167 commits

Author	SHA1	Message	Date
Daniel Schmidt	7eaf6daf60	add deprecation marks to resources based on schema	2026-02-03 16:47:54 +01:00
Sarah French	02a4ddce1b	fix: Fail an apply command if the plan file was generated for a workspace that isn't the selected workspace (#37955) ... * fix: Fail apply command if the plan file was generated for a workspace that isn't the selected workspace. * Add change file * test: Update test helper to include Workspace name in plan representation * fix: Make error message more generic, so is applicable to backend and cloud blocks. * fix: Make error message specific to backend or cloud block * test: Add separate tests for backend/cloud usage * test: Update remaining tests to include a value for Workspace in mocked plans * Apply suggestions from code review Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com> * fix: Panic when a plan file has missing workspace data * test: Update test to match changes in error text --------- Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com>	2026-02-03 15:29:58 +00:00
Daniel Schmidt	958a1ae1e7	variable and output deprecation ... Variables can be deprecated through the `deprecated` attribute. If set the variable will emit a diagnostic if a values is passed to it. This entails both root level and module variables. Outputs can be deprecated through the `deprecated` attribute as well. If set wherever the value is used a diagnostic will be emitted. Root level outputs can not be deprecated. The only acceptable usage of a deprecated output is another deprecated output (forwarding the deprecation to the module user). If modules not under your control have deprecation warnings you can add a `suppress_deprecations_warnigns` attribute to the module call in question to silence any deeply nested warnings.	2026-02-03 15:57:28 +01:00
Daniel Schmidt	f4c22be3c5	stacks: send progress events on failed provider configurations	2026-01-30 16:13:59 +01:00
Daniel Schmidt	492d342aab	ensure actions dont break the graph in modules with no instances	2026-01-23 13:29:47 +01:00
Samsondeen	0b35407d2c	Allow functions in test mock blocks (#37883)	2026-01-22 09:42:21 +01:00
Jared Baker	35e81db902	Merge pull request #38047 from hashicorp/s3/aws-sdk-go-base-upgrade ... backend/s3: bump `github.com/hashicorp/aws-sdk-go-base/v2`	2026-01-20 11:00:44 -05:00
Daniel Schmidt	b926263c03	stacks: follow component progress cycle for empty destroys ... We expect a component instances to report its plan/apply starting and ending as well as reporting the progress / result. This should also be the case for no-ops like an empty component instance.	2026-01-15 14:23:02 +01:00
Radek Simko	1186262c8c	backend/http: Refresh state earlier (align with other backends) (#38033) ... * correct changelog entry for #38027 * backend/http: Refresh state before returning StateMgr This aligns the http backend with the implementation of StateMgr in other remote backends, which in turn enables easier testing of higher level logic that relies on certain backend behaviours. * backend/http: Refactor TestHTTPBackend to allow custom method implementations * add regression test for PR 38027	2026-01-14 15:13:58 +00:00
Mark Hall	7029dfac86	Fix nil pointer dereference in backend state migration (#38028) ... * fix: handle all StateMgr errors during backend migration Fixes a nil pointer dereference panic that occurs during backend migration when StateMgr returns an error other than ErrDefaultWorkspaceNotSupported. The bug occurred because the code only checked for the specific ErrDefaultWorkspaceNotSupported error. When any other error occurred (such as permission errors like storage.objects.get access denied), destinationState remained nil, but the code continued and attempted to call destinationState.RefreshState(), causing a panic. This fix adds an else clause to catch and return all other errors from StateMgr, preventing the nil pointer dereference and providing users with a clear error message instead of a crash. Fixes #24100 * Add changelog entry for backend migration nil pointer fix 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com> --------- Co-authored-by: Claude <noreply@anthropic.com>	2026-01-14 11:41:23 +00:00
Michael Yocca	810f497ecd	fix(cloud): cloud backend rendering query warning diags (#38040)	2026-01-13 08:48:15 -08:00
Jared Baker	6475423325	backend/s3: bump github.com/hashicorp/aws-sdk-go-base/v2 ... Incrementing the `aws-sdk-go-base` dependecy will also pull in the latest version of the AWS SDK for Go V2, which includes support for the newly launched `aws login` authentication method.	2026-01-08 10:59:37 -05:00
Jared Baker	dc0384e578	chore: switch changelog to UPGRADE NOTES kind ... This is consistent with the `kind` used for previous breaking changes to S3 backend behavior.	2026-01-07 15:54:50 -05:00
Jared Baker	4f53303c12	Merge branch 'main' into fix/s3-backend-fips-env-var-parsing	2026-01-07 15:50:34 -05:00
Kevin Vu	c36c81431a	fix: validate replace_triggered_by attribute references (#38010) ... * fix: use schema-based validation for replace_triggered_by Fixes #36740 * fix: use change.ProviderAddr for schema lookup	2025-12-17 19:50:51 +00:00
Nick Fagerlund	b2aad914f1	stacks: Make path.module and path.root relative, to match documentation (#37982) ... * stacks: Make path.module and path.root relative, to match documentation Previously, we were just handing off the absolute path produced by the sourcebundle struct. But that's no good, because the value doesn't stay consistent between plan and apply when running under tfc-agent. (It uses working directories named after the unique job ID.) It also doesn't match the documentation, which describes these as relative paths. This was preventing people from uploading module-provided files to create aws lambda functions, for example. This commit addresses that by converting the source-bundle provided module path to a relative path (relative to Terraform's working directory). In tfc-agent for stacks runs, that ends up being the directory directly above the sourcebundle directory, and all the paths below that are consistent between plan and apply. * I think this is how the changelog thing works?	2025-12-12 11:05:32 -08:00
Daniel Schmidt	2eb22c8435	backport fix to 1.14	2025-12-11 10:42:52 +01:00
Daniel Schmidt	c71e0d736c	add changelog entry	2025-12-11 10:42:52 +01:00
Daniel Schmidt	889d605664	backport this change to 1.14	2025-12-11 10:36:44 +01:00
Daniel Schmidt	37e0194a23	changelog entry	2025-12-11 10:36:44 +01:00
James Pogran	2c075b9f8e	Add component registry source resolution support to Terraform Stacks (#37888) ... * Add component registry source resolution support to Terraform Stacks This change implements the missing component source resolution case in the stack configuration loader, enabling Terraform Stacks to properly handle component registry sources from HCP Terraform and other component registries. The implementation mirrors the existing module registry resolution workflow, where component sources are first resolved to their versioned form using the source bundle's component metadata, then converted to final source addresses that can be used to locate the actual component code. This completes the integration between the terraform-registry-address component parsing capabilities and the go-slug sourcebundle component resolution APIs. * chore: bump go-slug to v0.18.1 * fix: add case for component final source type * chore: rm space * chore: sync module deps * chore: update testdata with separate bundle * fix: manifest file json obj with trailing comma * Add changelog entry to 1.14 --------- Co-authored-by: Michael Yocca <michael.yocca@hashicorp.com>	2025-12-10 09:16:03 -05:00
Kevin Vu	b62d97ac88	fix: parse boolean env vars in S3 backend correctly ... Fixes #37601	2025-11-25 13:45:13 -08:00
Kevin Vu	87b3390189	fix: Make init backend messages JSON-compatible (#37920) ... * fix: Make all init backend messages JSON-compatible Fixes #37911 by converting all backend configuration messages to use the View abstraction, which properly formats output as JSON when the -json flag is used. Previously, certain messages were output directly using the legacy Ui abstraction, bypassing JSON formatting. Changes: - Added 11 new message codes to init.go MessageRegistry with both human and JSON formatted values - Replaced 11 direct m.Ui.Output() calls in meta_backend.go with View abstraction calls - Fixed output in backend_C_r_s(), backend_C_r_S_changed(), backend_c_r_S(), and stateStore_c_S() functions All init tests pass successfully. * docs: Add changelog entry for init JSON backend messages fix * cleanup: Remove unused backend output constants The following constants were moved to init.go as message registry entries and are no longer used in meta_backend.go: - outputBackendMigrateChange - outputBackendMigrateLocal - outputStateStoreMigrateLocal - outputBackendReconfigure - successBackendUnset - successBackendSet	2025-11-25 17:47:38 +00:00
