OpenTofu v1.12.3stable Released Jun 18, 2026
Impact Score: 5/10

OpenTofu v1.12.3 โ€” Release Notes & Engineering Impact

Source available โ€” automated, not human-reviewed

Component: opentofu ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified โ€” check source notes
๐Ÿ“„ .MD
โšก Executive Summary (TL;DR)

OpenTofu v1.12.3. Source highlight: Properly handle `TF_ENCRYPTION` with only blank spaces. (#4265)

Who Does This Impact? (Role-Based Analysis)

๐Ÿ’ป Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

๐Ÿ“Š Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

โš™๏ธ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

๐Ÿ”ง Bug Fixes & Patches (4)

  • Properly handle `TF_ENCRYPTION` with only blank spaces. (#4265)
  • The value resulted from the `lifecycle.enabled` evaluation now has its deprecation marks processed correctly (#4162)
  • Update documentation to clarify the usage restriction of ephemeral values in `lifecycle.enabled`. (#4220)
  • `tofu console -lock=false` now works as intended. (#4291)
๐Ÿ“„ View Raw Release Notes (Original Developer Log)
### BUG FIXES: - Properly handle `TF_ENCRYPTION` with only blank spaces. ([#4265](https://github.com/opentofu/opentofu/pull/4265)) - The value resulted from the `lifecycle.enabled` evaluation now has its deprecation marks processed correctly ([#4162](https://github.com/opentofu/opentofu/pull/4162)) - Update documentation to clarify the usage restriction of ephemeral values in `lifecycle.enabled`. ([#4220](https://github.com/opentofu/opentofu/pull/4220)) - `tofu console -lock=false` now works as intended. ([#4291](https://github.com/opentofu/opentofu/pull/4291)) ### SECURITY ADVISORIES: * Previous releases in the v1.12 series could read an arbitrary file during certain git operations via a maliciously crafted URL ([#4293](https://github.com/opentofu/opentofu/pull/4293)) * Advisory: https://github.com/opentofu/opentofu/security/advisories/GHSA-q7j3-v8qv-22vq **Full Changelog**: https://github.com/opentofu/opentofu/compare/v1.12.2...v1.12.3