Child module validation now raises errors for invalid blocks
Fixed child module validation to properly raise error or warning diagnostics for invalid blocks in list, import, backend, and cloud configurations. Additionally updated go-slug to v0.18.3 to mitigate a Unicode normalization vulnerability (CVE-2026-14978) that could cause files to be incorrectly included in uploads to Terraform Enterprise or HCP Terraform.
1.15.9 (August 19, 2026)
BUG FIXES:
- validate: Child module validation has been fixed and will now raise errors or warning diagnostics for invalid blocks. (
list,import,backend, andcloud) (#38994)
NOTES:
- Update go-slug to v0.18.3 to mitigate CVE-2026-14978, which is a Unicode normalization issue that could lead to files not being correctly excluded via
.terraformignorefrom upload to a Terraform Enterprise or HCP Terraform during a run (#39036)
Source: original entry ↗
More from Terraform
Follow Terraform to get its new changes in your feed and email digest.
Terraform 1.17.0-rc1 release
Release candidate 1.17.0 introduces Terraform Policy as generally available (removing experimental flags), adds support for variables and locals in provider requirements, includes a new -minimal-refresh planning option for efficiency, and fixes critical bugs in function evaluation and ephemeral resource handling.
Terraform v1.16.5
This patch release fixes a crash when processing tainted instance state without a valid status and resolves an issue where resource identity could be nil during delete operations.
Terraform v1.17.0-beta2
This beta release introduces variables and locals support in provider requirements, a new minimal-refresh planning option to improve performance, and makes Terraform Policy generally available without requiring experimental flags. It also includes enhancements to logging, ephemeral resource handling, and policy queries, along with bug fixes for math functions and dependency ordering.