Bump cloudflare/cloudflare from 5.17.0 to 5.18.0 in /terraform

[dependabot]

Bumps cloudflare/cloudflare from 5.17.0 to 5.18.0.

Release notes

Sourced from cloudflare/cloudflare's releases.

v5.18.0

5.18.0 (2026-02-28)

Full Changelog: v5.17.0...v5.18.0

Features

New Resources

• cloudflare_client_certificate: add new resource for managing zone-level client certificates used in mutual TLS (mTLS) authentication
• cloudflare_custom_origin_trust_store: add new resource for managing custom CA certificates in a zone's origin trust store
• cloudflare_zero_trust_dex_rule: add new resource for managing Zero Trust DEX (Digital Experience Monitoring) rules that target WARP client network tests via wirefilter expressions
• cloudflare_zero_trust_gateway_pacfile: add new resource for managing Zero Trust Gateway PAC (Proxy Auto-Configuration) files including contents, slug, and download URL

New Data Sources

• cloudflare_client_certificate: add new data source to read a single client certificate by ID
• cloudflare_client_certificates: add new data source to list client certificates for a zone with status, limit, and offset filtering
• cloudflare_custom_origin_trust_store: add new data source to read a single custom origin trust store certificate
• cloudflare_custom_origin_trust_stores: add new data source to list custom origin trust store certificates for a zone
• cloudflare_zero_trust_dex_rule: add new data source to read a single Zero Trust DEX rule by account and rule ID
• cloudflare_zero_trust_dex_rules: add new data source to list Zero Trust DEX rules with filtering by name and sorting options
• cloudflare_zero_trust_gateway_pacfile: add new data source to read a single Zero Trust Gateway PAC file
• cloudflare_zero_trust_gateway_pacfiles: add new data source to list all Zero Trust Gateway PAC files for an account

New Attributes

• cloudflare_ai_search_instance: add fusion_method attribute to control hybrid search result fusion strategy (max or rrf)
• cloudflare_ai_search_instance: add retrieval_options block with keyword_match_mode to control keyword search matching behavior (exact_match or fuzzy_match)
• cloudflare_ai_search_instance: add description attribute under public_endpoint_params block
• cloudflare_ai_search_instance: expand model enumerations for aisearch_model, rewrite_model, and summarization_model with new options
• cloudflare_certificate_pack: add dcv_delegation_records read-only block exposing DCV delegation CNAME, email, HTTP, and TXT validation record details
• cloudflare_certificate_pack: add cname, cname_target, and status fields to validation_records nested block
• cloudflare_custom_ssl: add deploy optional attribute to specify deployment environment (staging or production)
• cloudflare_page_shield_policy: add "add_reporting_directives" as a valid value for the action attribute
• cloudflare_ruleset: add "http_response_cache_settings" phase and new "set_cache_control" / "set_cache_tags" rule actions
• cloudflare_ruleset: add action_parameters.strip_etags, action_parameters.strip_last_modified, and action_parameters.strip_set_cookie boolean attributes for cache header control
• cloudflare_ruleset: add full suite of HTTP Cache-Control directive attributes under action_parameters (immutable, max_age, must_revalidate, no_cache, no_store, private, public, s_maxage, stale_if_error, stale_while_revalidate, and more)
• cloudflare_stream_live_input: add enabled boolean attribute to control whether the live input can accept streams
• cloudflare_worker_version: add bindings.outbound.worker.entrypoint string attribute for specifying the outbound worker entrypoint
• cloudflare_zero_trust_access_application: add policies.connection_rules.rdp block with allowed_clipboard_local_to_remote_formats and allowed_clipboard_remote_to_local_formats for RDP clipboard control
• cloudflare_zero_trust_access_policy: add connection_rules.rdp block with allowed_clipboard_local_to_remote_formats and allowed_clipboard_remote_to_local_formats for RDP clipboard control
• cloudflare_zero_trust_access_policy: add mfa_config block with allowed_authenticators, mfa_bypass, and session_duration for per-policy MFA configuration
• cloudflare_zero_trust_dlp_custom_entry: add optional description attribute
• cloudflare_zero_trust_dlp_custom_profile: add shared_entries attribute list as the replacement for the now-deprecated entries attribute, with richer schema including description, variant, word_list, and expanded type enum
• cloudflare_zero_trust_dlp_entry: add optional description attribute
• cloudflare_zero_trust_dlp_integration_entry: add description attribute
• cloudflare_zero_trust_dlp_predefined_entry: add description attribute
• cloudflare_zero_trust_organization: add mfa_config block (allowed_authenticators, session_duration) for organization-level MFA configuration
• cloudflare_zero_trust_organization: add mfa_configuration_allowed boolean to indicate if the organization can enforce MFA at the application or policy level

... (truncated)

Changelog

Sourced from cloudflare/cloudflare's changelog.

5.18.0 (2026-03-01)

Full Changelog: v5.17.0...v5.18.0

Features

• access_rule: support state upgraders for migration (67fd741)
• api_shield_operation: state upgrader (ecd51d4)
• api_token: state upgrader (ac5eb62)
• authenticated_origin_pulls_certificate: v4 to v5 migration (8d9930d)
• bot_management: state upgrader (4d9ee27)
• chore: clean up removed endpoint from config (52f120d)
• chore: update cloudflare-go dependency to next (c92a4cb)
• chore: use Go SDK v6.8.0 for release (b695914)
• feat: GIN-1439: Add gateway PAC files (9de415f)
• feat(client_certificate): enable terraform for client_certificates (58f6a08)
• feat(custom_origin_trust_store): enable custom_origin_trust_store (1c0f313)
• feat(stainless): AUTH-7071 Complete Access Users endpoint (2d4101d)
• fix: add 'rdp' as an initialism (9aa6e67)
• list_item: state upgrader (70b70c5)
• list: state upgrader (41def2f)
• logpull_retention: support state upgrader #6754 (78409e1)
• logpush_job: support state upgrader (275efd5)
• managed_transforms: state upgrader (8de2938)
• notication_policy: state upgrader (dbcbda8)
• regional_hostname: state upgrader (ed98d9e)
• ruleset: add new actions for http_response_cache_settings phase (beeb49e)
• snippet_rules: use state upgrade (91a7d1a)
• snippet: use state upgrade (dbc8107)
• spectrum_application: state upgrader (0957f09)
• state upgrader (bbd68e0)
• url_normalization_settings: state upgrader (f933791)
• workers_kv_namespace: add state upgrader logic (695a1e1)
• workers_route: implement state upgrader (cef2a35)
• workers_script: implement state upgrader and move state (f7e20f8)
• zero_trust_access_application: state upgrader (5427fd9)
• zero_trust_access_group: add state upgrader logic and tests (5d0c09f)
• zero_trust_access_identity_provider: state upgraders (c8c88f0)
• zero_trust_access_mtls_certificate: state upgraders (15c5b8e)
• zero_trust_access_mtls_hostname_settings: state upgraders (fe7a900)
• zero_trust_device_managed_networks: state upgrader (0ee822f)
• zero_trust_device_posture_rule: state upgrader (e4bdf6b)
• zero_trust_dex_test: state upgrader (4b61d73)
• zero_trust_dlp_custom_profile: state upgrader (ca47a4d)
• zero_trust_dlp_entries: feat no-op state upgraders (808c706)
• zero_trust_dlp_predefined_profile: state upgrader (71278f0)
• zero_trust_gateway_policy: state upgrader (cb4ff67)
• zero_trust_list: implement state upgrader (5134e5c)
• zero_trust_tunnel_cloudflared_config: support state upgrader (a79e6ea)
• zero_trust_tunnel_cloudflared_route: state upgrader (40289a3)

... (truncated)

Commits

• 7f7c3b0 Merge pull request #6758 from cloudflare/release-please--branches--main--chan...
• 56c2ab9 release: 5.18.0
• 2045424 test: skip schema/model parity test
• 0de37fa test: skip schema/model parity test
• 8d42bef test(load_balancer_pool): fix schema change causing regression with non-empty...
• 6b459d5 docs: update docs again for v5.18.0
• 930820f Merge pull request #6791 from dt-dtran/dianatran/fix_aop_model_schema
• 4e2a5a6 Merge pull request #6725 from christhorwarth/ct/iac-352-workers-binding-json
• d98474e docs: update docs for v5.18.0
• b48fe0d test(certificate_pack): add skip caused by inconsistent API response
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

👋 Thanks for opening a pull request!

If you are new, please check out the deployment process to understand how to deploy this pull request. A trimmed down summary will be listed below:

1. 🧪 Run a noop deployment with .noop as a comment on this PR

2. 👀 Observe the CI and noop output on this pull request to ensure it is passing and doing what it is supposed to do

3. ✔️ Obtain an approval/review on this pull request

4. 🚀 Branch deploy your pull request to production with .deploy

   If anything goes wrong, rollback with .deploy main

5. 🎉 Merge!

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.