BUG FIXES:

• config: Update HCL package to fix panics when indexing using sensitive values (#28034)
• core: Fix error when using sensitive values in provisioner configuration (#27819)
• core: Fix empty diags not getting associated with source (#28029)
• backend/remote: Fix non-functional -lock-timeout argument when using the remote backend with local operations (#27845)

ENHANCEMENTS:

• config: Terraform now does text processing using the rules and tables defined for Unicode 13. Previous versions were using Unicode 12 rules (#28034)

0.15.0-beta1 (Unreleased)

BREAKING CHANGES:

• Empty provider configuration blocks should be removed from modules. If a configuration alias is required within the module, it can be defined using the configuration_aliases argument within required_providers. Existing module configurations which were accepted but could produce incorrect or undefined behavior may now return errors when loading the configuration. (#27739)

• The list and map functions, both of which were deprecated since Terraform v0.12, are now removed. You can replace uses of these functions with tolist([...]) and tomap({...}) respectively. (#26818)

• Terraform now requires UTF-8 character encoding and virtual terminal support when running on Windows. This unifies Terraform's terminal handling on Windows with that of other platforms, as per Microsoft recommendations. Terraform previously required these terminal features on all other platforms, and now requires them on Windows too.

  UTF-8 and virtual terminal support were introduced across various Windows 10 updates, and so Terraform is no longer officially supported on the original release of Windows 10 or on Windows 8 and earlier. However, there are currently no technical measures to artificially prevent Terraform from running on these obsolete Windows releases, and so you may still be able to use Terraform v0.15 on older Windows versions if you either disable formatting (using the -no-color) option, or if you use a third-party terminal emulator package such as ConEmu, Cmder, or mintty.

  We strongly encourage planning to migrate to a newer version of Windows rather than relying on these workarounds for the long term, because the Terraform team will test future releases only on up-to-date Windows 10 and can therefore not guarantee ongoing support for older versions.

• Interrupting execution will now cause terraform to exit with a non-zero exit status. (#26738)

• The trailing [DIR] argument to specify the working directory for various commands is no longer supported. Use the global -chdir option instead. (#27664)

  For example, instead of terraform init infra, write terraform -chdir=infra init.

• The -lock and -lock-timeout options are no longer available on terraform init (#27464)

• The -verify-plugins=false option is no longer available on terraform init. (Terraform now always verifies plugins.) (#27461)

• The -get-plugins=false option is no longer available on terraform init. (Terraform now always installs plugins.) (#27463)

• The -force option is no longer available on terraform destroy. Use -auto-approve instead (#27681)

• The -var and -var-file options are no longer available on terraform validate. These had no effect and were deprecated. (#27906)

• terraform version -json output no longer includes the (previously-unpopulated) "revision" property (#27484)

• The atlas backend, which was deprecated since Terraform v0.12, is now removed. (#26651)

• In the gcs backend the path config argument, which was deprecated since Terraform v0.11, is now removed. Use the prefix argument instead. (#26841)

• The deprecated ignore_changes = ["*"] wildcard syntax will now error. Use = all instead. (#27834)

• Previously deprecated quoted type strings will now error rather than warn - follow the instructions in the error message to update your type signatures to be more explicit. For example, use map(string) instead of "map". (#27852)

• Terraform will no longer make use of the HTTP_PROXY environment variable to determine proxy settings for connecting to HTTPS servers. You must always set HTTPS_PROXY if you intend to use a proxy to connect to an HTTPS server. (Note: This affects only connections made directly from Terraform CLI. Terraform providers are separate programs that make their own requests and may thus have different proxy configuration behaviors.)

• We've upgraded the underlying TLS and certificate-related libraries that Terraform uses when making HTTPS requests to remote systems. This includes the usual tweaks to preferences for different cryptographic algorithms during handshakes and also some slightly-stricter checking of certificate syntax. These changes should not cause problems for correctly-implemented HTTPS servers, but can sometimes cause unexpected behavior changes with servers or middleboxes that don't comply fully with the relevant specifications.

