opentofu

v1.12.4 Bugfix

This release fixes issues for SREs watching stability and regressions.

Published 13d Infrastructure as Code

✓ No known CVEs patched

✓ No known CVEs patched in this version

Summary

AI summary

Fixed plan output failure when a resource with lifecycle { destroy = false } needs replacement.

Type	Severity	Summary	CVE
Bugfix
Bugfix	Medium	`tofu plan -out` no longer fails for resources with `lifecycle { destroy = false }` needing replacement. `tofu plan -out` no longer fails for resources with `lifecycle { destroy = false }` needing replacement. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Moved block now correctly compares provider source addresses. Moved block now correctly compares provider source addresses. Source: llm_adapter@2026-07-14 Confidence: high	—
Bugfix	Medium	Correct Source Provider Address now passed into Provider MoveResource requests. Correct Source Provider Address now passed into Provider MoveResource requests. Source: llm_adapter@2026-07-14 Confidence: high	—

Full changelog

BUG FIXES:

tofu plan -out no longer fails when the plan includes a resource with lifecycle { destroy = false } that needs replacement, which previously errored with invalid change action ForgetThenCreate. (#4324)
Moved block now correctly compares provider source addresses. (#4280)[https://github.com/opentofu/opentofu/pull/4280]
Correct Source Provider Address now passed into Provider MoveResource requests. (#4355)[https://github.com/opentofu/opentofu/pull/4355]

Full Changelog: https://github.com/opentofu/opentofu/compare/v1.12.3...v1.12.4

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track opentofu

Get notified when new releases ship.

About opentofu

OpenTofu lets you declaratively manage your cloud infrastructure.