[dependabot]

Updates the requirements on hashicorp/aws to permit the latest version.

Release notes

Sourced from hashicorp/aws's releases.

v6.68.0

6.68.0 (October 7, 2026)

BREAKING CHANGES:

• resource/aws_docdb_cluster: availability_zones now validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#50015)
• resource/aws_rds_cluster: availability_zones now validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#50014)

FEATURES:

• New Data Source: aws_lambdamicrovms_image_version (#50299)
• New Data Source: aws_odb_autonomous_database (#48991)
• New List Resource: aws_ec2_transit_gateway_route (#50202)
• New List Resource: aws_ram_resource_association (#49901)
• New Resource: aws_odb_autonomous_database (#48991)
• New Resource: aws_odb_autonomous_database_secrets_manager_integration (#48991)

ENHANCEMENTS:

• resource/aws_bedrockagentcore_agent_runtime: Add platform_version argument (#50081)
• resource/aws_docdb_cluster: Add validation that availability_zones contains at most 3 items, failing at plan time instead of forcing a destructive replacement (#50015)
• resource/aws_ec2_transit_gateway_route: Add resource identity support (#50202)
• resource/aws_grafana_workspace: Update grafana_version argument to support v13.2 (#50234)
• resource/aws_network_interface: Add connection_tracking_specification argument (#50119)
• resource/aws_ram_resource_association: Add resource identity support (#49901)
• resource/aws_rds_cluster: Add validation that availability_zones contains at most 3 items, failing at plan time instead of forcing a destructive replacement (#50014)

BUG FIXES:

• provider: Fixes error when parsing YAML documents with literal tab characters in double-quoted string (#50340)
• resource/aws_odb_autonomous_database_secrets_manager_integration: Avoid redundant disable requests when the integration is already absent or terminating (#48991)
• resource/aws_redshiftserverless_workgroup: Restores fully reading config_parameter when not specified (#50255)

Changelog

Sourced from hashicorp/aws's changelog.

6.68.0 (October 7, 2026)

BREAKING CHANGES:

• resource/aws_docdb_cluster: availability_zones now validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#50015)
• resource/aws_rds_cluster: availability_zones now validates that at most 3 items are provided at plan time. This is acceptable in a minor version because AWS would always reject requests with more than 3 availability zones at apply time. (#50014)

FEATURES:

• New Data Source: aws_lambdamicrovms_image_version (#50299)
• New Data Source: aws_odb_autonomous_database (#48991)
• New List Resource: aws_ec2_transit_gateway_route (#50202)
• New List Resource: aws_ram_resource_association (#49901)
• New Resource: aws_odb_autonomous_database (#48991)
• New Resource: aws_odb_autonomous_database_secrets_manager_integration (#48991)

ENHANCEMENTS:

• resource/aws_bedrockagentcore_agent_runtime: Add platform_version argument (#50081)
• resource/aws_docdb_cluster: Add validation that availability_zones contains at most 3 items, failing at plan time instead of forcing a destructive replacement (#50015)
• resource/aws_ec2_transit_gateway_route: Add resource identity support (#50202)
• resource/aws_grafana_workspace: Update grafana_version argument to support v13.2 (#50234)
• resource/aws_network_interface: Add connection_tracking_specification argument (#50119)
• resource/aws_ram_resource_association: Add resource identity support (#49901)
• resource/aws_rds_cluster: Add validation that availability_zones contains at most 3 items, failing at plan time instead of forcing a destructive replacement (#50014)

BUG FIXES:

• provider: Fixes error when parsing YAML documents with literal tab characters in double-quoted string (#50340)
• resource/aws_odb_autonomous_database_secrets_manager_integration: Avoid redundant disable requests when the integration is already absent or terminating (#48991)
• resource/aws_redshiftserverless_workgroup: Restores fully reading config_parameter when not specified (#50255)

6.67.0 (September 30, 2026)

NOTES:

• resource/aws_route53_record: Batched reads is experimental. The behavior may change without notice, and it is not subject to the backwards compatibility guarantee of the provider. (#48525)

FEATURES:

• New Ephemeral Resource: aws_bedrockruntime_apply_guardrail (#50155)
• New List Resource: aws_default_security_group (#50120)
• New List Resource: aws_directory_service_ip_route (#50138)
• New List Resource: aws_directoryservicedata_user (#50001)
• New List Resource: aws_ec2_transit_gateway_route_table_propagation (#50193)
• New Resource: aws_directory_service_ip_route (#50138)
• New Resource: aws_directory_service_ip_routes_exclusive (#50204)
• New Resource: aws_directoryservicedata_user (#50001)

ENHANCEMENTS:

... (truncated)

Commits

• c9b83d8 Merge pull request #50338 from hashicorp/prepare_release-6.68.0
• 90879e1 Update CHANGELOG.md for #50340
• 6da4cb9 Merge pull request #50340 from hashicorp/b-yaml-parsing-tab-in-double-quoted-...
• 8328602 Adds CHANGELOG entry
• 26f298d make clean-tidy
• efc5b90 Overrides github.com/goccy/go-yaml with fix for tabs in double-quoted strings
• fc88844 prepare v6.68.0 release
• ecdf649 Merge pull request #50337 from hashicorp/ci-fix-tools-cache-misspell
• cee766e ci: derive tools cache toolset from .ci/tools/main.go
• 75f1ecd Update CHANGELOG.md for #50334
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Superseded by #1711.