Skip to content

chore: ship Terraform 1.15.8 in the jsii-terraform image - #367

Merged
so0k merged 1 commit into
mainfrom
chore/tf-1.15.8-available
Aug 6, 2026
Merged

chore: ship Terraform 1.15.8 in the jsii-terraform image#367
so0k merged 1 commit into
mainfrom
chore/tf-1.15.8-available

Conversation

@so0k

@so0k so0k commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

What

Adds 1.15.8 (current stable) to .terraform.versions.json available only — the jsii-terraform image gains the binary at /usr/local/bin/terraform1.15.8; nothing else changes.

What deliberately does NOT change

  • tested untouched → the integration matrix (tools/build-test-matrix.mjs) does not grow by a single job.
  • default untouched → the examples matrix (tools/build-example-matrix.mjs) keeps running 1.6.5, and the digest-pinned ghcr images in examples.yml/integration.yml stay valid. Flipping default requires refreshing those digest pins and is deferred to post-release housekeeping.

Why now

Prebuilt-provider regeneration for 0.24 must fetch schemas with a Terraform that emits the new protocol data (functions ≥1.8, ephemeral_resource_schemas ≥1.10, write_only ≥1.11). The current image tops out at 1.6.5, which would silently produce feature-less bindings. cdktn-repository-manager's fleet workflow will select the new binary explicitly via TERRAFORM_BINARY_NAME=terraform1.15.8 — the same mechanism examples.yml already uses, honoured by @cdktn/provider-schema's binary resolution (provider-schema.ts:33).

Sequencing: this must merge before the 0.24.0 release PR so the post-release image build (docker.yml on push to main, tagged 0.24.0-<sha>) carries the binary.

🤖 Generated with Claude Code

@so0k
chore: ship Terraform 1.15.8 in the jsii-terraform image
f8a802a 
Adds 1.15.8 (current stable) to `available` ONLY, so the image gains the
binary at /usr/local/bin/terraform1.15.8 without changing anything CI
consumes:

- `tested` is untouched: the integration matrix
  (tools/build-test-matrix.mjs) does not change by a single job.
- `default` is untouched: the examples matrix
  (tools/build-example-matrix.mjs) keeps running against 1.6.5, and the
  digest-pinned ghcr images referenced by examples.yml/integration.yml
  remain valid.

Why: prebuilt-provider binding regeneration for 0.24 must fetch provider
schemas with a Terraform that emits the new protocol data (functions
>=1.8, ephemeral_resource_schemas >=1.10, write_only >=1.11). The
repository-manager fleet workflow will select this binary explicitly via
TERRAFORM_BINARY_NAME=terraform1.15.8 — the same mechanism examples.yml
already uses, honoured by @cdktn/provider-schema's binary resolution.

Flipping `default` (and refreshing the CI image digest pins that a
default flip requires) is deliberately deferred to post-release
housekeeping.
@so0k
so0k requested a review from a team as a code owner August 6, 2026 07:34
@so0k
so0k merged commit deaa9b0 into main Aug 6, 2026
260 checks passed
@so0k
so0k deleted the chore/tf-1.15.8-available branch August 6, 2026 08:28
@open-constructs-cdktn open-constructs-cdktn Bot mentioned this pull request Aug 1, 2026
Merged
so0k pushed a commit that referenced this pull request Aug 7, 2026
@open-constructs-cdktn
chore(release): release v0.24.0 (#303)
b91823e 
🤖 Release PR — merge to cut a new release. Kept open and rebased
as commits land on `main`.
---


<details><summary>0.24.0</summary>

##
[0.24.0](v0.23.4...v0.24.0)
(2026-08-06)


### ⚠ BREAKING CHANGES

* **lib:** validate Terraform function versions by default
([#362](#362))
* **deps:** Require Node 22 minimum
([#345](#345))
* **lib:** preserve symlinks in TerraformAsset walkers
([#321](#321))
* **cli:** replace node-fetch with undici
([#306](#306))

### Features

* **lib:** canonical asset hashes behind the canonicalAssetHashes
feature flag
([#323](#323))
([76dd4ff](76dd4ff))
* **lib:** validate Terraform function versions by default
([#362](#362))
([4ac0736](4ac0736))
* support newer provider plugin-protocol features via targetVersions
(RFC-04)
([#296](#296))
([90322f9](90322f9))


