[Bug]: Removing firewall_ids section from resource description of server does NOT remove the firewall from the server

[mkarg]

What happened?

I have removed the section firewall_ids from resource "hcloud_server", then executed tofu plan to see the resulting action. Strange but true, tofu told me that it won't change anything, while hcloud firewall list told me that the firewall is assigned to that hcloud server.

What did you expect to happen?

I expected that tofu plan tells me it will remove the firewall from the hcloud server.

Please provide a minimal working example

terraform {
  required_providers {
    hcloud = {
      source  = "hetznercloud/hcloud"
      version = "1.49.1"
    }
  }
}

variable "hetzner_token" {
  type = string
}

provider "hcloud" {
  token = var.hetzner_token
}

resource "hcloud_firewall" "f" {
  name = "f"

  rule {
    direction  = "in"
    protocol   = "icmp"
    source_ips = [
      "0.0.0.0/0",
      "::/0"
    ]
  }
}

resource "hcloud_server" "s" {
  name         = "s"
  image        = "debian-12"
  server_type  = "cax11"
  datacenter   = "fsn1-dc14"
  firewall_ids = [
    hcloud_firewall.f.id
  ]
}

[jooola]

Closing this ticket as it is a duplicate of #998