.changes/3.6.1.md

@@ -0,0 +1,9 @@
+## 3.6.1 (April 16, 2024)
+
+BUG FIXES:
+
+* all: Prevent `keepers` from triggering an in-place update following import ([#385](https://github.com/hashicorp/terraform-provider-random/issues/385))
+* resource/random_shuffle: Prevent inconsistent result after apply when result_count is set to 0 ([#409](https://github.com/hashicorp/terraform-provider-random/issues/409))
+* provider/random_password: Fix bug which causes panic when special, upper, lower and number/numeric are all false ([#551](https://github.com/hashicorp/terraform-provider-random/issues/551))
+* provider/random_string: Fix bug which causes panic when special, upper, lower and number/numeric are all false ([#551](https://github.com/hashicorp/terraform-provider-random/issues/551))
+

.github/dependabot.yml

@@ -12,3 +12,10 @@ updates:
     directory: "/tools"
     schedule:
       interval: "daily"
+  # Dependabot only updates hashicorp GHAs, external GHAs are managed by internal tooling (tsccr)
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "daily"
+    allow:
+      - dependency-name: "hashicorp/*"

.github/labeler-pull-request-triage.yml

@@ -1,6 +1,8 @@
 dependencies:
-  - .github/dependabot.yml
-  - go.mod
-  - go.sum
+  - changed-files:
+      - any-glob-to-any-file: .github/dependabot.yml
+      - any-glob-to-any-file: go.mod
+      - any-glob-to-any-file: go.sum
 documentation:
-  - docs/**/*
+  - changed-files:
+      - any-glob-to-any-file: website/**/*

.github/workflows/issue-opened.yml

@@ -9,7 +9,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
     - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
-    - uses: github/issue-labeler@6bea9ed491bb74fce38775b3d863e64a59dbd9eb # v3.3
+    - uses: github/issue-labeler@c1b0f9f52a63158c4adc09425e858e87b32e9685 # v3.4
       with:
         repo-token: "${{ secrets.GITHUB_TOKEN }}"
         configuration-path: .github/labeler-issue-triage.yml

.github/workflows/pull-request.yml

@@ -11,7 +11,7 @@ jobs:
   triage:
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/labeler@ac9175f8a1f3625fd0d4fb234536d26811351594 # v4.3.0
+    - uses: actions/labeler@8558fd74291d67161a8a78ce36a881fa63b766a9 # v5.0.0
       with:
         configuration-path: .github/labeler-pull-request-triage.yml
         repo-token: "${{ secrets.GITHUB_TOKEN }}"

.github/workflows/release.yml

@@ -89,7 +89,7 @@ jobs:
           cd .changes
           sed -e "1{/# /d;}" -e "2{/^$/d;}" ${{ needs.changelog-version.outputs.version }}.md > release-notes.txt
 
-      - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+      - uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
         with:
           name: release-notes
           path: ./.changes/release-notes.txt
@@ -100,7 +100,8 @@ jobs:
     needs: [ release-notes ]
     permissions:
       contents: write # Needed for goreleaser to create GitHub release
-    uses: hashicorp/ghaction-terraform-provider-release/.github/workflows/hashicorp.yml@01981baad5d35ce2342924e60ae91cf69fe31fd0 # v2.3.0
+      issues: write # Needed for goreleaser to close associated milestone
+    uses: hashicorp/ghaction-terraform-provider-release/.github/workflows/hashicorp.yml@9b5d2ca4b85f3a54d5c4d12e7690ddad1526ff6c # v3.0.1
     secrets:
       hc-releases-key-prod: '${{ secrets.HC_RELEASES_KEY_PROD }}'
       hc-releases-key-staging: '${{ secrets.HC_RELEASES_KEY_STAGING }}'

.github/workflows/test.yml

@@ -25,13 +25,13 @@ jobs:
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: Set up Go
-      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version-file: 'go.mod'
       id: go
 
     - name: Run linters
-      uses: golangci/golangci-lint-action@3a919529898de77ec3da873e3063ca4b10e7f5cc # v3.7.0
+      uses: golangci/golangci-lint-action@3cfe3a4abbb849e10058ce4af15d205b6da42804 # v4.0.0
       with:
         version: latest
 
@@ -65,13 +65,13 @@ jobs:
       uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
 
     - name: Setup Go
-      uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+      uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
       with:
         go-version-file: 'go.mod'
         check-latest: true
 
     - name: Setup Terraform ${{ matrix.terraform }}
-      uses: hashicorp/setup-terraform@633666f66e0061ca3b725c73b2ec20cd13a8fdd1 # v2.0.3
+      uses: hashicorp/setup-terraform@a1502cd9e758c50496cc9ac5308c4843bcd56d36 # v3.0.0
       with:
         terraform_version: ${{ matrix.terraform }}.*
         terraform_wrapper: false

.golangci.yml

@@ -22,4 +22,8 @@ linters:
     - unconvert
     - unparam
     - unused
-    - vet
+    - vet
+
+run:
+  # Prevent false positive timeouts in CI
+  timeout: 5m

CHANGELOG.md

@@ -1,3 +1,12 @@
+## 3.6.1 (April 16, 2024)
+
+BUG FIXES:
+
+* all: Prevent `keepers` from triggering an in-place update following import ([#385](https://github.com/hashicorp/terraform-provider-random/issues/385))
+* resource/random_shuffle: Prevent inconsistent result after apply when result_count is set to 0 ([#409](https://github.com/hashicorp/terraform-provider-random/issues/409))
+* provider/random_password: Fix bug which causes panic when special, upper, lower and number/numeric are all false ([#551](https://github.com/hashicorp/terraform-provider-random/issues/551))
+* provider/random_string: Fix bug which causes panic when special, upper, lower and number/numeric are all false ([#551](https://github.com/hashicorp/terraform-provider-random/issues/551))
+
 ## 3.6.0 (December 04, 2023)
 
 FEATURES:

README.md

@@ -26,7 +26,7 @@ The remainder of this document will focus on the development aspects of the prov
 ## Requirements
 
 * [Terraform](https://www.terraform.io/downloads) (>= 0.12)
-* [Go](https://go.dev/doc/install) (1.20)
+* [Go](https://go.dev/doc/install) (1.21)
 * [GNU Make](https://www.gnu.org/software/make/)
 * [golangci-lint](https://golangci-lint.run/usage/install/#local-installation) (optional)
 

docs/cdktf/python/index.md

@@ -79,4 +79,4 @@ Resource "keepers" are optional. The other arguments to each resource must
 
 To force a random result to be replaced, the `taint` command can be used to
 produce a new result on the next run.
-<!-- cache-key: cdktf-0.19.0 input-481e7e1d76d2dd9651b63f9879c24c591e04b1977a58673585b6ad657bd0e1fc 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-481e7e1d76d2dd9651b63f9879c24c591e04b1977a58673585b6ad657bd0e1fc -->

docs/cdktf/python/resources/bytes.md

@@ -6,12 +6,15 @@ page_title: "random_bytes Resource - terraform-provider-random"
 subcategory: ""
 description: |-
   The resource random_bytes generates random bytes that are intended to be used as a secret, or key. Use this in preference to random_id when the output is considered sensitive, and should not be displayed in the CLI.
+  This resource does use a cryptographic random number generator.
 ---
 
 # random_bytes (Resource)
 
 The resource `random_bytes` generates random bytes that are intended to be used as a secret, or key. Use this in preference to `random_id` when the output is considered sensitive, and should not be displayed in the CLI.
 
+This resource *does* use a cryptographic random number generator.
+
 ## Example Usage
 
 ```python
@@ -23,7 +26,7 @@ from cdktf import TerraformStack
 # See https://cdk.tf/provider-generation for more details.
 #
 from imports.azurerm.key_vault_secret import KeyVaultSecret
-from imports.random. import Bytes
+from imports.random.bytes import Bytes
 class MyConvertedCode(TerraformStack):
     def __init__(self, scope, name):
         super().__init__(scope, name)
@@ -55,7 +58,7 @@ class MyConvertedCode(TerraformStack):
 ### Read-Only
 
 - `base64` (String, Sensitive) The generated bytes presented in base64 string format.
-- `hex` (String, Sensitive) The generated bytes presented in hex string format.
+- `hex` (String, Sensitive) The generated bytes presented in lowercase hexadecimal string format. The length of the encoded string is exactly twice the `length` parameter.
 
 ## Import
 
@@ -66,4 +69,4 @@ Import is supported using the following syntax:
 terraform import random_bytes.basic "8/fu3q+2DcgSJ19i0jZ5Cw=="
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-3a420905eebef2639383ff9b2cb6272c60987fb763332d4f0c4ebc8e93d7dbbb 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-25dd9466f22fbe7d883503390ce1b83d66bac79809038270884f1aa9e1707016 -->

docs/cdktf/python/resources/id.md

@@ -103,4 +103,4 @@ terraform import random_id.server p-9hUg
 $ terraform import random_id.server my-prefix-,p-9hUg
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-5f91020093f3912bfcdaccf929f7d6b4f81c78dec85ef60164d34297667dd198 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-5f91020093f3912bfcdaccf929f7d6b4f81c78dec85ef60164d34297667dd198 -->

docs/cdktf/python/resources/integer.md

@@ -81,4 +81,4 @@ Import is supported using the following syntax:
 terraform import random_integer.priority 15390,1,50000
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-14468c71f20ebc7d2a161542108e1cc214b9ae4d6f2c5008aa55d67bf9354ebf 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-14468c71f20ebc7d2a161542108e1cc214b9ae4d6f2c5008aa55d67bf9354ebf -->

docs/cdktf/python/resources/password.md

@@ -180,4 +180,4 @@ class MyConvertedCode(TerraformStack):
     **NOTE** `ignore_changes` is only required until the resource is recreated after import,
     after which it will use the configuration values specified.
 
-<!-- cache-key: cdktf-0.19.0 input-679f2842bdae2deada09d08030e614f09c42f4d6c2a4a7861ed1b7a84f1ceeea 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-679f2842bdae2deada09d08030e614f09c42f4d6c2a4a7861ed1b7a84f1ceeea -->

docs/cdktf/python/resources/pet.md

@@ -59,4 +59,4 @@ class MyConvertedCode(TerraformStack):
 
 - `id` (String) The random pet name.
 
-<!-- cache-key: cdktf-0.19.0 input-6817a99fd74086b883ff0596b3649d0f6a3dcaab94e9dea42308adc5fa0fada5 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-6817a99fd74086b883ff0596b3649d0f6a3dcaab94e9dea42308adc5fa0fada5 -->

docs/cdktf/python/resources/shuffle.md

@@ -55,6 +55,6 @@ class MyConvertedCode(TerraformStack):
 ### Read-Only
 
 - `id` (String) A static value used internally by Terraform, this should not be referenced in configurations.
-- `result` (List of String) Random permutation of the list of strings given in `input`.
+- `result` (List of String) Random permutation of the list of strings given in `input`. The number of elements is determined by `result_count` if set, or the number of elements in `input`.
 
-<!-- cache-key: cdktf-0.19.0 input-86b1815d80e8e409f9aa5cc558980861275f4603260f1c637f82069bba22d88b 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-2f674577377923f143adace2c1eabb39c1d63d43adebb8be9f0a346d3b4ff0d0 -->

docs/cdktf/python/resources/string.md

@@ -168,4 +168,4 @@ class MyConvertedCode(TerraformStack):
 
     **NOTE** `ignore_changes` is only required until the resource is recreated after import,
     after which it will use the configuration values specified.
-<!-- cache-key: cdktf-0.19.0 input-54afc295b1f13e4a8837c027e2fd4b275761a58e02a58fa325f8460acce4ca8f 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-54afc295b1f13e4a8837c027e2fd4b275761a58e02a58fa325f8460acce4ca8f -->

docs/cdktf/python/resources/uuid.md

@@ -65,4 +65,4 @@ Import is supported using the following syntax:
 terraform import random_uuid.main aabbccdd-eeff-0011-2233-445566778899
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-28b6319e244b3425052c370a8691eaadb0c8a850033c058c030cffbcec995a1d 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-28b6319e244b3425052c370a8691eaadb0c8a850033c058c030cffbcec995a1d -->

docs/cdktf/typescript/index.md

@@ -82,4 +82,4 @@ Resource "keepers" are optional. The other arguments to each resource must
 
 To force a random result to be replaced, the `taint` command can be used to
 produce a new result on the next run.
-<!-- cache-key: cdktf-0.19.0 input-481e7e1d76d2dd9651b63f9879c24c591e04b1977a58673585b6ad657bd0e1fc 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-481e7e1d76d2dd9651b63f9879c24c591e04b1977a58673585b6ad657bd0e1fc -->

docs/cdktf/typescript/resources/bytes.md

@@ -6,11 +6,14 @@ page_title: "random_bytes Resource - terraform-provider-random"
 subcategory: ""
 description: |-
   The resource random_bytes generates random bytes that are intended to be used as a secret, or key. Use this in preference to random_id when the output is considered sensitive, and should not be displayed in the CLI.
+  This resource does use a cryptographic random number generator.
 ---
 
 # random_bytes (Resource)
 
-The resource `randomBytes` generates random bytes that are intended to be used as a secret, or key. Use this in preference to `randomId` when the output is considered sensitive, and should not be displayed in the CLI.
+The resource `random_bytes` generates random bytes that are intended to be used as a secret, or key. Use this in preference to `random_id` when the output is considered sensitive, and should not be displayed in the CLI.
+
+This resource *does* use a cryptographic random number generator.
 
 ## Example Usage
 
@@ -23,7 +26,7 @@ import { TerraformStack } from "cdktf";
  * See https://cdk.tf/provider-generation for more details.
  */
 import { KeyVaultSecret } from "./.gen/providers/azurerm/key-vault-secret";
-import { Bytes } from "./.gen/providers/random/";
+import { Bytes } from "./.gen/providers/random/bytes";
 class MyConvertedCode extends TerraformStack {
   constructor(scope: Construct, name: string) {
     super(scope, name);
@@ -62,7 +65,7 @@ class MyConvertedCode extends TerraformStack {
 ### Read-Only
 
 - `base64` (String, Sensitive) The generated bytes presented in base64 string format.
-- `hex` (String, Sensitive) The generated bytes presented in hex string format.
+- `hex` (String, Sensitive) The generated bytes presented in lowercase hexadecimal string format. The length of the encoded string is exactly twice the `length` parameter.
 
 ## Import
 
@@ -73,4 +76,4 @@ Import is supported using the following syntax:
 terraform import random_bytes.basic "8/fu3q+2DcgSJ19i0jZ5Cw=="
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-3a420905eebef2639383ff9b2cb6272c60987fb763332d4f0c4ebc8e93d7dbbb 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-25dd9466f22fbe7d883503390ce1b83d66bac79809038270884f1aa9e1707016 -->

docs/cdktf/typescript/resources/id.md

@@ -21,9 +21,9 @@ description: |-
 
 # random_id (Resource)
 
-The resource `randomId` generates random numbers that are intended to be
+The resource `random_id` generates random numbers that are intended to be
 used as unique identifiers for other resources. If the output is considered 
-sensitive, and should not be displayed in the CLI, use `randomBytes`
+sensitive, and should not be displayed in the CLI, use `random_bytes`
 instead.
 
 This resource *does* use a cryptographic random number generator in order
@@ -32,7 +32,7 @@ when a 16-byte identifier is requested of equivalent uniqueness to a
 type-4 UUID.
 
 This resource can be used in conjunction with resources that have
-the `createBeforeDestroy` lifecycle flag set to avoid conflicts with
+the `create_before_destroy` lifecycle flag set to avoid conflicts with
 unique names during the brief period where both the old and new resources
 exist concurrently.
 
@@ -106,4 +106,4 @@ terraform import random_id.server p-9hUg
 $ terraform import random_id.server my-prefix-,p-9hUg
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-5f91020093f3912bfcdaccf929f7d6b4f81c78dec85ef60164d34297667dd198 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-5f91020093f3912bfcdaccf929f7d6b4f81c78dec85ef60164d34297667dd198 -->

docs/cdktf/typescript/resources/integer.md

@@ -11,9 +11,9 @@ description: |-
 
 # random_integer (Resource)
 
-The resource `randomInteger` generates random values from a given range, described by the `min` and `max` attributes of a given resource.
+The resource `random_integer` generates random values from a given range, described by the `min` and `max` attributes of a given resource.
 
-This resource can be used in conjunction with resources that have the `createBeforeDestroy` lifecycle flag set, to avoid conflicts with unique names during the brief period where both the old and new resources exist concurrently.
+This resource can be used in conjunction with resources that have the `create_before_destroy` lifecycle flag set, to avoid conflicts with unique names during the brief period where both the old and new resources exist concurrently.
 
 ## Example Usage
 
@@ -89,4 +89,4 @@ Import is supported using the following syntax:
 terraform import random_integer.priority 15390,1,50000
 ```
 
