Update docs for v18.5.0 release

Author: gitlab-terraform-provider-bot

CHANGELOG.md

@@ -1,3 +1,26 @@
+## 18.5.0 (2025-10-14)
+
+### FEATURES (2 changes)
+
+- datasource/gitlab_project_approval_rules:  [Add New Data Source for GitLab Project Approval Rules](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/93fe466255fcbf41bc19e1faf708bb9f3e704df6) by @markwork ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2624)) 
+- resource/gitlab_group_service_account:  [Add support for custom timeouts to `gitlab_group_service_account`](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/1e57cac88865beed668edfefb8293a79d4d77036) by @PatrickRice ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2689)) 
+
+### IMPROVEMENTS (2 changes)
+
+- datasource/gitlab_projects:  [Deprecate datasource gitlab_projects._links](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/55e58137) by @heidi.berry ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2744))
+- resource/gitlab_project:  [Add project resource group default process mode](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/ed55f6f4974dc5ef1f68f6f341ed77eb690b0269) by @n.h.long.9697 ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2692))
+
+### DOCUMENTATION (2 changes)
+
+- [Add missing deprecation notices to some resources and datasources](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/2cd6b09d) by @heidi.berry ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2745))
+- [Ensure deprecation notices properly display in the docs](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/6c7f8b79) by @heidi.berry ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2743))
+
+### BUG FIXES (3 changes)
+
+- resource/gitlab_application_settings:  [Fix mapping package_metadata_purl_types in update](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/b57143a3) by @elC0mpa ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2729))
+- resource/gitlab_project_membership:  [`expires_at` now validates that the date is not in the past, which previously caused an API error](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/311bc16f3aee383284025ce7ffdb9a01fa30ec5b) by @elC0mpa ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2712)) 
+- resource/gitlab_project_membership,resource/gitlab_group_membership:  [`member_role_id` will now be removed if not specified in the config, allowing users to revert to base roles](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/b503771e5f56d03645ffab646ea7e72ef3911a8a) by @elC0mpa ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2713)) 
+
 ## 18.4.1 (2025-09-23)
 
 ### IMPROVEMENTS (1 change)
@@ -98,6 +121,11 @@
 - datasource/gitlab_user:  [Add experimental support for `email_exact_match`, which will always return an exact match on the email. This will override the fuzzy matching of the GitLab search API when no users match the given email.](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/2dd44a088abaeda3494c24fd5f8b939dff1a8d73) by @ricardo.bartels ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2362))
 - multiple resources:  [Add missing examples to resources](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/d853ffe687699c313bf421cdf595b415c821d3bb) by @heidi.berry ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2519))
 
+### DOCUMENTATION (2 changes)
+
+- [Add missing deprecation notices](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/2cd6b09d) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2745))
+- [Ensure deprecation notices come out in the docs](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/6c7f8b79) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2743))
+
 ### BUG FIXES (3 changes)
 
 - resource/gitlab_branch:  [Add warning to use lifecycle ignore_changes for gitlab_branch.ref](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/4e91cf3742610da549b943c6e60c52b96ec62a15) by @heidi.berry ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2542))
@@ -206,6 +234,11 @@ This release was tested against GitLab 17.10, 17.9, and 17.8 for both CE and EE
 - datasource/gitlab_users: [Add support for several new attributes.](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/fde7c9f221526fb1600548aafa0b748deba8d2e9) by @heidi.berry ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2361))
 - datasource/gitlab_project_environment: [Add `auto_stop_setting` as a read-only attribute](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/c8669f4ca7e59241f21badbd2be4d99001f9bdd3) by @jtymes ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2300))
 
+### DOCUMENTATION (2 changes)
+
+- [Add missing deprecation notices](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/2cd6b09d) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2745))
+- [Ensure deprecation notices come out in the docs](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/6c7f8b79) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2743))
+
 ### BUG FIXES (3 changes)
 
 - resource/gitlab_value_stream_analytics:  [Update `stages` from an unordered list to an ordered list since order matters in the API](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/7982745332ad8f4b90d1019e6273317e58326230) by @calee1 ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2339))
@@ -482,6 +515,11 @@ Note: As a security related change, this breaking change is allowed outside a ma
 
 This release was tested against GitLab 17.1, 17.0, and 16.11 for both CE and EE
 
+### DOCUMENTATION (2 changes)
+
+- [Add missing deprecation notices](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/2cd6b09d) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2745))
+- [Ensure deprecation notices come out in the docs](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/6c7f8b79) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2743))
+
 ### BUG FIXES (3 changes)
 
