HashiCorp Terraform: baixar versions anteriors

BUG FIXES:
- cloud: terraform init can now find workspaces selected by key/value tags whose keys contain uppercase letters. (#39306)
- test: Allow module under test to use deprecated outputs. (#39207)
NOTES:
- Prevent a HTTP/2 resource exhaustion via CVE-2026-78669. Exploitation would require a compromised (untrusted) provider/module registry. Such a threat is considered to be outside the perimeter of Terraform core security guarantees. (#39375)

BUG FIXES:
- Fixed a crash that happens when a tainted instance state is seen without a valid status (#39287)
- resource-identity: fixed an issue where resource identity could be nil during delete (#39285)

BUG FIXES:
- Fixed an issue where Terraform fails when rendering policy evaluation outcomes for older versions of Terraform Enterprise (#39095)
- stacks: Fix invalid deferred error triggered by provider returning a deferral when a resource also has an unknown count/for_each. (#39237)

BUG FIXES:
- Fix handling of destroy=false around create_before_destroy instances (#39169)
- Fix function result comparison when there are multiple marks (#39170)
- Filter logic for marks could cause values with multiple marks to erroneously fail validations (#39171)
- Fix issue with import provider resolution (#39185)

BUG FIXES:
- Fix panic in module installation when encoutering invalid module calls (#39129)

BUG FIXES:
- cloud: Fixed a bug causing the CLI to pause indefinitely after a run task failure with pending policy evaluations (#38751)
- Support referencing modules containing dynamic sources in Terraform Test (#38950)
- stacks: Fixed validation to ensure the provider versions in the lock file and configuration are compatible. (#38829)
- Fix panic when import identity references sensitive value (#39013)
- import: Fixed a bug where import blocks would be ignored when multiple imports targeted different instances of a resource config using for_each or count. (#39068)
- state show: Fix a panic when given an attribute path instead of a resource instance address (#39087)
- Fix create_before_destroy ordering in some combinations of changes (#39091)

NEW FEATURES:
- Terraform now stores planned private data for providers, allowing provider-specific state to be preserved across plan and apply. (#37986)
- terraform_data: The new store block can hold ephemeral and sensitive values across plan and apply. (#38298)
- Providers can now use nested blocks as computed values (#38305)
- import: import blocks inside modules are now supported. (#38352)
- Terraform is now available as a pre-built binary for Linux s390x (zLinux). (#38384)
- Resource action triggers can now use on_failure modes of halt, taint, or continue. (#38722)
ENHANCEMENTS:
- state show: The state show command can now produce machine-readable output when supplied with the -json flag (#23940)
- workspace: The workspace list command can now produce machine-readable output when supplied with the -json flag (#38397)
- test: Terraform now reports which resources were left behind when skip_cleanup is set. (#38449)
- stacks: Action configurations now have access to a caller symbol containing the object value of the calling resource. (#38668)
- Actions can now use before_destroy and after_destroy events. (#38668)
- cloud: Terraform now displays a summary of policy evaluation outcomes for plan and apply runs against HCP Terraform. (#38715)
- policy: Terraform now resolves policy plugin credentials from the configured cloud or remote backend during init, plan, and apply, rather than requiring the plugin to read credentials itself. (#38716)
- graph: The terraform graph command can now output graphs in Mermaid format using the -format=mermaid flag. (#38719)
- Child module outputs with unreferenced deprecated nested attributes no longer return deprecation warnings. (#38778)
- Resource lifecycle blocks now support destroy = false to prevent a resource from being destroyed. (#38784)
- The contains() function can now test for null values. (#38792)
- console: The terraform console command now accepts an optional -scope=<module address> flag, which can be used to evaluate expressions within the scope of a module or a specific module instance. (#31861)
- -invoke can now be combined with -target to specify the calling resource instance when multiple resources trigger the same action. (#38845)
- The terraform stacks command now automatically infers the target hostname from the local credentials file (credentials.tfrc.json) when neither TF_STACKS_HOSTNAME nor TF_CLOUD_HOSTNAME is set (#38896)
BUG FIXES:
- import blocks now correctly respect provider local names. (#38338)
- terraform apply no longer panics when the plan contains a no-op change for a deposed resource that has lifecycle.precondition or lifecycle.postcondition blocks. (#38586)
- workspace: Terraform now raises an error if an invalid workspace name becomes selected due to out-of-band changes. (#38594)
- test: Terraform now raises a warning when a file referenced via the -filter flag does not exist. (#38603)
- init: Terraform no longer removes locks from the dependency lock file for providers configured as dev_override. (#38634)
- init: Terraform now warns when unmanaged providers are in use and may impact provider installation. (#38656)
- Actions are now invoked with respect to all resource dependencies. (#38668)
- Terraform now returns the correct error when an import target exists in state but has no corresponding configuration. (#38782)
- The merge() function no longer panics when passed null objects. (#38792)
- Allow underscores in provider source address namespaces, so private registry provider addresses are no longer rejected as invalid (#38894)
- test: Optional ephemeral values do not have to be set at plan time (#38974)
NOTES:
- init: Errors due to incompatible -upgrade and -lockfile=readonly flags are now raised earlier in the init process. (#38561)
UPGRADE NOTES:
- bastion_host_key is now correctly applied by provisioners. Review your provisioner configurations to verify the configured key is correct before upgrading. (#38318)

