Update docs for v18.7.0 release

Author: gitlab-terraform-provider-bot

CHANGELOG.md

@@ -1,3 +1,25 @@
+## 18.7.0 (2025-12-18)
+
+### FEATURES (5 changes)
+
+- resource/gitlab_user_avatar:  [Add a new resource for managing avatars on project, group, and service account users](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/0fa637212011a84affdebc670635ed1640611ad1) by @mness ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2766)) 
+- data/gitlab_security_policy_document:  [Add a datasource to generate policy file YAML using native HCL](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/b6c56dce8045af6c78fe4558040a0591a45d0eac) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2811)) 
+- data/gitlab_group_service_account_access_tokens:  [Add new data source for reading group service account access token metadata](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/6236eaa47aef6f0ca58456e15a610ab4b53562e0) by @vijeta004 ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2805)) 
+- data/gitlab_secure_file:  [Add new data source for reading secure files](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/d39194ac07762e2b7492286ffcd68a174d1445f5) by @jack1902 ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2803)) 
+- data/gitlab_project_issue_label_events:  [Add new data source for users to retrieve label events for an issue](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/ec7fd6b906f3cc4cc640b8d36e1ac0d397ca0b40) by @chanmickyyun ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2783)) 
+
+### IMPROVEMENTS (3 changes)
+
+- resource/gitlab_group:  [Validate group name and stub at plan-time instead of apply-time](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/36ed196dad2392fecd542ad7f1a259aea519f65a) by @SinaMoghaddas ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2778)) 
+- data/gitlab_project:  [Add support for merge_trains_skip_train_allowed](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/928e2780e204b108c011558bf675a0af1a5a9efa) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2817)) 
+- resource/gitlab_member_role:  [Add missing permissions](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/8244cac7a52536514cafe06c0c9e63ce684f009b) by @u.kilianpaquier ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2785))
+
+### BUG FIXES (3 changes)
+
+- resource/gitlab_branch:  [Fixed an issue where updating branch name caused "Invalid resource ID format"](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/2912a2cd29f43e0e1a88fa5b8bcc2b6b6e7a3eee) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2825)) 
+- resource/gitlab_group_service_account:  [Fixed an issue where read error caused service accounts to be flagged as deleted](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/1ca9337d420ac99baefeb45a4697ea1949636912) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2814)) 
+- docs:  [Fixed broken or redirected documentation links](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/commit/1c80354fa10ea590036ee44b0d55ef49098fff47) ([merge request](https://gitlab.com/gitlab-org/terraform-provider-gitlab/-/merge_requests/2827)) 
+
 ## 18.6.1 (2025-11-21)
 
 ### BUG FIXES (1 change)

docs/data-sources/artifact_file.md

@@ -4,13 +4,13 @@ page_title: "gitlab_artifact_file Data Source - terraform-provider-gitlab"
 subcategory: ""
 description: |-
   The gitlab_artifact_file data source allows downloading a single artifact file from a specific job in the latest successful pipeline for a given reference (branch, tag, or commit).
-  Upstream API: GitLab REST API docs https://docs.gitlab.com/ee/api/job_artifacts.html#download-a-single-artifact-file-from-specific-tag-or-branch
+  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/job_artifacts/#download-a-single-artifact-file-by-reference-name
 ---
 
 # gitlab_artifact_file (Data Source)
 
 The `gitlab_artifact_file` data source allows downloading a single artifact file from a specific job in the latest successful pipeline for a given reference (branch, tag, or commit).
-**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/ee/api/job_artifacts.html#download-a-single-artifact-file-from-specific-tag-or-branch)
+**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/job_artifacts/#download-a-single-artifact-file-by-reference-name)
 
 ## Example Usage
 

docs/data-sources/group_billable_member_memberships.md

@@ -7,7 +7,7 @@ description: |-
   -> You must be an administrator!
   ~> When using the email attribute, an exact match is not guaranteed. The most related match will be returned. Starting with GitLab 16.6,
   the most related match will prioritize an exact match if one is available.
-  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/members/#list-memberships-for-a-billable-member-of-a-group
+  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/group_members/#list-all-billable-members-of-a-group
 ---
 
 # gitlab_group_billable_member_memberships (Data Source)
@@ -19,7 +19,7 @@ The `gitlab_group_billable_member_memberships` data source allows (sub)group- an
 ~> When using the `email` attribute, an exact match is not guaranteed. The most related match will be returned. Starting with GitLab 16.6,
 the most related match will prioritize an exact match if one is available.
 
-**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/members/#list-memberships-for-a-billable-member-of-a-group)
+**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/group_members/#list-all-billable-members-of-a-group)
 
 ## Example Usage
 
@@ -48,7 +48,7 @@ data "gitlab_group_billable_member_memberships" "test_user_membership" {
 
 Read-Only:
 
-- `access_level` (String) Access-level of the member. For details see: https://docs.gitlab.com/api/access_requests/#valid-access-levels
+- `access_level` (String) Access-level of the member. For details see: https://docs.gitlab.com/user/permissions/#default-roles
 - `created_at` (String) Datetime when the membership was first added.
 - `expires_at` (String) Date when the membership will end.
 - `id` (Number) The id of the membership.

docs/data-sources/group_membership.md

@@ -4,14 +4,14 @@ page_title: "gitlab_group_membership Data Source - terraform-provider-gitlab"
 subcategory: ""
 description: |-
   The gitlab_group_membership data source allows to list and filter all members of a group specified by either its id or full path.
-  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/members/#list-all-members-of-a-group-or-project
+  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/group_members/#list-all-members-of-a-group
 ---
 
 # gitlab_group_membership (Data Source)
 
 The `gitlab_group_membership` data source allows to list and filter all members of a group specified by either its id or full path.
 
-**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/members/#list-all-members-of-a-group-or-project)
+**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/group_members/#list-all-members-of-a-group)
 
 ## Example Usage
 

docs/data-sources/group_service_account.md

@@ -4,14 +4,14 @@ page_title: "gitlab_group_service_account Data Source - terraform-provider-gitla
 subcategory: ""
 description: |-
   The gitlab_group_service_account data source retrieves information about a GitLab service account in a group.
-  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/group_service_accounts/#list-service-account-users
+  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/service_accounts/#list-all-group-service-accounts
 ---
 
 # gitlab_group_service_account (Data Source)
 
 The `gitlab_group_service_account` data source retrieves information about a GitLab service account in a group.
 
-**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/group_service_accounts/#list-service-account-users)
+**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/service_accounts/#list-all-group-service-accounts)
 
 ## Example Usage
 

docs/data-sources/group_service_account_access_tokens.md

@@ -0,0 +1,70 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "gitlab_group_service_account_access_tokens Data Source - terraform-provider-gitlab"
+subcategory: ""
+description: |-
+  The gitlab_group_service_account_access_tokens data source allows to retrieve all access tokens for a group service account.
+  ~> Note: The data source returns the token metadata only. The token value is not available.
+  ~> Permissions: You must have administrator access or be an Owner of the group to list the tokens of a service account.
+  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/personal_access_tokens/#list-all-personal-access-tokens
+---
+
+# gitlab_group_service_account_access_tokens (Data Source)
+
+The `gitlab_group_service_account_access_tokens` data source allows to retrieve all access tokens for a group service account.
+
+~> **Note:** The data source returns the token metadata only. The token value is not available.
+
+~> **Permissions:** You must have administrator access or be an Owner of the group to list the tokens of a service account.
+
+**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/personal_access_tokens/#list-all-personal-access-tokens)
+
+## Example Usage
+
+```terraform
+data "gitlab_group" "example" {
+  id = "foo/bar/baz"
+}
+
+# List all access tokens for a group service account
+data "gitlab_group_service_account_access_tokens" "example" {
+  group              = data.gitlab_group.example.id
+  service_account_id = 123
+}
+
+# Output example: Get the names of all tokens
+output "token_names" {
+  value = [for token in data.gitlab_group_service_account_access_tokens.example.access_tokens : token.name]
+}
+
+# Output example: Get only active tokens
+output "active_tokens" {
+  value = [for token in data.gitlab_group_service_account_access_tokens.example.access_tokens : token if token.active]
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `group` (String) The ID or URL-encoded path of the group containing the service account. Must be a top level group.
+- `service_account_id` (Number) The ID of the service account user.
+
+### Read-Only
+
+- `access_tokens` (List of Object) The list of access tokens for the service account. (see [below for nested schema](#nestedatt--access_tokens))
+- `id` (String) The ID of this Terraform resource. In the format of `<group>:<user_id>`.
+
+<a id="nestedatt--access_tokens"></a>
+### Nested Schema for `access_tokens`
+
+Read-Only:
+
+- `active` (Boolean)
+- `created_at` (String)
+- `expires_at` (String)
+- `id` (String)
+- `name` (String)
+- `revoked` (Boolean)
+- `scopes` (Set of String)

docs/data-sources/group_variable.md

@@ -45,7 +45,7 @@ data "gitlab_group_variable" "bar" {
 
 - `description` (String) The description of the variable.
 - `id` (String) The ID of this Terraform resource. In the format of `<group>:<key>:<environment_scope>`.
-- `masked` (Boolean) If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables).
+- `masked` (Boolean) If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable).
 - `protected` (Boolean) If set to `true`, the variable will be passed only to pipelines running on protected branches and tags
 - `raw` (Boolean) Whether the variable is treated as a raw string. Default: false. When true, variables in the value are not expanded.
 - `value` (String) The value of the variable.

