Terragrunt Release Notes

⚠️ Alpha Release

Dependencies update alpha release

• cloud.google.com/go/storage v1.57.2
• github.com/aws/aws-sdk-go-v2 v1.39.6
• github.com/aws/aws-sdk-go-v2/config v1.31.20
• github.com/aws/aws-sdk-go-v2/credentials v1.18.24
• github.com/aws/aws-sdk-go-v2/service/dynamodb v1.52.6
• github.com/aws/aws-sdk-go-v2/service/iam v1.50.2
• github.com/aws/aws-sdk-go-v2/service/s3 v1.90.2
• github.com/aws/aws-sdk-go-v2/service/sts v1.40.2
• github.com/aws/smithy-go v1.23.2
• golang.org/x/mod v0.30.0
• golang.org/x/oauth2 v0.33.0
• golang.org/x/sync v0.18.0
• golang.org/x/sys v0.38.0
• golang.org/x/term v0.37.0
• golang.org/x/text v0.31.0
• google.golang.org/api v0.256.0

What's Changed

• support Openbao as an encryption provider by @ThisGuyCodes in #5048
• bug: sensitive() values handling in HCL by @denis256 in #5097

Full Changelog: v0.93.8...alpha-2025111701

✨ New Features

• Added support for Openbao encryption provider
• Key provider now supports openbao

🐛 Bug Fixes

• Fixed error in calling sensitive() function in HCL
• HCL sensitive() function now correctly handles values and calls without errors.

What's Changed

• feat: Added support for Openbao as an encryption provider by @ThisGuyCodes in #5048
• bug: sensitive() values handling in HCL by @denis256 in #5097
• deps: updated AWS and GCP dependencies by @denis256 in #5107
• deps: updated go-getter to v1.8.3 by @denis256 in #5107

Full Changelog

v0.93.8...v0.93.9

⚙️ Process Improvements

Terragrunt release automation moved to GitHub Actions
The release automation for Terragrunt has moved to GitHub Actions. With this move, Terragrunt releases now support:

• Windows binary signing
• Additional packaging for artifacts (.zip and .tar.gz release artifacts)
  You can still download standalone executables from release assets for backward compatibility.

🧪 Experiments Updated

The filter-flag experiment now supports the source= attribute
The --filter flag can now be used to filter units by their usage of particular OpenTofu/Terraform modules in their terraform source blocks (remember that you must use the filter-flag experiment to try this).

# Filter by exact source match
terragrunt find --filter 'source=github.com/acme/foo'
terragrunt find --filter 'source=gitlab.com/example/baz'
terragrunt find --filter 'source=./module'

# Filter by source using glob patterns
terragrunt find --filter 'source=*github.com**acme/*'
terragrunt find --filter 'source=git::[email protected]:acme/**'
terragrunt find --filter 'source=**github.com**'
terragrunt find --filter 'source=gitlab.com/**'

For more information, see the filter feature documentation.

What's Changed

• feat: Adding --filter source= support by @yhakbar in #5075
• chore: Switching to mise for go install in tidy check by @yhakbar in #5082
• chore: Github action release improvements by @denis256 in #5066
• docs: Documenting --filter for source= attribute by @yhakbar in #5076

Full Changelog: v0.93.5...v0.93.6