# 3.7.4

**Release Date:** June 8, 2026

---

## 🐛 Bug Fixes

### Terraform Modules

#### Rescue Pre-#742 OTEL SP Role Assignments 🛡️

**Module:** `identity`

**Commit:** [`85fca4b9`](https://github.com/saif-corp/forge/commit/85fca4b9) · [#776](https://github.com/saif-corp/forge/pull/776)

Adds `moved` blocks that redirect the old `otel_header_np[0]` / `otel_header_prod[0]` addresses to the `_sp` slot, preserving existing Service Principal OTEL header Key Vault role assignments in-place for workspaces that haven't applied since [#742](https://github.com/saif-corp/forge/pull/742).

Without this fix, workspaces still tracking an SP assignment at the old address would plan a ForceNew on the next apply — destroying the working SP assignment unnecessarily before creating the new UAMI assignment.

**Behaviour by workspace state:**

| Workspace state | Result |
|---|---|
| SP at old root address (pre-#742) | Renamed to `_sp` in-place — no Azure change; UAMI created fresh |
| SP at old module address | Renamed to `_sp` in-place — no Azure change; UAMI created fresh |
| Already at `_uami` / `_sp` (post-#770) | `from` address absent from state — blocks don't fire |

**Affected files:**

- `src/terraform/saif-resources/modules/identity/moved.tf` — recreated with `_sp` destinations
- `src/terraform/saif-web-service/moved.tf`
- `src/terraform/saif-event-subscriber-service/moved.tf`
- `src/terraform/saif-api-service/moved.tf`
- `src/smithy/infra/bot/moved.tf`

#### Remove Stale `depends_on` from OTEL SP Resources 🧹

**Module:** `identity`

**Commit:** [`7c16f445`](https://github.com/saif-corp/forge/commit/7c16f445) · [#776](https://github.com/saif-corp/forge/pull/776)

Removes the `depends_on` guard from `otel_header_np_sp` and `otel_header_prod_sp` that was added to prevent a 409 race condition. The moved blocks above eliminate the scenario the guard was protecting against, making it unnecessary.

---

## 🔄 Breaking Changes

None in this release ✅

---

## 📋 Additional Notes

- Total commits: 2
- Files changed: 6
- Contributors: Emmitt Johnson

---

### Support

- 📧 Teams Support Channel: [Support](https://teams.microsoft.com/l/channel/19%3Acb611810fb0b42b080cfff5590bdd51c%40thread.tacv2/Support?groupId=514d2dac-2d62-48ce-bf99-0fa0ce39469c&tenantId=a86cb8ed-369b-4df5-ace5-43811f6e08cf)

---