chore(renovatebot): Update dependency opentofu/opentofu to v1.12.5 (main)

[selfhosted241renovatebot]

This PR contains the following updates:

Package	Update	Change
opentofu/opentofu	patch	1.12.3 -> 1.12.5

---

Release Notes

opentofu/opentofu (opentofu/opentofu)

v1.12.5

Compare Source

SECURITY ADVISORIES:

• Previous releases in the v1.12 series could be affected by several vulnerabilities:

  • The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake,
    allowing a passive network observer who can collect handshakes to de-anonymize the hostname of the server, even when ECH was being used.

  This is fixed now by (#​4363)

BUG FIXES:

• Fixed bug where implicit moves and provider address changes would incorrectly cause providers.MovedResourceState to be used in place of providers.UpgradeResourceState (#​4375)

Full Changelog: opentofu/opentofu@v1.12.4...v1.12.5

v1.12.4

Compare Source

BUG FIXES:

• tofu plan -out no longer fails when the plan includes a resource with lifecycle { destroy = false } that needs replacement, which previously errored with invalid change action ForgetThenCreate. (#​4324)
• Moved block now correctly compares provider source addresses. (#​4280)[#​4280]
• Correct Source Provider Address now passed into Provider MoveResource requests. (#​4355)[#​4355]

Full Changelog: opentofu/opentofu@v1.12.3...v1.12.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.