BUG FIXES:
- validate: Child module validation has been fixed and will now raise errors or warning diagnostics for invalid blocks. (list, import, backend, and cloud) (#38994)
NOTES:
- Update go-slug to v0.18.3 to mitigate CVE-2026-14978, which is a Unicode normalization issue that could lead to files not being correctly excluded via .terraformignore from upload to a Terraform Enterprise or HCP Terraform during a run (#39036)

BUG FIXES:
- Fix terraform init error when installing providers sourced from a service-discovery alias advertised by the configured backend (such as localterraform.com)
NOTES:
- command/init: Provider installation was changed to enable future enhancements in the area. This effectively reverses the log message changes from v1.15. initializing_provider_plugin_message is being re-introduced to replace the short-lived two message types initializing_provider_plugin_from_config_message & initializing_provider_plugin_from_state_message. The change should not have any significant end-user impact aside from the command output. (#38838)
- command/init: Provider installation was changed to enable future enhancements in the area. This partially reverses the init event order changes from v1.15; module installation will now occur after the backend is initialized. The change should not have any significant end-user impact aside from the command output. (#38838)

BUG FIXES:
- Add concurrency safety to configs.Parser and SourceBundleParser (#38745)
- Fix submodule variable validation during init (#38770)

BUG FIXES:
- Fixed an issue where resources being removed from state via removed block were incorrectly listed under planned_values in json representations of the plan file. (#38665)
- console: Fixed a panic caused by evaluating an expression involving deprecated values (#38676)
- Fix exit code for plan, query, and refresh commands for variable-related errors (#38685)
- Fix two module installation edge cases with null and sensitive/ephemeral module sources (#38704)

ENHANCEMENTS:
- Support for module version evaluating to null (in the context of dynamic module sources) (#38632)
BUG FIXES:
- Fix crash on init for modules with empty source (#38628)

NEW FEATURES:
- We now produce builds for Linux s390x (zLinux) (#38615)
BUG FIXES:
- init: Prevent provider binaries from being installed into symlinked directories (#38611)

BUG FIXES:
- stacks: Fixed a bug that prevented migrating resources under multiple layers of module nesting with implicit provider configuration. (#38528)
- cloud backend will now forward -generate-config-out flag usage to query create request (#38539)
- Fix crash during provider installation when there is no config (#38560)

ENHANCEMENTS:
- stacks: add ouput values to plan component instance change description (#38360)
BUG FIXES:
- Avoid printing warnings from 'terraform output -json' (#38530)

BUG FIXES:
- Fixed crash when configuration has an invalid action_trigger nested block in data or ephemeral lifecycle blocks (#38402)
- validate: Removed validation of attributes inside backend blocks due to incompatibility with workflows using the -backend-config flag. (#38466)
- Fix non-const variable checks on init (#38470)
- Avoid warnings in 'terraform output -raw' (#38487)
- Ignore undeclared variable values from the cloud backend (#38490)
- Fix panic for types modules with no expanded instances (#38491)
- Fixed "unknown provider function" errors occurring during init (#38472)
- init: Fixed a bug that impacted use of provider pre-releases during init (#38496)

NEW FEATURES:
- We now produce builds for Windows ARM64 (#32719)
- You can set a deprecated attribute on variable and output blocks to indicate that they are deprecated. This will produce warnings when passing in a value for a deprecated variable or when referencing a deprecated output. (#38001)
- backend/s3: Support authentication via aws login (#37976)
- validate: The validate command now checks the backend block. This ensures the backend type exists, that all required attributes are present, and that the backend's own validation logic passes. (#38021)
- convert function, which allows for precise inline type conversions (#38160)
- Terraform now supports variables and locals in module source and version attributes (#38217)
ENHANCEMENTS:
- config: output blocks now can have an explicit type constraints (#36411)
- ssh-based provisioner (file + remote-exec): Re-enable support for PowerShell (#37794)
- terraform init log timestamps include millisecond precision (#37818)
- init: skip dependencies declared in development override. This allows you to use terraform init with developer overrides and install dependencies that are not declared in the override file. (#37884)
- Terraform Test: Allow functions within mock blocks (#34672)
- improve detection of deprecated resource attributes / blocks (#38077)
- Deprecation messages providers set on resources / blocks / attributes are now part of the deprecation warning (#38135)
- Include which attribute paths are marked as sensitive in list_start JSON logs (#38197)
- Add input variable validation for Stacks (#38240)
- When comparing a container value to null, only top level marks are now considered for the result. (#38270)
- As part of supporting variables in module sources, most commands now accept variable values (#38276)
BUG FIXES:
- testing: File-level error diagnostics are now included in JUnit XML skipped test elements, ensuring CI/CD pipelines can detect validation failures (#37801)
- A refresh-only plan could result in a non-zero exit code with no changes (#37406)
- cli: Fixed crash in terraform show -json when plan contains ephemeral resources with preconditions or postconditions (#37834)
- cli: Fixed terraform init -json to properly format all backend configuration messages as JSON instead of plain text (#37911)
- state show: The state show command will now explicitly fail and return code 1 when it fails to render the named resources state (#37933)
- apply: Terraform will raise an explicit error if a plan file intended for one workspace is applied against another workspace (#37954)
- lifecycle: replace_triggered_by now reports an error when given an invalid attribute reference that does not exist in the target resource (#36740)
- backend: Fix nil pointer dereference crash during terraform init when the destination backend returns an error (#38027)
- stacks: send progress events if the plan fails for better UI integration (#38039)
- stacks: component instances should report no-op plan/apply. This solves a UI inconsistency with convergence destroy plans (#38049)
- backend/http: Return conflicting lock info from HTTP backend instead of the lock that failed to be taken (#38144)
- states: fixed a bug that caused Terraform to be unable to identify when two states had different output values. This may have caused issues in specific circumstances like backend migrations. (#38181)
- cloud: terraform cloud and registry discovery network requests are now more resilient, making temporary network or service related errors less common (#38064)
- Enable formatting of .tfquery.hcl files by terraform fmt (#38398)
- Fix validate not returning JSON for some early diagnostics (#38400)
- Fix Terraform Stacks plugin installation error (#38406)
NOTES:
- command/init: Provider installation was refactored to enable future enhancements in the area. This results in different order of operations during init and 2 new log messages replacing one (initializing_provider_plugin_message). The change should not hav

BUG FIXES:
- Fix Terraform Stacks plugin installation error (#38406)

BUG FIXES:
- Prevent crash in the display of relevant attributes after provider upgrades (#38264)

NOTES:
- Bump Go version to 1.25.8 to suppress security scanner false positives (#38249)

BUG FIXES:
- terraform test: return error when provider config is invalid (#38084)

