build(deps): bump hashicorp/setup-terraform from 3 to 4

[dependabot]

Bumps hashicorp/setup-terraform from 3 to 4.

Release notes

Sourced from hashicorp/setup-terraform's releases.

v4.0.0

BREAKING CHANGES:

• Upgrade to Node.js 24 - setup-terraform now requires Node.js 24 (#503)

v3.1.2

NOTES:

• This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

v3.1.1

BUG FIXES:

• wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)

v3.1.0

ENHANCEMENTS:

• Automatically fallback to darwin/amd64 for Terraform versions before 1.0.2 as releases for darwin/arm64 are not available (#409)

Changelog

Sourced from hashicorp/setup-terraform's changelog.

4.0.0 (2026-02-24)

BREAKING CHANGES:

• Upgrade to Node.js 24 - setup-terraform now requires Node.js 24 (#503)

3.1.2 (2024-08-19)

NOTES:

• This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#430)

3.1.1 (2024-05-07)

BUG FIXES:

• wrapper: Fix wrapper to output to stdout and stderr immediately when data is received (#395)

Commits

• dfe3c3f Update package version
• 61e02cf Update changelog
• 36079f9 fix: update @​hashicorp/js-releases to v1.7.7 to resolve Node 24 DEP0169 warni...
• af2ccf2 update axios brace expansion flatted picomatch (#551)
• 5b1ab0e Bump follow-redirects from 1.15.11 to 1.16.0 (#542)
• ca190bf Bump miniscruff/changie-action in the github-actions group (#541)
• 30128a2 chore: update CI node version from 20 to 24 (#544)
• b0cc02d Bump undici from 6.23.0 to 6.24.1 (#539)
• 3d7cd03 Update README.md with latest versions (#536)
• fa68287 Bump actions/setup-node from 6.2.0 to 6.3.0 in the github-actions group (#537)
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[lopes]

@dependabot recreate

[github-actions]

Terraform plan: changes proposed

Applying is manual and local — merging this PR will not change the zone.

cloudflare_zone_setting.min_tls_version: Refreshing state... [id=min_tls_version]
cloudflare_pages_domain.preview: Refreshing state... [id=preview.lopes.id]
cloudflare_zone_setting.ssl: Refreshing state... [id=ssl]
cloudflare_zone_setting.early_hints: Refreshing state... [id=early_hints]
cloudflare_dns_record.apex: Refreshing state... [id=8036dd8f5b70808e342b38f3df0d6451]
cloudflare_dns_record.preview: Refreshing state... [id=9a411dab9ff4547230f1bf6740a073c6]
cloudflare_bot_management.this: Refreshing state... [id=999b09058bdb5b7ca4a86a232cc9ea20]
cloudflare_dns_record.www: Refreshing state... [id=d9bb6328be517396ca940855f08de896]
cloudflare_zero_trust_access_application.pages_preview: Refreshing state... [id=6086a62f-bafb-4823-8bd5-e157c267e04a]
cloudflare_ruleset.firewall_custom: Refreshing state... [id=fd6f0bdb020d4540a1d6c274f0ddeebd]
cloudflare_zone_setting.always_use_https: Refreshing state... [id=always_use_https]
cloudflare_dns_record.atproto: Refreshing state... [id=2ddd511562e825a340c58131acf56e3a]
cloudflare_zero_trust_access_policy.pages_preview_otp: Refreshing state... [id=5c1f64ba-2959-45df-9794-f2bf87570beb]

Terraform used the selected providers to generate the following execution
plan. Resource actions are indicated with the following symbols:
  - destroy

Terraform will perform the following actions:

  # cloudflare_dns_record.preview will be destroyed
  # (because cloudflare_dns_record.preview is not in configuration)
  - resource "cloudflare_dns_record" "preview" {
      - comment             = "PR preview environment (Access OTP protected)" -> null
      - comment_modified_on = "2026-09-28T21:14:17Z" -> null
      - content             = "preview.lopes-id.pages.dev" -> null
      - created_on          = "2026-09-28T21:14:17Z" -> null
      - id                  = "9a411dab9ff4547230f1bf6740a073c6" -> null
      - meta                = jsonencode({})
      - modified_on         = "2026-09-28T21:14:17Z" -> null
      - name                = "preview.lopes.id" -> null
      - proxiable           = true -> null
      - proxied             = true -> null
      - settings            = {
          - flatten_cname = false -> null
          - ipv4_only     = false -> null
          - ipv6_only     = false -> null
        } -> null
      - tags                = [] -> null
      - ttl                 = 1 -> null
      - type                = "CNAME" -> null
      - zone_id             = "999b09058bdb5b7ca4a86a232cc9ea20" -> null
    }

  # cloudflare_pages_domain.preview will be destroyed
  # (because cloudflare_pages_domain.preview is not in configuration)
  - resource "cloudflare_pages_domain" "preview" {
      - account_id            = "78f5f76d6be764ad7fc4a1c91246615c" -> null
      - certificate_authority = "google" -> null
      - created_on            = "2026-09-28T21:14:18.223871Z" -> null
      - domain_id             = "c994a978-571c-46e9-b801-e819d9258b34" -> null
      - id                    = "preview.lopes.id" -> null
      - name                  = "preview.lopes.id" -> null
      - project_name          = "lopes-id" -> null
      - status                = "active" -> null
      - validation_data       = {
          - method = "http" -> null
          - status = "active" -> null
        } -> null
      - verification_data     = {
          - status = "active" -> null
        } -> null
      - zone_tag              = "999b09058bdb5b7ca4a86a232cc9ea20" -> null
    }

  # cloudflare_zero_trust_access_application.pages_preview will be destroyed
  # (because cloudflare_zero_trust_access_application.pages_preview is not in configuration)
  - resource "cloudflare_zero_trust_access_application" "pages_preview" {
      - account_id                 = "78f5f76d6be764ad7fc4a1c91246615c" -> null
      - app_launcher_visible       = true -> null
      - aud                        = "05450ffb98f67fcd4ff26b6219fc8bbc61c1f08459982891d020865d8004cf69" -> null
      - auto_redirect_to_identity  = false -> null
      - destinations               = [
          - {
              - type = "public" -> null
              - uri  = "*.lopes-id.pages.dev" -> null
            },
          - {
              - type = "public" -> null
              - uri  = "lopes-id.pages.dev" -> null
            },
          - {
              - type = "public" -> null
              - uri  = "preview.lopes.id" -> null
            },
        ] -> null
      - domain                     = "*.lopes-id.pages.dev" -> null
      - enable_binding_cookie      = false -> null
      - http_only_cookie_attribute = true -> null
      - id                         = "6086a62f-bafb-4823-8bd5-e157c267e04a" -> null
      - name                       = "lopes-id - Cloudflare Pages" -> null
      - options_preflight_bypass   = false -> null
      - policies                   = [
          - {
              - id         = "5c1f64ba-2959-45df-9794-f2bf87570beb" -> null
              - precedence = 1 -> null
            },
        ] -> null
      - self_hosted_domains        = [
          - "*.lopes-id.pages.dev",
          - "lopes-id.pages.dev",
          - "preview.lopes.id",
        ] -> null
      - session_duration           = "24h" -> null
      - type                       = "self_hosted" -> null
    }

  # cloudflare_zero_trust_access_policy.pages_preview_otp will be destroyed
  # (because cloudflare_zero_trust_access_policy.pages_preview_otp is not in configuration)
  - resource "cloudflare_zero_trust_access_policy" "pages_preview_otp" {
      - account_id       = "78f5f76d6be764ad7fc4a1c91246615c" -> null
      - app_count        = 1 -> null
      - created_at       = "2026-09-28T21:14:18Z" -> null
      - decision         = "allow" -> null
      - id               = "5c1f64ba-2959-45df-9794-f2bf87570beb" -> null
      - include          = [
          - {
              - email = {
                  - email = "jlojunior@gmail.com" -> null
                } -> null
            },
        ] -> null
      - name             = "Allow Members - Cloudflare Pages" -> null
      - reusable         = true -> null
      - session_duration = "24h" -> null
      - updated_at       = "2026-09-28T21:14:18Z" -> null
    }

Plan: 0 to add, 0 to change, 4 to destroy.

─────────────────────────────────────────────────────────────────────────────

Saved the plan to: tfplan

To perform exactly these actions, run the following command to apply:
    terraform apply "tfplan"