name                    = "Twingate-Pterodactyl-SA-Key"
        tags                    = {}
      ~ value                   = (sensitive value)
        # (9 unchanged attributes hidden)
    }

  # time_rotating.service_account_key_rotation will be created
  + resource "time_rotating" "service_account_key_rotation" {
      + day              = (known after apply)
      + hour             = (known after apply)
      + id               = (known after apply)
      + minute           = (known after apply)
      + month            = (known after apply)
      + rfc3339          = (known after apply)
      + rotation_days    = 7
      + rotation_rfc3339 = (known after apply)
      + second           = (known after apply)
      + unix             = (known after apply)
      + year             = (known after apply)
    }

  # time_static.service_account_key_rotation must be replaced
-/+ resource "time_static" "service_account_key_rotation" {
      ~ day     = 28 -> (known after apply)
      ~ hour    = 14 -> (known after apply)
      ~ id      = "2026-07-28T14:06:23Z" -> (known after apply)
      ~ minute  = 6 -> (known after apply)
      ~ month   = 7 -> (known after apply)
      ~ rfc3339 = "2026-07-28T14:06:23Z" -> (known after apply) # forces replacement
      ~ second  = 23 -> (known after apply)
      ~ unix    = 1785247583 -> (known after apply)
      ~ year    = 2026 -> (known after apply)
    }

  # twingate_service_account_key.this["AzureDevOps"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6X3ZndUl5WmRMcmRsV191V2lXa0pWaVRGRTJCbjRMUksxNUxzVkhYU0dUTQ==" -> (known after apply)
      ~ is_active          = false -> (known after apply)
        name               = "AzureDevOps Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

  # twingate_service_account_key.this["Pelican"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6ZldhTXBxckJkV2dHR2JUR3pRQkpVZlZ5a3hrWFU5NW5rbG5TdkdiS21YOA==" -> (known after apply)
      ~ is_active          = false -> (known after apply)
        name               = "Pelican Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

  # twingate_service_account_key.this["Pterodactyl"] will be replaced due to changes in replace_triggered_by
-/+ resource "twingate_service_account_key" "this" {
      ~ id                 = "U2VydmljZUFjY291bnRLZXk6M1Z0NUR1Mm1BZGR0MS1WQ2k4THJmNWtORU5uaHE2cGRycEFNdjlTSXlzZw==" -> (known after apply)
      ~ is_active          = false -> (known after apply)
        name               = "Pterodactyl Key (auto rotates)"
      ~ token              = (sensitive value)
        # (2 unchanged attributes hidden)
    }

Plan: 5 to add, 3 to change, 4 to destroy.

ℹ️ Objects have changed outside of Terraform

This feature was introduced from Terraform v0.15.4.

Terraform detected the following changes made outside of Terraform since the
last "terraform apply" which may have affected this plan:

  # time_rotating.service_account_key_rotation has been deleted
  - resource "time_rotating" "service_account_key_rotation" {
        id               = "2026-07-28T14:06:23Z"
      - rfc3339          = "2026-07-28T14:06:23Z" -> null
        # (9 unchanged attributes hidden)
    }


Unless you have made equivalent changes to your configuration, or ignored the

[autonomous-bancey]

Plan Result (generate_ansible_inventory)

No changes. Your infrastructure matches the configuration.

[autonomous-bancey]

Plan Result (tiny_virtual_machines)

No changes. Your infrastructure matches the configuration.