HashiCorp Terraform1.17.0

NEW FEATURES: - Terraform now supports variables and locals in provider requirements (#39153) - A new -minimal-refresh planning option has been added, which will only refresh resources that have proposed changes. (#35290) - policy: Terraform Policy is now generally available. The -policies flag for plan, apply, and query no longer requires an experimental build or the -allow-experimental-features flag. Query policies evaluate resources discovered by list blocks and report human-readable or JSON results. See https://developer.hashicorp.com/terraform/policy for more information. (#38970) ENHANCEMENTS: - command/init: Enrich log messages with provider versions (#38918) - test: Add mock_provider support for ephemeral resources (#38928) - command/login: display warning after successful login if user is subject to an organization's TTL policy BUG FIXES: - funcs: pow and log no longer panic when result is not a number (#38912) - ephemeral: Terraform will now use and display diagnostics raised when renewing an ephemeral resource. This may cause warnings to appear that previously were lost. We expect that any error diagnostics that were previously lost would have caused confusing downstream errors, so we do not anticipate this change to be breaking. (#38989) - test: Deterministic dependency ordering in cleanup graph (#38247) - query: report Unknown and N/A results for policy evaluations of discovered resources (#39058) - query: terraform query -policies now rejects a path that is not a directory, instead of passing it on to the policy engine (#39238) - funcs: The log and pow functions now raise errors when they return +/- Infinity, as this result is not usable in downstream code. (#39304) - show: Read variable values from the plan file when showing a local plan (#39362) NOTES: - version: JSON output now includes a new format_version field, which will enable safer future changes of the command's JSON output format. It is assumed existing tooling ignores unknown fields and therefore this change should not be breaking in itself but we advice consumers to pay attention to format_version in future releases and/or use latest version of hashicorp/terraform-json & hashicorp/terraform-exec which does. (#38930) - Terraform is now built with Go 1.26.10, which no longer trusts certificates issued through a set of compromised eMudhra intermediate CAs (CVE-2026-111943) (#39417)