https://wintermutecore.com/tags/opentofu/Recent content in Opentofu on Project WintermuteHugoen-usFri, 12 Jun 2026 16:11:30 +0000https://wintermutecore.com/posts/opentofu-v1-11-9-release-security-ssh-fixes/Fri, 12 Jun 2026 16:11:30 +0000https://wintermutecore.com/posts/opentofu-v1-11-9-release-security-ssh-fixes/<p>OpenTofu v1.11.9 was released on June 12, 2026, delivering critical security updates for SSH connectivity and state encryption providers. This version patches vulnerabilities that could lead to hangs or high CPU consumption when interacting with compromised servers or specifically crafted encryption keys. As a maintenance release in the v1.11 series, it focuses on stability and security without introducing breaking changes to the core engine or configuration syntax.</p>https://wintermutecore.com/posts/opentofu-v1-12-2-release-security-and-stability-fixes/Fri, 12 Jun 2026 15:26:49 +0000https://wintermutecore.com/posts/opentofu-v1-12-2-release-security-and-stability-fixes/<p>OpenTofu v1.12.2 was released on June 12, 2026, delivering critical security updates for state encryption and remote connection handling. This maintenance release addresses vulnerabilities that could lead to panics or high CPU usage in specific edge cases. It also resolves a persistent issue with the Unix kernel incorrectly identifying deadlocks when multiple processes access the global plugin cache.</p>https://wintermutecore.com/posts/opentofu-activity-new-engine-variable-sensitivity/Fri, 12 Jun 2026 14:00:00 +0000https://wintermutecore.com/posts/opentofu-activity-new-engine-variable-sensitivity/<p><a href="https://github.com/opentofu/opentofu">OpenTofu</a> progress this week centers on the maturation of the new experimental engine runtime. Engineering efforts have pivoted toward hardening the variable evaluation path and refining how resource state is upgraded during plan operations.</p>