chore(deps): update terraform hashicorp/terraform to v1 #295
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
~> 0.13->~> 1.0Release Notes
hashicorp/terraform (hashicorp/terraform)
v1.13.4Compare Source
1.13.4 (October 15, 2025)
BUG FIXES:
v1.13.3Compare Source
1.13.3 (September 17, 2025)
BUG FIXES:
v1.13.2Compare Source
1.13.2 (September 10, 2025)
BUG FIXES:
test: Fix the order of execution of cleanup nodes (#37546)
apply: hide sensitive inputs when values have changed between plan and apply (#37582)
v1.13.1Compare Source
1.13.1 (August 27, 2025)
BUG FIXES:
Fix regression that caused
terraform testwith zero tests to return a non-zero exit code. (#37477)terraform test: prevent panic when resolving incomplete references (#37484)
v1.13.0Compare Source
1.13.0 (August 20, 2025)
NEW FEATURES:
terraform stacksexposes some stack operations through the cli. Useterraform stacks -usageto see available commands. (#36931)ENHANCEMENTS:
Filesystem functions are now checked for consistent results to catch invalid data during apply (#37001)
Allow successful init when provider constraint matches at least one valid version (#37137)
Performance fix for evaluating high cardinality resources (#37154)
TF Test: Allow parallel execution of teardown operations (#37169)
terraform test: Test authors can now specify definitions for external variables that are referenced within test files directly within the test file itself. (#37195)terraform test: File-level variable blocks can now reference run outputs and other variables." (#37205)skip redundant comparisons when comparing planned set changes (#37280)
type checking: improve error message on type mismatches. (#37298)
BUG FIXES:
Added a missing warning diagnostic that alerts users when child module contains an ignored
cloudblock. (#37180)Nested module outputs could lose sensitivity, even when marked as such in the configuration (#37212)
workspace: Updated validation to reject workspaces named "" (#37267)
workspace: Updated the
workspace deletecommand to reject""as an invalid workspace name (#37275)plan: truncate invalid or dynamic references in the relevant attributes (#37290)
Test run Parallelism of 1 should not result in deadlock (#37292)
static validation: detect invalid static references via indexes on objects. (#37298)
Fixes resource identity being dropped from state in certain cases (#37396)
NOTES:
terraform rpcapiis now generally available. It is not intended for public consumption, but exposes certain Terraform operations through an RPC interface compatible with go-plugin. (#37067)UPGRADE NOTES:
terraform test: External variables referenced within test files should now be accompanied by avariabledefinition block within the test file. This is optional, but users with complex external variables may see error diagnostics without the additional variable definition. (#37195)Previous Releases
For information on prior major and minor releases, refer to their changelogs:
v1.12.2Compare Source
1.12.2 (June 11, 2025)
BUG FIXES:
v1.12.1Compare Source
1.12.1 (May 21, 2025)
BUG FIXES:
Include resource identity in import apply UI output (#37044)
Fix regression during provider installation by reverting back to not sending HEAD requests. (#36998)
Avoid crash on test failure in comparison in function call (#37071)
v1.12.0Compare Source
1.12.0 (May 14, 2025)
NEW FEATURES:
ENHANCEMENTS:
Terraform Test command now accepts a -parallelism=n option, which sets the number of parallel operations in a test run's plan/apply operation. (#34237)
Logical binary operators can now short-circuit (#36224)
Terraform Test: Runs can now be annotated for possible parallel execution. (#34180)
Allow terraform init when tests are present but no configuration files are directly inside the current directory (#35040)
Terraform Test: Continue subsequent test execution when an expected failure is not encountered. (#34969)
Produce detailed diagnostic objects when test run assertions fail (#34428)
backend/oss: Supports more standard environment variables to keep same with provider setting (#36581)
Improved elapsed time display in UI Hook to show minutes and seconds in
mm:ssformat. (#36368)Update legacy term used in error messages. (Terraform Cloud agent => HCP Terraform Agent) (#36706)