-<!-- cache-key: cdktf-0.19.0 input-14468c71f20ebc7d2a161542108e1cc214b9ae4d6f2c5008aa55d67bf9354ebf 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-14468c71f20ebc7d2a161542108e1cc214b9ae4d6f2c5008aa55d67bf9354ebf -->

docs/cdktf/typescript/resources/password.md

@@ -51,7 +51,7 @@ class MyConvertedCode extends TerraformStack {
 
 ### Required
 
-- `length` (Number) The length of the string desired. The minimum value for length is 1 and, length must also be >= (`min_upper` + `min_lower` + `min_numeric` + `min_special`).
+- `length` (Number) The length of the string desired. The minimum value for length is 1 and, length must also be >= (`minUpper` + `minLower` + `minNumeric` + `minSpecial`).
 
 ### Optional
 
@@ -69,7 +69,7 @@ class MyConvertedCode extends TerraformStack {
 
 ### Read-Only
 
-- `bcryptHash` (String, Sensitive) A bcrypt hash of the generated random string. **NOTE**: If the generated random string is greater than 72 bytes in length, `bcrypt_hash` will contain a hash of the first 72 bytes.
+- `bcryptHash` (String, Sensitive) A bcrypt hash of the generated random string. **NOTE**: If the generated random string is greater than 72 bytes in length, `bcryptHash` will contain a hash of the first 72 bytes.
 - `id` (String) A static value used internally by Terraform, this should not be referenced in configurations.
 - `result` (String, Sensitive) The generated random string.
 
@@ -165,7 +165,7 @@ class MyConvertedCode extends TerraformStack {
 ```
 
 
-3. `ignoreChanges` specifying the attributes to ignore:
+3. `ignore_changes` specifying the attributes to ignore:
 
     ```typescript
 // DO NOT EDIT. Code generated by 'cdktf convert' - Please report bugs at https://cdk.tf/bug
@@ -194,4 +194,4 @@ class MyConvertedCode extends TerraformStack {
     **NOTE** `ignore_changes` is only required until the resource is recreated after import,
     after which it will use the configuration values specified.
 
-<!-- cache-key: cdktf-0.19.0 input-679f2842bdae2deada09d08030e614f09c42f4d6c2a4a7861ed1b7a84f1ceeea 556251879b8ed0dc4c87a76b568667e0ab5e2c46efdd14a05c556daf05678783-->
+<!-- cache-key: cdktf-0.20.1 input-679f2842bdae2deada09d08030e614f09c42f4d6c2a4a7861ed1b7a84f1ceeea -->