chore(deps): bump cloudflare/cloudflare from 5.11.0 to 5.13.0

[dependabot]

Bumps cloudflare/cloudflare from 5.11.0 to 5.13.0.

Release notes

Sourced from cloudflare/cloudflare's releases.

v5.13.0

5.13.0 (2025-11-21)

Full Changelog: v5.12.0...v5.13.0

⚠ BREAKING CHANGES: cloudflare_api_token & cloudflare_account_token Schema Update

The 5.13 release includes major updates to the cloudflare_api_token resource to eliminate configuration drift caused by policy ordering differences in the Cloudflare API.

Fixes: cloudflare/terraform-provider-cloudflare#6092

Whats changed

• policies are now a Set; order is ignored to prevent drift.
• When defining a policy, resources must use jsonencode(); all policy resource values must now be JSON-encoded strings.
• Removed fields: id, name, and meta have been removed from policy blocks.

Required Action (v5.13+) Customers looking to upgrade to v5.13+ must update all cloudflare_api_token & cloudflare_account_token resources to wrap policy resource values in jsonencode()

Before:

resources = {
  "com.cloudflare.api.account.${var.cf_account_id}" = "*"
}

After:

resources = jsonencode({
  "com.cloudflare.api.account.${var.cf_account_id}" = "*"
})

• account_token: token policy order and nested resources (#6440)

Features

• add new resources and data sources (7ce3dec)
• api_token+account_tokens: state upgrader and schema bump (#6472) (42f7db2)
• chore(build): point Terraform to released Go v6.3.0 (6d06b46)
• docs: make docs explicit when a resource does not have import support (02699f6)
• magic_transit_connector: support self-serve license key (#6398) (a6ec134)
• worker_version: add content_base64 support (6ff643f)
• worker_version: boolean support for run_worker_first (#6407) (116a67b)
• workers_script_subdomains: add import support (#6375) (40f7ed8)
• zero_trust_access_application: add proxy_endpoint for ZT Access Application (#6453) (177f20a)
• zero_trust_dlp_predefined_profile: Switch DLP Predefined Profile endpoints, introduce enabled_entries attribute (bc69569)
• zero_trust_tunnel_cloudflared: v4 to v5 migration tests (#6461) (ffa0fef)

Bug Fixes

... (truncated)

Changelog

Sourced from cloudflare/cloudflare's changelog.

5.13.0 (2025-11-21)

Full Changelog: v5.12.0...v5.13.0

⚠ BREAKING CHANGES: cloudflare_api_token & cloudflare_account_token Schema Update

The 5.13 release includes major updates to the cloudflare_api_token resource to eliminate configuration drift caused by policy ordering differences in the Cloudflare API.

Fixes: cloudflare/terraform-provider-cloudflare#6092

Whats changed

• policies are now a Set; order is ignored to prevent drift.
• When defining a policy, resources must use jsonencode(); all policy resource values must now be JSON-encoded strings.
• Removed fields: id, name, and meta have been removed from policy blocks.

Required Action (v5.13+) Customers looking to upgrade to v5.13+ must update all cloudflare_api_token & cloudflare_account_token resources to wrap policy resource values in jsonencode()

Before:

resources = {
  "com.cloudflare.api.account.${var.cf_account_id}" = "*"
}

After:

resources = jsonencode({
  "com.cloudflare.api.account.${var.cf_account_id}" = "*"
})

• account_token: token policy order and nested resources (#6440)

Features

• add new resources and data sources (7ce3dec)
• api_token+account_tokens: state upgrader and schema bump (#6472) (42f7db2)
• chore(build): point Terraform to released Go v6.3.0 (6d06b46)
• docs: make docs explicit when a resource does not have import support (02699f6)
• magic_transit_connector: support self-serve license key (#6398) (a6ec134)
• worker_version: add content_base64 support (6ff643f)
• worker_version: boolean support for run_worker_first (#6407) (116a67b)
• workers_script_subdomains: add import support (#6375) (40f7ed8)
• zero_trust_access_application: add proxy_endpoint for ZT Access Application (#6453) (177f20a)
• zero_trust_dlp_predefined_profile: Switch DLP Predefined Profile endpoints, introduce enabled_entries attribute (bc69569)
• zero_trust_tunnel_cloudflared: v4 to v5 migration tests (#6461) (ffa0fef)

Bug Fixes

... (truncated)

Commits

• 9cc9eee release: 5.13.0 (#6397)
• 057b6a7 release: 5.12.0 (#6292)
• e694bcf Update CHANGELOG.md
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)