importblocks: Now support importing a resource via a new identity attribute. This is mutually exclusive with theidattribute (#36703)BUG FIXES:
Refreshed state was not used in the plan for orphaned resource instances (#36394)
Fixes malformed Terraform version error when the remote backend reads a remote workspace that specifies a Terraform version constraint. (#36356)
Changes to the order of sensitive attributes in the state format would erroneously indicate a plan contained changes when there were none. (#36465)
Avoid reporting duplicate attribute-associated diagnostics, such as "Available Write-only Attribute Alternative" (#36579)
for_each expressions in import blocks should not be able to reference the import target (#36801)
UPGRADE NOTES:
Previous Releases
For information on prior major and minor releases, refer to their changelogs:
v1.11.4Compare Source
1.11.4 (April 9, 2025)
BUG FIXES:
disable X25519Kyber768Draft00 in TLS to prevent timouts with some AWS network firewalls (#36791)
write-only attributes: internal providers should set write-only attributes to null (#36824)
v1.11.3Compare Source
1.11.3 (March 26, 2025)
BUG FIXES:
Fixes unintended exit of CLI when using the remote backend and applying with post-plan tasks configured in HCP Terraform (#36686)
Modules with zero instances that contain ephemeral resources could produce an error during apply (#36719)
v1.11.2Compare Source
1.11.2 (March 12, 2025)
ENHANCEMENTS:
oidc_request_url,oidc_request_tokenand (the new)ado_pipeline_service_connection_id. (#36458)BUG FIXES:
Return error when the templatestring function contains only a single interpolation that evaluates to a null value (#36652)
Backend/azure:
subscription_idbe optional & skip unnecessary management plane API call in some setup (#36595)NOTES:
v1.11.1Compare Source
1.11.1 (March 5, 2025)
BUG FIXES:
Temporarily revert updated Windows symlink handling until we can account for known existing configurations using non-symlink junctions. (#36575)
terraform test: Fix crash when a run block attempts to cleanup after a non-applyable plan. (#36582)Updated dependency golang.org/x/oauth2 from v0.23.0 => v0.27.0 to integrate latest changes (fix for CVE-2025-22868) (#36584)
lang/funcs/transpose: Avoid crash due to map with null values (#36611)
Combining ephemeral and sensitive marks could fail when serializing planned changes (#36619)
v1.11.0Compare Source
1.11.0 (February 27, 2025)
NEW FEATURES:
Add write-only attributes to resources. Providers can specify that certain attributes are write-only. They are not persisted in state. You can use ephemeral values in write-only attributes. (#36031)
terraform test: The-junit-xmloption for the terraform test command is now generally available. This option allows the command to create a test report in JUnit XML format. Feedback during the experimental phase helped map terraform test concepts to the JUnit XML format, and new additons may happen in future releases. (#36324)S3 native state locking is now generally available. The
use_lockfileargument enables users to adopt the S3-native mechanism for state locking. As part of this change, we've deprecated the DynamoDB-related arguments in favor of this new locking mechanism. While you can still use DynamoDB alongside S3-native state locking for migration purposes, we encourage migrating to the new state locking mechanism. (#36338)ENHANCEMENTS:
init: Provider installation will utilise credentials configured in a.netrcfile for the download and shasum URLs returned by provider registries. (#35843)terraform test: Test runs now support using mocked or overridden values during unit test runs (e.g., with command = "plan"). Setoverride_during = planin the test configuration to use the overridden values during the plan phase. The default value isoverride_during = apply. (#36227)terraform test: Add newstate_keyattribute forrunblocks, allowing test authors control over which internal state file should be used for the current test run. (#36185)Updates the azure backend authentication to match the terraform-provider-azurermprovider authentication, in several ways:
(#36258)
Include
ca-certificatespackage in our official Docker image to help with certificate handling by downstream (#36486)BUG FIXES:
ephemeral values: correct error message when ephemeral values are included in provisioner output (#36427)
Attempting to override a variable during
applyviaTF_VAR_environment variable will now yield warning instead of misleading error. (#36435)backends: Fix crash when interrupting during interactive prompt for values (#36448)
Fixes hanging behavior seen when applying a saved plan with -auto-approve using the cloud backend (#36453)
Previous Releases
For information on prior major and minor releases, refer to their changelogs:
v1.10.5Compare Source
1.10.5 (January 22, 2025)
BUG FIXES:
element(...): no longer crashes when asked for a negative index into a tuple. (#36376)
Updated dependency
github.com/hashicorp/go-slugv0.16.0=>v0.16.3to integrate latest changes (fix for CVE-2025-0377) (#36273)jsondecode(...): improved error message when objects contain duplicate keys (#36376)
v1.10.4Compare Source
1.10.4 (January 8, 2025)
BUG FIXES:
type conversion: Empty map conversions now return correct type information (#36262)
terraform console: Fix crash when printing ephemeral values (#36267)v1.10.3Compare Source
1.10.3 (December 18, 2024)
BUG FIXES:
v1.10.2Compare Source
1.10.2 (December 11, 2024)
BUG FIXES:
v1.10.1Compare Source
1.10.1 (December 4, 2024)
BUG FIXES:
templatefilewould panic if given and entirely unknown map of variables (#36118)templatefilewould panic if the variables map contains marked values (#36127)for_each(#36119)v1.10.0Compare Source
1.10.0 (November 27, 2024)
NEW FEATURES:
ephemeralasnullfunction: a function takes a value of any type and returns a similar value of the same type with any ephemeral values replaced with non-ephemeral null values and all non-ephemeral values preserved.BUG FIXES:
secret_suffixin thekubernetesbackend now includes validation to prevent errors when thesecret_suffixends with a number (#35666).error_messagevalues to pass the core validate step, so variable validation can be completed later during plan(#35537)
selfwith many instances could encounter an error during evaluation (#35895)plantimestamp()function would return an invalid date during validation (#35902)plan -generate-config-out) for string attributes that contain primitive types (e.g. numbers or booleans) (#35984)issensitivecould incorrectly assert that an unknown value was not sensitive during plan, but later became sensitive during apply, causing failures where changes did not match the planned result (#36012)ENHANCEMENTS:
elementfunction now accepts negative indices (#35501)terraform validate(#35543)plan,apply, andrefreshcommands now produce a deprecated warning when using the-stateflag. Instead use thepathattribute within thelocalbackend to modify the state file. (#35660)UPGRADE NOTES:
assume_roleblock (#35721)moved: Moved blocks now respect reserved keywords when parsing resource addresses. Configurations that reference resources with type names that match top level blocks and keywords frommovedblocks will need to prepend theresource.identifier to these references. (#35850)Previous Releases
For information on prior major and minor releases, refer to their changelogs:
v1.9.8Compare Source
1.9.8 (October 16, 2024)
BUG FIXES:
provider_metablocks with invalid names (#35842)v1.9.7Compare Source
1.9.7 (October 2, 2024)
BUG FIXES:
v1.9.6Compare Source
1.9.6 (September 18, 2024)
BUG FIXES:
v1.9.5Compare Source
1.9.5 (August 20, 2024)
ENHANCEMENTS:
BUG FIXES:
removedblocks with provisioners were not executed when the resource was in a nested module. (#35611)v1.9.4Compare Source
1.9.4 (August 7, 2024)
BUG FIXES:
v1.9.3Compare Source
1.9.3 (July 24, 2024)
ENHANCEMENTS:
conditionreturnedfalse) but the error message is derived from an unknown value. (#35400)BUG FIXES:
removedblock. (#35458)v1.9.2Compare Source
1.9.2 (July 10, 2024)
BUG FIXES:
countandfor_eachmeta attributes. (#35432)v1.9.1Compare Source
1.9.1 (July 3, 2024)
UPGRADE NOTES:
terraform initorterraform getin case of larger git repositories. Please do file an issue if you find the performance difference noticable. (#35376)BUG FIXES:
terraform test: Removed additional erroneous error message when referencing attributes that don't exist. (#35408)importblocks: Fix crash that occurs when incorrectly referencing thetoresource from theidattribute. (#35420)v1.9.0Compare Source
1.9.0 (June 26, 2024)
If you are upgrading from an earlier minor release, please refer to the Terraform v1.9 Upgrade Guide.
