<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4">
<package pkgid="dfb65d83e868aebdd4f78840c0fd8c8368b2bf239f336be600cff43f7afb9e03878141c6449d4c81a0d60ed6a75bc9ba3e7446d333fce2b357667fba9328b306" name="opentofu" arch="src">
  <version epoch="0" ver="1.10.3" rel="lp160.1.2"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1715169600">- Update to version 1.7.1:
  * Fixing changelog for 1.7.1
  * Backport[v1.7] 1.7.1 docs (#1630)
  * Backport Fixed tofu test when module has no resource (#1628)
  * Backport Fix for tofu init failure when test have spaces in
    their name (#1627)
  * Backport: Allow unconfigured provider functions in test context
    to 1.7.1 (#1621)
  * Backport encryption fixes to 1.7.1 (#1620)
  * Fix workflow.
  * Run releases on larger workers. (#1587)
  * Backport[v1.7] Linking provider-defined functions from the
    what's new page (#1584) (#1585)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1715947200">- added global bash completion</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717416000">- Update to version 1.7.2:
  This is a bugfix release and we encourage all OpenTofu 1.7.1
  users to upgrade.
  * Fixed - authorization header is not included for HTTP backends
    (#1656)
  * Fixed bug in import 'to' parsing in JSON configurations (#1665)
  * Fix bug where provider functions were unusable in variables and
    outputs (#1689)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720612800">- Update to version 1.7.3:
  * Updating the VERSION file to 1.7.3. (#1783)
  * Adding 1.7.3 changelog as released (#1780)
  * Backporting release workflow changes (#1764)
  * [Backports/1.7] Support lower-case http/https_proxy env
    variables in S3 backend (#1741)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722254400">- Update to version 1.8.0:
  * What's New?
  - Early variable/locals evaluation
  - Provider mocking in tofu test
  - Resource overrides in tofu test
  - Override files for OpenTofu: keeping compatibility
  - Deprecation: use_legacy_workflow has been removed from the S3
    backend-backend
  See the launch post on our blog:
  https://opentofu.org/blog/opentofu-1-8-0/
  For all the features, see the detailed changelog:
  https://github.com/opentofu/opentofu/blob/v1.8.0/CHANGELOG.md
  You can find the full diff here:
  https://github.com/opentofu/opentofu/compare/v1.7..v1.8.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1723032000">- Update to version 1.8.1:
  * Bump to 1.8.1 (#1893)
  * Fix missing module source panic (#1888) (#1889)
  * Backport/v1.8/1876 (#1886)
  * 1666/tacos website docs backport to 1.8 (#1883)
  * Fix 1.8 release workers (#1870)
  * Switch to alternate runner group (#1868)
  * Run releases on larger workers. (#1587) (#1867)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1725969600">- Update to version 1.8.2:
  * Update version and changelog to 1.8.2 (#1968)
  * Backport bump go version to v1.8 (#1966)
  * Better handling of key_provider references (#1921) (#1965)
  * fix inconsistent sidebar title of functions on v1.8 branch
    (#1907)
  * Fix Docusaurus "broken link" warnings on 1.8 branch of docs
    (#1884) (#1898)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728043200">- Update to version 1.8.3:
  * Backport 1.8 handle static variable secrets (#2046)
  * Make sure test vars are only processed during test commands
    (#2040)
  * Fix Terraform Version in 1.8.x Migration Guide (#1987) (#2000)
  * Update docs version message (#1990) (#1997)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1729771200">- Update to version 1.8.4:
  * Bumped versionfile for 1.8 (#2097)
  * Backport recent changes to v1.8 (#2093)
  * CHANGELOG entry for #2055 and #2060
  * command/init: Support static eval for backend config migration
    check</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1731412800">- Update to version 1.8.5:
  * Prepare for the v1.8.6 release (#2137)
  * v1.8 Backport: Fix regression of backend reinit detection when
    backend schema has required arguments (#2135)
  * Partially unknown provider functions arguments fixed (#2127)
    (#2133)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- Update to version 1.8.6:
  * update 1.8 versions (#2211)
  * fix changelog for 1.8.6 (#2207)
  * [BACKPORT] add missing changelog entry for http backend logging
    (#2206) (#2209)
  * Bump golang version to 1.22.8 (address CVE-2024-34156) (#2050)
    (#2182)
  * [BACKPORT] fix mock type conversion in tofu test (#2144)
    (#2197)
  * [BACKPORT] fix mock provider validation (#2140) (#2196)
  * [BACKPORT] Add DEBUG-level logging to the "http" state storage
    backend (#2120) (#2192)
  * [BACKPORT] pin node version for docusaurus build (#2177)
    (#2194)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733486400">- Update to version 1.8.7:
  * BUG FIXES:
  - Error messages related to validation of sensitive input
    variables will no longer disclose the sensitive value in the
    UI. (#2219)
  - Changes to encryption configuration now auto-apply the
    migration (#2232)
  - Updated github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1 to
    make security scanners happy (no vulnerability, see #2179)
  - tofu test is now setting nulls for dynamic type when
    generating mock values. (#2245)
  - Variables declared in test files are now taking into account
    type default values. (#2244)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1735300800">- Update to version 1.8.8:
  * prepare branch for v1.8.8 release (#2314)
  * [BACKPORT v1.8] bump golang.org/x/net from 0.25 to 0.33 (#2311)
    (#2313)
  * Backport[v1.8]: Bump golang.org/x/crypto from 0.21.0 to 0.31.0
    (#2288)
  * [BACKPORT] add simulated state serialization between tofu test
    runs (#2274) (#2276)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736510400">- Update to version 1.9.0:
  We're proud to announce that OpenTofu 1.9.0 is now officially
  out! This release includes a lot of major and minor new features,
  as well as a ton of community contributions!
  The highlights are:
  * for_each in provider configuration blocks: An alternate (aka
    "aliased") provider configuration can now have multiple
    dynamically-chosen instances using the for_each argument:
    provider "aws" {
    alias    = "by_region"
    for_each = var.aws_regions
    region = each.key
    }
    Each instance of a resource can also potentially select a
    different instance of the associated provider configuration,
    making it easier to declare infrastructure that ought to be
    duplicated for each region.
