Skip to content

fix(deps): update dependency tofu to v1.12.1#3147

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/deps-tofu-1-12-x
May 30, 2026
Merged

fix(deps): update dependency tofu to v1.12.1#3147
renovate[bot] merged 1 commit into
mainfrom
renovate/deps-tofu-1-12-x

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented May 30, 2026

This PR contains the following updates:

Package Update Change
tofu patch 1.12.01.12.1

Release Notes

opentofu/opentofu (tofu)

v1.12.1

Compare Source

SECURITY ADVISORIES:

  • Previous releases in the v1.12 series could be affected by several vulnerabilities:

    • ssh usage through OpenTofu generate hangs or panics.
    • Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation. Now, both the 'key' and 'key.SignatureKey' are checked for @revoked.

    This is fixed now by (#​4145)

BUG FIXES:

  • Address a bug introduced in v1.12.0 causing excessive memory usage by providers. (#​4126)
  • Address a bug introduced in v1.12.0 where replace_triggered_by was validated incorrectly. (#​4133
  • The Azure key provider will now accept the tenant_id, subscription_id, environment, and metadata_host variables; a bug previously only allowed these to be set through environment variables. (#​4091)

Full Changelog: https://github.com/opentofu/opentofu/blob/v1.12/CHANGELOG.md


Configuration

📅 Schedule: (in timezone Europe/Berlin)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

| datasource      | package           | from    | to      |
| --------------- | ----------------- | ------- | ------- |
| github-releases | opentofu/opentofu | v1.12.0 | v1.12.1 |
@renovate renovate Bot added the deps label May 30, 2026
@renovate renovate Bot enabled auto-merge May 30, 2026 12:55
@renovate renovate Bot added this pull request to the merge queue May 30, 2026
Merged via the queue into main with commit c516171 May 30, 2026
8 checks passed
@renovate renovate Bot deleted the renovate/deps-tofu-1-12-x branch May 30, 2026 13:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants