UPGRADE NOTES:
The output of terraform validate -json has been extended to include a code snippet object for each diagnostic. If present, this object contains an excerpt of the source code which triggered the diagnostic. Existing fields in the JSON output remain the same as before. (#28057)
ENHANCEMENTS:
- config: Improved type inference in conditional statements (#28116)
- config: provider-defined sensitive attributes redaction is no longer experimental, but default behavior (#28036)
- config: New functions
sensitiveandnonsensitiveallow module authors to explicitly override Terraform's default infererence of value sensitivity for situations where it's too conservative or not conservative enough. (#27341) terraform init: Give suggestions for possible providers on some registry failures, and generally remind ofrequired_providerson all registry failures (#28014)terraform init: Add-lockfile=readonlyflag, which suppresses writing changes to the dependency lock file. Depencies must be able to be verified against the read-only lock file, or initialization will fail. This is useful if you are managing the lock file in a separate process and want to avoid adding new hashes for existing dependencies. (#27630)- core: Reduce string allocations to improve execution time when rendering large plans as JSON (#27998)
- backend/pg: allow locking of independent states (#26924)
BUG FIXES:
- cli: Fix for missing configuration snippets in diagnostics, a bug introduced in 0.15.0-beta1 (#27944)
- config: Fix multiple upstream crashes with optional attributes and sensitive values (#28116)
- config: Fix panics in
defaultscaused by missing nested optional collection types, and mismatched primitive fallback types (#27979) - config: Fix panics in
defaultscaused by missing nested optional structural types, and corresponding missing defaults (#28067)