ENHANCEMENTS:

• backend/azurerm: updating the dependencies for the Azure Backend (#26721)
• config: A required_providers entry can now contain configuration_aliases to declare additional configuration aliases names without requirring a configuration block (#27739)
• config: Terraform will now emit a warning if you declare a backend block in a non-root module. Terraform has always ignored such declarations, but previously did so silently. This is a warning rather than an error only because it is sometimes convenient to temporarily use a root module as if it were a child module in order to test or debug its behavior separately from its main backend. (#26954)
• config: Removed warning surrounding interpolation-only expressions - many of these are caught by fmt and we are removing the warning rather than upgrading it to an error (#27835)
• config: Terraform now does text processing using the rules and tables defined for Unicode 13. Previous versions were using Unicode 12 rules.
• cli: The family of error messages with the summary "Invalid for_each argument" will now include some additional context about which external values contributed to the result. (#26747)
• cli: Terraform now uses UTF-8 and full VT mode even when running on Windows. Previously Terraform was using the "classic" Windows console API, which was far more limited in what formatting sequences it supported and which characters it could render. (#27487)
• cli: Improved support for Windows console UI on Windows 10, including bold colors and underline for HCL diagnostics. (#26588)
• cli: Diagnostic messages now have a vertical line along their left margin, which we hope will achieve a better visual hierarchy for sighted users and thus make it easier to see where the errors and warnings start and end in relation to other content that might be printed alongside. (#27343)
• cli: Typing an invalid top-level command, like terraform destory instead of destroy, will now print out a specific error message about the command being invalid, rather than just printing out the usual help directory. (#26967)
• cli: Plugin crashes will now be reported with more detail, pointing out the plugin name and the method call along with the stack trace (#26694)
• cli: Values in files for undeclared variables (ex. tfvars) are no longer deprecated, but will continue to produce a warning. The number of warnings produced has been reduced from 3 full warnings before a summary to two. To provide "global" values across configurations, use TF_VAR... environment variables. To reduce the verbosity of the warnings, use the existing -compact-warnings option. (#27795)
• cli: The cli now handles structured logs throughout, allowing for additional log context from providers to be maintained, and offering new options for output filters. (#26632)
• cli: Core and Provider logs can now be enabled separately for debugging, using TF_LOG_CORE and TF_LOG_PROVIDER (#26685)
• cli: Experimental terraform test command. (TODO: Include a link to the experiment's documentation page as part of aggregating the 0.15.0 prerelease changelogs into the final 0.15.0 changelog) (#27873)

BUG FIXES:

• cli: Exit with an error if unable to gather input from the UI. For example, this may happen when running in a non-interactive environment but without -input=false. Previously Terraform would interpret these errors as empty strings, which could be confusing. (#26509)
• cli: TF_LOG levels other than trace will now work correctly (#26632)
• command/console: expressions using path (path.root, path.module) now return the same result as they would in a configuration (#27263)
• command/show: fix issue with child_...

0.14.7 (February 17, 2021)

ENHANCEMENTS:

• cli: Emit an "already installed" event when a provider is found already installed (#27722)
• provisioner/remote-exec: Can now run in a mode that expects the remote system to be running Windows and excuting commands using the Windows command interpreter, rather than a Unix-style shell. Specify the target_platform as "windows" in the connection block. (#26865)

BUG FIXES:

• cli: Fix show -json not outputting the full module tree when some child modules have no resources (#27352)
• cli: Fix excessively slow rendering of very large multi-line string outputs (#27746)
• cli: Fix missing provider requirements in JSON plan when specified using required_providers instead of provider config (#27697)

0.15.0 (Unreleased)

BREAKING CHANGES:

• The list and map functions, both of which were deprecated since Terraform v0.12, are now removed. You can replace uses of these functions with tolist([...]) and tomap({...}) respectively. (#26818)

• Terraform now requires UTF-8 character encoding and virtual terminal support when running on Windows. This unifies Terraform's terminal handling on Windows with that of other platforms, as per Microsoft recommendations. Terraform previously required these terminal features on all other platforms, and now requires them on Windows too.

  UTF-8 and virtual terminal support were introduced across various Windows 10 updates, and so Terraform is no longer officially supported on the original release of Windows 10 or on Windows 8 and earlier. However, there are currently no technical measures to artificially prevent Terraform from running on these obsolete Windows releases, and so you may still be able to use Terraform v0.15 on older Windows versions if you either disable formatting (using the -no-color) option, or if you use a third-party terminal emulator package such as ConEmu, Cmder, or mintty.

