Azure/terraform-azurerm-avm-res-containerregistry-registry v0.8.0 on GitHub

Upgrade notes

Minimum Terraform is now 1.8 (was 1.3). New submodules use provider-defined functions, which older versions can't parse.
Private endpoint locks now actually apply. The lock field on private_endpoints was previously accepted and silently discarded. If you already set var.lock on the registry, private endpoints now inherit it and new lock resources will appear in your next plan. Opt out with private_endpoints_inherit_lock = false.
Switching to AbacRepositoryPermissions changes authorization evaluation. Add ABAC repository role assignments before flipping the mode, or identities using AcrPull/AcrPush/AcrDelete lose access. Default is unchanged, so existing configs are unaffected.

Cache rules and credential sets (#202) — pull-through caching from upstream registries. New cache_rules / credential_sets inputs and outputs, Premium SKU required. Each credential set's managed identity needs Key Vault read access, which the module does not grant; use the exposed principal_id. See examples/cache-rules.
ABAC repository permissions (#197) — new role_assignment_mode input for per-repository role scoping. See examples/abac-repository-permissions.
Private endpoint locks (#199) — fixes the documented-but-missing lock, plus ASG associations referencing the wrong resource when private_endpoints_manage_dns_zone_group = false.

feat: add role assignment mode support by @myaschmitz in #197
feat: add private endpoint lock support by @myaschmitz in #199
chore: run avm pre-commit [skip ci] by @azure-verified-modules[bot] in #203
chore: run avm pre-commit [skip ci] by @azure-verified-modules[bot] in #204
feat: add container registry cache rules and credential sets by @myaschmitz in #202

Full Changelog: v0.7.0...v0.8.0