From 08c149d115f8f4adef6879c0b74e1cd567cdc064 Mon Sep 17 00:00:00 2001
From: NWarila <33955773+NWarila@users.noreply.github.com>
Date: Tue, 26 May 2026 13:46:42 +0000
Subject: [PATCH] chore(provider): bump integrations/github 6.10.2 -> 6.12.1

The terraform-provider-github 6.12 line is several point releases
ahead of the 6.10.2 currently pinned. The bump is motivated by the
allow_forking provider-default issue: 6.10.2 treats Terraform `null`
as the schema default `false`, which causes the provider to always
include `allow_forks` in PATCH payloads. PATCH then 422s on personal-
account private repositories.

6.12.x's changelog may include nullable handling for allow_forking
(needs the next deploy to confirm). If the upgrade resolves the 422,
no further code changes are needed and the ownership-aware default
landed in #62 will behave as intended. If it doesn't resolve, a
follow-up PR adds an explicit `managed: optional(bool, true)` flag
to the YAML schema and filters runtime-managed repos accordingly.

versions.tf: bump constraint.
.terraform.lock.hcl: remove the github provider block so CI's
  `terraform init` regenerates it for 6.12.1. The aws and time
  provider blocks are unchanged.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 terraform/.terraform.lock.hcl | 26 ++++----------------------
 terraform/versions.tf         |  2 +-
 2 files changed, 5 insertions(+), 23 deletions(-)

diff --git a/terraform/.terraform.lock.hcl b/terraform/.terraform.lock.hcl
index ed8b3ed..03ca85b 100644
--- a/terraform/.terraform.lock.hcl
+++ b/terraform/.terraform.lock.hcl
@@ -44,25 +44,7 @@ provider "registry.terraform.io/hashicorp/time" {
   ]
 }
 
-provider "registry.terraform.io/integrations/github" {
-  version     = "6.10.2"
-  constraints = "6.10.2"
-  hashes = [
-    "h1:0fG4EGf4A2gbz1OWMdYsdyq7+RGzlfFUlLsZmSgocNw=",
-    "zh:0276720213c19abb83faf6774697518dc1040fd37bc83eef86634f85d4781cae",
-    "zh:19c6a9736a3d0264c9e0064ee66f7a957f2e35af2d2b7d4a2936d6d02ae122c4",
-    "zh:3212c3c92b2ab16feb6d99c1d2b252fef255aeb709303a2428ea3af0677c30a1",
-    "zh:472b40f129c4e7ad2308870972c584874e018723fc190dfebe2416c5a6e6580f",
-    "zh:721d21615de5565b5ab0b1a6cf79f3bff2c95b26289c9175fcc75947a216774d",
-    "zh:80e9128e4da85e7d146025425aefaf20e85b6187e37c91182a19814bbc949684",
-    "zh:83a0573eceb8f211a4f8cb9d2a98ad47c04878369046a6fcb18636cb3cbc78f3",
-    "zh:9df2be04ec201a0d3c9251776c7eab1a8773b9ae758ebb996000e6ec7a3d72aa",
-    "zh:a4028674e02099b2c63c73bbb51c8bebf437a5cc4537f56107852abdc2d442e7",
-    "zh:a55dfa5f6665c63daa72bc3b50a90f2c11113c05014b2a8ae7d7f29a9ad87251",
-    "zh:aa9af998f01ec75876fcfc9a0b4390c8f9d41dc8365e015506e7b227a0b2f042",
-    "zh:f35e64bf0448856e21a9ecc3e551d11afdae11d44a408f124c7283354d504209",
-    "zh:f6079518e101494fe6e62588393c739c5448e6b8b3f277da3d9b04f2088b14fe",
-    "zh:fbd1fee2c9df3aa19cf8851ce134dea6e45ea01cb85695c1726670c285797e25",
-    "zh:fe5835aa672c7ff876c3d327b1e1641b8d69da2f61322bd8ef4a226e40947e0f",
-  ]
-}
+# The integrations/github provider entry is intentionally removed so
+# CI's `terraform init` populates a fresh entry matching the 6.12.1
+# constraint declared in versions.tf. Reinstate after the next green
+# CI run by copying the regenerated block back into source control.
diff --git a/terraform/versions.tf b/terraform/versions.tf
index 17921e2..d4bb620 100644
--- a/terraform/versions.tf
+++ b/terraform/versions.tf
@@ -5,7 +5,7 @@ terraform {
   required_providers {
     github = {
       source  = "integrations/github"
-      version = "= 6.10.2"
+      version = "= 6.12.1"
     }
 
     aws = {