➔ Terragrunt v1.1.1: Dependency Resolution and Safety Fixes
Terragrunt had a busy v1.1.1 window, with 13 commits and 125 files changed around dependency resolution, safer source handling, and clearer crash reports. For teams that run Terragrunt in CI over many units, the headline is simple: fewer false failures around dependency outputs, plus tighter handling for refs, archives, and catalog clones.
➔ OpenTofu v1.11.11 - OTEL Dependency Upgrade Fix
OpenTofu v1.11.11 was published on June 23, 2026 as a stable patch release for the v1.11 line. The main change is small but practical: the maintainers fixed an incomplete OTEL dependency upgrade left from the previous patch release.
➔ OpenTofu v1.11.9 Release - Critical Security Patches and Bug Fixes
OpenTofu v1.11.9 is now available, bringing essential security updates and stability improvements to the v1.11 series. Published on June 12, 2026, this release addresses vulnerabilities in SSH handling and state encryption that could lead to panics or hangs in specific scenarios.
➔ OpenTofu v1.12.2 - Security Patches and Deadlock Fixes
OpenTofu v1.12.2 was released on June 12 2026 to address several security concerns and stability issues in the v1.12 series. This update includes critical fixes for state encryption when using the OpenBao key provider and resolves a kernel deadlock bug during provider installation on Unix systems. It is a mandatory update for anyone using the latest feature set in production environments.
➔ Terragrunt v1.0.7: Optional tfr Versions, CAS Beyond Git, and Stack Dependency Cleanup
Terragrunt v1.0.7 shipped on 2026-06-01 with one ergonomic change to tfr:// source URLs, a meaningful expansion of the content addressing experiment, four bug fixes that stop crashes and hangs, and a cleanup pass on the stack-dependencies experiment.
➔ OpenTofu 1.12.1 Release: Security Patch and v1.12.0 Regression Fixes
OpenTofu v1.12.1 shipped on May 27, 2026 as a patch release for the 1.12 line. The headline is a security advisory covering SSH handling in tofu generate and a CA SignatureKey revocation gap. The release also clears two regressions introduced in v1.12.0 and fixes the Azure key provider configuration.
➔ Terragrunt v1.0.6 - Bug Fixes and New Experiments
Terragrunt v1.0.6 shipped on May 25, 2026. It is mostly a bug fix wave plus two new experiments and a TUI update for the catalog redesign. The download_dir hang on a non hidden subdirectory and the race in parallel stack parsing are the headline fixes.
➔ OpenTofu 1.12.0 Brings Dynamic prevent_destroy and Provider Checksum Fixes
OpenTofu 1.12.0 landed on May 14, 2026, and it pulls a few sharp edges out of day to day usage. The headline items: prevent_destroy can now reference variables, the provider registry ships complete checksums, and a new -json-into=FILENAME flag lets you keep JSON output alongside the normal terminal UI.
➔ Terragrunt v1.0.5 release notes and key changes
Terragrunt v1.0.5 from gruntwork-io shipped on May 18, 2026. The headline change: when the provider cache server talks to the OpenTofu registry, a single terragrunt init now writes a .terraform.lock.hcl with h1: hashes for every platform the registry supports, so you no longer need to run tofu providers lock -platform=... for each target architecture.
➔ OpenTofu v1.10.10 - Two Bug Fixes for Caching and Import Blocks
OpenTofu shipped v1.10.10 on May 11, 2026 as a small patch focused on two bug fixes. The provider cache now refuses to silently overwrite a mismatched entry, and a long standing crash in import blocks that used provider defined functions is gone.
➔ OpenTofu Ships SSH and S3 Fixes while kubernetes-client/java Moves CI to Bazel
Quick scan of the last week in two open source repos: OpenTofu shipped real bugfixes plus a CLI argument refactor, while the kubernetes-client/java repo spent the week migrating its Java build from Maven to Bazel under a copilot bot.