Skip to content

fix(deps): update dependency tofu to v1.11.6#2987

Merged
renovate[bot] merged 1 commit intomainfrom
renovate/deps-tofu-1-11-x
Apr 8, 2026
Merged

fix(deps): update dependency tofu to v1.11.6#2987
renovate[bot] merged 1 commit intomainfrom
renovate/deps-tofu-1-11-x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Apr 8, 2026

This PR contains the following updates:

Package Update Change
tofu patch 1.11.51.11.6

Release Notes

opentofu/opentofu (tofu)

v1.11.6

Compare Source

BUG FIXES:
  • Running tofu apply -refresh-only with a configuration that contains ephemeral resources does not fail anymore because the refresh produced changes (#​3776)
  • Fixed tofu init crashing when a module version uses a variable and the module is referenced from a test file. (#​3686)
  • Fixed provider-defined functions in import block id expressions causing "BUG: Uninitialized function provider" error. (#​3803)
  • tofu test no longer fails during cleanup when using a mocked version of a resource type with write-only attributes. (#​3964)
  • A malicious remote TLS server can no longer deadlock OpenTofu by sending multiple key update messages in a single record. (#​3966)
  • When installing module packages from "tar" archives, OpenTofu now accepts only a limited number of sparse file entries to avoid unbounded memory usage from maliciously-crafted archives containing many sparse regions. (#​3966)

Full Changelog: opentofu/opentofu@v1.11.5...v1.11.6


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource      | package           | from    | to      |
| --------------- | ----------------- | ------- | ------- |
| github-releases | opentofu/opentofu | v1.11.5 | v1.11.6 |
@renovate renovate bot added the deps label Apr 8, 2026
@renovate renovate bot enabled auto-merge April 8, 2026 13:51
@renovate renovate bot added this pull request to the merge queue Apr 8, 2026
Merged via the queue into main with commit 33b05c2 Apr 8, 2026
7 checks passed
@renovate renovate bot deleted the renovate/deps-tofu-1-11-x branch April 8, 2026 14:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants