Impact Score: 5/10
OpenTofu v1.10.6 โ Release Notes & Engineering Impact
Source available โ automated, not human-reviewed
Component: opentofu ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
OpenTofu v1.10.6. Source highlight: Upgrade go from 1.24.4 to 1.24.6 to fix GO-2025-3849 (3127)
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
๐ง Bug Fixes & Patches (3)
- Upgrade go from 1.24.4 to 1.24.6 to fix GO-2025-3849 (3127)
- Upgrade github.com/openbao/openbao/api/v2 from 2.1.0 to 2.3.0 to fix GO-2025-3783 (3134)
- Fixed crash when processing multiple deprecated marks on a complex object (#3105)
๐ View Raw Release Notes (Original Developer Log)
## 1.10.6
UPGRADE NOTES:
- Upgrade go from 1.24.4 to 1.24.6 to fix [GO-2025-3849](https://pkg.go.dev/vuln/GO-2025-3849) ([3127](https://github.com/opentofu/opentofu/pull/3127))
- Upgrade github.com/openbao/openbao/api/v2 from 2.1.0 to 2.3.0 to fix [GO-2025-3783](https://pkg.go.dev/vuln/GO-2025-3783) ([3134](https://github.com/opentofu/opentofu/pull/3134))
* The upgrade is necessary to silence the security scanner and does not affect the actual state encryption provided by OpenBao.
BUG FIXES:
- Variables with validation no longer interfere with the destroy process ([#3131](https://github.com/opentofu/opentofu/pull/3131))
- Fixed crash when processing multiple deprecated marks on a complex object ([#3105](https://github.com/opentofu/opentofu/pull/3105))
- When OpenTelemetry encounters errors, log it at the warning level instead of panic ([#3235](https://github.com/opentofu/opentofu/pull/3235))
**Full Changelog**: https://github.com/opentofu/opentofu/compare/v1.10.5...v1.10.6