NEW FEATURES:
templatestringfunction: a new built-in function which is similar totemplatefilebut designed to render templates obtained dynamically, such as from a data resource result.ENHANCEMENTS:
terraform plan: Improved presentation of OPA and Sentinel policy evaluations in HCP Terraform remote runs, for logical separation.terraform initnow accepts a-jsonoption. If specified, enables the machine readable JSON output. (#34886)terraform test: Test runs can now pass sensitive values to input variables while preserving their dynamic sensitivity. Previously sensitivity would be preserved only for variables statically declared as being sensitive, usingsensitive = true. (#35021)templatestringfunction allows rendering a template provided as a string. (#34968, #35224, #35285)resourceblocks. (#35088)terraformprovider: Allowsmovedblock refactoring from thehashicorp/nullprovidernull_resourceresource type to theterraform_dataresource type. (#35163)terraform outputwithcloudblock: Terraform no longer suggests that data loss could occur when outputs are not available. (#35143)terraform console: Now has basic support for multi-line input in interactive mode. (#34822)If an entered line contains opening parentheses/etc that are not closed, Terraform will await another line of input to complete the expression. This initial implementation is primarily intended to support pasting in multi-line expressions from elsewhere, rather than for manual multi-line editing, so the interactive editing support is currently limited.
removedblocks can now declare destroy-time provisioners which will be executed when the associated resource instances are destroyed. (#35230)BUG FIXES:
remote-execprovisioner: Each remote connection will now be closed immediately after use. (#34137)terraform test: Fix bug in which non-Hashicorp providers required by testing modules and initialised within the test files were assigned incorrect registry addresses. (#35161)templatefilefunction no longer returns a "panic" error if the template file path is marked as sensitive. Instead, the template rendering result is also marked as sensitive. (#35180)importblocks which referenced resources in non-existent modules were silently ignored when they should have raised an error (#35330)terraform init: When selecting a version for a provider that has both positive and negative version constraints for the same prerelease -- e.g.1.2.0-beta.1, !1.2.0-beta.1-- the negative constraint will now overrule the positive, for consistency with how negative constraints are handled otherwise. Previously Terraform would incorrectly treat the positive as overriding the negative if the specified version was a prerelease. (#35181)import:importblocks could block a destroy operation if the target resource was already deleted (#35272)cli: plan output was missing blocks which were entirely unknown (#35271)cli: fix crash when runningproviders mirrorwith an incomplete lock file (#35322)create_before_destroywhen replacing an instance, then applying with-refresh=falsewould order the apply operations incorrectly (#35261)resource.prefix will now be correctly parsed when used as an address target. (#35333)UPGRADE NOTES:
terraform test: It is no longer valid to specify version constraints within provider blocks within .tftest.hcl files. Instead, version constraints must be supplied within the main configuration where the provider is in use.import: Invalidimportblocks pointing to nonexistent modules were mistakenly ignored in prior versions. These will need to be fixed or removed in v1.9.Previous Releases
For information on prior major and minor releases, see their changelogs:
v1.8.5Compare Source
1.8.5 (June 5, 2024)
BUG FIXES:
terraform test: Remove duplicate warning diagnostic when providing values for unknown variables in run blocks. (#35172)v1.8.4Compare Source
1.8.4 (May 22, 2024)
BUG FIXES:
core: Fix exponential slowdown in some cases when modules are usingdepends_on. (#35157)importblocks: Fix bug where resources with nested, computed, and optionalidattributes would fail to generate configuration. (#35220)golang.org/x/netrelease, which addressed CVE-2023-45288 (#35165)v1.8.3Compare Source
1.8.3 (May 8, 2024)
BUG FIXES:
terraform test: Providers configured within an overridden module could panic. (#35110)core: Fix crash when a provider incorrectly plans a nested object when the configuration isnull(#35090)v1.8.2Compare Source