  We strongly encourage planning to migrate to a newer version of Windows rather than relying on these workarounds for the long term, because the Terraform team will test future releases only on up-to-date Windows 10 and can therefore not guarantee ongoing support for older versions.

• Interrupting execution will now cause terraform to exit with a non-zero exit status. (#26738)

• The trailing [DIR] argument to specify the working directory for various commands is no longer supported. Use the global -chdir option instead. (#27664)

  For example, instead of terraform init infra, write terraform -chdir=infra init.

• The -lock and -lock-timeout options are no longer available on terraform init (#27464)

• The -verify-plugins=false option is no longer available on terraform init. (Terraform now always verifies plugins.) (#27461)

• The -get-plugins=false option is no longer available on terraform init. (Terraform now always installs plugins.) (#27463)

• The -force option is no longer available on terraform destroy. Use -auto-approve instead (#27681)

• terraform version -json output no longer includes the (previously-unpopulated) "revision" property [#27484]

• The atlas backend, which was deprecated since Terraform v0.12, is now removed. (#26651)

• In the gcs backend the path config argument, which was deprecated since Terraform v0.11, is now removed. Use the prefix argument instead. (#26841)

ENHANCEMENTS:

• config: Terraform will now emit a warning if you declare a backend block in a non-root module. Terraform has always ignored such declarations, but previously did so silently. This is a warning rather than an error only because it is sometimes convenient to temporarily use a root module as if it were a child module in order to test or debug its behavior separately from its main backend. (#26954)
• cli: The family of error messages with the summary "Invalid for_each argument" will now include some additional context about which external values contributed to the result. (#26747)
• cli: Terraform now uses UTF-8 and full VT mode even when running on Windows. Previously Terraform was using the "classic" Windows console API, which was far more limited in what formatting sequences it supported and which characters it could render. (#27487)
• cli: Improved support for Windows console UI on Windows 10, including bold colors and underline for HCL diagnostics. (#26588)
• cli: Diagnostic messages now have a vertical line along their left margin, which we hope will achieve a better visual heirarchy for sighted users and thus make it easier to see where the errors and warnings start and end in relation to other content that might be printed alongside. (#27343)
• cli: Typing an invalid top-level command, like terraform destory instead of destroy, will now print out a specific error message about the command being invalid, rather than just printing out the usual help directory. (#26967)
• cli: Plugin crashes will now be reported with more detail, pointing out the plugin name and the method call along with the stack trace (#26694)
• provisioner/remote-exec: Can now run in a mode that expects the remote system to be running Windows and excuting commands using the Windows command interpreter, rather than a Unix-style shell. Specify the target_platform as "windows" in the connection block. (#26865)

BUG FIXES:

• cli: Exit with an error if unable to gather input from the UI. For example, this may happen when running in a non-interactive environment but without -input=false. Previously Terraform would interpret these errors as empty strings, which could be confusing. (#26509)
• cli: TF_LOG levels other than trace will now work correctly (#26632)
• cli: Core and Provider logs can now be enabled separately for debugging, using TF_LOG_CORE and TF_LOG_PROVIDER (#26685)
• command/console: expressions using path (path.root, path.module) now return the same result as they would in a configuration (#27263)
• command/show: fix issue with child_modules not properly displaying in certain circumstances (#27352)
• command/state list: fix bug where nested modules' resources were missing from state list output (#27268)
• command/state mv: fix display names in errors and improve error when failing to target a whole resource (#27482)
• command/taint: show resource name in -allow-missing warning (#27501)
• command/untaint: show resource name in -allow-missing warning (#27502)
• core: validate will now ignore providers without configuration (#24896)
• core: refresh data sources during destroy (#27408)

0.14.6 (February 04, 2021)

ENHANCEMENTS:

• backend/s3: Add support for AWS Single-Sign On (SSO) cached credentials (#27620)

BUG FIXES:

• cli: Rerunning init will reuse installed providers rather than fetching the provider again (#27582)
• config: Fix panic when applying a config using sensitive values in some block sets (#27635)
• core: Fix "Invalid planned change" error when planning tainted resource which no longer exists (#27563)
• core: Fix panic when refreshing data source which contains sensitive values (#27567)
• core: Fix init with broken link in plugin_cache_dir (#27447)
• core: Prevent evaluation of removed data source instances during plan (#27621)
• core: Don't plan changes for outputs that remain null (#27512)

0.15.0 (Unreleased)

BREAKING CHANGES:

• The list and map functions, both of which were deprecated since Terraform v0.12, are now removed. You can replace uses of these functions with tolist([...]) and tomap({...}) respectively. (#26818)

• Terraform now requires UTF-8 character encoding and virtual terminal support when running on Windows. This unifies Terraform's terminal handling on Windows with that of other platforms, as per Microsoft recommendations. Terraform previously required these terminal features on all other platforms, and now requires them on Windows too.

  UTF-8 and virtual terminal support were introduced across various Windows 10 updates, and so Terraform is no longer officially supported on the original release of Windows 10 or on Windows 8 and earlier. However, there are currently no technical measures to artificially prevent Terraform from running on these obsolete Windows releases, and so you may still be able to use Terraform v0.15 on older Windows versions if you either disable formatting (using the -no-color) option, or if you use a third-party terminal emulator package such as ConEmu, Cmder, or mintty.

  We strongly encourage planning to migrate to a newer version of Windows rather than relying on these workarounds for the long term, because the Terraform team will test future releases only on up-to-date Windows 10 and can therefore not guarantee ongoing support for older versions.

• Interrupting execution will now cause terraform to exit with a non-zero exit status. (#26738)

• The -lock and -lock-timeout options are no longer available on terraform init (#27464)

• The -verify-plugins=false option is no longer available on terraform init. (Terraform now always verifies plugins.) (#27461)

• The -get-plugins=false option is no longer available on terraform init. (Terraform now always installs plugins.) (#27463)

• terraform version -json output no longer includes the (previously-unpopulated) "revision" property [#27484]

• The atlas backend, which was deprecated since Terraform v0.12, is now removed. (#26651)

• In the gcs backend the path config argument, which was deprecated since Terraform v0.11, is now removed. Use the prefix argument instead. (#26841)

ENHANCEMENTS:

• config: Terraform will now emit a warning if you declare a backend block in a non-root module. Terraform has always ignored such declarations, but previously did so silently. This is a warning rather than an error only because it is sometimes convenient to temporarily use a root module as if it were a child module in order to test or debug its behavior separately from its main backend. (#26954)
• cli: The family of error messages with the summary "Invalid for_each argument" will now include some additional context about which external values contributed to the result. (#26747)
• cli: Terraform now uses UTF-8 and full VT mode even when running on Windows. Previously Terraform was using the "classic" Windows console API, which was far more limited in what formatting sequences it supported and which characters it could render. (#27487)
• cli: Improved support for Windows console UI on Windows 10, including bold colors and underline for HCL diagnostics. (#26588)
• cli: Diagnostic messages now have a vertical line along their left margin, which we hope will achieve a better visual heirarchy for sighted users and thus make it easier to see where the errors and warnings start and end in relation to other content that might be printed alongside. (#27343)
• cli: Typing an invalid top-level command, like terraform destory instead of destroy, will now print out a specific error message about the command being invalid, rather than just printing out the usual help directory. (#26967)
• cli: Plugin crashes will now be reported with more detail, pointing out the plugin name and the method call along with the stack trace (#26694)
• provisioner/remote-exec: Can now run in a mode that expects the remote system to be running Windows and excuting commands using the Windows command interpreter, rather than a Unix-style shell. Specify the target_platform as "windows" in the connection block. (#26865)

BUG FIXES:

• cli: Exit with an error if unable to gather input from the UI. For example, this may happen when running in a non-interactive environment but without -input=false. Previously Terraform would interpret these errors as empty strings, which could be confusing. (#26509)
• cli: TF_LOG levels other than trace will now work correctly (#26632)
• cli: Core and Provider logs can now be enabled separately for debugging, using TF_LOG_CORE and TF_LOG_PROVIDER (#26685)
• command/console: expressions using path (path.root, path.module) now return the same result as they would in a configuration (#27263)
• command/show: fix issue with child_modules not properly displaying in certain circumstances (#27352)
• command/state list: fix bug where nested modules' resources were missing from state list output (#27268)
• command/state mv: fix display names in errors and improve error when failing to target a whole resource (#27482)
• command/taint: show resource name in -allow-missing warning (#27501)
• command/untaint: show resource name in -allow-missing warning (#27502)
• core: validate will now ignore providers without configuration (#24896)
• core: refresh data sources during destroy (#27408)
• core: don't plan changes for outputs that remain null (#27512)

0.14.5 (January 20, 2021)

ENHANCEMENTS:

• backend/pg: The Postgres backend now supports the "scram-sha-256" authentication method. (#26886)

BUG FIXES:

• cli: Fix formatting of long integers in outputs and console (#27479)
• cli: Fix redundant check of remote workspace version for local operations (#27498)
• cli: Fix missing check of remote workspace version for state migration (#27556)
• cli: Fix world-writable permissions on dependency lock file (#27205)

0.15.0 (Unreleased)

UPGRADE NOTES:

• config: The list and map functions, both of which were deprecated since Terraform v0.12, are now removed. You can replace uses of these functions with tolist([...]) and tomap({...}) respectively. (#26818)
• cli: Interrupting execution will now cause terraform to exit with a non-0 status. (#26738)
• backend/atlas: the atlas backend, which was deprecated since v0.12, has been removed. (#26651)
• backend/gcs: The path config argument, which was deprecated since v0.11, has been removed. Use the prefix argument instead. (#26841)

ENHANCEMENTS:

• config: Terraform will now emit a warning if you declare a backend block in a non-root module. Terraform has always ignored such declarations, but previously did so silently. This is a warning rather than an error only because it is sometimes convenient to temporarily use a root module as if it were a child module in order to test or debug its behavior separately from its main backend. (#26954)
• cli: Improved support for Windows console UI on Windows 10, including bold colors and underline for HCL diagnostics. (#26588)
• cli: The family of error messages with the summary "Invalid for_each argument" will now include some additional context about which external values contributed to the result. (#26747)
• cli: Typing an invalid top-level command, like terraform destory instead of destroy, will now print out a specific error message about the command being invalid, rather than just printing out the usual help directory. (#26967)
• cli: Plugin crashes will now be reported with more detail, pointing out the plugin name and the method call along with the stack trace (#26694)
• provisioner/remote-exec: Can now run in a mode that expects the remote system to be running Windows and excuting commands using the Windows command interpreter, rather than a Unix-style shell. Specify the target_platform as "windows" in the connection block. (#26865)

BUG FIXES:

• cli: Exit with an error if unable to gather input from the UI. For example, this may happen when running in a non-interactive environment but without -input=false. Previously Terraform would interpret these errors as empty strings, which could be confusing. (#26509)
• cli: TF_LOG levels other than trace will now work correctly (#26632)
• cli: Core and Provider logs can now be enabled separately for debugging, using TF_LOG_CORE and TF_LOG_PROVIDER (#26685)
• command/console: expressions using path (path.root, path.module) now return the same result as they would in a configuration (#27263)
• command/state list: fix bug where nested modules' resources were missing from state list output (#27268)
• core: validate will now ignore providers without configuration (#24896)

0.14.4 (January 06, 2021)

UPGRADE NOTES:

• This release disables the remote Terraform version check feature for plan and apply operations. This fixes an issue with using custom Terraform version bundles in Terraform Enterprise. (#27319)

BUG FIXES:

• backend/remote: Disable remote Terraform workspace version check when the remote workspace is in local operations mode ([#27407])
• core: Fix panic when using sensitive values as arguments to data sources ([#27335])
• core: Fix panic when using sensitive values as count arguments on validate ([#27410])
• core: Fix panic when passing sensitive values to module input variables which have custom variable validation ([#27412])
• dependencies: Upgrade HCL to v2.8.2, fixing several bugs with sensitive values ([#27420])

0.13.6 (January 06, 2021)

UPGRADE NOTES:

• The builtin provider's terraform_remote_state data source no longer enforces Terraform version checks on the remote state file. This allows Terraform 0.13.6 to access remote state from future Terraform versions, up until a future incompatible state file version upgrade is required. (#26692)

BUG FIXES:

• init: setting -get-plugins to false will now cause a warning, as this flag has been a no-op since 0.13.0 and usage is better served through using provider_installation blocks (#27092)