OpenTofu v1.13.2stable Released Oct 21, 2026
Impact Score: 5/10

OpenTofu v1.13.2 โ€” Release Notes & Engineering Impact

Source available โ€” automated, not human-reviewed

Component: opentofu ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.

Analysis updated: 2026-11-01.

Compatibility not verified โ€” check source notes
๐Ÿ“„ .MD
โšก Executive Summary (TL;DR)

OpenTofu v1.13.2. Source highlight: SECURITY ADVISORIES:

Who Does This Impact? (Role-Based Analysis)

๐Ÿ’ป Software Engineers & Devs

Check the source notes against the package and APIs you use before upgrading.

๐Ÿ“Š Product & Engineering Leads

Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.

โš™๏ธ DevOps & Security

Verify the target version, runtime requirements and rollback procedure in the official documentation.

๐Ÿ”ง Bug Fixes & Patches (4)

  • Lifecycle destroy will no longer crash when given an expression with references (#4648)
  • `tofu workspace select` and `tofu workspace delete` autocompletion predicts from the existing workspaces. This restores the behavior pre-v1.13 (#4706)
  • Combined usage of `-chdir` and `-version` flags does not show an error anymore but instead shows the version of the `tofu` binary (#4707)
  • Symbol libraries are now saved in plan files and no-longer prevent applying of plan files (#4734)
๐Ÿ“„ View Raw Release Notes (Original Developer Log)
### SECURITY ADVISORIES: - Previous versions of OpenTofu could potentially experience excessive CPU usage if connecting to an attacker-controlled HTTP2 server while installing dependencies in `tofu init`. ([#4681](https://github.com/opentofu/opentofu/pull/4681)) - Filter out compromised intermediate certificates ([#4750](https://github.com/opentofu/opentofu/pull/4750)) ### BUG FIXES: - Lifecycle destroy will no longer crash when given an expression with references ([#4648](https://github.com/opentofu/opentofu/pull/4648)) - `tofu workspace select` and `tofu workspace delete` autocompletion predicts from the existing workspaces. This restores the behavior pre-v1.13 ([#4706](https://github.com/opentofu/opentofu/pull/4706)) - Combined usage of `-chdir` and `-version` flags does not show an error anymore but instead shows the version of the `tofu` binary ([#4707](https://github.com/opentofu/opentofu/pull/4707)) - Symbol libraries are now saved in plan files and no-longer prevent applying of plan files ([#4734](https://github.com/opentofu/opentofu/pull/4734))