  * -exclude planning option: similar to -target, this allows
    operators to tell OpenTofu to work on only a subset of the
    objects declared in the configuration or tracked in the state.
    tofu plan -exclude=kubernetes_manifest.crds
    While -target specifies the objects to include and skips
    everything not needed for the selected objects, -exclude
    instead specifies objects to skip. OpenTofu will exclude the
    selected objects and everything that depends on them.
  Please take the above for a spin and let us know your feedback!
  For all the features, see the detailed changelog.
  https://github.com/opentofu/opentofu/blob/v1.9.0/CHANGELOG.md</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1745582400">- Update to version 1.9.1:
  * BUG FIXES:
  - Provider used in import is correctly identified. (#2336)
  - plantimestamp() now returns unknown value during validation
    (#2397)
  - Syntax error in the required_providers block does not panic
    anymore, but yields "syntax error" (2344)
  - Fix the error message when default value of a complex
    variable is containing a wrong type (2394)
  - Changing Go version to 1.22.11 in order to fix CVE-2024-45336
    and CVE-2024-45341 (#2438)
  - Fix the way OpenTofu downloads a module that is sourced from
    a GitHub branch containing slashes in the name. (2396)
  - Changing Go version to 1.22.12 in order to fix CVE-2025-22866
    and CVE-2024-45341 (#2438)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750852800">- Update to version 1.10.0:
  We're thrilled to announce the release of OpenTofu 1.10.0, our
  most comprehensive update yet! This release represents months of
  dedicated work from our community, introducing some fantastic
  features that will improve how OpenTofu users manage and
  distribute infrastructure as code.
  Full changelog:
  https://github.com/opentofu/opentofu/blob/v1.10/CHANGELOG.md
  * Highlights
    This release cycle introduces major new capabilities and
    integrations:
  - OCI Registry Support
    Full integration with OCI registries for both provider and
    module distribution, valuable for organizations with private
    infrastructure-as-code components, air-gapped environments,
    or enhanced security requirements.
    For more information, refer to Module Packages in OCI
    Registries and Provider Mirrors in OCI Registries.
    https://opentofu.org/docs/cli/oci_registries/module-package/
    https://opentofu.org/docs/cli/oci_registries/provider-mirror/
  - Native S3 Locking
    Simplify your infrastructure by using S3's conditional writes
    capability for state locking, eliminating the need for a
    separate DynamoDB table.
  - OpenTelemetry Tracing
    Gain insights into OpenTofu operations with experimental
    OpenTelemetry tracing, completely local and under your
    control.
  - Resource Management with Target Files
    Manage complex deployments more easily with the new
  - target-file and -exclude-file options, allowing
    version-controlled resource targeting patterns.
    Code examples can be found here:
    https://github.com/opentofu/opentofu/releases/tag/v1.10.0
  * Compatibility Notes
  - Linux: Requires kernel version 3.2 or later
  - macOS: Requires macOS 11 Big Sur or later
  - The ghcr.io/opentofu/opentofu image is no longer supported as
    a base image
  - Windows: Symbolic links and junctions are now handled
    differently
  - The PostgreSQL backend in OpenTofu 1.10 should not be used
    alongside older versions</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1751284800">- Update to version 1.10.1:
  * BUG FIXES:
  - Fix TF_APPEND_USER_AGENT handling in the S3 remote state
    backend. (#2955)
  * OTHER CHANGES:
  - OpenTofu is now built with Go 1.24.4, which should clear some
    false-positive indirect security advisories.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1751457600">- Update to version 1.10.2:
  * S3 backend now correctly sends the x-amz-server-side-encryption
    header for the lockfile. (#2870)
  * A provider source address explicitly using the hostname
    registry.terraform.io will no longer cause errors related to a
    corresponding provider on registry.opentofu.org when executing
    workflow commands like plan and apply. (#2979)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1752321600">- BuildRequire go1.24 &gt;= 1.24.4 to not use go1.25rc2</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1752667200">- Update to version 1.10.3:
  * BUG FIXES:
  - OpenTofu will no longer crash in a rare case where a
    dynamically-invalid expression has its error suppressed by
    try or can and then that expression becomes relevant for
    deciding whether to report a "change outside of OpenTofu" in
    the human-oriented plan diff. (#2988)
  - Ensure provider downloads into temp are cleaned up correctly
    on windows. (#2843)
  - Correctly handle structural typed attributes during test
    provider mocking. (#2994)
  - Fix erroneous detection of changes with sensitive resource
    attributes. (#3024)</changelog>
</package>
<package pkgid="ff708b1695665d5364ffa55f494d8b862392a726f7e3fd3875e342f3553338719bfdb81ed942ed89f1aa4e5f83c3b99631d88d0b213e0e71c5a7cb5012c4254d" name="opentofu" arch="x86_64">
  <version epoch="0" ver="1.10.3" rel="lp160.1.2"/>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1715169600">- Update to version 1.7.1:
  * Fixing changelog for 1.7.1
  * Backport[v1.7] 1.7.1 docs (#1630)
  * Backport Fixed tofu test when module has no resource (#1628)
  * Backport Fix for tofu init failure when test have spaces in
    their name (#1627)
  * Backport: Allow unconfigured provider functions in test context
    to 1.7.1 (#1621)
  * Backport encryption fixes to 1.7.1 (#1620)
  * Fix workflow.
  * Run releases on larger workers. (#1587)
  * Backport[v1.7] Linking provider-defined functions from the
    what's new page (#1584) (#1585)</changelog>
  <changelog author="Christian Goll &lt;cgoll@suse.com&gt;" date="1715947200">- added global bash completion</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1717416000">- Update to version 1.7.2:
  This is a bugfix release and we encourage all OpenTofu 1.7.1
  users to upgrade.
  * Fixed - authorization header is not included for HTTP backends
    (#1656)
  * Fixed bug in import 'to' parsing in JSON configurations (#1665)
  * Fix bug where provider functions were unusable in variables and
    outputs (#1689)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1720612800">- Update to version 1.7.3:
  * Updating the VERSION file to 1.7.3. (#1783)
  * Adding 1.7.3 changelog as released (#1780)
  * Backporting release workflow changes (#1764)
  * [Backports/1.7] Support lower-case http/https_proxy env
    variables in S3 backend (#1741)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1722254400">- Update to version 1.8.0:
  * What's New?
  - Early variable/locals evaluation
  - Provider mocking in tofu test
  - Resource overrides in tofu test
  - Override files for OpenTofu: keeping compatibility
  - Deprecation: use_legacy_workflow has been removed from the S3
    backend-backend
  See the launch post on our blog:
  https://opentofu.org/blog/opentofu-1-8-0/
  For all the features, see the detailed changelog:
  https://github.com/opentofu/opentofu/blob/v1.8.0/CHANGELOG.md
  You can find the full diff here:
  https://github.com/opentofu/opentofu/compare/v1.7..v1.8.0</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1723032000">- Update to version 1.8.1:
  * Bump to 1.8.1 (#1893)
  * Fix missing module source panic (#1888) (#1889)
  * Backport/v1.8/1876 (#1886)
  * 1666/tacos website docs backport to 1.8 (#1883)
  * Fix 1.8 release workers (#1870)
  * Switch to alternate runner group (#1868)
  * Run releases on larger workers. (#1587) (#1867)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1725969600">- Update to version 1.8.2:
  * Update version and changelog to 1.8.2 (#1968)
  * Backport bump go version to v1.8 (#1966)
  * Better handling of key_provider references (#1921) (#1965)
  * fix inconsistent sidebar title of functions on v1.8 branch
    (#1907)
  * Fix Docusaurus "broken link" warnings on 1.8 branch of docs
    (#1884) (#1898)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1728043200">- Update to version 1.8.3:
  * Backport 1.8 handle static variable secrets (#2046)
  * Make sure test vars are only processed during test commands
    (#2040)
  * Fix Terraform Version in 1.8.x Migration Guide (#1987) (#2000)
  * Update docs version message (#1990) (#1997)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1729771200">- Update to version 1.8.4:
  * Bumped versionfile for 1.8 (#2097)
  * Backport recent changes to v1.8 (#2093)
  * CHANGELOG entry for #2055 and #2060
  * command/init: Support static eval for backend config migration
    check</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1731412800">- Update to version 1.8.5:
  * Prepare for the v1.8.6 release (#2137)
  * v1.8 Backport: Fix regression of backend reinit detection when
    backend schema has required arguments (#2135)
  * Partially unknown provider functions arguments fixed (#2127)
    (#2133)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1732276800">- Update to version 1.8.6:
  * update 1.8 versions (#2211)
  * fix changelog for 1.8.6 (#2207)
  * [BACKPORT] add missing changelog entry for http backend logging
    (#2206) (#2209)
  * Bump golang version to 1.22.8 (address CVE-2024-34156) (#2050)
    (#2182)
  * [BACKPORT] fix mock type conversion in tofu test (#2144)
    (#2197)
  * [BACKPORT] fix mock provider validation (#2140) (#2196)
  * [BACKPORT] Add DEBUG-level logging to the "http" state storage
    backend (#2120) (#2192)
  * [BACKPORT] pin node version for docusaurus build (#2177)
    (#2194)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1733486400">- Update to version 1.8.7:
  * BUG FIXES:
  - Error messages related to validation of sensitive input
    variables will no longer disclose the sensitive value in the
    UI. (#2219)
  - Changes to encryption configuration now auto-apply the
    migration (#2232)
  - Updated github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.5.1 to
    make security scanners happy (no vulnerability, see #2179)
  - tofu test is now setting nulls for dynamic type when
    generating mock values. (#2245)
  - Variables declared in test files are now taking into account
    type default values. (#2244)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1735300800">- Update to version 1.8.8:
  * prepare branch for v1.8.8 release (#2314)
  * [BACKPORT v1.8] bump golang.org/x/net from 0.25 to 0.33 (#2311)
    (#2313)
  * Backport[v1.8]: Bump golang.org/x/crypto from 0.21.0 to 0.31.0
    (#2288)
  * [BACKPORT] add simulated state serialization between tofu test
    runs (#2274) (#2276)</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1736510400">- Update to version 1.9.0:
  We're proud to announce that OpenTofu 1.9.0 is now officially
  out! This release includes a lot of major and minor new features,
  as well as a ton of community contributions!
  The highlights are:
  * for_each in provider configuration blocks: An alternate (aka
    "aliased") provider configuration can now have multiple
    dynamically-chosen instances using the for_each argument:
    provider "aws" {
    alias    = "by_region"
    for_each = var.aws_regions
    region = each.key
    }
    Each instance of a resource can also potentially select a
    different instance of the associated provider configuration,
    making it easier to declare infrastructure that ought to be
    duplicated for each region.
  * -exclude planning option: similar to -target, this allows
    operators to tell OpenTofu to work on only a subset of the
    objects declared in the configuration or tracked in the state.
    tofu plan -exclude=kubernetes_manifest.crds
    While -target specifies the objects to include and skips
    everything not needed for the selected objects, -exclude
    instead specifies objects to skip. OpenTofu will exclude the
    selected objects and everything that depends on them.
  Please take the above for a spin and let us know your feedback!
  For all the features, see the detailed changelog.
  https://github.com/opentofu/opentofu/blob/v1.9.0/CHANGELOG.md</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1745582400">- Update to version 1.9.1:
  * BUG FIXES:
  - Provider used in import is correctly identified. (#2336)
  - plantimestamp() now returns unknown value during validation
    (#2397)
  - Syntax error in the required_providers block does not panic
    anymore, but yields "syntax error" (2344)
  - Fix the error message when default value of a complex
    variable is containing a wrong type (2394)
  - Changing Go version to 1.22.11 in order to fix CVE-2024-45336
    and CVE-2024-45341 (#2438)
  - Fix the way OpenTofu downloads a module that is sourced from
    a GitHub branch containing slashes in the name. (2396)
  - Changing Go version to 1.22.12 in order to fix CVE-2025-22866
    and CVE-2024-45341 (#2438)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1750852800">- Update to version 1.10.0:
  We're thrilled to announce the release of OpenTofu 1.10.0, our
  most comprehensive update yet! This release represents months of
  dedicated work from our community, introducing some fantastic
  features that will improve how OpenTofu users manage and
  distribute infrastructure as code.
