chore(deps): update hashicorp/vault requirement from ~> 4.0 to ~> 5.10 in /terraform

[dependabot]

Updates the requirements on hashicorp/vault to permit the latest version.

Release notes

Sourced from hashicorp/vault's releases.

v5.10.1

5.10.1 (June 26, 2026)

BREAKING CHANGES:

Reverted the 5.10.0 support for pkcs12_bundle and jks_bundle formats in formats in vault_pki_secret_backend_cert, vault_pki_secret_backend_root_cert, vault_pki_secret_backend_root_sign_intermediate, and vault_pki_secret_backend_sign that forced resource recreation. Configurations using these formats or their related arguments are no longer supported. (#2945)

Changelog

Sourced from hashicorp/vault's changelog.

5.10.1 (June 26, 2026)

BREAKING CHANGES:

Reverted the 5.10.0 support for pkcs12_bundle and jks_bundle formats in formats in vault_pki_secret_backend_cert, vault_pki_secret_backend_root_cert, vault_pki_secret_backend_root_sign_intermediate, and vault_pki_secret_backend_sign that forced resource recreation. Configurations using these formats or their related arguments are no longer supported. (#2945)

5.10.0 (June 23, 2026)

FEATURES:

• New Resource: vault_config_ui_default_auth - Manages UI default authentication configuration for the Vault GUI login form. Controls which authentication methods are displayed by default and as backup options for specific namespaces. Supports inheritance control for child namespaces. Enterprise-only feature requiring Vault 1.20.0+. (#2846)
• vault_config_control_group: Added initial implementation for vault_config_control_group resource in sys/config/control-group. (#2840)
• New Resource: vault_config_ui_header - Manages custom HTTP headers for the Vault UI. Supports security headers (CSP, HSTS, X-Frame-Options), CORS configuration, and custom organizational headers. Requires Vault 1.16.0+. (#2842)
• New Resource: Add support for RADIUS auth backend: vault_radius_auth_backend and vault_radius_auth_backend_user resource and vault_radius_auth_login ephemeral resource.(#2814)
• New Resource: vault_activation_flags for managing Vault features that are gated by one-time flags. Requires Vault 1.16 or later. Needs Vault enterprise license(#2861)
• New Resource: vault_oauth_resource_server_config_profile for managing OAuth Resource Server Configuration profiles in Vault Enterprise. Enables JWT-based authentication by defining how Vault validates JWT tokens from OAuth 2.0 resource servers. Supports both JWKS-based and static PEM key validation. Requires Vault 2.0.1+. (#2890)
• New Resource: vault_agent_registrationfor managing Agent Registry records in Vault Enterprise. Allows registering Vault agents with specific identity entities and configuring ceiling policies that limit maximum agent permissions. Requires Vault 2.0.1+. (#2885,2935)
• New Resource: vault_oauth_resource_server_config_profile Add optional_authorization_details to make RAR optional on OAuth resource server and agent registration. Requires Vault 2.0.3+.(#2930,#2933)
• New Resources: vault_userpass_auth_backend_user for user creation, deletion, password updates, and policy updates, and ephemeral resource vault_userpass_auth_login for authenticating with Userpass. (#2859)
• Add support for write only parameters for s3 backends for vault_raft_snapshot_agent_config by @​drewmullen ([#2825]hashicorp/terraform-provider-vault#2825)
• vault_transform_transformation: Added mapping_mode, stores and convergent fields to the resource. (#2820 hashicorp/terraform-provider-vault#2820)
• New Ephemeral Resource: vault_token for creating Vault tokens with automatic revocation. Supports service and batch tokens, as well as entity alias association, which was not supported in the SDKv2 resource. (#2877)
• New Resource: vault_config_group_policy_application - Manages the global group policy application mode for Vault Enterprise. Controls how policies attached to identity groups are applied across namespace boundaries. Supports within_namespace_hierarchy (default) and any modes. Requires Vault Enterprise 1.13.8+. (#2863)
• Add support for pkcs12_bundle and jks_bundle formats in vault_pki_secret_backend_cert, vault_pki_secret_backend_root_cert, vault_pki_secret_backend_root_sign_intermediate, and vault_pki_secret_backend_sign (#2908). Requires Vault 2.1+.
• vault_policy: Added allow_overwrite to optionally prevent overwriting Vault policies.(#2895)
• vault_managed_keys: Added support for usages and max_parallel fields. (#2887)

IMPROVEMENTS:

• resource/vault_token: Added deprecation warning to guide users toward the new ephemeral vault_token resource for better security and batch token support. (#2877)

• Migrated AWS provider dependency from aws-sdk-go (v1) to aws-sdk-go-v2 for improved performance and maintainability. (#2882)

• Replaced backend with mount in vault_aws_access_credentials resource's documentation and improved descriptions for a few other parameters.(#2911)

• Updated dependencies:

  • cloud.google.com/go/iam v1.9.0 -> v1.11.0
  • github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1 -> v1.22.0
  • github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 -> v1.14.0
  • github.com/Azure/go-ntlmssp v0.1.0 -> v0.1.1
  • github.com/aws/aws-sdk-go-v2 v1.41.6 -> v1.42.0
  • github.com/aws/aws-sdk-go-v2/service/iam v1.53.8 -> v1.54.5
  • github.com/aws/aws-sdk-go-v2/service/sts v1.42.0 -> v1.43.3
  • github.com/aws/smithy-go v1.25.0 -> v1.27.2
  • github.com/go-sql-driver/mysql v1.9.3 -> v1.10.0
  • github.com/hashicorp/consul/api v1.34.1 -> v1.34.3
  • github.com/hashicorp/terraform-plugin-sdk/v2 v2.40.0 -> v2.40.1
  • github.com/hashicorp/terraform-plugin-testing v1.15.0 -> v1.16.0
  • github.com/hashicorp/vault-plugin-auth-jwt v0.26.1 -> v0.26.3
  • github.com/jackc/pgx/v5 v5.9.1 -> v5.9.2
  • github.com/moby/moby/client v0.4.1 -> v0.5.0

... (truncated)

Commits

• fa0a334 Prepare for v5.10.1 patch release (#2948)
• e822881 Remove PKCS12 and JKS fields to fix forced recreating pki resources (#2945)
• 51ccf1f Prepare for v5.10.0 release of Terraform Vault Provider (#2938)
• 04f7af3 build(deps): bump the gomod-backward-compatible group with 4 updates (#2937)
• 769c662 Add Owner Field to Agent Registrations (#2935)
• 0dac306 VAULT-45590: fix agent registration text formatting (#2933)
• 0e5a3ee VAULT-45590: add rar support for agent and oauth (#2930)
• d4d9f11 build(deps): bump the gomod-backward-compatible group with 7 updates (#2928)
• 0732588 Implement OAuth Resource Server Configuration Profile resource (#2890)
• 4992990 TFVP: implement support for Agent Registry (#2885)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Labels

The following labels could not be found: dependencies, terraform. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.