UPGRADE NOTES:
- The
cloud
andremote
backends will no longer default toapp.terraform.io
hostname and will require the hostname to be explicitly specified (#291); - The
login
andlogout
commands will no longer default toapp.terraform.io
hostname and will require the hostname to be explicitly provided as a command-line argument (#291); - prevent future possible incompatibility with states that include unknown
check
block result kinds. (#355);
NEW FEATURES:
-
tofu test
: The previously experimentaltofu test
command has been moved out of experimental. This comes with a significant change in how OpenTofu tests are written and executed.OpenTofu tests are written within
.tftest.hcl
files, controlled by a series ofrun
blocks. Eachrun
block will execute an OpenTofu plan or apply command against the OpenTofu configuration under test and can execute conditions against the resultant plan and state.
ENHANCEMENTS:
- config: OpenTofu can now track some additional detail about values that won't be known until the apply step, such as the range of possible lengths for a collection or whether an unknown value can possibly be null. When this information is available, Terraform can potentially generate known results for some operations on unknown values. This doesn't mean that Terraform can immediately track that detail in all cases, but the type system now contains the facility for that and so over time we will improve the level of detail generated by built-in functions, language operators, Terraform providers, etc. (#33234)
- jsonplan: Added
errored
field to JSON plan output, indicating whether a plan errored. (#33372) - cloud: Remote plans on cloud backends can now be saved using the
-out
flag, referenced in theshow
command, and applied by specifying the plan file name. (#33492) - config: The
import
blockid
field now accepts an expression referencing other values such as resource attributes, as long as the value is a string known at plan time. (#33618)
BUG FIXES:
- The upstream dependency that OpenTofu uses for service discovery of OpenTofu-native services such as cloud backend state storage was previously not concurrency-safe, but OpenTofu was treating it as if it was in situations like when a configuration has multiple
terraform_remote_state
blocks all using the "remote" backend. OpenTofu is now using a newer version of that library which updates its internal caches in a concurrency-safe way. (#33364) - Transitive dependencies were lost during apply when the referenced resource expanded into zero instances (#33403)
- OpenTofu will no longer override SSH settings in local git configuration when installing modules. (#33592)
- Handle file-operation errors in
internal/states/statemgr
. (#278) tofu init
: OpenTofu will no longer allow downloading remote modules to invalid paths. (#356)- tofu_remote_state: Fixed a potential unsafe read panic when reading from multiple tofu_remote_state data sources (#357)
- OpenTofu will now attempt to create the configuration directory
~/.terraform.d
on startup. (#442)
For information on prior major and minor releases, see their changelogs:
None yet