Skip to content

deps: update dependency opentofu/opentofu to v1.11.4#1136

Merged
lukasmetzner merged 1 commit intomainfrom
renovate/opentofu-opentofu-1.x
Jan 22, 2026
Merged

deps: update dependency opentofu/opentofu to v1.11.4#1136
lukasmetzner merged 1 commit intomainfrom
renovate/opentofu-opentofu-1.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 21, 2026

This PR contains the following updates:

Package Update Change
opentofu/opentofu patch v1.11.3v1.11.4

Release Notes

opentofu/opentofu (opentofu/opentofu)

v1.11.4

Compare Source

SECURITY ADVISORIES:
  • Previous releases in the v1.11 series could potentially take an excessive amount of time processing a maliciously-crafted .zip archive during either provider or module installation during tofu init. (#​3689)
BREAKING CHANGES:
  • Modules containing local provider configurations now also reject the enabled argument, matching existing behavior for count, for_each, and depends_on. (#​3680)

    This was an oversight in the original design of the enabled feature and was missed during the review process. Although our goal is to not introduce breaking changes in patch releases, in some cases it may be warranted. Anyone who has used the enabled feature in this particular way will have unintentionally introduced a foot-gun into their infrastructure and should remedy it post-haste.

BUG FIXES:
  • In JSON syntax, the state encryption method configuration now allows specifying keys using both normal expression syntax and using template interpolation syntax. Previously only the template interpolation syntax was allowed, which was inconsistent with other parts of the encryption configuration. (#​3654)
  • Providers are not configured anymore with DeferralAllowed capability of OpenTofu since having that created unwanted behaviour from some providers. (#​3676)
  • Resources containing write-only attributes now are rendered consistently during planning. (#​3667)

Full Changelog: opentofu/opentofu@v1.11.3...v1.11.4


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner January 21, 2026 18:12
@renovate renovate bot force-pushed the renovate/opentofu-opentofu-1.x branch from 0cc7a2c to 14b4178 Compare January 22, 2026 08:51
@renovate renovate bot force-pushed the renovate/opentofu-opentofu-1.x branch from 14b4178 to 3e6c5a7 Compare January 22, 2026 09:03
@lukasmetzner lukasmetzner merged commit dfb3976 into main Jan 22, 2026
9 checks passed
@lukasmetzner lukasmetzner deleted the renovate/opentofu-opentofu-1.x branch January 22, 2026 09:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant