update upgrade guide and cosmosdb doc with breaking change (#27165)

website/docs/guides/4.0-upgrade-guide.html.markdown

@@ -703,6 +703,7 @@ The deprecated data source has been superseded by `azurerm_mssql_server` and has
 * The deprecated `enable_free_tier` property has been removed in favour of the `free_tier_enabled` property.
 * The deprecated `enable_automatic_failover` property has been removed in favour of the `automatic_failover_enabled` property.
 * The `minimal_tls_version` property now defaults to `Tls12`.
+* The `ip_range_filter` property is now a set that will only accept valid CIDR values.
 
 ### `azurerm_cosmosdb_sql_container`
 

website/docs/r/cosmosdb_account.html.markdown

@@ -136,7 +136,7 @@ The following arguments are supported:
 
 * `geo_location` - (Required) Specifies a `geo_location` resource, used to define where data should be replicated with the `failover_priority` 0 specifying the primary location. Value is a `geo_location` block as defined below.
 
-* `ip_range_filter` - (Optional) CosmosDB Firewall Support: This value specifies the set of IP addresses or IP address ranges in CIDR form to be included as the allowed list of client IPs for a given database account. IP addresses/ranges must be comma separated and must not contain any spaces.
+* `ip_range_filter` - (Optional) A set of IP addresses or IP address ranges in CIDR form to be included as the allowed list of client IPs for a given database account. For example `["55.0.1.0/24", "55.0.2.0/24"]`.
 
 ~> **Note:** To enable the "Allow access from the Azure portal" behavior, you should add the IP addresses provided by the [documentation](https://docs.microsoft.com/azure/cosmos-db/how-to-configure-firewall#allow-requests-from-the-azure-portal) to this list.