Skip to content

chore(deps): update dependency opentofu/opentofu to v1.12.5

Renovate Bot requested to merge renovate/opentofu-opentofu-1.x into main

This MR contains the following updates:

Package Update Change
opentofu/opentofu patch 1.12.2 -> 1.12.5

Release Notes

opentofu/opentofu (opentofu/opentofu)

v1.12.5

Compare Source

SECURITY ADVISORIES:

  • Previous releases in the v1.12 series could be affected by several vulnerabilities:

    • The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake, allowing a passive network observer who can collect handshakes to de-anonymize the hostname of the server, even when ECH was being used.

    This is fixed now by (#​4363)

BUG FIXES:

  • Fixed bug where implicit moves and provider address changes would incorrectly cause providers.MovedResourceState to be used in place of providers.UpgradeResourceState (#​4375)

Full Changelog: https://github.com/opentofu/opentofu/compare/v1.12.4...v1.12.5

v1.12.4

Compare Source

BUG FIXES:

  • tofu plan -out no longer fails when the plan includes a resource with lifecycle { destroy = false } that needs replacement, which previously errored with invalid change action ForgetThenCreate. (#​4324)
  • Moved block now correctly compares provider source addresses. (#​4280)[#​4280]
  • Correct Source Provider Address now passed into Provider MoveResource requests. (#​4355)[#​4355]

Full Changelog: https://github.com/opentofu/opentofu/compare/v1.12.3...v1.12.4

v1.12.3

Compare Source

BUG FIXES:
  • Properly handle TF_ENCRYPTION with only blank spaces. (#​4265)
  • The value resulted from the lifecycle.enabled evaluation now has its deprecation marks processed correctly (#​4162)
  • Update documentation to clarify the usage restriction of ephemeral values in lifecycle.enabled. (#​4220)
  • tofu console -lock=false now works as intended. (#​4291)
SECURITY ADVISORIES:

Full Changelog: https://github.com/opentofu/opentofu/compare/v1.12.2...v1.12.3

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this MR and you won't be reminded about this update again.

  • If you want to rebase/retry this MR, check this box

This MR has been generated by Renovate Bot.

Edited by Renovate Bot

Merge request reports