platformchangelog.dev
43 tools
feedrelease

OpenTofu v1.11.4

breakingsecurity***!

Changes

  • !Modules containing local provider configurations now also reject the enabled argument, matching existing behavior for count, for_each, and depends_on.other / breaking
  • Previous releases in the v1.11 series could potentially take an excessive amount of time processing a maliciously-crafted .zip archive during either provider or module installation during tofu init.security
  • In JSON syntax, the state encryption method configuration now allows specifying keys using both normal expression syntax and using template interpolation syntax. Previously only the template interpolation syntax was allowed, which was inconsistent with other parts of the encryption configuration.fixed
  • Providers are not configured anymore with DeferralAllowed capability of OpenTofu since having that created unwanted behaviour from some providers.fixed
  • Resources containing write-only attributes now are rendered consistently during planning.fixed
5 lines1 security3 fixed1 othertyped from the source notes

Full release notes ↗ · all OpenTofu releases

Report a mistake

context

Tools

OpenTofu

Other OpenTofu releases

How this was written

The change list is the project's own release notes, sorted into change types by fixed rules. See the methodology.

Back to the feed