Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 22, 2026

This PR contains the following updates:

Package Update Change
tofu patch 1.11.31.11.4

Release Notes

opentofu/opentofu (tofu)

v1.11.4

Compare Source

SECURITY ADVISORIES:

  • Previous releases in the v1.11 series could potentially take an excessive amount of time processing a maliciously-crafted .zip archive during either provider or module installation during tofu init. (#​3689)

BREAKING CHANGES:

  • Modules containing local provider configurations now also reject the enabled argument, matching existing behavior for count, for_each, and depends_on. (#​3680)

    This was an oversight in the original design of the enabled feature and was missed during the review process. Although our goal is to not introduce breaking changes in patch releases, in some cases it may be warranted. Anyone who has used the enabled feature in this particular way will have unintentionally introduced a foot-gun into their infrastructure and should remedy it post-haste.

BUG FIXES:

  • In JSON syntax, the state encryption method configuration now allows specifying keys using both normal expression syntax and using template interpolation syntax. Previously only the template interpolation syntax was allowed, which was inconsistent with other parts of the encryption configuration. (#​3654)
  • Providers are not configured anymore with DeferralAllowed capability of OpenTofu since having that created unwanted behaviour from some providers. (#​3676)
  • Resources containing write-only attributes now are rendered consistently during planning. (#​3667)

Full Changelog: opentofu/opentofu@v1.11.3...v1.11.4


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource      | package           | from    | to      |
| --------------- | ----------------- | ------- | ------- |
| github-releases | opentofu/opentofu | v1.11.3 | v1.11.4 |
@renovate renovate bot added the deps label Jan 22, 2026
@renovate renovate bot enabled auto-merge January 22, 2026 02:41
@renovate renovate bot added this pull request to the merge queue Jan 22, 2026
Merged via the queue into main with commit 5e690cf Jan 22, 2026
7 checks passed
@renovate renovate bot deleted the renovate/deps-tofu-1-11-x branch January 22, 2026 02:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant