Bump the gomod-dependencies group across 1 directory with 3 updates

[dependabot]

Bumps the gomod-dependencies group with 3 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azcore, github.com/hashicorp/hc-install and github.com/hashicorp/terraform-json.

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.23.1 to 1.23.3

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed

• Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.

Other Changes

• Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
• Replaced internal default HTTP client with the one from sdk/internal.

sdk/azcore/v1.23.2

1.23.2 (2026-09-28)

Bugs Fixed

• Fixed unmarshalling datetime.RFC7231 to use a fixed GMT zone.

Commits

• b0d63ac Prep azcore@v1.23.3 for release (#27681)
• 83e527f [azdatalake] Update azblob to v1.8.2 for service.Client GetSASURL fix (#27657)
• 4e68728 [Service Bus] Stabilize session timeout tests (#27609)
• f3c857e Sync eng/common directory with azure-sdk-tools for PR 17077 (#27678)
• c76d8f0 Fix location parsing for mixed-case resource IDs (#27669)
• 6e5da8b fix: add period to LICENSE.txt (#26886)
• add0a52 Configurations: 'specification/azurefleet/resource-manager/Microsoft.AzureFl...
• 856b379 feat(azcore): add azure-deprecating to default allowed logging headers (#27...
• 50a269f Fix base template. (#27666)
• 3714be0 Sync eng/common directory with azure-sdk-tools for PR 17167 (#27665)
• Additional commits viewable in compare view

Updates github.com/hashicorp/hc-install from 0.9.5 to 0.10.0

Release notes

Sourced from github.com/hashicorp/hc-install's releases.

v0.10.0

ENHANCEMENTS:

• Allow custom http.Client to be passed through #401
• product: Build Terraform w/ experimental features enabled #409
• releases: add ApiBaseURL to Versions and pass HTTPClient through #364

DEPENDENCIES:

• go: Bump compatibility from 1.25 to 1.26 (#406)
• deps: bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 (#414)
• deps: bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.2 (#381, #385, #396)
• deps: bump golang.org/x/crypto from 0.51.0 to 0.56.0 (#393, #399, #408)
• deps: bump golang.org/x/mod from 0.35.0 to 0.41.0 (#382, #388, #392, #397, #398, #404)
• deps: bump golang.org/x/net from 0.53.0 to 0.55.0 (#391)

Commits

• 088c565 Prepare for 0.10.0 release (#415)
• 99786b7 releases: add ApiBaseURL to Versions and pass HTTPClient through (#364)
• 65f3869 build(deps): bump hashicorp/actions-generate-metadata from 1.1.4 to 1.3.0 in ...
• a33c617 build(deps): bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.2 (#414)
• 235ea8f product: Build Terraform w/ experimental features enabled (#409)
• 4e54952 Allow custom http.Client to be passed through (#401)
• 0612422 deps: Update golang.org/x/crypto to v0.56.0 (#408)
• cc06bdf build(deps): bump golang.org/x/mod from 0.40.0 to 0.41.0 (#404)
• 6ffd20c go: Bump to 1.26 (#406)
• f26645f ci: Remove macOS hack (#405)
• Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-json from 0.28.0 to 0.29.0

Release notes

Sourced from github.com/hashicorp/terraform-json's releases.

v0.29.0

ENHANCEMENTS:

• version: Allow parsing of a format_version field, added in Terraform 1.17 (#208)
• Add init_output log type for use when parsing logs from the init command (#181)
• logging: Add support for state migrate message types (#210)
• Add support for JSON output from workspace list command (#198)
• Enable parsing state_store_initialization_start JSON log message from init command (#212)

BUG FIXES:

• Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces are listed (#214)

Commits

• 8f4894d fix: Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces...
• 540e4c2 test: Enable parsing state_store_initialization_start JSON message, add te...
• 456fd35 refactor: Rename JSON message type constants to use Message prefix in name ...
• ebdaf2c logging: Add support for state migrate message types (#210)
• 5a1ca92 Add support for JSON output from workspace list (#198)
• e0b6807 feat: Add init_output log type for use when parsing a subset of logs from t...
• 1835ed6 version: Allow parsing of a format_version field, added in v1.17 (#208)
• f4ef996 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 in the github-actions-...
• 4a96b30 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in the github-actions-...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[azure-pipelines]

Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.