v10.3.0

Added

• Output comment_summary of TF output (e.g., "Plan: 1 to add, 0 to change, 0 to destroy.")
  • Requires checks: write permission.
• Copy TF output to the job summary for easier access within GitHub Actions > Jobs.

Changed

• (meta) Dependabot configuration to keep Terraform dependencies up-to-date in a group (until OpenTofu catches up).
• (meta) Formatted yml → yaml workflows for consistency and legibility.

Security

• Explicitly list all 3 GitHub Actions used by this workflow and the steps taken to prevent supply chain attacks from upstream dependencies:
  1. actions/cache
  2. actions/github-script
  3. actions/upload-artifact

Commits changelog: v10.2.0...v10.3.0

v10.2.0

Added

• Example workflow using tenv proxy (thank you @dvaumoron and @kvendingoldo!).
• Output comment_id of the PR comment created or updated by the workflow.
• Markdown comments <!-- pre_output --> and <!-- post_output --> within PR comment to enable user-driven replacements.

Changed

• Rename repository from "TF-via-PR-Comments" to "TF-via-PR" to better indicate the wider scope of PR-based automation.
• Amend default recreate_comment from false to true.
• Amend default validate_enable from true to false.
• Example workflows use Actions with simpler pinned tags for legibility.

Fixed

• Argument input -concise gets pass to -tf=plan as expected.
• (meta) Path filters to only trigger tf_test.yml workflow on changes to specific (sub-)directories.

Commits changelog: v10.1.0...v10.2.0

v10.1.0

Fixed

• Reference path to github-script files.

Changed

• Moved reference workflows into "examples/" directory to prevent mistriggers.

Commits changelog: v10...v10.1.0

v9.1.0

Changed

• Separate out github-scripts to external files by @rdhar in #187
• chore(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #185
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @dependabot in #186

Commits changelog: v9.0.3...v9.1.0

v9.1.0-rc.2

Changed

• Separate out github-scripts to external files by @rdhar in #187
• chore(deps): bump actions/upload-artifact from 4.3.0 to 4.3.1 by @dependabot in #185
• chore(deps): bump aws-actions/configure-aws-credentials from 4.0.1 to 4.0.2 by @dependabot in #186

Commits changelog: v9.0.3...v9.1.0-rc.2

v9.0.3

Changed

• chore(deps): bump actions/upload-artifact from 4.2.0 to 4.3.0 by @dependabot in #183
• chore(deps): bump opentofu/setup-opentofu from 1.0.1 to 1.0.2 by @dependabot in #184

Commits changelog: v9.0.2...v9.0.3

v9.0.2

Changed

• remove sample lock files by @rdhar in #180
• chore(deps): bump actions/upload-artifact from 3.1.3 to 4.2.0 by @dependabot in #182

Commits changelog: v9.0.1...v9.0.2

v9.0.1

Changed

• docs: add changelog section header by @rdhar in #170
• docs: github action description by @rdhar in #171
• chore(deps): bump actions/github-script from 7.0.0 to 7.0.1 by @dependabot in #172
• docs: update action name by @rdhar in #176

Commits changelog: v9.0.0...v9.0.1

v9.0.0: GitHub Action Availability

Highlight

This project is now available as a GitHub Action and distributed via the GitHub Marketplace!

Added

• Composite action.yml to support GitHub Action implementation.
• Example tf.yml workflow for a functional demonstration of the GitHub Action... in action.
• Screenshots (with prefers-color-scheme dark and light) to exhibit a typical interaction within a PR conversation at the very top of README.md.

Changed

• Rename project to "tf-via-pr-comments" to emphasize the use of PR comments as the primary interface for TF command execution.
• Both PR conversation examples to reflect the new TF command input format.

Fixed

• PR comment reaction 👀 is now added for the duration of the workflow run, then removed upon completion.

Deprecated

• The reusable workflow has been superseded by composite action.yml which exposes the functionality with a lower barrier to entry.
• Bulk execution of TF commands is no longer possible since matrix strategy for jobs is not supported by composite actions.

Secured

• Pass sensitive values to the GitHub Action directly via environment variables.
• Support v9.X and above.

Commits changelog: v8.0.1...v9.0.0

v8.0.1: Bump hashicorp/setup-terraform

Changed

Sourced from hashicorp/setup-terraform's releases.

• Updated default runtime to node20 (#346)
• The wrapper around the installed Terraform binary has been fixed to return the exact STDOUT and STDERR from Terraform when executing commands. Previous versions of setup-terraform may have required workarounds to process the STDOUT in bash, such as filtering out the first line or selectively parsing STDOUT with jq. These workarounds may need to be adjusted with v3.0.0, which will now return just the STDOUT/STDERR from Terraform with no errant characters/statements. (#367)

Commits changelog: v8.0.0...v8.0.1