●Change8

v1.11.0-beta1

📦 terraform
✨ 6 features🐛 1 fixes⚡ 1 deprecations🔧 7 symbols

Summary

Terraform 1.11.0-beta1 introduces write-only resource attributes, GA support for S3 native state locking, and enhancements to 'terraform test' including JUnit XML output and state key control.

Migration Steps

  1. To adopt S3 native state locking, add 'use_lockfile = true' to your S3 backend configuration and remove DynamoDB-related arguments.

✨ New Features

  • Add write-only attributes to resources which are not persisted in state and support ephemeral values.
  • The -junit-xml option for 'terraform test' is now generally available for creating test reports.
  • S3 native state locking is now generally available via the 'use_lockfile' argument.
  • Provider installation now supports .netrc credentials for download and shasum URLs.
  • Added 'override_during' attribute to 'terraform test' to allow using mocked/overridden values during the plan phase.
  • Added 'state_key' attribute for 'run' blocks in 'terraform test' to control internal state file usage.

🐛 Bug Fixes

  • Updated github.com/hashicorp/go-slug to v0.16.3 to address CVE-2025-0377.

🔧 Affected Symbols

terraform testterraform initbackend.s3use_lockfileoverride_duringstate_key-junit-xml

⚡ Deprecations

  • DynamoDB-related arguments for S3 state locking are deprecated in favor of the new S3-native locking mechanism.