35432 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Sarah French	8acf081ba4	test CI checks on appending diags	2026-05-19 10:33:36 +01:00
Sarah French	b046d8a010	ci: Add (tfdiags.Diagnostics).Append checker to PR checks (#38606) ... * tool: Go analyzer made with Copilot that detects when calls to tfdiags.Diagnostics.Append ignores the returned value. * ci: Update script to be able to identify newly-added instances of the defect in a PR context aware way * ci: Tool only identifies new occurrences of defect when run in CI on a PR	2026-05-19 10:32:10 +01:00
Sarah French	634db2dcc8	PSS: Add parsing of .tfmigrate.hcl files to define state migration operations (#38526) ... * feat: Parsing a configuration directory can include .tfmigrate.hcl files. These files include `state_store_provider` blocks and `from` blocks that contains either a single `backend` or `state_store` block. Validation will enforce that despite multiple .tfmigrate.hcl files being parsed you can only have one state_store_provider or from block, and nested backend/state_store blocks are mutually exclusive. Use of state_store_provider is only valid when state_store is in use, and the single provider described in both blocks must be in agreement. Also, a directory's .tfmigrate.hcl files cannot be empty once combined.	2026-05-19 09:31:27 +01:00
Sarah French	008c92d91f	fix: Append lost warnings in MaybeGetSchemas (#38605)	2026-05-18 16:35:56 +01:00
Austin Valle	ee8a91d85c	chore: Move changelog validation to pull_request trigger (#38607)	2026-05-18 09:19:57 -04:00
Sarah French	d174972029	test: Show warning when a -filter flag has an invalid value (#38603) ... * test: Show warning when a test file filter is not valid * Add change file	2026-05-15 20:36:26 +01:00
Sarah French	f6553bae93	fix: Stop discarding diagnostics in internal test providers (#38602)	2026-05-15 20:08:16 +01:00
Austin Valle	74be5f114e	chore: Adjust the title of the validate changelog job (#38601) ... * adding a malformed changelog * adjust name of validate changelog job * remove malformed changelog	2026-05-15 15:03:48 +00:00
Austin Valle	a3ad084492	chore: Adjust changelog validation to use head_ref (#38599) ... * add malformed changelog * Use head_ref explicitly to checkout PR branch	2026-05-15 10:39:05 -04:00
Austin Valle	05d0ce481e	chore: Update changelog validation to use the PR branch (#38598) ... * test a malformed changelog * move validation to a new job using the right branch * remove malformed changelog since we can't test in the same PR we make the workflow update in	2026-05-15 10:20:20 -04:00
Sarah French	7d5441c41f	Update change file contents (#38597)	2026-05-15 13:23:46 +00:00
Sarah French	c7087b00d3	Fix change file formatting (#38596)	2026-05-15 13:10:09 +00:00
Sarah French	be22624430	chore: Modernise some code in provisioners packages, add some code comments (#38588)	2026-05-15 14:00:43 +01:00
hc-github-team-tf-core	e1bab732d8	Cleanup after 1.16.0-alpha20260513 release (#38570)	2026-05-15 13:59:33 +01:00
Kristin Laemmert	abbb650bae	refactor: remove readDiff (#38590) ... readDiff is no longer necessary now that we don't need a schema to read the change - all calls to readDiff were replaced with a single-line call to ctx.Changes, using the same inputs that readDiff used.	2026-05-14 14:25:24 -04:00
Kristin Laemmert	34935295e3	feat(import): support import blocks inside child modules (#38352) ... This PR adds support for import blocks inside child modules. Duplicate blocks will overwrite prior imports (I copied this behavior from the refactoring code, but we could instead return an error if multiple import blocks target the same abs config resource).	2026-05-14 14:17:24 -04:00
Sebastien Tardif	3c94ef65b3	Fix resource leaks in provisioners and commands (#38585) ... * Fix resource leaks in provisioners and commands Close file handles, HTTP response bodies, and pipe ends that were previously leaked on certain code paths: - workspace_new.go: Close state file opened via os.Open - file/resource_provisioner.go: Close temp file handle before returning the file path to caller - login.go: Move defer resp.Body.Close() before ioutil.ReadAll so the body is closed even when ReadAll fails - local-exec/resource_provisioner.go: Close the read end of os.Pipe after the copy goroutine completes --------- Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca>	2026-05-14 17:36:12 +01:00
Sarah French	820f37b35f	test: Proof of path traversals not being accepted workspaces (#38589)	2026-05-14 16:15:46 +01:00
Sarah French	c56ec2943d	refactor: Move validation of init's -upgrade and -lockfile=readonly flags to the arguments package. (#38561) ... The `-upgrade` and `-lockfile=readonly` flags are mutually exclusive, and this is now enforced by the arguments package. This refactor has also fixed a historical bug where that validation error was output twice. The getProvidersFromConfig code now depends on the flag validation happening in the calling code. However there is another check in downstream code, in `saveDependencyLockFile` when we overwrite the dependency lock file's contents. There, an error occurs if a diff in the locks is detected during `readonly` mode. This protects against incorrect use of `getProvidersFromConfig` with unvalidated inputs, if that happens in future.	2026-05-14 14:42:31 +01:00
Sarah French	2e5a89ab6f	Update command help text for state migrate command (#38571) ... Added details about the default behaviour for the lock-file CLI flags, and made it clearer that the upgrade flag only enables upgrading the provider used for state storage.	2026-05-14 13:31:48 +01:00
Sarah French	adcf9a9cb3	PSS: Make sure to close supplementary instances of a store that are intended to be used temporarily. (#38573) ... * feat : Add Close method to Pluggable struct, use method to close supplementary provider processes that are launched during init.	2026-05-14 08:24:11 -04:00
James Bardin	93b0eae736	Merge pull request #38572 from hashicorp/jbardin/phase-out ... remove old resource phase addressing	2026-05-13 15:40:36 -04:00
James Bardin	c29cb25f86	remove old resource phase addressing ... At one point there was an attempt to connect the destroy nodes in the apply graph by using special addressing and manipulating the references for resources. This doesn't work for a few reasons, but in particular, destroy nodes are entirely built from their state, they do not reference anything, and they cannot be referenced.	2026-05-13 14:12:38 -04:00
hc-github-team-tf-core	3ba027e9d4	Prepare before 1.16.0-alpha20260513 release	2026-05-13 12:38:18 +02:00
Radek Simko	6dac3a30e1	build: Produce docker image for s390x	2026-05-13 12:29:08 +02:00
Radek Simko	5ea5ae1528	add changelog entry	2026-05-13 12:29:08 +02:00
Radek Simko	0f5c23823d	build: Produce a linux/s390x binary	2026-05-13 12:29:08 +02:00
Daniel Banck	7ac3e2ec19	Return SafeInitActionNotRelevant on empty config	2026-05-13 08:17:40 +02:00
Daniel Banck	94a640a1a5	Add test case for variable value without config	2026-05-13 08:17:40 +02:00
Daniel Banck	850be6c29d	Add changelog	2026-05-13 08:17:40 +02:00
Daniel Banck	74084a7705	Return early during provider installation if there is no config	2026-05-13 08:17:40 +02:00
Sarah French	7a960db553	PSS: Add interactive confirmation of state storage provider trust when initialising a state store for the first time (#38395) ... * refactor: Replace use of prepareInstallerEvents method. This will allow finer control of callbacks when implementing security related features * feat: Users are prompted to approve a provider used for PSS on first use, and only if downloaded via HTTP. Prompts include signer details and key ID data. * test: Users see "Authentication: unauthenticated" in prompt if network mirror doesn't include hashes They'll see authentication data in all other prompt scenarios. There's no auth when using an fs mirror, but when those are in use we trust the providers already and no prompts are raised. * refactor: Simplify how we prepare installation event callbacks by defining reused callbacks * refactor: Remove unused parameters from `getProvidersFromState`	2026-05-12 10:42:26 -04:00
