v0.47.0

What's Changed

Exciting New Features 🎉

• feat(#303): include commit SHA in working directory lock errors by @ShankyJS in #6646
• feat: Expose plan_output on POST /api/drift/detect and clarify drift API workflow docs by @albertorm95 in #6709
• feat: add --plan-store-dir to decouple plan file storage from data-dir by @sakkiii in #6636

Provider GitHub

• fix: handle malformed plans and VCS transport failures by @chenrui333 in #6672
• fix: make GitHub token rotation concurrency-safe by @chenrui333 in #6670

Bug fixes 🐛

• fix: wire SkipPRRequirements for no-PR API and drift remediation contexts by @albertorm95 in #6664
• fix: exempt readiness probe from web authentication by @chenrui333 in #6669
• fix: avoid nil terraform client dereference in NewServer by @Atul-Koundal in #6697
• fix: accept 2xx responses as success in HTTP webhooks by @gautamrizwani in #6648
• fix: only require a managed plan file for managed apply workflows by @jamengual in #6781
• fix: scope misspell "did you mean" check to default executable name by @npwolf in #6690
• fix: NoOpLocker.Unlock returns non-nil lock, breaking DELETE /locks error handling by @ricardbejarano in #6775

Security changes

• fix(deps): update module golang.org/x/text to v0.39.0 [security] (main) by @renovate[bot] in #6687
• chore(deps): update module github.com/klauspost/compress to v1.18.7 [security] (main) by @renovate[bot] in #6706
• chore(deps): update module golang.org/x/mod to v0.40.0 [security] (main) by @renovate[bot] in #6771
• chore(deps): update dependency mermaid to v11.16.1 [security] (main) by @renovate[bot] in #6744

Documentation

• docs: Promote Terraform distribution agnosticism in Terragrunt example by @lachlankidson in #6620
• chore(deps): Bump dompurify from 3.4.11 to 3.4.12 by @dependabot[bot] in #6688
• chore(deps): update lodash-es to 4.18.1 by @chenrui333 in #6673

Dependencies

• chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to e7292be in .clusterfuzzlite/dockerfile (main) by @renovate[bot] in #6702
• chore(deps): update gcr.io/oss-fuzz-base/base-builder-go docker digest to bb153df in .clusterfuzzlite/dockerfile (main) by @renovate[bot] in #6705
• chore(deps): update golang:1.26.5 docker digest to 3aff665 in testing/dockerfile (main) by @renovate[bot] in #6716
• chore(deps): update redis:8.6-alpine docker digest to cd218f4 in docker-compose.yml (main) by @renovate[bot] in #6722
• fix(deps): update github.com/hashicorp/terraform-config-inspect digest to 2fb54c2 in go.mod (main) by @renovate[bot] in #6730
• chore(deps): update dependency opentofu/opentofu to v1.12.5 in dockerfile (main) by @renovate[bot] in #6735
• chore(deps): update step-security/harden-runner digest to b09bb98 in .github/workflows/scorecard.yml (main) by @renovate[bot] in #6757
• fix(deps): update module github.com/go-playground/validator/v10 to v10.30.3 in go.mod (main) by @renovate[bot] in #6770
• fix(deps): update module github.com/hashicorp/hc-install to v0.9.5 in go.mod (main) by @renovate[bot] in #6774
• chore(deps): update docker/dockerfile:1 docker digest to ecfaec9 in dockerfile (main) by @renovate[bot] in #6780

Other Changes 🔄

• chore(deps): bump Alpine curl to 8.20.0-r0 by @albertorm95 in #6665
• fix: bump alpine base image to 3.23.5 to update libssl3/libcrypto3 by @albertorm95 in #6708

New Contributors

• @ShankyJS made their first contribution in #6646
• @sakkiii made their first contribution in #6636
• @gautamrizwani made their first contribution in #6648

Full Changelog: v0.46.0...v0.47.0