Daniel Schmidt	7647923c53	actions: connect resource instance nodes to after actions	2025-11-24 20:49:56 +01:00
Sarah French	4381860dc6	fix: Make state show command exit with code 1 if the stored state cannot be marshalled for rendering (#37933) ... Prior to this change, when running a `state show` command with an address for a resource that existed in state but didn't match the current schema of the resource, users would see the "Failed to marshal" error but would also see output saying "The state file is empty. No resources are represented". This is misleading, as the state file isn't empty. Also, the command would exit with code 0 despite the error.	2025-11-24 15:49:47 +00:00
Steven Masley	3df28c3101	fix: Make terraform init JSON log timestamps include millisecond precision (#37818) ... * fix: terraform init log timestamps include millisecond precision * docs: add changelog entry	2025-11-21 19:24:03 +00:00
Daniel Schmidt	808713f56f	Fix changie entry ... I was linking to the issue we fixed, not the PR	2025-11-21 16:32:40 +01:00
Kevin Vu	dc0eba33af	fix: support ephemeral resources in jsonchecks (#37893) ... Fixes #37834	2025-11-19 09:51:09 +01:00
Liam Cervante	cfbfdc5797	providers lock: include test files when loading configuration (#37851)	2025-11-17 08:33:25 +01:00
Daniel Schmidt	1b662d78e5	init: skip dependencies declared in development override	2025-11-12 09:23:17 +01:00
James Bardin	64f2b5d9c6	Merge pull request #37886 from hashicorp/jbardin/state-deep-equal ... Implement equality for state objects	2025-11-10 15:38:41 -05:00
James Bardin	f78c64e528	CHANGELOG	2025-11-10 12:44:03 -05:00
Radek Simko	40482337a7	ssh-based provisioner: Re-enable support for PowerShell (#37794) ... * ssh-based provisioner: Re-enable support for PowerShell * add changelog entry	2025-11-06 17:45:13 +00:00
James Bardin	39eb8c7fb4	Merge pull request #37854 from hashicorp/jbardin/provider-eval-scope ... Allow inconsistent filesystem function results for provider configuration	2025-11-04 13:30:44 -05:00
Daniel Banck	6b038754f0	Fix list resource diagnostics check (#37863) ... * Fix list resource diagnostics check * Improve error message on missing identity schema * Add test case for list response diagnostics * Add changelog	2025-11-04 13:43:19 +01:00
James Bardin	4934006982	CHANGELOG	2025-11-03 11:22:00 -05:00
Liam Cervante	7ac2b7938e	Stacks: temporarily disable ephemeral outputs in Stack components (#37823)	2025-10-31 09:52:48 +01:00
James Bardin	f8ae45cfc8	Merge pull request #37833 from hashicorp/jbardin/force-replace-instance ... Don't carry all `-replace` addresses through to every instance	2025-10-30 15:30:32 -04:00
Kevin Vu	26f289aeb5	testing: include file-level errors in JUnit skipped elements (#37806) ... * testing: include file-level errors in JUnit skipped elements Fixes #37801 * testing: use suite-level system-err for file errors	2025-10-30 09:17:08 +00:00
James Bardin	cfbde8e5fa	CHANGELOG	2025-10-29 18:00:55 -04:00
Liam Cervante	411f18e6ac	ephemerals: allow root ephemeral outputs in stacks and test (#37813) ... * ephemerals: allow root ephemeral outputs in stacks and test * remember to set new opt for apply stage	2025-10-28 09:29:44 +01:00
Daniel Banck	cc30a8cf1d	Fix crash when showing a cloud plan without having a cloud backend (#37751) ... * Fix crash when showing a cloud plan without a cloud backend * Add changelog	2025-10-10 10:51:00 +02:00
Dirk Avery	37c2fd1c2e	Move to 1.14 for backport	2025-10-03 10:26:00 -04:00
Dirk Avery	f650603e48	Move changelog	2025-10-02 17:31:39 -04:00
Dirk Avery	0a7f300baf	Add changelog	2025-10-02 17:28:21 -04:00
Akella Umesh	ea20db63fb	actions: add missing actions output for terraform apply cli (#37692)	2025-10-02 10:00:05 -04:00
Samsondeen	2274026c68	query: add -query flag to validate command (#37671)	2025-10-01 11:33:52 +02:00
Nara Kasbergen Kwon	eae5ac13dd	build: Produce a Windows arm64 binary (#35461)	2025-09-26 14:35:19 -04:00
Liam Cervante	1e414491c7	evaluate: return diagnostics instead of unknown for uninitialised locals and resources (#37663) ... * evaluate: return diagnostics instead of unknown for uninitialised locals and resources * changelog * also input variables	2025-09-24 16:27:43 +02:00
Mark DeCrane	7f0ef4c8d0	changelog entry	2025-09-19 15:50:25 -04:00