Terraform

Summary

Fixed child module validation to correctly raise errors or warnings for invalid blocks (list, import, backend, cloud).

Summary

Fixed terraform init error when installing providers from a service‑discovery alias (e.g., localterraform.com).

Summary

Added concurrency safety to configs.Parser and SourceBundleParser

Summary

Fixed JSON plan output so resources removed via a removed block are no longer incorrectly listed under planned values.

Summary

Added support for module version evaluating to null in dynamic module sources.

Summary

Add Linux s390x (zLinux) build generation

Summary

Fixed migration of resources in deeply nested modules with implicit provider configurations.

Summary

Added output values to plan component instance change description for stacks.

Summary

Fixed crashes and panics related to invalid configuration blocks, undeclared variable values, and modules without expanded instances

Summary

Added Windows ARM64 build support, S3 backend authentication via aws login, a new convert function, and enabled variables/locals in module source and version attributes; introduced deprecated attributes on variables and outputs that emit...

Summary

Fix Terraform Stacks plugin installation error (issue 38406)

Summary

Prevent crash when displaying relevant attributes after provider upgrades

Summary

Upgrade Go version to 1.25.8.

Summary

terraform test now returns an error when the provider configuration is invalid

Summary

Fixed Terraform stacks validation failure when resolving relative module paths.

Summary

Fix nil pointer dereference crash during terraform init when backend returns an error

Summary

Fixed stack handling by converting absolute `path.module` and `path.root` values to relative paths

Summary

Added component registry source resolution support for Terraform Stacks.

Summary

Allow ephemeral outputs in root modules during testing.

Summary

Introduce List Resources via .tfquery.hcl and a new `terraform query` command that can generate import configurations and support offline validation

Summary

Fixed impure functions that could cause templatefile consistency checks to fail

Summary

Fixed crash when displaying cloud plan without a cloud backend

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Fixed test cleanup node execution order.

Summary

Fix regression where `terraform test` with zero tests returned a non-zero exit code

Summary

Introduced `terraform stacks` CLI for stack operations and added GA `terraform rpcapi` for internal RPC usage.

Summary

Fixed a bug where partial ephemeral values were incorrectly rejected in ephemeral outputs.

Summary

Include resource identity in import apply UI output

Summary

Added Terraform backend for OCI Object Storage and new import block identity attribute support.

Summary

Disabled X25519Kyber768Draft00 cipher in TLS to avoid timeouts with certain AWS firewalls

Summary

Fixed CLI crash when using remote backend with post-plan tasks in HCP Terraform

Summary

Added Azure backend support for ADO Pipelines OIDC token refresh using request URL, token, and new service connection ID.

Summary

Temporarily revert Windows symlink handling to avoid conflicts with existing junction configurations.

Summary

Add write‑only resource attributes and make S3 native state locking generally available, deprecating DynamoDB‑based locking.

Summary

element(...): fixed crash on negative tuple index

Summary

Fixed empty map type conversion to return correct type information

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Fixed CLI parsing of complex environment variable values during apply.

Summary

Introduce Ephemeral resources and values plus an ephemeralasnull function for non‑persisted data, expanding Terraform’s configuration model.

Summary

init now highlights missing subdirectories of registry modules in error messages.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Fix crashes in the plan renderer when handling unknown nested blocks.

Summary

Cloud block can now interact with workspaces that have HCP resource IDs.

Summary

Fixed core destroy plan validation to avoid failures with incomplete state

Summary

Terraform now returns a more specific error when a variable validation rule fails and the error message source is unknown.

Summary

Fix panic caused by self-referencing direct instances in count and for-each meta attributes.

Summary

Upgrade go-getter library to v1.7.5, fixing CVE‑2024‑6257 (may impact init/get performance on large repos).

Summary

Added general‑expression support for input variable validation and introduced a new `templatestring` built‑in for dynamic template rendering.

Summary

Fix duplicate warning diagnostics when providing values for unknown variables in test run blocks.

Summary

Fixed exponential slowdown in core when modules use depends_on.

Summary

Fixed panic when providers are configured within an overridden module during terraform test.

Summary

Fixed panics in apply, plan, and test commands and restored TF_ENV variables for test modules

Summary

Fix crashes in terraform plan/apply when referencing missing or unchanged module outputs, and when moving or importing modules with complex attributes.

Summary

Introduced provider‑contributed functions (provider::name::func()) and new built‑in functions like issensitive, decode/encode tfvars, and encode expr for richer configuration logic.

Summary

Fixed S3 backend retry failure caused by transport stream rewind error during network issues

Summary

Fixed automatic loading of variable files in terraform test on Windows platforms.

