OpenTofu v1.12.11 — Release Notes & Engineering Impact
OpenTofu v1.12.11. Source highlight: Fixed panic when provided invalid state encryption configuration. (#4784)
72 tracked entries. Older history is imported progressively; see source coverage.
OpenTofu v1.12.11. Source highlight: Fixed panic when provided invalid state encryption configuration. (#4784)
OpenTofu v1.13.2. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.9. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.8. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.7. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.13.1. Source highlight: `tofu show -json <planfile>` now works again when ephemeral resources are present in the configuration. (4623).
OpenTofu v1.13.0. Source highlight: We're proud to announce that OpenTofu 1.13.0 is now officially available! 🎉
OpenTofu v1.12.6. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.11.14. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.5. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.11.13. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.4. Source highlight: `tofu plan -out` no longer fails when the plan includes a resource with `lifecycle { destroy = false }` that needs replacement, which previously errored with `invalid change action ForgetThenCreate`. (#4324)
OpenTofu v1.11.12. Source highlight: Moved block now correctly compares provider source addresses. (#4280)[https://github.com/opentofu/opentofu/pull/4280]
OpenTofu v1.11.11. Source highlight: Fixes an incomplete OTEL dependencies upgrade from the previous patch release. (#4303)
OpenTofu v1.12.3. Source highlight: Properly handle `TF_ENCRYPTION` with only blank spaces. (#4265)
OpenTofu v1.11.10. Source highlight: Update documentation to clarify the usage restriction of ephemeral values in `lifecycle.enabled`. (#4220)
OpenTofu v1.11.9. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.2. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.1. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.12.0. Source highlight: We're proud to announce that OpenTofu 1.12.0 is now officially available! 🎉
OpenTofu v1.11.8. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.11.7. Source highlight: When installing provider packages into a local cache directory, the installer will now return an error if a conflicting entry is already present in the cache that doesn't match the expected checksum. Previously OpenTofu would just silently write over the existing entry in that case. (#4082)
OpenTofu v1.10.10. Source highlight: When installing provider packages into a local cache directory, the installer will now return an error if a conflicting entry is already present in the cache that doesn't match the expected checksum. Previously OpenTofu would just silently write over the existing entry in that case. (#4082)
OpenTofu v1.11.6. Source highlight: Running `tofu apply -refresh-only` with a configuration that contains ephemeral resources does not fail anymore because the refresh produced changes (#3776)
OpenTofu v1.11.5. Source highlight: Add `universe_domain` option in the gcs backend to support sovereign GCP services (https://github.com/opentofu/opentofu/issues/3758)
OpenTofu v1.10.9. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.11.4. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.11.3. Source highlight: Fix crash when the executed configuration contains an import block that points to unexisting configuration block (#3616)
OpenTofu v1.11.2. Source highlight: The change from #2643, that was announced previously in v1.11.0, has been reverted in this release. OpenTofu will no longer directly recommend using the `-exclude=` option to work around problems caused by unknown values in provider configurations.
OpenTofu v1.11.1. Source highlight: Fixed regression where import validation would incorrectly flag variables used in for_each statements within import blocks (#3564)
OpenTofu v1.11.0. Source highlight: We're proud to announce that OpenTofu 1.11.0 is now officially available! 🎉
OpenTofu v1.10.8. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.10.7. Source highlight: SECURITY ADVISORIES:
OpenTofu v1.10.6. Source highlight: Upgrade go from 1.24.4 to 1.24.6 to fix GO-2025-3849 (3127)
OpenTofu v1.9.4. Source highlight: Variables with validation no longer interfere with the destroy process (#3131)
OpenTofu v1.10.5. Source highlight: Fixed issue where usage of TF_PLUGIN_CACHE_DIR could result in unexpected lock contention errors (#3090)
OpenTofu v1.10.4. Source highlight: Fixed crash where sensitive set values used in for_each could cause a panic. (#3070)
OpenTofu v1.9.3. Source highlight: Fixed incorrect approach to mocking provider "ReadResource" calls in test. (#3068)
OpenTofu v1.8.11. Source highlight: Fixed incorrect approach to mocking provider "ReadResource" calls in test. (#3068)
OpenTofu v1.7.10. Source highlight: Reduced calls to ListKeys in azure backend (for rate limiting). (#3083)
OpenTofu v1.7.9. Source highlight: OpenTofu will no longer crash in a rare case where a dynamically-invalid expression has its error suppressed by `try` or `can` and then that expression becomes relevant for deciding whether to report a "change outside of OpenTofu" in the human-oriented plan diff. (#2988)
OpenTofu v1.8.10. Source highlight: OpenTofu will no longer crash in a rare case where a dynamically-invalid expression has its error suppressed by `try` or `can` and then that expression becomes relevant for deciding whether to report a "change outside of OpenTofu" in the human-oriented plan diff. (#2988)
OpenTofu v1.9.2. Source highlight: OpenTofu will no longer crash in a rare case where a dynamically-invalid expression has its error suppressed by `try` or `can` and then that expression becomes relevant for deciding whether to report a "change outside of OpenTofu" in the human-oriented plan diff. (#2988)
OpenTofu v1.10.3. Source highlight: OpenTofu will no longer crash in a rare case where a dynamically-invalid expression has its error suppressed by `try` or `can` and then that expression becomes relevant for deciding whether to report a "change outside of OpenTofu" in the human-oriented plan diff. (#2988)
OpenTofu v1.10.2. Source highlight: S3 backend now correctly sends the `x-amz-server-side-encryption` header for the lockfile. (#2870)
OpenTofu v1.10.1. Source highlight: Fix `TF_APPEND_USER_AGENT` handling in the S3 remote state backend. (#2955)
OpenTofu v1.10.0. Source highlight: We're thrilled to announce the release of OpenTofu 1.10.0, our most comprehensive update yet! This release represents months of dedicated work from our community, introducing some fantastic features that will improve how OpenTofu users manage and distribute infrastructure as code.
OpenTofu v1.9.1. Source highlight: Provider used in import is correctly identified. (#2336)
OpenTofu v1.8.9. Source highlight: Provider used in import is correctly identified. (#2336)
OpenTofu v1.7.8. Source highlight: Provider used in import is correctly identified. (#2336)