  Full changelog:
  https://github.com/opentofu/opentofu/blob/v1.10/CHANGELOG.md
  * Highlights
    This release cycle introduces major new capabilities and
    integrations:
  - OCI Registry Support
    Full integration with OCI registries for both provider and
    module distribution, valuable for organizations with private
    infrastructure-as-code components, air-gapped environments,
    or enhanced security requirements.
    For more information, refer to Module Packages in OCI
    Registries and Provider Mirrors in OCI Registries.
    https://opentofu.org/docs/cli/oci_registries/module-package/
    https://opentofu.org/docs/cli/oci_registries/provider-mirror/
  - Native S3 Locking
    Simplify your infrastructure by using S3's conditional writes
    capability for state locking, eliminating the need for a
    separate DynamoDB table.
  - OpenTelemetry Tracing
    Gain insights into OpenTofu operations with experimental
    OpenTelemetry tracing, completely local and under your
    control.
  - Resource Management with Target Files
    Manage complex deployments more easily with the new
  - target-file and -exclude-file options, allowing
    version-controlled resource targeting patterns.
    Code examples can be found here:
    https://github.com/opentofu/opentofu/releases/tag/v1.10.0
  * Compatibility Notes
  - Linux: Requires kernel version 3.2 or later
  - macOS: Requires macOS 11 Big Sur or later
  - The ghcr.io/opentofu/opentofu image is no longer supported as
    a base image
  - Windows: Symbolic links and junctions are now handled
    differently
  - The PostgreSQL backend in OpenTofu 1.10 should not be used
    alongside older versions</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1751284800">- Update to version 1.10.1:
  * BUG FIXES:
  - Fix TF_APPEND_USER_AGENT handling in the S3 remote state
    backend. (#2955)
  * OTHER CHANGES:
  - OpenTofu is now built with Go 1.24.4, which should clear some
    false-positive indirect security advisories.</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1751457600">- Update to version 1.10.2:
  * S3 backend now correctly sends the x-amz-server-side-encryption
    header for the lockfile. (#2870)
  * A provider source address explicitly using the hostname
    registry.terraform.io will no longer cause errors related to a
    corresponding provider on registry.opentofu.org when executing
    workflow commands like plan and apply. (#2979)</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1752321600">- BuildRequire go1.24 &gt;= 1.24.4 to not use go1.25rc2</changelog>
  <changelog author="Johannes Kastl &lt;opensuse_buildservice@ojkastl.de&gt;" date="1752667200">- Update to version 1.10.3:
  * BUG FIXES:
  - OpenTofu will no longer crash in a rare case where a
    dynamically-invalid expression has its error suppressed by
    try or can and then that expression becomes relevant for
    deciding whether to report a "change outside of OpenTofu" in
    the human-oriented plan diff. (#2988)
  - Ensure provider downloads into temp are cleaned up correctly
    on windows. (#2843)
  - Correctly handle structural typed attributes during test
    provider mocking. (#2994)
  - Fix erroneous detection of changes with sensitive resource
    attributes. (#3024)</changelog>
</package>
<package pkgid="e41214f2ead0c4698ceca335cfb112e4ffbd3e9bcad9ad5e335e4973431032746a1573b5fa6c8a9fb43c0e35e59445c41273d744457678cf250ac5d973c60a01" name="terraform" arch="src">
  <version epoch="0" ver="1.5.4" rel="lp160.1.5"/>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1666180800">- update to 1.3.3:
  * BUG FIXES:
  - Fix error when removing a resource from configuration which has according to the provider has already been deleted. (#31850)
  - Fix error when setting empty collections into variables with collections of nested objects with default values. (#32033)</changelog>
  <changelog author="Jan Kohoutek &lt;jkohoutek@suse.com&gt;" date="1668427200">- update to 1.3.4:
  * BUG FIXES:
  - Fix invalid refresh-only plan caused by data sources being deferred to apply (#32111)
  - Optimize the handling of condition checks during apply to prevent performance regressions with large numbers of instances (#32123)
  - Output preconditions should not be evaluated during destroy (#32051)
  - Fix crash from console when outputs contain preconditions (#32051)
  - Destroy with no state would still attempt to evaluate some values (#32051)
  - Prevent unnecessary evaluation and planning of resources during the pre-destroy refresh (#32051)
  - AzureRM Backend: support for generic OIDC authentication via the oidc_token and oidc_token_file_path properties (#31966)
  - Input and Module Variables: Convert variable types before attempting to apply default values. (#32027)
  - When installing remote module packages delivered in tar format, Terraform now limits the tar header block size to 1MiB to avoid unbounded memory usage for maliciously-crafted module packages. (#32135)
  - Terraform will now reject excessively-complex regular expression patterns passed to the regex, regexall, and replace functions, to avoid unbounded memory usage for maliciously-crafted patterns. This change should not affect any reasonable patterns intended for practical use. (#32135)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1668772800">- update to 1.3.5:
  * BUG FIXES:
  - Prevent crash while serializing the plan for an empty destroy operation (#32207)
  - Allow a destroy plan to refresh instances while taking into account that some may no longer exist (#32208)
  - Fix Terraform creating objects that should not exist in variables that specify default attributes in optional objects. (#32178)
  - Fix several Terraform crashes that are caused by HCL creating objects that should not exist in variables that specify default attributes in optional objects within collections. (#32178)
  - Fix inconsistent behaviour in empty vs null collections. (#32178)
  - Prevent file uploads from creating unneeded temporary files when the payload size is known (#32206)
  - Nested attributes marked sensitive by schema no longer reveal sub-attributes in the plan diff (#32004)
  - Nested attributes now more consistently display when they become unknown or null values in the plan diff (#32004)
  - Sensitive values are now always displayed as (sensitive value) instead of sometimes as (sensitive) [GH32004]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1669896000">- update to 1.3.6:
  * BUG FIXES:
  - Terraform could crash if an orphaned resource instance was
    deleted externally and had condition checks in the configuration
    (#32246)
  - Module output changes were being removed and re-added to the
    stored plan, impacting performance with large numbers of outputs
    (#32307)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1672833600">- update to 1.3.7:
  * BUG FIXES:
  - Fix exact version constraint parsing for modules using prerelease
    versions ([#32377](https://github.com/hashicorp/terraform/issues/32377))
  - Prevent panic when a provider returns a null block value during
    refresh which is used as configuration via `ignore_changes`
    ([#32428](https://github.com/hashicorp/terraform/issues/32428))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1676030400">- update to 1.3.8:
  * Fixed a rare bug causing inaccurate `before_sensitive` / `after_sensitive`
    annotations in JSON plan output for deeply nested structures. This was
    only observed in the wild on the rancher/rancher2 provider, and resulted
    in glitched display in Terraform Cloud's structured plan log view.
    ([#32543](https://github.com/hashicorp/terraform/issues/32543))
  * A variable only referenced by an output precondition error_message may be
    missing during evaluation
    ([#32464](https://github.com/hashicorp/terraform/issues/32464))
  * Removing a NestingSingle block from configuration results in an invalid
    plan ([#32463](https://github.com/hashicorp/terraform/issues/32463))
  * Null module outputs could be dropped, causing evaluation errors when
    referring to those module attributes
    ([#32583](https://github.com/hashicorp/terraform/issues/32583))
  * Fix terraform crash when applying defaults into a collection with dynamic
    type constraint.
    ([#32454](https://github.com/hashicorp/terraform/issues/32454))
  * Updated to newer github.com/mitchellh/cli version, in turn bringing in
    updates for several indirect dependencies with known security issues.
    ([#32609](https://github.com/hashicorp/terraform/issues/32609))
  * Fix case where the first plan to use a new remote state could be applied
    twice, corrupting the state
    ([#32614](https://github.com/hashicorp/terraform/issues/32614))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1676462400">- update to 1.3.9:
  * Fix crash when planning to remove already-deposed resource instances.
    ([#32663](https://github.com/hashicorp/terraform/issues/32663))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678276800">- update to 1.4.0:
  Full changelog available at
  https://github.com/hashicorp/terraform/releases/tag/v1.4.0</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678881600">- do no longer store the tarball, create it at buildtime</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678881601">- update to 1.4.1:
  * Enables overriding modules that have the `depends_on`
    attribute set, while still preventing the `depends_on`
    attribute itself from being overridden.
    ([#32796](https://github.com/hashicorp/terraform/issues/32796))
  * `terraform providers mirror`: when a dependency lock file is
    present, mirror the resolved providers versions, not the latest
    available based on configuration.
    ([#32749](https://github.com/hashicorp/terraform/issues/32749))
  * Fixed module downloads from S3 URLs when using AWS IAM roles
    for service accounts (IRSA).
    ([#32700](https://github.com/hashicorp/terraform/issues/32700))
  * hcl: Fix a crash in Terraform when attempting to apply defaults
    into an incompatible type.
    ([#32775](https://github.com/hashicorp/terraform/issues/32775))
  * Prevent panic when creating a plan which errors before the
    planning process has begun.
    ([#32818](https://github.com/hashicorp/terraform/issues/32818))
  * Fix the plan renderer skipping the "no changes" messages when
    there are no-op outputs within the plan.
    ([#32820](https://github.com/hashicorp/terraform/issues/32820))
  * Prevent panic when rendering null nested primitive values in a
    state output.
    ([#32840](https://github.com/hashicorp/terraform/issues/32840))
  * Warn when an invalid path is specified in `TF_CLI_CONFIG_FILE`
    ([#32846](https://github.com/hashicorp/terraform/issues/32846))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678968000">- update to 1.4.2:
  * Fix bug in which certain uses of `setproduct` caused Terraform
    to crash
    ([#32860](https://github.com/hashicorp/terraform/issues/32860))
  * Fix bug in which some provider plans were not being calculated
    correctly, leading to an "invalid plan" error
    ([#32860](https://github.com/hashicorp/terraform/issues/32860))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1680264000">- update to 1.4.3:
  * Prevent sensitive values in non-root module outputs from
    marking the entire output as sensitive [GH-32891]
  * Fix the handling of planned data source objects when storing a
    failed plan [GH-32876]
  * Don't fail during plan generation when targeting prevents
    resources with schema changes from performing a state upgrade
    [GH-32900]
  * Skip planned changes in sensitive marks when the changed
    attribute is discarded by the provider [GH-32892]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1680264001">- update to 1.4.4:
  Due to an incident while migrating build systems for the 1.4.3
  release where `CGO_ENABLED=0` was not set, we are rebuilding that
  version as 1.4.4 with the   flag set. No other changes have been
  made between 1.4.3 and 1.4.4.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1681387200">- update to 1.4.5:
  * Revert change from
    [[#32892](https://github.com/hashicorp/terraform/issues/32892)]
    due to an upstream crash.
  * Fix planned destroy value which would cause `terraform_data` to
    fail when being replaced with `create_before_destroy`
    ([#32988](https://github.com/hashicorp/terraform/issues/32988))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682510400">- update to 1.4.6:
  * BUG FIXES
  - Fix bug when rendering plans that include null strings.
    ([#33029](https://github.com/hashicorp/terraform/issues/33029))
  - Fix bug when rendering plans that include unknown values in
    maps.
    ([#33029](https://github.com/hashicorp/terraform/issues/33029))
  - Fix bug where the plan would render twice when using older
    versions of TFE as a backend.
    ([#33018](https://github.com/hashicorp/terraform/issues/33018))
  - Fix bug where sensitive and unknown metadata was not being
    propagated to dynamic types while rendering plans.
    ([#33057](https://github.com/hashicorp/terraform/issues/33057))
  - Fix bug where sensitive metadata from the schema was not
    being included in the `terraform show -json` output.
    ([#33059](https://github.com/hashicorp/terraform/issues/33059))
  - Fix bug where computed attributes were not being rendered
    with the `# forces replacement` suffix.
    ([#33065](https://github.com/hashicorp/terraform/issues/33065))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1686571200">- update to 1.5.0:
  * NEW FEATURES:
  - `check` blocks for validating infrastructure: Module and
    configuration authors can now write independent check blocks
    within their configuration to validate assertions about their
    infrastructure.
  - `import` blocks for importing infrastructure: Root module
    authors can now use the `import` block to declare their
    intent that Terraform adopt an existing resource.  Import is
    now a configuration-driven, plannable action, and is
    processed as part of a normal plan. Running `terraform plan`
    will show a summary of the resources that Terraform has
    planned to import, along with any other plan changes.  The
    existing `terraform import` CLI command has not been
    modified.  This is an early version of the `import` block
    feature, for which we are actively seeking user feedback to
    shape future development. The `import` block currently does
    not support interpolation in the `id` field, which must be a
    string.
  - Generating configuration for imported resources: in
    conjunction with the `import` block, this feature enables
    easy templating of configuration when importing existing
    resources into Terraform. A new flag
    `-generate-config-out=PATH` is added to `terraform plan`.
    When this flag is set, Terraform will generate HCL
    configuration for any resource included in an `import` block
    that does not already have associated configuration, and
    write it to a new file at `PATH`. Before applying, review the
    generated configuration and edit it as necessary.
  - Adds a new `plantimestamp` function that returns the
    timestamp at plan time. This is similar to the `timestamp`
    function which returns the timestamp at apply time
    ([#32980](https://github.com/hashicorp/terraform/pull/32980)).
  - Adds a new `strcontains` function that checks whether a
    given string contains a given substring.
    ([#33069](https://github.com/hashicorp/terraform/issues/33069))
  * UPGRADE NOTES:
  - On Linux (and some other non-macOS Unix platforms we don't
    officially support), Terraform will now notice the `trust-ad`
    option in `/etc/resolv.conf` and, if set, will set the
    "authentic data" option in outgoing DNS requests in order to
    better match the behavior of the GNU libc resolver.
    Terraform does not pay any attention to the corresponding
    option in responses, but some DNSSEC-aware recursive
    resolvers return different responses when the request option
    isn't set. This should therefore avoid some potential
    situations where a DNS request from Terraform might get a
    different response than a similar request from other software
    on your system.
  * ENHANCEMENTS:
  - Terraform CLI's local operations mode will now attempt to
    persist state snapshots to the state storage backend
    periodically during the apply step, thereby reducing the
    window for lost data if the Terraform process is aborted
    unexpectedly.
    ([#32680](https://github.com/hashicorp/terraform/issues/32680))
  - If Terraform CLI receives SIGINT (or its equivalent on
    non-Unix platforms) during the apply step then it will
    immediately try to persist the latest state snapshot to the
    state storage backend, with the assumption that a graceful
    shutdown request often typically followed by a hard abort
    some time later if the graceful shutdown doesn't complete
    fast enough.
    ([#32680](https://github.com/hashicorp/terraform/issues/32680))
  - `pg` backend: Now supports the `PG_CONN_STR`,
    `PG_SCHEMA_NAME`, `PG_SKIP_SCHEMA_CREATION`,
    `PG_SKIP_TABLE_CREATION` and `PG_SKIP_INDEX_CREATION`
    environment variables.
    ([#33045](https://github.com/hashicorp/terraform/issues/33045))
  * BUG FIXES:
  - `terraform init`: Fixed crash with invalid blank module
    name.
    ([#32781](https://github.com/hashicorp/terraform/issues/32781))
  - `moved` blocks: Fixed a typo in the error message that
    Terraform raises when you use `-target` to exclude an object
    that has been moved.
    ([#33149](https://github.com/hashicorp/terraform/issues/33149))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1687348800">- update to 1.5.1:
  * BUG FIXES:
  - core: plan validation would fail for providers using nested
    set attributes with computed object attribute
    ([#33377](https://github.com/hashicorp/terraform/issues/33377))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1688040000">- update to 1.5.2:
  * BUG FIXES:
  - configs: Multiple `import` blocks with the same `id` string
    no longer result in a validation error
    ([#33434](https://github.com/hashicorp/terraform/issues/33434))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689249600">- update to 1.5.3:
  * BUG FIXES:
  - core: Terraform could fail to evaluate module outputs when
    they are used in a provider configuration during a destroy
    operation
    ([#33462](https://github.com/hashicorp/terraform/pull/33462))
  - backend/consul: When failing to save state, `consul CAS
    failed with transaction errors` no longer shows an error
    instance memory address, but an actual error message.
    ([#33108](https://github.com/hashicorp/terraform/pull/33108))
  - plan renderer: Fixes crash when rendering the plan if a
    relevant attribute contains an integer index specified as a
    string.
    ([#33475](https://github.com/hashicorp/terraform/issues/33475))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to 1.5.4:
  * BUG FIXES:
  - `check` blocks: Fixes crash when nested data sources are
    within configuration targeted by the terraform import
    command.
    ([#33578](https://github.com/hashicorp/terraform/issues/33578))
  - `check` blocks: Check blocks now operate in line with other
    checkable objects by also executing during import operations.
    ([#33578](https://github.com/hashicorp/terraform/issues/33578))</changelog>
</package>
<package pkgid="524aaeaf67d6e400ec63f9470d23453a672b82c0c34e9b51079315599cc8291b478859809e7c31ccb4ff528976bf412b3ef305f78a1c59f523afee2b4ccbf9a9" name="terraform" arch="x86_64">
  <version epoch="0" ver="1.5.4" rel="lp160.1.5"/>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1666180800">- update to 1.3.3:
  * BUG FIXES:
  - Fix error when removing a resource from configuration which has according to the provider has already been deleted. (#31850)
  - Fix error when setting empty collections into variables with collections of nested objects with default values. (#32033)</changelog>
  <changelog author="Jan Kohoutek &lt;jkohoutek@suse.com&gt;" date="1668427200">- update to 1.3.4:
  * BUG FIXES:
  - Fix invalid refresh-only plan caused by data sources being deferred to apply (#32111)
  - Optimize the handling of condition checks during apply to prevent performance regressions with large numbers of instances (#32123)
  - Output preconditions should not be evaluated during destroy (#32051)
  - Fix crash from console when outputs contain preconditions (#32051)
  - Destroy with no state would still attempt to evaluate some values (#32051)
  - Prevent unnecessary evaluation and planning of resources during the pre-destroy refresh (#32051)
  - AzureRM Backend: support for generic OIDC authentication via the oidc_token and oidc_token_file_path properties (#31966)
  - Input and Module Variables: Convert variable types before attempting to apply default values. (#32027)
  - When installing remote module packages delivered in tar format, Terraform now limits the tar header block size to 1MiB to avoid unbounded memory usage for maliciously-crafted module packages. (#32135)
  - Terraform will now reject excessively-complex regular expression patterns passed to the regex, regexall, and replace functions, to avoid unbounded memory usage for maliciously-crafted patterns. This change should not affect any reasonable patterns intended for practical use. (#32135)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1668772800">- update to 1.3.5:
  * BUG FIXES:
  - Prevent crash while serializing the plan for an empty destroy operation (#32207)
  - Allow a destroy plan to refresh instances while taking into account that some may no longer exist (#32208)
  - Fix Terraform creating objects that should not exist in variables that specify default attributes in optional objects. (#32178)
  - Fix several Terraform crashes that are caused by HCL creating objects that should not exist in variables that specify default attributes in optional objects within collections. (#32178)
  - Fix inconsistent behaviour in empty vs null collections. (#32178)
  - Prevent file uploads from creating unneeded temporary files when the payload size is known (#32206)
  - Nested attributes marked sensitive by schema no longer reveal sub-attributes in the plan diff (#32004)
  - Nested attributes now more consistently display when they become unknown or null values in the plan diff (#32004)
  - Sensitive values are now always displayed as (sensitive value) instead of sometimes as (sensitive) [GH32004]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1669896000">- update to 1.3.6:
  * BUG FIXES:
  - Terraform could crash if an orphaned resource instance was
    deleted externally and had condition checks in the configuration
    (#32246)
  - Module output changes were being removed and re-added to the
    stored plan, impacting performance with large numbers of outputs
    (#32307)</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1672833600">- update to 1.3.7:
  * BUG FIXES:
  - Fix exact version constraint parsing for modules using prerelease
    versions ([#32377](https://github.com/hashicorp/terraform/issues/32377))
  - Prevent panic when a provider returns a null block value during
    refresh which is used as configuration via `ignore_changes`
    ([#32428](https://github.com/hashicorp/terraform/issues/32428))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1676030400">- update to 1.3.8:
  * Fixed a rare bug causing inaccurate `before_sensitive` / `after_sensitive`
    annotations in JSON plan output for deeply nested structures. This was
    only observed in the wild on the rancher/rancher2 provider, and resulted
    in glitched display in Terraform Cloud's structured plan log view.
    ([#32543](https://github.com/hashicorp/terraform/issues/32543))
  * A variable only referenced by an output precondition error_message may be
    missing during evaluation
    ([#32464](https://github.com/hashicorp/terraform/issues/32464))
  * Removing a NestingSingle block from configuration results in an invalid
    plan ([#32463](https://github.com/hashicorp/terraform/issues/32463))
  * Null module outputs could be dropped, causing evaluation errors when
    referring to those module attributes
    ([#32583](https://github.com/hashicorp/terraform/issues/32583))
  * Fix terraform crash when applying defaults into a collection with dynamic
    type constraint.
    ([#32454](https://github.com/hashicorp/terraform/issues/32454))
  * Updated to newer github.com/mitchellh/cli version, in turn bringing in
    updates for several indirect dependencies with known security issues.
    ([#32609](https://github.com/hashicorp/terraform/issues/32609))
  * Fix case where the first plan to use a new remote state could be applied
    twice, corrupting the state
    ([#32614](https://github.com/hashicorp/terraform/issues/32614))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1676462400">- update to 1.3.9:
  * Fix crash when planning to remove already-deposed resource instances.
    ([#32663](https://github.com/hashicorp/terraform/issues/32663))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678276800">- update to 1.4.0:
  Full changelog available at
  https://github.com/hashicorp/terraform/releases/tag/v1.4.0</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678881600">- do no longer store the tarball, create it at buildtime</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678881601">- update to 1.4.1:
  * Enables overriding modules that have the `depends_on`
    attribute set, while still preventing the `depends_on`
    attribute itself from being overridden.
    ([#32796](https://github.com/hashicorp/terraform/issues/32796))
  * `terraform providers mirror`: when a dependency lock file is
    present, mirror the resolved providers versions, not the latest
    available based on configuration.
    ([#32749](https://github.com/hashicorp/terraform/issues/32749))
  * Fixed module downloads from S3 URLs when using AWS IAM roles
    for service accounts (IRSA).
    ([#32700](https://github.com/hashicorp/terraform/issues/32700))
  * hcl: Fix a crash in Terraform when attempting to apply defaults
    into an incompatible type.
    ([#32775](https://github.com/hashicorp/terraform/issues/32775))
  * Prevent panic when creating a plan which errors before the
    planning process has begun.
    ([#32818](https://github.com/hashicorp/terraform/issues/32818))
  * Fix the plan renderer skipping the "no changes" messages when
    there are no-op outputs within the plan.
    ([#32820](https://github.com/hashicorp/terraform/issues/32820))
  * Prevent panic when rendering null nested primitive values in a
    state output.
    ([#32840](https://github.com/hashicorp/terraform/issues/32840))
  * Warn when an invalid path is specified in `TF_CLI_CONFIG_FILE`
    ([#32846](https://github.com/hashicorp/terraform/issues/32846))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1678968000">- update to 1.4.2:
  * Fix bug in which certain uses of `setproduct` caused Terraform
    to crash
    ([#32860](https://github.com/hashicorp/terraform/issues/32860))
  * Fix bug in which some provider plans were not being calculated
    correctly, leading to an "invalid plan" error
    ([#32860](https://github.com/hashicorp/terraform/issues/32860))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1680264000">- update to 1.4.3:
  * Prevent sensitive values in non-root module outputs from
    marking the entire output as sensitive [GH-32891]
  * Fix the handling of planned data source objects when storing a
    failed plan [GH-32876]
  * Don't fail during plan generation when targeting prevents
    resources with schema changes from performing a state upgrade
    [GH-32900]
  * Skip planned changes in sensitive marks when the changed
    attribute is discarded by the provider [GH-32892]</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1680264001">- update to 1.4.4:
  Due to an incident while migrating build systems for the 1.4.3
  release where `CGO_ENABLED=0` was not set, we are rebuilding that
  version as 1.4.4 with the   flag set. No other changes have been
  made between 1.4.3 and 1.4.4.</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1681387200">- update to 1.4.5:
  * Revert change from
    [[#32892](https://github.com/hashicorp/terraform/issues/32892)]
    due to an upstream crash.
  * Fix planned destroy value which would cause `terraform_data` to
    fail when being replaced with `create_before_destroy`
    ([#32988](https://github.com/hashicorp/terraform/issues/32988))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1682510400">- update to 1.4.6:
  * BUG FIXES
  - Fix bug when rendering plans that include null strings.