Michael Yocca	a941456484	patch remote-state/cos go.sum	2026-05-12 09:13:26 +02:00
Michael Yocca	65a9ae3c30	Apply suggestion from @jar-b ... Co-authored-by: Jared Baker <jar-b@users.noreply.github.com>	2026-05-12 09:13:26 +02:00
Michael Yocca	ee165f07f1	fix: go.mod syncdeps	2026-05-12 09:13:26 +02:00
Michael Yocca	b5e13445b2	fix: mv changelog to target correct target release	2026-05-12 09:13:26 +02:00
Michael Yocca	f25a5aac4a	chore: add changelog entry	2026-05-12 09:13:26 +02:00
Michael Yocca	ffa0a98da1	test: add test case for flag determining	2026-05-12 09:13:26 +02:00
Michael Yocca	5dd7e55d9b	feat: pass generate-config-out to go-tfe client request	2026-05-12 09:13:26 +02:00
Michael Yocca	fb6f6f1c40	fix: update tfe client mocks	2026-05-12 09:13:26 +02:00
Michael Yocca	18d0d4f4b8	chore: bump go-tfe dep to v1.105.0	2026-05-12 09:13:26 +02:00
Daniel Schmidt	2cd5cacacd	run make syncdeps	2026-05-11 15:27:42 +02:00
Daniel Schmidt	6e8052393c	update go version	2026-05-11 15:27:42 +02:00
Daniel Schmidt	8bb06a4a89	update net package	2026-05-11 15:27:42 +02:00
Austin Valle	527402d3fe	stackmigrate: Fix recursive provider config resolution for resource instances in deeply nested modules (#38528) ... * stackmigrate: fix recursive provider config resolution for resource instances in deeply nested modules * added additional test for implict provider configs in deeply nested modules * add changelog * move changelog to 1.15	2026-05-07 08:35:03 -04:00
Radek Simko	badc70c93d	command/output: Ignore warnings in JSON mode (#38530) ... * command/output: Ignore warnings in JSON mode * add changelog entry	2026-05-06 10:26:40 +01:00
Daniel Schmidt	bdcac1b2e4	stacks: add output values to plan component instance change descriptions	2026-05-05 17:39:34 +02:00
Daniel Banck	f34ee96558	Remove outdated value source comment	2026-05-05 17:31:25 +02:00
dependabot[bot]	71873aea12	build(deps): bump the github-actions-breaking group across 1 directory with 2 updates (#38504) ... Bumps the github-actions-breaking group with 2 updates in the / directory: [actions/github-script](https://github.com/actions/github-script) and [miniscruff/changie-action](https://github.com/miniscruff/changie-action). Updates `actions/github-script` from 8.0.0 to 9.0.0 - [Release notes](https://github.com/actions/github-script/releases) - [Commits](ed597411d8...3a2844b7e9) Updates `miniscruff/changie-action` from 2.1.0 to 3.0.0 - [Release notes](https://github.com/miniscruff/changie-action/releases) - [Changelog](https://github.com/miniscruff/changie-action/blob/main/CHANGELOG.md) - [Commits](5036dffa79...11bcad388e) --- updated-dependencies: - dependency-name: actions/github-script dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-breaking - dependency-name: miniscruff/changie-action dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-breaking ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-05 10:38:40 +01:00
dependabot[bot]	c74062e755	build(deps): bump the github-actions-backward-compatible group with 2 updates (#38505) ... Bumps the github-actions-backward-compatible group with 2 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact) and [actions/cache](https://github.com/actions/cache). Updates `actions/upload-artifact` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](bbbca2ddaa...043fb46d1a) Updates `actions/cache` from 5.0.4 to 5.0.5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](668228422a...27d5ce7f10) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-backward-compatible - dependency-name: actions/cache dependency-version: 5.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions-backward-compatible ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2026-05-05 09:03:17 +01:00