## 1.0.0 (2026-03-16)

Complete rewrite of the VirtFusion Terraform provider.

BREAKING CHANGES:

* Provider rewritten using Terraform Plugin Framework (previously SDKv2). State from v0.x is not compatible.
* `virtfusion_ssh` resource renamed to `virtfusion_ssh_key`.
* `virtfusion_build` resource renamed to `virtfusion_server_build`.
* Server data source schema changed: `user_id` replaced with `owner_id`, resource fields (cpu_cores, memory, storage) removed from list view (available on single server data source).
* IP block `type` attribute changed from string to int64 (4=IPv4, 6=IPv6). Gateway/netmask now sourced from nested IPv4 object.

FEATURES:

* **20 managed resources**: server, server_build, server_firewall, server_ipv4, server_network_whitelist, server_traffic_block, server_power_action, server_password_reset, ssh_key, user, user_auth_token, user_server_auth_token, user_password_reset, ip_block_range, self_service_credit, self_service_resource_pack, self_service_hourly_group_profile, self_service_hourly_resource_pack, self_service_resource_group_profile, self_service_pack_servers_action.
* **30 data sources**: server, servers, servers_by_user, server_backups, server_firewall, server_templates, server_traffic, server_traffic_blocks, server_vnc, hypervisor, hypervisors, hypervisor_group, hypervisor_groups, hypervisor_group_resources, package, packages, package_templates, ip_block, ip_blocks, ssh_key, ssh_keys_by_user, user, dns_service, iso, queue_item, self_service_currencies, self_service_resource_pack, self_service_hourly_stats, self_service_report, self_service_usage.
* Automatic multipage pagination for all list data sources via `GetAllPages` client method.
* Configurable `results` attribute on all list data sources (default: 300).
* Provider endpoint accepts hostname, full URL, or URL with `/api/v1` path — normalizes automatically.
* Environment variable support: `VIRTFUSION_ENDPOINT` and `VIRTFUSION_API_TOKEN`.

SECURITY:

* URL path injection prevention: all user-supplied strings are escaped with `url.PathEscape` before URL interpolation.
* Sensitive attributes: `api_token`, auth token `token` and `url`, and password reset `password` fields are marked sensitive.
* API error response bodies truncated to 500 bytes to prevent leaking sensitive data.

## 0.0.3 (2023-06-16)

* Initial public release with basic server, build, and SSH key resources.