Skip to content

Releases: DevSecTop/TF-via-PR

v12 Enhanced Commands, Outputs and Examples

21 Oct 21:14
f1acaae
Compare
Choose a tag to compare

v11.4.6...v12.0.0

v12 Enhanced Commands, Outputs and Examples

Highlights (view blog)

  • Around 55% reduction in codebase by consolidating action.yml within Bash, lowering the barrier to entry for contributors.
  • Configurable rendering of command inputs and outputs without wrapper script (e.g., hide-args from PR comment).
  • Streamlined documentation with a focus on workflow examples for common use-cases.

Breaking

  • In/output parameters have been renamed:
    • All _ underscores are replaced with - hyphens.
    • working-directory is added as an alias to arg-chdir.
    • arg_command is renamed to command.
    • For the full list, view the parameters.
  • To minimize dependencies, the following have been removed:

Added

  • gh GitHub CLI integration for consistent interoperability with GitHub's REST API.
  • Link to view workflow log with the precise step where TF-via-PR was executed.
  • Pass repeated arguments as comma-separated values (e.g., arg-var: key1=value1,key2=value2).
  • Contextual workflow outputs, like plan file artifact ID and URL, as well as truncated results from CLI response.

Updated

  • Order of command execution to: fmt* > init > workspace* > validate* > plan/apply (* optional).
  • Workflow examples with recommendations, including cron-scheduled configuration drift checks.
  • comment-pr default from "recreate" to "update" for its revision history.
  • format default from "true" to "false" for explicit opt-in of the command, as done with validate.

Removed

  • actions/cache dependency, as out-of-scope.
  • actions/github-script dependecy, as superseded by gh GitHub CLI.
  • tenv dependency, as replaced by 3rd parties.

Fixed

  • Upon failure, output the error message directly instead of the entire command output.
  • Upon exceeding character limit, gracefully handle truncation of command output.
  • Handling of multiline strings with associated quoting.

Secured

  • Support for v12 and after.

v12 Enhanced Parsing of Commands and Outputs

21 Oct 00:46
01cbb55
Compare
Choose a tag to compare

v12 Enhanced Parsing of Commands and Outputs

Highlights

  • Around 55% reduction in codebase by consolidating action.yaml within Bash, lowering the barrier to entry for contributors.
  • Configurable rendering of command inputs and outputs without wrapper script (e.g., hide-args from PR comment).
  • Streamlined documentation with a focus on workflow examples for common use-cases.

Breaking

  • Input parameters have been renamed:
    • All _ underscores are replaced with - hyphens.
    • working-directory is added as an alias to arg-chdir.
    • arg_command is renamed to command.
    • For the full list, view the parameters.
  • To minimize dependencies, the following have been removed:

Added

  • gh GitHub CLI integration for consistent interoperability with GitHub's REST API.
  • Link to view workflow log with the precise step where TF-via-PR was executed.
  • Pass repeated arguments as comma-separated values (e.g., arg-var: key1=value1,key2=value2).

Changed

  • comment-pr default from "recreate" to "update" for its revision history.
  • format default from "true" to "false" for explicit opt-in of the command, as done with validate.

Removed

  • actions/cache dependency, as out-of-scope.
  • actions/github-script dependecy, as superseded by gh GitHub CLI.
  • tenv dependency, as replaced by 3rd parties.

Fixed

  • Upon failure, output the error message directly instead of the entire command output.
  • Upon exceeding character limit, gracefully handle truncation of command output.

Secured

  • Support for v12 and after.

Commits changelog: v11.4.6...v12

v11.4.6

11 Oct 14:30
cc83c7b
Compare
Choose a tag to compare

Fixed

  • Interpolation of auto-approve argument handling (thank you, @chris3ware).

Commits changelog: v11.4.5...v11.4.6

v11 Pass Command Arguments with more PR Automation

13 Sep 14:17
cc83c7b
Compare
Choose a tag to compare

Highlights

  • Input individual command arguments instead of a string.
  • Expand support for PR automation event triggers.

Added

  • Separate input parameters for each command argument passed into TF.
  • Leverage github-script instead of bash for handling workflow logic and GitHub API.
  • Support for tenv to avoid TF wrapper script.

Updated

Changed

  • Refactor input parameter names:

    Before After Default
    command_input args_*
    cli_uses tf_tool terraform
    label_enable label_pr true
    plan_outline outline_enable true
    recreate_comment update_comment false
  • Refactor output parameter names:

    Before After
    command header
    comment_summary summary
    plan_id identifier
    tf_fmt fmt_result
    tf_output last_result

Removed

  • Support for issue_comment event trigger in order to focus on PR automation events.

Fixed

Secured

  • Support for v11.0.0 and above.

Todo

  • Add workflow example for interactive PR label trigger.
  • Add support for terragrunt thin wrapper, per #258.

Commits changelog: v10.7.0...v11.0.0

v11.4.5

10 Oct 17:50
1b1050c
Compare
Choose a tag to compare

Fixed

  • Interpolation of auto-approve argument (thank you, @chris3ware).

Commits changelog: v11.4.4...v11.4.5

v11.4.4

01 Oct 13:11
379cb0f
Compare
Choose a tag to compare

Fixed

  • Correctly parse and retrieve tenv versions beyond the latest one (thank you, @ego93!).
  • New tenv_arch input parameter to select a tenv's architecture in place of the default "amd64".

Commits changelog: v11.4.3...v11.4.4

v11.4.3

13 Sep 14:07
6cb2fda
Compare
Choose a tag to compare

Fixed

  • CI workflow to update major release tag (for real, this time).

Commits changelog: v11.4.2...v11.4.3

v11.4.2

13 Sep 13:59
f65ec42
Compare
Choose a tag to compare

Fixed

  • CI workflow to update major release tag.

Removed

  • GitHub Codespaces support.

Commits changelog: v11.4.1...v11.4.2

v11.4.1

12 Sep 17:22
86ff2b5
Compare
Choose a tag to compare

Fixed

  • Remove unnecessary arguments from apply command.

Commits changelog: v11.3.0...v11.4.1

v11.4.0

12 Sep 17:13
47dd002
Compare
Choose a tag to compare

Added

  • The new exitcode output parameter will return 0 (succeeded) or 1 (failed) by default. By passing in arg_detailed_exitcode: true, then exitcode will return one of the documented exit codes:
    • 0 = Succeeded with empty diff (no changes)
    • 1 = Error
    • 2 = Succeeded with non-empty diff (changes present)
  • The init command now consumes -var-file and -var inputs to complement OpenTofu's early (static) evaluation implementation.

Commits changelog: v11.3.0...v11.4.0