Merge remote-tracking branch 'origin/main' into remove-misspell

* origin/main:
  Move tools to go.mod managed tools (#1185)
  fix(deps): update module github.com/hashicorp/terraform-plugin-docs to v0.22.0 (#1188)
  Bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 in /tools (#1187)
  Migrate the System User resource to the plugin framework.  (#1154)
  Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 in /tools (#1184)
  Bump golang.org/x/net from 0.36.0 to 0.38.0 in /libs/go-kibana-rest (#1183)
  chore(deps): update golang:1.24.4 docker digest to 20a022e (#1177)
  Bump github.com/getkin/kin-openapi from 0.127.0 to 0.131.0 in /tools (#1181)

Author: tobio

.buildkite/release.yml

@@ -1,7 +1,7 @@
 steps:
   - label: Release
     agents:
-      image: "golang:1.24.4@sha256:10c131810f80a4802c49cab0961bbe18a16f4bb2fb99ef16deaa23e4246fc817"
+      image: "golang:1.24.4@sha256:20a022e5112a144aa7b7aeb3f22ebf2cdaefcc4aac0d64e8deeee8cdc18b9c0f"
       cpu: "16"
       memory: "24G"
       ephemeralStorage: "20G"

CHANGELOG.md

@@ -1,6 +1,7 @@
 ## [Unreleased]
 
 - Add `headers` for the provider connection ([#1057](https://github.com/elastic/terraform-provider-elasticstack/pull/1057))
+- Migrate `elasticstack_elasticsearch_system_user` resource to Terraform plugin framework ([#1154](https://github.com/elastic/terraform-provider-elasticstack/pull/1154))
 - Add custom `endpoint` configuration support for snapshot repository setup ([#1158](https://github.com/elastic/terraform-provider-elasticstack/pull/1158))
 
 ## [0.11.15] - 2025-04-23

Makefile

@@ -225,7 +225,7 @@ docker-clean: ## Try to remove provisioned nodes and assigned network
 
 .PHONY: docs-generate
 docs-generate: tools ## Generate documentation for the provider
-	@ $(GOBIN)/tfplugindocs
+	@ go tool github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs
 
 
 .PHONY: gen
@@ -245,14 +245,7 @@ install: build ## Install built provider into the local terraform cache
 
 
 .PHONY: tools
-tools: $(GOBIN) tools-golangci-lint ## Install useful tools for linting, docs generation and development
-	@ cd tools && go install github.com/hashicorp/terraform-plugin-docs/cmd/tfplugindocs
-	@ cd tools && go install github.com/goreleaser/goreleaser/v2
-	@ cd tools && go install github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen
-	@ cd tools && go install go.uber.org/mock/mockgen
-
-.PHONY: tools-golangci-lint
-tools-golangci-lint: ## Download golangci-lint locally if necessary.
+tools: $(GOBIN)  ## Download golangci-lint locally if necessary.
 	@[[ -f $(GOBIN)/golangci-lint ]] || curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s -- -b $(GOBIN) v2.2.1
 
 .PHONY: golangci-lint
@@ -282,22 +275,21 @@ check-docs: docs-generate  ## Check uncommitted changes on docs
 
 
 .PHONY: setup
-setup: tools ## Setup the dev environment
-
+setup: tools vendor ## Setup the dev environment
 
 .PHONY: release-snapshot
 release-snapshot: tools ## Make local-only test release to see if it works using "release" command
-	@ $(GOBIN)/goreleaser release --snapshot --clean
+	@ go tool github.com/goreleaser/goreleaser/v2 release --snapshot --clean
 
 
 .PHONY: release-no-publish
 release-no-publish: tools check-sign-release ## Make a release without publishing artifacts
-	@ $(GOBIN)/goreleaser release --skip=publish,announce,validate  --parallelism=2
+	@ go tool github.com/goreleaser/goreleaser/v2 release --skip=publish,announce,validate  --parallelism=2
 
 
 .PHONY: release
 release: tools check-sign-release check-publish-release ## Build, sign, and upload your release
-	@ $(GOBIN)/goreleaser release --clean  --parallelism=4
+	@ go tool github.com/goreleaser/goreleaser/v2 release --clean  --parallelism=4
 
 
 .PHONY: check-sign-release

docs/resources/elasticsearch_security_system_user.md

@@ -41,10 +41,10 @@ resource "elasticstack_elasticsearch_security_system_user" "kibana_system" {
 
 ### Optional
 
-- `elasticsearch_connection` (Block List, Max: 1, Deprecated) Elasticsearch connection configuration block. This property will be removed in a future provider version. Configure the Elasticsearch connection via the provider configuration instead. (see [below for nested schema](#nestedblock--elasticsearch_connection))
+- `elasticsearch_connection` (Block List, Deprecated) Elasticsearch connection configuration block. (see [below for nested schema](#nestedblock--elasticsearch_connection))
 - `enabled` (Boolean) Specifies whether the user is enabled. The default value is true.
-- `password` (String, Sensitive) The user’s password. Passwords must be at least 6 characters long.
-- `password_hash` (String, Sensitive) A hash of the user’s password. This must be produced using the same hashing algorithm as has been configured for password storage (see https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#hashing-settings).
+- `password` (String, Sensitive) The user's password. Passwords must be at least 6 characters long.
+- `password_hash` (String, Sensitive) A hash of the user's password. This must be produced using the same hashing algorithm as has been configured for password storage (see https://www.elastic.co/guide/en/elasticsearch/reference/current/security-settings.html#hashing-settings).
 
 ### Read-Only
 

generated/alerting/api_alerting_mocks.go

@@ -0,0 +1,3 @@
+package alerting
+
+//go:generate go tool go.uber.org/mock/mockgen -destination=./api_alerting_mocks.go -package=alerting -source ./api_alerting.go AlertingAPI

generated/alerting/mocks.go

@@ -0,0 +1,3 @@
+package connectors
+
+//go:generate go tool github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen -package connectors -o ./connectors.gen.go -generate "types,client" ./bundled.yaml

generated/connectors/connectors.go

@@ -7,12 +7,12 @@ oas_url    := https://raw.githubusercontent.com/elastic/kibana/$(github_ref)/oas
 
 .PHONY: all
 all: download transform generate ## Fetch, bundle, transform, and generate the API
-	
+
 
 .PHONY: download
 download: oas.yaml ## Download the remote schema
 
-oas.yaml: 
+oas.yaml:
 	curl -sSfo oas.yaml "$(oas_url)"
 
 .PHONY: transform
@@ -21,7 +21,7 @@ transform: download ## Transform and filter the schema
 
 .PHONY: generate
 generate: ## Generate the API
-	go run github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen@v2.4.1 -config oapi-config.yaml ./oas-filtered.yaml
+	go tool github.com/oapi-codegen/oapi-codegen/v2/cmd/oapi-codegen -config oapi-config.yaml ./oas-filtered.yaml
 
 
 .PHONY: clean