OpenTofu v1.11.6

Changes

• *Running tofu apply -refresh-only with a configuration that contains ephemeral resources does not fail anymore because the refresh produced changesfixed
• *Fixed tofu init crashing when a module version uses a variable and the module is referenced from a test file.fixed
• *Fixed provider-defined functions in import block id expressions causing "BUG: Uninitialized function provider" error.fixed
• *Tofu test no longer fails during cleanup when using a mocked version of a resource type with write-only attributes.fixed
• *A malicious remote TLS server can no longer deadlock OpenTofu by sending multiple key update messages in a single record.fixed
• *When installing module packages from "tar" archives, OpenTofu now accepts only a limited number of sparse file entries to avoid unbounded memory usage from maliciously-crafted archives containing many sparse regions.fixed