BUG FIXES:
tofu init
will no longer return a supurious "Backend configuration changed" error when re-initializing a working directory with identical settings, backend configuration contains references to variables or local values, and when the-backend-config
command line option is used. That combination previously caused OpenTofu to incorrectly treat the backend configuration as invalid. (#2055)- configuration generation should no longer fail when generating sensitive properties
- Provider defined functions are now supported better in child modules
- Fixed an issue where X-Terraform-Get was not being read correctly if a custom module registry returns a 200 statuscode instead of 201
SECURITY:
- Added option to enable the sensitive flag for variables used in module sources/versions and backend configurations.
- This emits a warning by default to prevent breaking compatability with previous 1.8.x versions.
- It is highly recommended to set
TOFU_ENABLE_STATIC_SENSITIVE=1
in any environments using this release. - This will be enabled by default as a breaking change in v1.9.0
BUG FIXES:
- Fixed autoloaded test tfvar files being used in non-test scenarios (#2039)
- Fixed crash when using sensitive values in module sources/versions and backend configurations (#2046)
SECURITY:
- Update go version to 1.21.11 to fix CVE-2024-24790
BUG FIXES:
- Better handling of key_provider references (#1965)
BUG FIXES:
- Fixed crash when module source is not present (#1888)
UPGRADE NOTES:
NEW FEATURES:
ENHANCEMENTS:
- Added
-show-sensitive
flag to tofu plan, apply, state-show and output commands to display sensitive data in output. (#1554) - Improved performance for large graphs when debug logs are not enabled. (#1810)
- Improved performance for large graphs with many submodules. (#1809)
- Added mutli-line support to the
tofu console
command. (#1307)
BUG FIXES:
- Fixed validation for
enforced
flag in encryption configuration. (#1711) - Fixed crash in gcs backend when using certain commands. (#1618)
- Fixed inmem backend crash due to missing struct field. (#1619)
- Added a check in the
tofu test
to validate that the names of test run blocks do not contain spaces. (#1489) tofu test
now supports accessing module outputs when the module has no resources. (#1409)- Fixed support for provider functions in tests (#1603)
- Only hide sensitive attributes in plan detail when plan on a set of resources (#1313)
- Added a better error message on
for_each
block with sensitive value of unsuitable type. (#1485) - Fix race condition on locking in gcs backend (#1342)
- Fix bug where provider functions were unusable in variables and outputs (#1689)
- Fix bug where lower-case
http_proxy
/https_proxy
env variables were no longer supported in the S3 backend (#1594) - Fixed issue with migration between versions can cause an update in-place for resources when no changes are needed. (#1640)
- Add source context for the 'insufficient feature blocks' error (#1777)
- Remove encryption diags from autocomplete (#1793)
- Ensure that using a sensitive path for templatefile that it doesn't panic(#1801)
For information on prior major and minor releases, see their changelogs: