Terrapod is a free, open-source platform replacement for Terraform Enterprise. This is a security patch for the 1.11 line, clearing every finding the scheduled re-scan raised against v1.11.4.
Security
golang.org/x/netraised to v0.62.0 in the Terraform provider and the migration CLI — CVE-2026-78661 (HIGH). These two build release assets rather than image contents, so the vulnerability shipped in the downloadableterraform-provider-terrapodandterrapod-migratebinaries and in no published container image.zlib1graised to1:1.3.dfsg+really1.3.1-1+deb13u1in every published image — CVE-2026-76844 and CVE-2026-85091 (both HIGH). Picked up by the rebuild this release performs; no configuration change is required to take the fix.
No behaviour changes. Taking this release is safe for a deployment that touches nothing: the only functional change is which versions the binaries and images are built from.
Status
Stable — 1.11.x is a supported release line and continues to receive security fixes and obvious bug fixes.
Full Changelog: v1.11.4...v1.11.5