OpenTofu v1.13.8 - Version Flag and State Encryption Fixes

OpenTofu v1.13.8 shipped on November 4, 2026 as a small bug fix release. Two fixes stand out: the -v short option works again as an alias for version and --version, and OpenTofu no longer panics when the state encryption configuration is invalid. This is a full release, not a prerelease.

The full release notes and downloads are on the GitHub release page.

The -v flag is back

If you run tofu -v in scripts or docs, this release matters to you. The short flag stopped working as an alias for the version command and the --version option in v1.13.0. That regression is fixed in #4769. Both tofu -v and tofu --version now behave the same.

It is a small thing, but version checks end up in shell scripts, Dockerfiles and CI steps everywhere. Any script written against OpenTofu 1.12 behavior silently broke on the newer releases.

No more panic on bad state encryption config

The second fix targets state encryption. When the encryption configuration was invalid, OpenTofu panicked instead of returning a proper error message. #4783 replaces the panic with a clean failure. If you experiment with the encryption block in your backend configuration, an error is now far more useful than a stack trace on the console.

Upgrade notes

There are no breaking changes, deprecations, or migration steps in these notes. If you are on any v1.13.x release, this is a drop in upgrade. If you run terraform -v style commands in automation, verify they use the short flag path that this release restores.

Where to get it

The changelog for this release covers v1.13.2 through v1.13.8, so it also folds in fixes from the intermediate patch releases if you are jumping a few versions at once.

← All updates