BUG FIXES:
- Fixed an issue where terraform stacks validate was failing to resolve relative paths for modules (#38025)

BUG FIXES:
- backend: Fix nil pointer dereference crash during terraform init when the destination backend returns an error (#38027)
- Fixes an issue where any warning diagnostics generated during terraform query execution failed to render in the cloud backend session (#38040)
- actions in modules without instances failed the plan graph (#38089)

BUG FIXES:
- stacks: change absolute paths in path.module/path.root to be relative, as documented (#37982)

ENHANCEMENTS:
- Add component registry source resolution support to Terraform Stacks (#37888)
BUG FIXES:
- stacks: surface runtime issues with local values to user during plan (#37980)
- resource instance apply failures should not cause the resource instance state to be empty. (#37981)

BUG FIXES:
- test: allow ephemeral outputs in root modules (#37813)
- Combinations of replace_triggered_by and -replace could result in some instances not being replaced (#37833)
- providers lock: include providers required by terraform test (#37851)
- Set state information in the proto request for the GenerateResourceConfig RPC (#37896)
- actions: make after_create & after_update actions run after the resource has applied (#37936)

NEW FEATURES:
- List Resources: List resources can be defined in *.tfquery.hcl files and allow querying and filterting existing infrastructure.
- A new Terraform command terraform query: Executes list operations against existing infrastructure and displays the results. The command can optionally generate configuration for importing results into Terraform.
- A new GenerateResourceConfiguration RPC allows providers to create more precise configuration values during import. (#37515)
- New top-level Actions block: Actions are provider defined and meant to codify use cases outside the normal CRUD model in your Terraform configuration. Providers can define Actions like aws_lambda_invoke or aws_cloudfront_create_invalidation that do something imparative outside of Terraforms normal CRUD model. You can configure such a side-effect with an action block and have actions triggered through the lifecycle of a resource or through passing the -invoke CLI flag. (#37553)
ENHANCEMENTS:
- terraform test: expected diagnostics will be included in test output when running in verbose mode" (#37362)
- terraform test: ignore prevent_destroy attribute during when cleaning up tests" (#37364)
- terraform stacks command support for -help flag (#37645)
- query: support offline validation of query files via -query flag in the validate command (#37671)
- Updates to support the AWS European Sovereign Cloud (#37721)
BUG FIXES:
- Retrieve all workspace variables while doing a terraform import, include variables inherited from variable sets but not overwritten by the workspace. (#37241)
- Fix OSS backend proxy support by adding a proxy layer for OSS backend operations. Resolves hashicorp/terraform#36897. (#36897)
- console and test: return explicit diagnostics when referencing resources that were not included in the most recent operation. (#37663)
- query: generate unique resource identifiers for results of expanded list resources (#37681)
- The CLI now summarizes the number of actions invoked during terraform apply, matching the plan output. (#37689)
- Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#37854)
- query: improve error handling for missing identity schemas (#37863)
UPGRADE NOTES:
- The parallelism of Terraform operations within container runtimes may be reduced depending on the CPU bandwidth limit setting. (#37436)
- Building Terraform 1.14 requires macOS Monterey or later (due to being built on Go 1.25 which imposes these requirements) (#37436)

BUG FIXES:
- impure functions could cause templatefile to incorrectly fail consistency checks (#37807)
- Allow filesystem functions to return inconsistent results when evaluated within provider configuration (#37854)

BUG FIXES:
- Fix crash when showing a cloud plan without having a cloud backend (#37751)

BUG FIXES:
- variable validation: keep sensitive and ephemeral metadata when evaluating variable conditions. (#37595)

BUG FIXES:
- test: Fix the order of execution of cleanup nodes (#37546)
- apply: hide sensitive inputs when values have changed between plan and apply (#37582)

BUG FIXES:
- Fix regression that caused terraform test with zero tests to return a non-zero exit code. (#37477)
- terraform test: prevent panic when resolving incomplete references (#37484)

NEW FEATURES:
- The new command terraform stacks exposes some stack operations through the cli. The available subcommands depend on the stacks plugin implementation. Use terraform stacks -help to see available commands. (#36931)
ENHANCEMENTS:
- Filesystem functions are now checked for consistent results to catch invalid data during apply (#37001)
- Allow successful init when provider constraint matches at least one valid version (#37137)
- Performance fix for evaluating high cardinality resources (#37154)
- TF Test: Allow parallel execution of teardown operations (#37169)
- terraform test: Test authors can now specify definitions for external variables that are referenced within test files directly within the test file itself. (#37195)
- terraform test: File-level variable blocks can now reference run outputs and other variables." (#37205)
- skip redundant comparisons when comparing planned set changes (#37280)
- type checking: improve error message on type mismatches. (#37298)
BUG FIXES:
- Added a missing warning diagnostic that alerts users when child module contains an ignored cloud block. (#37180)
- Nested module outputs could lose sensitivity, even when marked as such in the configuration (#37212)
- workspace: Updated validation to reject workspaces named "" (#37267)
- workspace: Updated the workspace delete command to reject "" as an invalid workspace name (#37275)
- plan: truncate invalid or dynamic references in the relevant attributes (#37290)
- Test run Parallelism of 1 should not result in deadlock (#37292)
- static validation: detect invalid static references via indexes on objects. (#37298)
- Fixes resource identity being dropped from state in certain cases (#37396)
NOTES:
- The command terraform rpcapi is now generally available. It is not intended for public consumption, but exposes certain Terraform operations through an RPC interface compatible with go-plugin. (#37067)
UPGRADE NOTES:
- terraform test: External variables referenced within test files should now be accompanied by a variable definition block within the test file. This is optional, but users with complex external variables may see error diagnostics without the additional variable definition. (#37195)

BUG FIXES:
- partial ephemeral values were rejected in ephemeral outputs (#37210)

BUG FIXES:
- Include resource identity in import apply UI output (#37044)
- Fix regression during provider installation by reverting back to not sending HEAD requests. (#36998)
- Avoid crash on test failure in comparison in function call (#37071)

NEW FEATURES:
- Added Terraform backend implementation for OCI Object Storage (#34465)
ENHANCEMENTS:
- Terraform Test command now accepts a -parallelism=n option, which sets the number of parallel operations in a test run's plan/apply operation. (#34237)
- Logical binary operators can now short-circuit (#36224)
- Terraform Test: Runs can now be annotated for possible parallel execution. (#34180)
- Allow terraform init when tests are present but no configuration files are directly inside the current directory (#35040)
- Terraform Test: Continue subsequent test execution when an expected failure is not encountered. (#34969)
- Produce detailed diagnostic objects when test run assertions fail (#34428)
- backend/oss: Supports more standard environment variables to keep same with provider setting (#36581)
- Improved elapsed time display in UI Hook to show minutes and seconds in mm:ss format. (#36368)
- Update legacy term used in error messages. (Terraform Cloud agent ⇒ HCP Terraform Agent) (#36706)
- import blocks: Now support importing a resource via a new identity attribute. This is mutually exclusive with the id attribute (#36703)
BUG FIXES:
- Refreshed state was not used in the plan for orphaned resource instances (#36394)
- Fixes malformed Terraform version error when the remote backend reads a remote workspace that specifies a Terraform version constraint. (#36356)
- Changes to the order of sensitive attributes in the state format would erroneously indicate a plan contained changes when there were none. (#36465)
- Avoid reporting duplicate attribute-associated diagnostics, such as "Available Write-only Attribute Alternative" (#36579)
- for_each expressions in import blocks should not be able to reference the import target (#36801)
UPGRADE NOTES:
- On Linux, Terraform now requires Linux kernel version 3.2 or later; support for previous versions has been discontinued. (#36478)

BUG FIXES:
- disable X25519Kyber768Draft00 in TLS to prevent timouts with some AWS network firewalls (#36791)
- write-only attributes: internal providers should set write-only attributes to null (#36824)

Fix crash when planning to remove already-deposed resource instances. (#32663)