docs/data-sources/instance_service_account.md

@@ -5,7 +5,7 @@ subcategory: ""
 description: |-
   The gitlab_instance_service_account data source retrieves information about a gitlab service account.
   ~> In order for a user to create a user account, they must have admin privileges at the instance level. This makes this feature unavailable on gitlab.com
-  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/user_service_accounts/
+  Upstream API: GitLab REST API docs https://docs.gitlab.com/api/service_accounts/#instance-service-accounts
 ---
 
 # gitlab_instance_service_account (Data Source)
@@ -14,7 +14,7 @@ The `gitlab_instance_service_account` data source retrieves information about a
 
 ~> In order for a user to create a user account, they must have admin privileges at the instance level. This makes this feature unavailable on `gitlab.com`
 
-**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/user_service_accounts/)
+**Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/service_accounts/#instance-service-accounts)
 
 ## Example Usage
 

docs/data-sources/project.md

@@ -77,6 +77,7 @@ data "gitlab_project" "example" {
 - `merge_requests_access_level` (String) Set the merge requests access level. Valid values are `disabled`, `private`, `enabled`.
 - `merge_requests_enabled` (Boolean, Deprecated) Enable merge requests for the project. Use `merge_requests_access_level` instead. This attribute will be removed in 19.0.
 - `merge_trains_enabled` (Boolean) Enable or disable merge trains.
+- `merge_trains_skip_train_allowed` (Boolean) Allows merge train merge requests to be merged without waiting for pipelines to finish.
 - `model_experiments_access_level` (String) The visibility of machine learning model experiments.
 - `model_registry_access_level` (String) The visibility of machine learning model registry.
 - `monitor_access_level` (String) Set the monitor access level. Valid values are `disabled`, `private`, `enabled`.

docs/data-sources/project_issue_label_events.md

@@ -0,0 +1,76 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "gitlab_project_issue_label_events Data Source - terraform-provider-gitlab"
+subcategory: ""
+description: |-
+  The gitlab_project_issue_label_events data source retrieves label events for a specific GitLab project issue.
+  Upstream API: GitLab Resource Label Events API docs https://docs.gitlab.com/api/resource_label_events/
+---
+
+# gitlab_project_issue_label_events (Data Source)
+
+The `gitlab_project_issue_label_events` data source retrieves label events for a specific GitLab project issue.
+
+**Upstream API**: [GitLab Resource Label Events API docs](https://docs.gitlab.com/api/resource_label_events/)
+
+## Example Usage
+
+```terraform
+data "gitlab_project_issue_label_events" "example" {
+  project   = "my-group/my-project"
+  issue_iid = 42
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `issue_iid` (Number) The internal ID of the issue.
+- `project` (String) The ID or full path of the project.
+
+### Optional
+
+- `pages_returned` (Number) Number of pages to return. Default is 1.
+
+### Read-Only
+
+- `events` (Attributes List) List of label events for the issue. (see [below for nested schema](#nestedatt--events))
+- `id` (String) The ID of this Terraform resource. In the format of `<project>:<issue_iid>`.
+
+<a id="nestedatt--events"></a>
+### Nested Schema for `events`
+
+Read-Only:
+
+- `action` (String) The action performed on the label (add, remove).
+- `created_at` (String) The date and time when the label event was created.
+- `id` (Number) The ID of the label event.
+- `label` (Attributes) The label that was added or removed. (see [below for nested schema](#nestedatt--events--label))
+- `resource_id` (Number) The ID of the resource associated with the label event.
+- `resource_type` (String) The type of the resource associated with the label event.
+- `user` (Attributes) The user who performed the action. (see [below for nested schema](#nestedatt--events--user))
+
+<a id="nestedatt--events--label"></a>
+### Nested Schema for `events.label`
+
+Read-Only:
+
+- `color` (String) The color of the label.
+- `description` (String) The description of the label.
+- `id` (Number) The ID of the label.
+- `name` (String) The name of the label.
+
+
+<a id="nestedatt--events--user"></a>
+### Nested Schema for `events.user`
+
+Read-Only:
+
+- `avatar_url` (String) The avatar URL of the user.
+- `id` (Number) The ID of the user.
+- `name` (String) The name of the user.
+- `state` (String) The state of the user.
+- `username` (String) The username of the user.
+- `web_url` (String) The web URL of the user.