1.8.2 (April 24, 2024)
BUG FIXES:
terraform apply: Prevent panic when a provider erroneously provides unknown values. (#35048)terraform plan: Replace panic with error message when self-referencing resources and data sources from thecountandfor_eachmeta attributes. (#35047)terraform test: RestoreTF_ENV_*variables being made available to testing modules. (#35014)terraform test: Prevent crash when referencing local variables within overridden modules. (#35030)ENHANCEMENTS:
OTHER CHANGES:
cloudblock and environment variables likeTF_CLOUD_ORGANIZATIONremain unchanged. (#35050)NOTE:
Starting with this release, we are including a copy of our license file in all packaged versions of our releases, such as the release .zip files. If you are consuming these files directly and would prefer to extract the one terraform file instead of extracting everything, you need to add an extra argument specifying the file to extract, like this:
v1.8.1Compare Source
1.8.1 (April 17, 2024)
BUG FIXES:
movedblock: Fix crash when move targets a module which no longer exists. (#34986)importblock: Fix crash when generating configuration for resources with complex sensitive attributes. (#34996)v1.8.0Compare Source
1.8.0 (April 10, 2024)
If you are upgrading from Terraform v1.7 or earlier, please refer to
the Terraform v1.8 Upgrade Guide.
NEW FEATURES:
Providers can now offer functions which can be used from within the Terraform configuration language.
The syntax for calling a provider-contributed function is
provider::provider_name::function_name(). (#34394)Providers can now transfer the ownership of a remote object between resources of different types, for situations where there are two different resource types that represent the same remote object type.
This extends the
movedblock behavior to support moving between two resources of different types only if the provider for the target resource type declares that it can convert from the source resource type. Refer to provider documentation for details on which pairs of resource types are supported.New
issensitivefunction returns true if the given value is marked as sensitive.ENHANCEMENTS:
terraform test: File-level variables can now refer to global variables. (#34699)When generating configuration based on
importblocks, Terraform will detect strings that contain valid JSON syntax and generate them as calls to thejsonencodefunction, rather than generating a single string. This is primarily motivated by readability, but might also be useful if you need to replace part of the literal value with an expression as you generalize your module beyond the one example used for importing.terraform plannow uses a different presentation for describing changes to lists where the old and new lists have the same length. It now compares the elements with correlated indices and shows a separate diff for each one, rather than trying to show a diff for the list as a whole. The behavior is unchanged for lists of different lengths.terraform providers lockaccepts a new boolean option-enable-plugin-cache. If specified, and if a global plugin cache is configured, Terraform will use the cache in the provider lock process. (#34632)built-in "terraform" provider: new
decode_tfvars,encode_tfvars, andencode_exprfunctions, for unusual situations where it's helpful to manually generate or read from Terraform's "tfvars" format. (#34718)terraform show's JSON rendering of a plan now includes two explicit flags"applyable"and"complete", which both summarize characteristics of a plan that were previously only inferrable by consumers replicating some of Terraform Core's own logic. (#34642)"applyable"means that it makes sense for a wrapping automation to offer to apply this plan."complete"means that applying this plan is expected to achieve convergence between desired and actual state. If this flag is present and set tofalsethen wrapping automations should ideally encourage an operator to run another plan/apply round to continue making progress toward convergence.BUG FIXES:
iteratorargument within a dynamic block. (#34751)Previous Releases
For information on prior major and minor releases, see their changelogs:
v1.7.5[Compare Source](https://redirect.github.com/hashicorp/terr
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.