OpenTofu 1.12.9
security!
OpenTofu v1.12.9 was published with one security change: it filters out compromised intermediate certificates. The release notes do not describe the affected code path or the certificate trust mechanism in further detail.
What changes for platform teams
Platform teams running OpenTofu should plan to upgrade to pick up the certificate filtering. The source does not say whether the fix affects provider downloads or state backends.
Changes
- Filter out compromised intermediate certificatessecurity
Full release notes ↗ · all OpenTofu releases
written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules