Terraform

Terraform Policy is now generally available, and the -policies flag for plan, apply, and query no longer requires an experimental build or the -allow-experimental-features flag. Also added the -minimal-refresh planning option, which refreshes only resources with proposed changes, and support for variables and locals in provider requirements.

Fixed a crash when a tainted instance state is seen without a valid status, and an issue where resource identity could be nil during delete.

Terraform Policy is now generally available, so the -policies flag for plan, apply, and query no longer requires an experimental build or the -allow-experimental-features flag. Variables and locals are now supported in provider requirements, and a -minimal-refresh planning option refreshes only resources with proposed changes.

Fixed an issue where Terraform fails when rendering policy evaluation outcomes for older versions of Terraform Enterprise, and an invalid deferred error in stacks triggered by a provider returning a deferral when a resource also has an unknown count or for_each.

Fixed destroy=false handling around create_before_destroy instances, function result comparison with multiple marks, and a marks filter bug that caused values with multiple marks to erroneously fail validations. Also fixed import provider resolution.

Terraform Policy is now generally available — the -policies flag no longer requires -allow-experimental-features. A new -minimal-refresh planning option only refreshes resources with proposed changes, and provider requirements now support variables and locals. Fixed pow/log panics and lost ephemeral renewal diagnostics.

Fixed a panic that could occur during module installation when encountering invalid module calls.

Fixed a bug causing the CLI to pause indefinitely after a run task failure with pending policy evaluations. Also resolves import blocks being ignored with count/for_each, a panic on sensitive import identity, and create_before_destroy ordering issues.

Talend 8.0.20240731 revives DBMS user and role objects after four years but truncates lifecycle behavior: "bare" user/role entries encountered before a DBMS definition are silently dropped from SQL output instead of printed to console as before. This release also removes epoch-aware and mode-aware table override options (no longer separated by "," in --write-sql), and stops printing the "cloud-ready" report at execution time. The README now documents only the latest Cosmos DB emulator release, removing several Windows/Ubuntu releases.

Import blocks are now supported inside modules, and providers gain planned private data persisted across plan and apply for provider-specific state. Also adds a Linux s390x binary, on_failure action triggers, and store blocks in terraform_data.

Child module validation now correctly raises errors or warnings for invalid blocks (list, import, backend, cloud), and updating go-slug to v0.18.3 mitigates CVE-2026-14978, a Unicode normalization issue that could let files be incorrectly excluded from uploads via .terraformignore.

Resource lifecycle blocks now support destroy = false to prevent destruction, and import blocks are supported inside modules. Planned private data for providers, nested blocks as computed values, and Linux s390x builds are also new. Fixed a panic on deposed resources with preconditions and forced bastion_host_key review via upgrade note.

Terraform now supports import blocks inside modules and stores planned private data for providers, preserving provider-specific state across plan and apply. The new terraform_data store block holds ephemeral and sensitive values, with nested blocks usable as computed values.

Ephemeral resource renewal diagnostics are now surfaced and displayed, which may surface warnings that were previously lost. JSON output gains a format_version field for safer future format changes. Also fixed a panic in pow and log for non-numeric results and enriched init logs with provider versions.

Import blocks are now supported inside modules, and providers can store planned private data preserved across plan and apply via the new terraform_data store block. Resource action triggers gain on_failure modes, and lifecycle blocks support destroy = false to prevent resource destruction.

pow and log functions no longer panic when the result is not a number. The experimental deferred actions feature, enabled via -allow-deferral on terraform plan, allows count and for_each to use unknown values. Also experimental: terraform test cleanup command, backend and skip_cleanup attributes in test files, and the -policies flag on terraform query.

Import blocks now work inside modules, lifecycle blocks support destroy = false to prevent resource destruction, and Terraform stores planned private data for providers. Other additions include a store block in terraform_data for ephemeral values, nested blocks as computed values, and Linux s390x binary support. Fixes include import blocks now respecting provider local names and a panic fix for no-op changes on deposed resources with precondition/postcondition blocks.

Terraform alpha adds import block support inside modules, Linux s390x builds, and a new store block in terraform_data for ephemeral and sensitive values. Also includes resource action triggers with on_failure modes, destroy=false in lifecycle, workspace list -json, and terraform state show -json.

Fixed terraform init error when installing providers sourced from a service-discovery alias advertised by the configured backend. Provider installation order and logging were adjusted to support future enhancements, with module installation now occurring after backend initialization.

Providers can now use nested blocks as computed values, and import blocks are now supported inside modules. A new store block in terraform_data can handle ephemeral and sensitive values, resource action triggers now support on_failure modes (halt, taint, continue), and the terraform graph command can output in Mermaid format. Fixed a terraform apply panic with deposed objects and lifecycle conditions, and corrected import block behavior for provider local names.