 - resource/gitlab_project_job_token_scopes:  [Correct examples for resource project_job_token_scopes](gitlab-org/terraform-provider-gitlab@3027ed1e0861b405ef81f13b3e58fce5aff96ed2) by @heidi.berry ([merge request](gitlab-org/terraform-provider-gitlab!1968))

docs/data-sources/group.md

@@ -42,7 +42,7 @@ data "gitlab_group" "foo" {
 - `description` (String) The description of the group.
 - `extra_shared_runners_minutes_limit` (Number) Can be set by administrators only. Additional CI/CD minutes for this group.
 - `full_name` (String) The full name of the group.
-- `id` (String) The ID of this resource.
+- `id` (String) The ID of this datasource. In the format `<group-id>`.
 - `lfs_enabled` (Boolean) Boolean, is LFS enabled for projects in this group.
 - `membership_lock` (Boolean) Users cannot be added to projects in this group.
 - `name` (String) The name of this group.
@@ -52,8 +52,8 @@ data "gitlab_group" "foo" {
 - `request_access_enabled` (Boolean) Boolean, is request for access enabled to the group.
 - `runners_token` (String, Sensitive) The group level registration token to use during runner setup.
 - `shared_runners_minutes_limit` (Number) Can be set by administrators only. Maximum number of monthly CI/CD minutes for this group. Can be nil (default; inherit system default), 0 (unlimited), or > 0.
-- `shared_runners_setting` (String) Enable or disable shared runners for a group’s subgroups and projects. Valid values are: `enabled`, `disabled_and_overridable`, `disabled_and_unoverridable`, `disabled_with_override`.
-- `shared_with_groups` (List of Object) Describes groups which have access shared to this group. (see [below for nested schema](#nestedatt--shared_with_groups))
+- `shared_runners_setting` (String) Enable or disable shared runners for a group's subgroups and projects. Valid values are: `enabled`, `disabled_and_overridable`, `disabled_and_unoverridable`, `disabled_with_override`.
+- `shared_with_groups` (Attributes List) Describes groups which have access shared to this group. (see [below for nested schema](#nestedatt--shared_with_groups))
 - `visibility_level` (String) Visibility level of the group. Possible values are `private`, `internal`, `public`.
 - `web_url` (String) Web URL of the group.
 - `wiki_access_level` (String) The group's wiki access level. Only available on Premium and Ultimate plans. Valid values are `disabled`, `private`, `enabled`.
@@ -63,8 +63,8 @@ data "gitlab_group" "foo" {
 
 Read-Only:
 
-- `expires_at` (String)
-- `group_access_level` (Number)
-- `group_full_path` (String)
-- `group_id` (Number)
-- `group_name` (String)
+- `expires_at` (String) Share with group expiration date.
+- `group_access_level` (Number) The access_level permission level of the shared group.
+- `group_full_path` (String) The full path of the group shared with.
+- `group_id` (Number) The ID of the group shared with.
+- `group_name` (String) The name of the group shared with.

docs/data-sources/group_hook.md

@@ -54,6 +54,6 @@ data "gitlab_group_hook" "example" {
 - `releases_events` (Boolean) Invoke the hook for releases events.
 - `subgroup_events` (Boolean) Invoke the hook for subgroup events.
 - `tag_push_events` (Boolean) Invoke the hook for tag push events.
-- `token` (String, Deprecated) A token to present when invoking the hook. The token is not available in this datasource.
+- `token` (String, Deprecated) A token to present when invoking the hook. The token is only available on resource creation, not in this datasource. It will always be blank. To be removed in 19.0.
 - `url` (String) The url of the hook to invoke.
 - `wiki_page_events` (Boolean) Invoke the hook for wiki page events.

docs/data-sources/group_hooks.md

@@ -3,13 +3,13 @@
 page_title: "gitlab_group_hooks Data Source - terraform-provider-gitlab"
 subcategory: ""
 description: |-
-  The gitlab_group_hooks data source allows to retrieve details about hooks in a group.
+  The gitlab_group_hooks data source retrieves details about hooks in a group.
   Upstream API: GitLab REST API docs https://docs.gitlab.com/api/group_webhooks/#list-group-hooks
 ---
 
 # gitlab_group_hooks (Data Source)
 
-The `gitlab_group_hooks` data source allows to retrieve details about hooks in a group.
+The `gitlab_group_hooks` data source retrieves details about hooks in a group.
 
 **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/group_webhooks/#list-group-hooks)
 
@@ -34,33 +34,33 @@ data "gitlab_group_hooks" "examples" {
 
 ### Read-Only
 
-- `hooks` (List of Object) The list of hooks. (see [below for nested schema](#nestedatt--hooks))
-- `id` (String) The ID of this resource.
+- `hooks` (Attributes List) The list of hooks. (see [below for nested schema](#nestedatt--hooks))
+- `id` (String) The ID of this data source. In the format `<group>`.
 
 <a id="nestedatt--hooks"></a>
 ### Nested Schema for `hooks`
 
 Read-Only:
 
-- `confidential_issues_events` (Boolean)
-- `confidential_note_events` (Boolean)
-- `custom_webhook_template` (String)
-- `deployment_events` (Boolean)
-- `emoji_events` (Boolean)
-- `enable_ssl_verification` (Boolean)
-- `group` (String)
-- `group_id` (Number)
-- `hook_id` (Number)
-- `issues_events` (Boolean)
-- `job_events` (Boolean)
-- `merge_requests_events` (Boolean)
-- `note_events` (Boolean)
-- `pipeline_events` (Boolean)
-- `push_events` (Boolean)
-- `push_events_branch_filter` (String)
-- `releases_events` (Boolean)
-- `subgroup_events` (Boolean)
-- `tag_push_events` (Boolean)
-- `token` (String)
-- `url` (String)
-- `wiki_page_events` (Boolean)
+- `confidential_issues_events` (Boolean) Invoke the hook for confidential issues events.
+- `confidential_note_events` (Boolean) Invoke the hook for confidential notes events.
+- `custom_webhook_template` (String) Set a custom webhook template.
+- `deployment_events` (Boolean) Invoke the hook for deployment events.
+- `emoji_events` (Boolean) Invoke the hook for emoji events.
+- `enable_ssl_verification` (Boolean) Enable ssl verification when invoking the hook.
+- `group` (String) The ID or full path of the group.
+- `group_id` (Number) The id of the group for the hook.
+- `hook_id` (Number) The id of the group hook.
+- `issues_events` (Boolean) Invoke the hook for issues events.
+- `job_events` (Boolean) Invoke the hook for job events.
+- `merge_requests_events` (Boolean) Invoke the hook for merge requests.
+- `note_events` (Boolean) Invoke the hook for notes events.
+- `pipeline_events` (Boolean) Invoke the hook for pipeline events.
+- `push_events` (Boolean) Invoke the hook for push events.
+- `push_events_branch_filter` (String) Invoke the hook for push events on matching branches only.
+- `releases_events` (Boolean) Invoke the hook for releases events.
+- `subgroup_events` (Boolean) Invoke the hook for subgroup events.
+- `tag_push_events` (Boolean) Invoke the hook for tag push events.
+- `token` (String, Deprecated) A token to present when invoking the hook. The token is only available on resource creation, not in this datasource. It will always be blank. To be removed in 19.0.
+- `url` (String) The url of the hook to invoke.
+- `wiki_page_events` (Boolean) Invoke the hook for wiki page events.

docs/data-sources/group_subgroups.md

@@ -46,39 +46,39 @@ output "subgroups" {
 
 ### Read-Only
 
-- `id` (String) The ID of this resource.
-- `subgroups` (List of Object) Subgroups of the parent group. (see [below for nested schema](#nestedatt--subgroups))
+- `id` (String) The ID of this datasource. In the format `<group-id>`.
+- `subgroups` (Attributes List) Subgroups of the parent group. (see [below for nested schema](#nestedatt--subgroups))
 
 <a id="nestedatt--subgroups"></a>
 ### Nested Schema for `subgroups`
 
 Read-Only:
 
-- `allowed_email_domains_list` (String)
-- `auto_devops_enabled` (Boolean)
-- `avatar_url` (String)
-- `created_at` (String)
-- `default_branch_protection` (Number)
-- `description` (String)
-- `emails_enabled` (Boolean)
-- `file_template_project_id` (Number)
-- `full_name` (String)
-- `full_path` (String)
-- `group_id` (Number)
-- `ip_restriction_ranges` (String)
-- `lfs_enabled` (Boolean)
-- `mentions_disabled` (Boolean)
-- `name` (String)
-- `parent_id` (Number)
-- `path` (String)
-- `project_creation_level` (String)
-- `request_access_enabled` (Boolean)
-- `require_two_factor_authentication` (Boolean)
-- `share_with_group_lock` (Boolean)
-- `shared_runners_setting` (String)
-- `statistics` (Map of String)
-- `subgroup_creation_level` (String)
-- `two_factor_grace_period` (Number)
-- `visibility` (String)
-- `web_url` (String)
-- `wiki_access_level` (String)
+- `allowed_email_domains_list` (String) A list of email address domains to allow group access.
+- `auto_devops_enabled` (Boolean) Default to Auto DevOps pipeline for all projects within this group.
+- `avatar_url` (String) The URL of the avatar image.
+- `created_at` (String) Group created at date.
+- `default_branch_protection` (Number) Whether developers and maintainers can push to the applicable default branch.
+- `description` (String) The description of the group.
+- `emails_enabled` (Boolean) Enable email notifications.
+- `file_template_project_id` (Number) The ID of the project that will be used for file templates.
+- `full_name` (String) The full name of the group.
+- `full_path` (String) The full path of the group.
+- `group_id` (Number) The ID of the group.
+- `ip_restriction_ranges` (String) A list of IP addresses or subnet masks to restrict group access.
+- `lfs_enabled` (Boolean) Is LFS enabled for projects in this group.
+- `mentions_disabled` (Boolean) Disable the capability of a group from getting mentioned.
+- `name` (String) The name of this group.
+- `parent_id` (Number) ID of the parent group.
+- `path` (String) The path of the group.
+- `project_creation_level` (String) Determine if developers can create projects in the group. Valid values are: `noone`, `owner`, `maintainer`, `developer`, `administrator`
+- `request_access_enabled` (Boolean) Is request for access enabled to the group.
+- `require_two_factor_authentication` (Boolean) Require all users in this group to setup Two-factor authentication.
+- `share_with_group_lock` (Boolean) Prevent sharing a project with another group within this group.
+- `shared_runners_setting` (String) Enable or disable shared runners for a group's subgroups and projects. Valid values are: `enabled`, `disabled_and_overridable`, `disabled_and_unoverridable`, `disabled_with_override`.
+- `statistics` (Map of String) Group statistics.
+- `subgroup_creation_level` (String) Allowed to create subgroups. Valid values are: `owner`, `maintainer`.
+- `two_factor_grace_period` (Number) Time before Two-factor authentication is enforced (in hours).
+- `visibility` (String) Limited by visibility `public`, `internal`, or `private`.
+- `web_url` (String) Web URL of the group.
+- `wiki_access_level` (String) The group's wiki access level. Only available on Premium and Ultimate plans. Valid values are `disabled`, `private`, `enabled`.

docs/data-sources/groups.md

@@ -44,27 +44,27 @@ data "gitlab_groups" "example-two" {
 
 ### Read-Only
 
-- `groups` (List of Object) The list of groups. (see [below for nested schema](#nestedatt--groups))
-- `id` (String) The ID of this resource.
+- `groups` (Attributes List) The list of groups. (see [below for nested schema](#nestedatt--groups))
+- `id` (String) The ID of this datasource. In the format of a hash of the provided search attributes.
 
 <a id="nestedatt--groups"></a>
 ### Nested Schema for `groups`
 
 Read-Only:
 
-- `default_branch_protection` (Number)
-- `description` (String)
-- `full_name` (String)
-- `full_path` (String)
-- `group_id` (Number)
-- `lfs_enabled` (Boolean)
-- `name` (String)
-- `parent_id` (Number)
-- `path` (String)
-- `prevent_forking_outside_group` (Boolean)
-- `request_access_enabled` (Boolean)
-- `runners_token` (String)
-- `shared_runners_setting` (String)
-- `visibility_level` (String)
-- `web_url` (String)
-- `wiki_access_level` (String)
+- `default_branch_protection` (Number, Deprecated) Whether developers and maintainers can push to the applicable default branch. Will be removed in 19.0.
+- `description` (String) The description of the group.
+- `full_name` (String) The full name of the group.
+- `full_path` (String) The full path of the group.
+- `group_id` (Number) The ID of the group.
+- `lfs_enabled` (Boolean) Is LFS enabled for projects in this group.
+- `name` (String) The name of this group.
+- `parent_id` (Number) ID of the parent group.
+- `path` (String) The path of the group.
+- `prevent_forking_outside_group` (Boolean) When enabled, users can not fork projects from this group to external namespaces.
+- `request_access_enabled` (Boolean) Is request for access enabled to the group.
+- `runners_token` (String, Sensitive) The group level registration token to use during runner setup.
+- `shared_runners_setting` (String) Enable or disable shared runners for a group's subgroups and projects. Valid values are: `enabled`, `disabled_and_overridable`, `disabled_and_unoverridable`, `disabled_with_override`.
+- `visibility_level` (String) Visibility level of the group. Possible values are `private`, `internal`, `public`.
+- `web_url` (String) Web URL of the group.
+- `wiki_access_level` (String) The group's wiki access level. Only available on Premium and Ultimate plans. Valid values are `disabled`, `private`, `enabled`.