    ([#33029](https://github.com/hashicorp/terraform/issues/33029))
  - Fix bug when rendering plans that include unknown values in
    maps.
    ([#33029](https://github.com/hashicorp/terraform/issues/33029))
  - Fix bug where the plan would render twice when using older
    versions of TFE as a backend.
    ([#33018](https://github.com/hashicorp/terraform/issues/33018))
  - Fix bug where sensitive and unknown metadata was not being
    propagated to dynamic types while rendering plans.
    ([#33057](https://github.com/hashicorp/terraform/issues/33057))
  - Fix bug where sensitive metadata from the schema was not
    being included in the `terraform show -json` output.
    ([#33059](https://github.com/hashicorp/terraform/issues/33059))
  - Fix bug where computed attributes were not being rendered
    with the `# forces replacement` suffix.
    ([#33065](https://github.com/hashicorp/terraform/issues/33065))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1686571200">- update to 1.5.0:
  * NEW FEATURES:
  - `check` blocks for validating infrastructure: Module and
    configuration authors can now write independent check blocks
    within their configuration to validate assertions about their
    infrastructure.
  - `import` blocks for importing infrastructure: Root module
    authors can now use the `import` block to declare their
    intent that Terraform adopt an existing resource.  Import is
    now a configuration-driven, plannable action, and is
    processed as part of a normal plan. Running `terraform plan`
    will show a summary of the resources that Terraform has
    planned to import, along with any other plan changes.  The
    existing `terraform import` CLI command has not been
    modified.  This is an early version of the `import` block
    feature, for which we are actively seeking user feedback to
    shape future development. The `import` block currently does
    not support interpolation in the `id` field, which must be a
    string.
  - Generating configuration for imported resources: in
    conjunction with the `import` block, this feature enables
    easy templating of configuration when importing existing
    resources into Terraform. A new flag
    `-generate-config-out=PATH` is added to `terraform plan`.
    When this flag is set, Terraform will generate HCL
    configuration for any resource included in an `import` block
    that does not already have associated configuration, and
    write it to a new file at `PATH`. Before applying, review the
    generated configuration and edit it as necessary.
  - Adds a new `plantimestamp` function that returns the
    timestamp at plan time. This is similar to the `timestamp`
    function which returns the timestamp at apply time
    ([#32980](https://github.com/hashicorp/terraform/pull/32980)).
  - Adds a new `strcontains` function that checks whether a
    given string contains a given substring.
    ([#33069](https://github.com/hashicorp/terraform/issues/33069))
  * UPGRADE NOTES:
  - On Linux (and some other non-macOS Unix platforms we don't
    officially support), Terraform will now notice the `trust-ad`
    option in `/etc/resolv.conf` and, if set, will set the
    "authentic data" option in outgoing DNS requests in order to
    better match the behavior of the GNU libc resolver.
    Terraform does not pay any attention to the corresponding
    option in responses, but some DNSSEC-aware recursive
    resolvers return different responses when the request option
    isn't set. This should therefore avoid some potential
    situations where a DNS request from Terraform might get a
    different response than a similar request from other software
    on your system.
  * ENHANCEMENTS:
  - Terraform CLI's local operations mode will now attempt to
    persist state snapshots to the state storage backend
    periodically during the apply step, thereby reducing the
    window for lost data if the Terraform process is aborted
    unexpectedly.
    ([#32680](https://github.com/hashicorp/terraform/issues/32680))
  - If Terraform CLI receives SIGINT (or its equivalent on
    non-Unix platforms) during the apply step then it will
    immediately try to persist the latest state snapshot to the
    state storage backend, with the assumption that a graceful
    shutdown request often typically followed by a hard abort
    some time later if the graceful shutdown doesn't complete
    fast enough.
    ([#32680](https://github.com/hashicorp/terraform/issues/32680))
  - `pg` backend: Now supports the `PG_CONN_STR`,
    `PG_SCHEMA_NAME`, `PG_SKIP_SCHEMA_CREATION`,
    `PG_SKIP_TABLE_CREATION` and `PG_SKIP_INDEX_CREATION`
    environment variables.
    ([#33045](https://github.com/hashicorp/terraform/issues/33045))
  * BUG FIXES:
  - `terraform init`: Fixed crash with invalid blank module
    name.
    ([#32781](https://github.com/hashicorp/terraform/issues/32781))
  - `moved` blocks: Fixed a typo in the error message that
    Terraform raises when you use `-target` to exclude an object
    that has been moved.
    ([#33149](https://github.com/hashicorp/terraform/issues/33149))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1687348800">- update to 1.5.1:
  * BUG FIXES:
  - core: plan validation would fail for providers using nested
    set attributes with computed object attribute
    ([#33377](https://github.com/hashicorp/terraform/issues/33377))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1688040000">- update to 1.5.2:
  * BUG FIXES:
  - configs: Multiple `import` blocks with the same `id` string
    no longer result in a validation error
    ([#33434](https://github.com/hashicorp/terraform/issues/33434))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1689249600">- update to 1.5.3:
  * BUG FIXES:
  - core: Terraform could fail to evaluate module outputs when
    they are used in a provider configuration during a destroy
    operation
    ([#33462](https://github.com/hashicorp/terraform/pull/33462))
  - backend/consul: When failing to save state, `consul CAS
    failed with transaction errors` no longer shows an error
    instance memory address, but an actual error message.
    ([#33108](https://github.com/hashicorp/terraform/pull/33108))
  - plan renderer: Fixes crash when rendering the plan if a
    relevant attribute contains an integer index specified as a
    string.
    ([#33475](https://github.com/hashicorp/terraform/issues/33475))</changelog>
  <changelog author="Johannes Kastl &lt;kastl@b1-systems.de&gt;" date="1690459200">- update to 1.5.4:
  * BUG FIXES:
  - `check` blocks: Fixes crash when nested data sources are
    within configuration targeted by the terraform import
    command.
    ([#33578](https://github.com/hashicorp/terraform/issues/33578))
  - `check` blocks: Check blocks now operate in line with other
    checkable objects by also executing during import operations.
    ([#33578](https://github.com/hashicorp/terraform/issues/33578))</changelog>
</package>
</otherdata>