Impact Score: 5/10
OpenTofu v1.13.2 โ Release Notes & Engineering Impact
Source available โ automated, not human-reviewed
Component: opentofu ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
OpenTofu v1.13.2. Source highlight: SECURITY ADVISORIES:
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
๐ง Bug Fixes & Patches (4)
- Lifecycle destroy will no longer crash when given an expression with references (#4648)
- `tofu workspace select` and `tofu workspace delete` autocompletion predicts from the existing workspaces. This restores the behavior pre-v1.13 (#4706)
- Combined usage of `-chdir` and `-version` flags does not show an error anymore but instead shows the version of the `tofu` binary (#4707)
- Symbol libraries are now saved in plan files and no-longer prevent applying of plan files (#4734)
๐ View Raw Release Notes (Original Developer Log)
### SECURITY ADVISORIES:
- Previous versions of OpenTofu could potentially experience excessive CPU usage if connecting to an attacker-controlled HTTP2 server while installing dependencies in `tofu init`. ([#4681](https://github.com/opentofu/opentofu/pull/4681))
- Filter out compromised intermediate certificates ([#4750](https://github.com/opentofu/opentofu/pull/4750))
### BUG FIXES:
- Lifecycle destroy will no longer crash when given an expression with references ([#4648](https://github.com/opentofu/opentofu/pull/4648))
- `tofu workspace select` and `tofu workspace delete` autocompletion predicts from the existing workspaces. This restores the behavior pre-v1.13 ([#4706](https://github.com/opentofu/opentofu/pull/4706))
- Combined usage of `-chdir` and `-version` flags does not show an error anymore but instead shows the version of the `tofu` binary ([#4707](https://github.com/opentofu/opentofu/pull/4707))
- Symbol libraries are now saved in plan files and no-longer prevent applying of plan files ([#4734](https://github.com/opentofu/opentofu/pull/4734))