[dependabot]

Bumps the gomod-dependencies group with 3 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/hashicorp/hcl/v2 and github.com/hashicorp/terraform-exec.

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.22.0 to 1.23.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.1

1.23.1 (2026-08-27)

Other Changes

• Upgraded dependencies.

sdk/azcore/v1.23.0

1.23.0 (2026-08-11)

Features Added

• Helper method runtime.NewRequestForNextLink for creating requests for pageable operations that uses a next link. It handles absolute and relative next links.

Bugs Fixed

• Fixed an issue where runtime.Pager[T].More could return true indefinitely after NextPage failed to retrieve the first page, causing for pager.More() loops to spin. After a page fetch returns an error the Pager now enters a terminal state: More returns false and subsequent NextPage calls return the same error without invoking the fetcher again.

Commits

• d86ae78 Prep azcore for release (#27471)
• 33dd768 [azwebpubsub] Fix GenerateClientAccessURL on the TokenCredential path (#27422)
• a27ca57 Upgrade TypeSpec Go emitter dependencies (#27466)
• af75eb0 [AutoPR sdk-resourcemanager/purestorageblock/armpurestorageblock]-generated-f...
• 8dcff8c [AutoPR sdk-resourcemanager/redisenterprise/armredisenterprise]-generated-fro...
• e4569f1 [AutoPR sdk-resourcemanager/chaos/armchaos]-generated-from-SDK Generation - G...
• 7069bf8 [AutoPR sdk-resourcemanager/horizondb/armhorizondb]-generated-from-SDK Genera...
• 5ceffce Bump gh-aw to v0.86.2 for mgmt review workflow (#27460)
• 663b6ce Enhance azblob perf tests with OAuth, parallel setup, and profiling (#27324)
• cf17431 [AutoPR sdk-resourcemanager/containerservice/armcontainerservice]-generated-f...
• Additional commits viewable in compare view

Updates github.com/hashicorp/hcl/v2 from 2.24.0 to 2.25.0

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.25.0

Enhancements

• Go: Upgrade compatibility from 1.24 to 1.25 (#798)
• hclwrite: Export LeadComments()/LineComments() (#807)
• hclwrite: body.SetAttribute* return new attribute (#806)
• hclwrite: Block.SetType sets type (#808)
• Prepare for Unicode 17 support in Go 1.27 (#814)

Bug Fixes

• DiagnosticWriter: Skip marked values when writing diagnostics (#739)
• hclsyntax: Set CloseBraceRange to last label in error-recovered blocks (#786)
• hclsyntax: Add partially complete items in nested ObjectConsItem on error (#785)

Internal

• deps: bump golang.org/x/crypto from 0.38.0 to 0.45.0 (#774)

Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

HCL Changelog

Commits

• 00057cf Prepare for Unicode 17 support in Go 1.27 (#814)
• 7338a7d github: Add consistency test for generated code (#834)
• 2f8831b github: Filter out Ragel files from coverage report (#833)
• d9882d1 hclsyntax: Update copyright year in generated files (#832)
• 6032923 hclsyntax: Re-run stringer to update generated comments (#831)
• 6abbb08 Merge pull request #827 from hashicorp/james-warren0/security-doc-tweaks
• 425fdf9 Implement feedback provided in hashicorp/hcl#826
• 2a3b672 Merge pull request #826 from hashicorp/james-warren0/security-model
• 42ccbc0 Add security model documentation
• 6bf1a67 Merge pull request #808 from hashicorp/bbasata/set-type
• Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-exec from 0.25.2 to 0.25.3

Release notes

Sourced from github.com/hashicorp/terraform-exec's releases.

v0.25.3

DEPENDENCIES:

• build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 (#589)
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.2 (#588, #591, #604)
• build(deps): bump github.com/hashicorp/terraform-json from 0.27.2 to 0.28.0 (#598)
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#597)
• build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#595)

Changelog

Sourced from github.com/hashicorp/terraform-exec's changelog.

0.25.3 (August 17, 2026)

DEPENDENCIES:

• build(deps): bump github.com/go-git/go-billy/v5 from 5.8.0 to 5.9.0 (#589)
• build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.2 (#588, #591, #604)
• build(deps): bump github.com/hashicorp/terraform-json from 0.27.2 to 0.28.0 (#598)
• build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#597)
• build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#595)

Commits

• b9e71a3 v0.25.3 [skip ci]
• de738e6 Prepare Changelog for v0.25.3 (#606)
• 0e7f6fb build(deps): bump github.com/go-git/go-git/v5 from 5.19.1 to 5.19.2 (#604)
• 162f496 github/tests+nightly: Declare permissions explicitly (#601)
• 5758bb9 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions-...
• 4b7c78d build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in the github-actions-...
• 1fec9ed build(deps): bump github.com/hashicorp/terraform-json from 0.27.2 to 0.28.0 (...
• e42a8ba build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#597)
• d9bc8c3 build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#595)
• 70075e9 build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the github-actions-...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.