Terraform changelog

(August 26, 2026) NEW FEATURES: Terraform now stores planned private data for providers, allowing provider-specific state to be preserved across plan and apply. (#37986) terraform_data: The new store block can hold ephemeral and sensitive v

(August 19, 2026) BUG FIXES: validate: Child module validation has been fixed and will now raise errors or warning diagnostics for invalid blocks. (list, import, backend, and cloud) (#38994) NOTES: Update go-slug to v0.18.3 to mitigate CVE-

(July 8, 2026) BUG FIXES: Fix terraform init error when installing providers sourced from a service-discovery alias advertised by the configured backend (such as localterraform.com) NOTES: command/init: Provider installation was changed to

(June 24, 2026) BUG FIXES: Add concurrency safety to configs.Parser and SourceBundleParser (#38745) Fix submodule variable validation during init (#38770)

(June 10, 2026) BUG FIXES: Fixed an issue where resources being removed from state via removed block were incorrectly listed under planned_values in json representations of the plan file. (#38665) console: Fixed a panic caused by evaluating

(May 27, 2026) ENHANCEMENTS: Support for module version evaluating to null (in the context of dynamic module sources) (#38632) BUG FIXES: Fix crash on init for modules with empty source (#38628)

(May 20, 2026) NEW FEATURES: We now produce builds for Linux s390x (zLinux) (#38615) BUG FIXES: init: Prevent provider binaries from being installed into symlinked directories (#38611)

(May 13, 2026) BUG FIXES: stacks: Fixed a bug that prevented migrating resources under multiple layers of module nesting with implicit provider configuration. (#38528) cloud backend will now forward -generate-config-out flag usage to query

(May 6, 2026) ENHANCEMENTS: stacks: add ouput values to plan component instance change description (#38360) BUG FIXES: Avoid printing warnings from 'terraform output -json' (#38530)

(May 1, 2026) BUG FIXES: Fixed crash when configuration has an invalid action_trigger nested block in data or ephemeral lifecycle blocks (#38402) validate: Removed validation of attributes inside backend blocks due to incompatibility with w

(April 29, 2026) NEW FEATURES: We now produce builds for Windows ARM64 (#32719) You can set a deprecated attribute on variable and output blocks to indicate that they are deprecated. This will produce warnings when passing in a value for a

(April 20, 2026) BUG FIXES: Fix Terraform Stacks plugin installation error (#38406)

(March 25, 2026) BUG FIXES: Prevent crash in the display of relevant attributes after provider upgrades (#38264)

(March 11, 2026) NOTES: Bump Go version to 1.25.8 to suppress security scanner false positives (#38249)

(February 25, 2026) BUG FIXES: terraform test: return error when provider config is invalid (#38084)

(February 11, 2026) BUG FIXES: Fixed an issue where terraform stacks validate was failing to resolve relative paths for modules (#38025)

(January 28, 2026) BUG FIXES: backend: Fix nil pointer dereference crash during terraform init when the destination backend returns an error (#38027) Fixes an issue where any warning diagnostics generated during terraform query execution fa

(December 17, 2025) BUG FIXES: stacks: change absolute paths in path.module/path.root to be relative, as documented (#37982)

(December 11, 2025) ENHANCEMENTS: Add component registry source resolution support to Terraform Stacks (#37888) BUG FIXES: stacks: surface runtime issues with local values to user during plan (#37980) resource instance apply failures should

(December 3, 2025) BUG FIXES: test: allow ephemeral outputs in root modules (#37813) Combinations of replace_triggered_by and -replace could result in some instances not being replaced (#37833) providers lock: include providers required by

(November 19, 2025) NEW FEATURES: List Resources: List resources can be defined in *.tfquery.hcl files and allow querying and filterting existing infrastructure. A new Terraform command terraform query: Executes list operations against exis

(November 5, 2025) BUG FIXES: impure functions could cause templatefile to incorrectly fail consistency checks (#37807) Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#37854)

(October 15, 2025) BUG FIXES: Fix crash when showing a cloud plan without having a cloud backend (#37751)

(September 17, 2025) BUG FIXES: variable validation: keep sensitive and ephemeral metadata when evaluating variable conditions. (#37595)

(September 10, 2025) BUG FIXES: test: Fix the order of execution of cleanup nodes (#37546) apply: hide sensitive inputs when values have changed between plan and apply (#37582)

(August 27, 2025) BUG FIXES: Fix regression that caused terraform test with zero tests to return a non-zero exit code. (#37477) terraform test: prevent panic when resolving incomplete references (#37484)

(August 20, 2025) NEW FEATURES: The new command terraform stacks exposes some stack operations through the cli. Use terraform stacks -usage to see available commands. (#36931) ENHANCEMENTS: Filesystem functions are now checked for consisten

(June 11, 2025) BUG FIXES: partial ephemeral values were rejected in ephemeral outputs (#37210)

(May 21, 2025) BUG FIXES: Include resource identity in import apply UI output (#37044) Fix regression during provider installation by reverting back to not sending HEAD requests. (#36998) Avoid crash on test failure in comparison in functio

(May 14, 2025) NEW FEATURES: Added Terraform backend implementation for OCI Object Storage (#34465) ENHANCEMENTS: Terraform Test command now accepts a -parallelism=n option, which sets the number of parallel operations in a test run's plan/

(April 9, 2025) BUG FIXES: disable X25519Kyber768Draft00 in TLS to prevent timouts with some AWS network firewalls (#36791) write-only attributes: internal providers should set write-only attributes to null (#36824)

(March 26, 2025) BUG FIXES: Fixes unintended exit of CLI when using the remote backend and applying with post-plan tasks configured in HCP Terraform (#36686) Modules with zero instances that contain ephemeral resources could produce an erro

(March 12, 2025) ENHANCEMENTS: Azure Backend supports ADO Pipelines OIDC token refresh by using the oidc_request_url, oidc_request_token and (the new) ado_pipeline_service_connection_id. (#36458) BUG FIXES: Return error when the templatestr

(March 5, 2025) BUG FIXES: Temporarily revert updated Windows symlink handling until we can account for known existing configurations using non-symlink junctions. (#36575) terraform test: Fix crash when a run block attempts to cleanup after

(February 27, 2025) NEW FEATURES: Add write-only attributes to resources. Providers can specify that certain attributes are write-only. They are not persisted in state. You can use ephemeral values in write-only attributes. (#36031) terrafo

(January 22, 2025) BUG FIXES: element(...): no longer crashes when asked for a negative index into a tuple. (#36376) Updated dependency github.com/hashicorp/go-slug v0.16.0 => v0.16.3 to integrate latest changes (fix for CVE-2025-0377) (#36

(January 8, 2025) BUG FIXES: type conversion: Empty map conversions now return correct type information (#36262) terraform console: Fix crash when printing ephemeral values (#36267)

(December 18, 2024) BUG FIXES: Terraform could panic when encountering an error during plan encoding (#36212)

(December 11, 2024) BUG FIXES: cli: variables in an auto-loaded tfvars file which were overridden during plan incorrectly show as changed during apply [GH-36180]

(December 4, 2024) BUG FIXES: cli: Complex variables values set via environment variables were parsed incorrectly during apply (#36121) config: templatefile would panic if given and entirely unknown map of variables (#36118) config: templat

(November 27, 2024) NEW FEATURES: Ephemeral resources: Ephemeral resources are read anew during each phase of Terraform evaluation, and cannot be persisted to state storage. Ephemeral resources always produce ephemeral values. Ephemeral val

(October 16, 2024) BUG FIXES: init: Highlight missing subdirectories of registry modules in error message (#35848) init: Prevent crash when loading provider_meta blocks with invalid names (#35842) config generation: Escape all invalid synta

(October 2, 2024) BUG FIXES: config generation: escape map keys with whitespaces (#35754)

(September 18, 2024) BUG FIXES: plan renderer: Render complete changes within unknown nested blocks. (#35644) plan renderer: Fix crash when attempting to render unknown nested blocks that contain attributes forcing resource replacement. (#3

(August 20, 2024) ENHANCEMENTS: cloud: The cloud block can now interact with workspaces that have HCP resource IDs. (#35495) BUG FIXES: core: removed blocks with provisioners were not executed when the resource was in a nested module. (#356

(August 7, 2024) BUG FIXES: core: Unneeded variable validations were being executed during a destroy plan, which could cause plans starting with incomplete state to fail. (#35511) init: Don't crash when discovering invalid syntax in duplica

(July 24, 2024) ENHANCEMENTS: Terraform now returns a more specific error message in the awkward situation where an input variable validation rule is known to have failed (condition returned false) but the error message is derived from an u

(July 10, 2024) BUG FIXES: core: Fix panic when self-referencing direct instances from count and for_each meta attributes. (#35432)

(July 3, 2024) UPGRADE NOTES: Library used by Terraform (hashicorp/go-getter) for installing/updating modules was upgraded from v1.7.4 to v1.7.5. This addresses CVE-2024-6257. This change may have a negative effect on performance of terrafo

(June 26, 2024) If you are upgrading from an earlier minor release, please refer to the Terraform v1.9 Upgrade Guide. NEW FEATURES: Input variable validation rules can refer to other objects: Previously input variable validation rules could

(June 5, 2024) BUG FIXES: terraform test: Remove duplicate warning diagnostic when providing values for unknown variables in run blocks. (#35172)

(May 22, 2024) BUG FIXES: core: Fix exponential slowdown in some cases when modules are using depends_on. (#35157) import blocks: Fix bug where resources with nested, computed, and optional id attributes would fail to generate configuration

(May 8, 2024) BUG FIXES: terraform test: Providers configured within an overridden module could panic. (#35110) core: Fix crash when a provider incorrectly plans a nested object when the configuration is null (#35090)

(April 24, 2024) BUG FIXES: terraform apply: Prevent panic when a provider erroneously provides unknown values. (#35048) terraform plan: Replace panic with error message when self-referencing resources and data sources from the count and fo

(April 17, 2024) BUG FIXES: Fix crash in terraform plan when referencing a module output that does not exist within the try(...) function. (#34985) Fix crash in terraform apply when referencing a module with no planned changes. (#34985) mov

(April 10, 2024) If you are upgrading from Terraform v1.7 or earlier, please refer to the Terraform v1.8 Upgrade Guide. NEW FEATURES: Providers can now offer functions which can be used from within the Terraform configuration language. The

(March 13, 2024) BUG FIXES: backend/s3: When using s3 backend and encountering a network issue, the retry code would fail with "failed to rewind transport stream for retry". Now the retry should be successful. (#34796)

(February 21, 2024) BUG FIXES: terraform test: Fix automatic loading of variable files within the test directory on windows platforms. (#34666) plan renderer: Very large numbers (> 2^63) will no longer be truncated in the human-readable pla

(February 7, 2024) BUG FIXES: terraform test: Fix crash when dynamic-typed attributes are not assigned values in mocks. (#34610) provisioners/file: Fix panic when source is null. (#34621) import: Throw helpful error message if an import blo

(January 31, 2024) BUG FIXES: backend/s3: No longer returns error when IAM user or role does not have access to the default workspace prefix env:. (#34511) cloud: When triggering a run, the .terraform/modules directory was being excluded fr