hashicorp/terraform v1.16.6

on GitHub

1.16.6 (October 14, 2026)

BUG FIXES:

• cloud: terraform init can now find workspaces selected by key/value tags whose keys contain uppercase letters. (#39306)

• test: Allow module under test to use deprecated outputs. (#39207)

NOTES:

• Prevent a HTTP/2 resource exhaustion via CVE-2026-78669. Exploitation would require a compromised (untrusted) provider/module registry. Such a threat is considered to be outside the perimeter of Terraform core security guarantees. (#39375)