Summary

Fix crash in terraform test when dynamic typed attributes lack values in mocks

Summary

Fixed S3 backend error when IAM lacks access to the default workspace prefix.

Summary

Fixed crash in `terraform test` when variables or functions are referenced inside file-level variable blocks.

Summary

Introduced extensive testing capabilities: new mock blocks (provider, override resource/data/module, removed), ability for test providers to reference variables, outputs, and functions, and simplified destroy ordering.

Summary

Fix terraform test destroy behavior for run blocks without infrastructure, avoiding verification failures.

Summary

Fix parsing errors in S3 backend shared config and credentials files

Summary

Add endpoints.sso parameter to backend/s3 for overriding AWS SSO API endpoint

Summary

Added skip_s3_checksum parameter to backend/s3 to disable checksum on S3 uploads.

Summary

Improved terraform test performance with provisioners and optimized variable parsing per run block.

Summary

Added support for skipping account‑ID lookup in the S3 backend for AWS API implementations lacking IAM, STS, or metadata services.

Summary

Added GA `terraform test` command with .tftest.hcl run blocks; introduced numerous S3 backend config changes (nested assume_role/endpoints, new env vars, custom CA bundle, EC2 metadata, retry mode, allowed/forbidden account IDs) and depr...

Summary

Fix incompatibility with Terraform 1.5+ state files that include check block results in remote state handling.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Fix terraform init to reject downloading remote modules to invalid paths.

Summary

Fixed unsafe read panic when reading from multiple Terraform remote state data sources.

Summary

Fixes a crash in `terraform init` when backend blocks contain invalid configuration.

Summary

Fixed crash when nested data sources are targeted by `terraform import`.

Summary

Fixed a core bug where Terraform could fail evaluating module outputs used in provider configs during destroy operations

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Fixed core plan validation error for providers using nested set attributes with computed object attributes.

Summary

Added independent check blocks for assertions and scoped data sources, plus new plantimestamp and strcontains functions.

Summary

Fix plan rendering bugs with null strings, unknown map values, and duplicate renders on older TFE backends

Summary

Revert change from issue 32892 to address an upstream crash

Summary

Rebuilt version 1.4.3 as 1.4.4 with the missing CGO_ENABLED=0 flag set correctly.

Summary

Fixed handling of sensitive values in non-root module outputs to avoid marking the entire output as sensitive.

Summary

Fix crash when using setproduct in Terraform configurations

Summary

Fixed module overriding behavior for depends_on and ensured provider version mirroring respects lock files

Summary

Updated `textencodebase64` to correctly encode the Euro symbol for GB18030, GBK, and CP936 encodings per standards.

Summary

Fix crash when planning to remove already deposed resource instances.

Summary

Fixed a rare bug causing inaccurate before/after sensitive annotations in JSON plan output for deeply nested structures, preventing glitched display in Terraform Cloud.

Summary

Fix exact version constraint parsing for modules using prerelease versions

Summary

Fixed a crash scenario where Terraform would panic if an orphaned resource instance with condition checks was deleted externally.

Summary

Fixed crashes and serialization errors for empty destroy plans and optional object defaults.

Summary

Fixed multiple bugs causing crashes, invalid refreshes, and unnecessary evaluations during destroy and apply operations.

Summary

Fix error when removing a resource that the provider has already deleted.

Summary

Fixed crash caused by Terraform re-registering output value preconditions during apply phase

Summary

Enabled CGO for macOS (darwin) Terraform binaries to address DNS resolver issues on recent macOS versions.

Summary

Added optional object type attributes with default values, new string functions (startswith, endswith) and the timecmp timestamp function.

Summary

Adds a link to documentation when a checksum is missing from the lock file during `terraform init`.

Summary

Flatten function no longer panics when given a null value treated as a list, set, or tuple.

Summary

Added validation for direct references to deprecated computed attributes in configuration.

Summary

Add warnings and guidance (with documentation link) for terraform init failures related to .terraform.lock.hcl and missing checksums.

Summary

Fixed error message displayed when a prerelease field is included in the required version global constraint.

Summary

Improved validation of required providers to avoid duplicate required names

Summary

Deprecated several remote state backends (artifactory, etcd, etcdv3, manta, swift) due to being unmaintained and potentially vulnerable

Summary

Improved error message for invalid variable arguments with spaces.

Summary

Fixed SSH provisioner connections failing with signed ed25519 keys.

Summary

Adds built‑in TF_TOKEN environment variable support, precondition/postcondition blocks, and a replace_triggered_by lifecycle argument for richer validation and resource replacement.

Summary

Fix CLI crashes related to sensitive values in sets and double‑quoted map keys, and prevent core errors when handling data sources with incompatible schema changes.

Summary

Fix missing identifying attributes (e.g. "id", "name") in CLI plan diffs for nested objects

Summary

Optimize terraform show JSON generation to avoid quadratic performance on deeply nested objects, preventing long runtimes and timeouts

Summary

- CLI console type function now produces a diagnostic error for complex usages instead of crashing.

Summary

Updated AWS SDK for S3 backend to support the ap‑southeast‑3 region.

Summary

Fixed handling of non‑nullable variables when null inputs are provided, ensuring default values are applied correctly

Summary

Fix provider lock file cleanup during `terraform init` to prevent missing or corrupted provider plugin errors.

Summary

Fix panic when using -target with moved blocks inside modules.

Summary

Fixed crash caused by orphaned module instances when count or for_each values changed.

Summary

Critical bug in v1.1.0/1.1.1 could cause Terraform to forget all existing infrastructure on apply; upgrade immediately.

Summary

Added support for STS endpoint in backend/OSS.

Summary

Fix panic when looking up OSS endpoints

Summary

Fixed panic when planning new resources with nested object attributes

Summary

CLI now validates required version early during init to report incompatibility before syntax errors.

Summary

Removed obsolete check for computed attributes with optional structural attributes.

Summary

Enhanced S3 backend with improved SSO handling and added new AWS SDK endpoints.

Summary

Add output change summary to Terraform plan JSON logs for parity with UI

Summary

Fixed backend/consul bug where oversized state values could be rejected.

Summary

Add resource drift info to Terraform plan JSON logs and support provider protocol v6 in automatic installer

Summary

Fixed crash in `terraform show` when rendering JSON plans with sensitive values in state.

Summary

Add sensitivity flag to JSON plan output for state values

Summary

Terraform v1.0.0 is a stability-focused release with no new features, essentially matching v0.15.5.

Summary

Suppress spurious "Objects have changed" notifications for internal SDK quirks during plan and apply.

Summary

Terraform now reports out‑of‑band resource changes in plan output and adds a “refresh‑only” planning mode to write those changes to state, superseding the old refresh command.

Summary

Add data to terraform show JSON output indicating which changes caused a resource replacement

Summary

Added `replace=` planning option to `terraform plan` and `apply` to force resource replacement and preview the effect before applying.

Summary

Updated CLI to use the latest HashiCorp public key

Summary

Update CLI to use the latest HashiCorp public key.

Summary

Imported from changelog source; review and generate a concise summary before publishing.

Summary

Updated the CLI's HashiCorp public key.

Summary

Improved Terraform functions to preserve sensitive attribute values in results, enhancing security handling.

Summary

Removed many deprecated constructs (list/map functions, vendor provisioners, legacy provider alias blocks, gcs path and atlas backends, init/destroy options) and introduced explicit configuration aliases – breaking changes for upgrade.

Summary

Fix CLI to rewrite provider lock file only when its contents have changed.

Summary

Fix error when migrating existing state to a new workspace on Terraform Cloud/Enterprise (backend/remote).

Summary

Updated HCL to prevent panics and errors when indexing sensitive values in configs and provisioners

Summary

CLI now emits an “already installed” event when a provider is already installed

Summary

Added support for AWS Single Sign‑On cached credentials in the S3 backend.

Summary

Added SCRAM‑SHA‑256 authentication support to the Postgres backend.

Summary

Disables remote Terraform version check for plan and apply, fixing custom version bundle usage in Terraform Enterprise.

Summary

Remote state data source no longer enforces Terraform version checks, allowing access to state files from newer Terraform versions until an incompatible version upgrade is required.

Summary

Remote state data source no longer enforces Terraform version checks on the state file

Summary

Added "raw" output mode for terraform output, providing raw string representation of primitive values while retaining json mode for all types.

Summary

Disable remote backend version compatibility check for workspaces set to the "latest" pseudo version.

Summary

Add remote backend version compatibility verification with optional ignore‑remote‑version flag.

Summary

Added support for sensitive input variables and lock file generation, plus hardened TLS verification and client‑side downgrade protection.

Summary

Fix Terraform provider configuration attachment issue (26567).

Summary

Deprecate built‑in vendor provisioners (habitat, puppet, chef, salt) with future removal planned.

Summary

Fix crash with Terraform binary on OpenBSD

Summary

Added network‑based provider mirrors, enabling HTTP server sources for provider packages (feature).

Summary

Added >32‑bit address support for cidrsubnet/cidrhost and allowed top‑level provider plugin directories to be symlinks (feature).

Summary

Added count/for_each and depends_on support for modules, plus custom variable validation blocks and a new Kubernetes backend.

Summary

Fix core memory usage issue causing quadratic growth when many instances are used by avoiding full resource state per instance.