OpenTofu v1.12.5
security*!!
Changes
- Previous releases in the v1.12 series could be affected by several vulnerabilities:security
- The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake,security
- Fixed bug where implicit moves and provider address changes would incorrectly cause providers.MovedResourceState to be used in place of providers.UpgradeResourceStatefixed
3 lines2 security1 fixedtyped from the source notes