chore(deps): update terraform cloudflare to v5.25.0

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
cloudflare (source)	required_provider	minor	5.24.0 → 5.25.0

---

Release Notes

cloudflare/terraform-provider-cloudflare (cloudflare)

v5.25.0

Compare Source

Full Changelog: v5.24.0...v5.25.0

Features

New Resources

• cloudflare_email_security_allow_policy: Cloud Email Security Allow Policy
• cloudflare_email_security_domain: Cloud Email Security Domain
• cloudflare_email_sending_subdomain: Email Sending Subdomain
• cloudflare_nel_setting: Network Error Logging Zone Setting
• cloudflare_zero_trust_resource_library_application: Zero Trust Resource Library Application

New Data Sources

• cloudflare_email_security_allow_policy: Cloud Email Security Allow Policy
• cloudflare_email_security_allow_policies: Cloud Email Security Allow Policies (list)
• cloudflare_email_security_domain: Cloud Email Security Domain
• cloudflare_email_security_domains: Cloud Email Security Domains (list)
• cloudflare_email_sending_subdomain: Email Sending Subdomain
• cloudflare_email_sending_subdomains: Email Sending Subdomains (list)
• cloudflare_nel_setting: Network Error Logging Zone Setting
• cloudflare_spectrum_protocols: Spectrum Protocols (list)

New Attributes

• cloudflare_ai_search_instance
  • aisearch_model: Workers AI model for AI search queries
  • embedding_model: Model used to generate text embeddings
  • reranking_model: Model used to rerank search results
  • rewrite_model: Workers AI model for query rewriting
  • summarization_model: Model used to summarize search results
• cloudflare_bot_management
  • bot_preference_sync_enabled: Sync bot preferences from AI Search, AI User, and AI Training zone settings
• cloudflare_content_scanning_expression
  • payload: Custom content extraction expression to locate content objects in requests
• cloudflare_email_routing_dns
  • support_subaddress: Whether plus-addressing is honored when matching routing rules
• cloudflare_magic_transit_connector
  • primary: Whether this connector is the primary connector for the site
  • site_id: Identifier of the Magic Transit site this connector belongs to
• cloudflare_oauth_client
  • optional_scopes: Scopes a user may decline during OAuth consent
• cloudflare_organization
  • account_creation_applies_tenant_defaults: Whether tenant defaults apply to newly created accounts
• cloudflare_pipeline_sink
  • format: Output data format configuration for the sink
  • schema: Schema definition for events in the data stream
• cloudflare_pipeline_stream
  • format: Data format configuration for stream events
  • schema: Schema definition for events in the data stream
• cloudflare_ruleset
  • origin_range_requests: Fetch large origin assets as a series of range requests
  • vary: Cache variation key configuration for set_cache_settings action
• cloudflare_stream_live_input
  • playback: HLS and DASH manifest URLs for live stream playback
• cloudflare_worker_version
  • identity: Enables Gateway identity for network bindings
• cloudflare_workers_kv_namespace
  • jurisdiction: Restrict KV data storage to a specific jurisdiction at creation time
• cloudflare_workers_script
  • files: Multipart WASM modules and binary files included in the Worker upload
• cloudflare_workflow
  • concurrency: Concurrency limit and active instance count for the workflow
• cloudflare_zero_trust_access_group
  • account_id: Account that owns the device posture integration (in posture sub-rules)
• cloudflare_zero_trust_access_identity_provider
  • force_authn: Asks the IdP to reauthenticate on each SAML request
  • max_sso_url_length: Maximum URL length accepted for SSO redirect

Bug Fixes

• bot_management: mark bot_preference_sync_enabled optional-only; Computed caused "unknown after apply" errors
• custom_pages: Update causing inconsistent apply results
• email_routing_dns: data source not returning any data (#​7130)
• email_security_block_sender: mark account_id as required in data sources
• image: fix create/update marshaling errors
• magic_transit_connector: add missing primary and site_id fields; mark account_id as required in data sources
• registrar_domain: mark account_id as required in list data source
• worker_version: correct response binding order to prevent plan drift (#​7115)
• set schema Version: 500 on new resources to enable correct state upgrade path

---

Configuration

📅 Schedule: (in timezone Europe/Amsterdam)

• Branch creation
  • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.