Skip to content

chore(deps): update dependency opentofu/opentofu to v1.11.6

Renovate Bot requested to merge renovate/opentofu-opentofu-1.x into main

This MR contains the following updates:

Package Update Change
opentofu/opentofu patch 1.11.5 -> 1.11.6

Release Notes

opentofu/opentofu (opentofu/opentofu)

v1.11.6

Compare Source

BUG FIXES:

  • Running tofu apply -refresh-only with a configuration that contains ephemeral resources does not fail anymore because the refresh produced changes (#​3776)
  • Fixed tofu init crashing when a module version uses a variable and the module is referenced from a test file. (#​3686)
  • Fixed provider-defined functions in import block id expressions causing "BUG: Uninitialized function provider" error. (#​3803)
  • tofu test no longer fails during cleanup when using a mocked version of a resource type with write-only attributes. (#​3964)
  • A malicious remote TLS server can no longer deadlock OpenTofu by sending multiple key update messages in a single record. (#​3966)
  • When installing module packages from "tar" archives, OpenTofu now accepts only a limited number of sparse file entries to avoid unbounded memory usage from maliciously-crafted archives containing many sparse regions. (#​3966)

Full Changelog: https://github.com/opentofu/opentofu/compare/v1.11.5...v1.11.6

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Merge request reports