### Bug Fixes

* **cli:** don't downgrade prebuilt providers on a transient registry
failure
([#298](#298))
([a960c5c](a960c5c))
* **cli:** include dev dependencies in npm version lookup
([#280](#280))
([955204a](955204a))
* **docs:** fix stale constructs pin breaking with()/IMixin docs
([#305](#305))
([605cf63](605cf63))
* **gha:** Allow pnpm to update the lockfile after package updates
([#318](#318))
([a899b7c](a899b7c))
* **gha:** Fix pnpm upgrade workflow
([#335](#335))
([e1a69fc](e1a69fc))
* **gha:** flip merged release PR label to autorelease: tagged
([#302](#302))
([8d64f6c](8d64f6c))
* **gha:** mint the Go-publish token from the CDKTN Maintainers app
([#369](#369))
([71921ce](71921ce))
* **gha:** mint the Go-publish token from the open-constructs-cdktn App
([#368](#368))
([179f10c](179f10c))
* **gha:** pass the Go-publish App token as x-access-token userinfo
([#370](#370))
([4e3ff19](4e3ff19))
* **lib:** Disallow constructs 10.8 until support can be added
([#363](#363))
([8bdae0d](8bdae0d))
* **lib:** preserve symlinks in TerraformAsset walkers
([#321](#321))
([6360e20](6360e20))
* typo in `moveFromId` JSDoc
([#355](#355))
([e1cf8ce](e1cf8ce))


### Miscellaneous Chores

* **cli:** replace Ink + React with smaller-tree CLI libraries
([#264](#264))
([a6aff7e](a6aff7e))
* **cli:** replace node-fetch with undici
([#306](#306))
([1317141](1317141))
* **deps:** bump glob to 13.0.6
([#307](#307))
([47ee2bb](47ee2bb))
* **deps:** bump the github-actions-backward-compatible group with 2
updates
([#295](#295))
([eab2a01](eab2a01))
* **deps:** replace lerna with nx
([#315](#315))
([94999fc](94999fc))
* **deps:** Require Node 22 minimum
([#345](#345))
([2bf315d](2bf315d))
* **deps:** update ci-info to 4.4.0 across all packages
([#329](#329))
([557a163](557a163))
* **deps:** update fs-extra to 11.3.6 across all packages
([#328](#328))
([95753a9](95753a9))
* **deps:** update minimatch to 10.2.5
([#330](#330))
([d1c1c53](d1c1c53))
* **deps:** Update sscaff to v2.0.388
([#331](#331))
([38ea0ba](38ea0ba))
* **deps:** Update zod to v4.4.3
([#332](#332))
([c10ee35](c10ee35))
* **deps:** Upgrade dependencies
([#347](#347))
([45d3a66](45d3a66))
* remove cdktf from tests
([#277](#277))
([dc9a8e9](dc9a8e9))
* ship Terraform 1.15.8 in the jsii-terraform image
([#367](#367))
([deaa9b0](deaa9b0))
* Upgrade dependencies for lib
([#348](#348))
([d616f17](d616f17))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: open-constructs-cdktn[bot] <291052431+open-constructs-cdktn[bot]@users.noreply.github.com>
X-Guardian pushed a commit to X-Guardian/cdk-terrain that referenced this pull request Aug 10, 2026
@so0k Simon Heather
chore: ship Terraform 1.15.8 in the jsii-terraform image (open-constr…
b3c2992 
…ucts#367)

## What

Adds **1.15.8** (current stable) to `.terraform.versions.json`
`available` **only** — the jsii-terraform image gains the binary at
`/usr/local/bin/terraform1.15.8`; nothing else changes.

## What deliberately does NOT change

- **`tested` untouched** → the integration matrix
(`tools/build-test-matrix.mjs`) does not grow by a single job.
- **`default` untouched** → the examples matrix
(`tools/build-example-matrix.mjs`) keeps running 1.6.5, and the
digest-pinned ghcr images in `examples.yml`/`integration.yml` stay
valid. Flipping `default` requires refreshing those digest pins and is
deferred to post-release housekeeping.

## Why now

Prebuilt-provider regeneration for 0.24 must fetch schemas with a
Terraform that emits the new protocol data (`functions` ≥1.8,
`ephemeral_resource_schemas` ≥1.10, `write_only` ≥1.11). The current
image tops out at 1.6.5, which would silently produce feature-less
bindings. cdktn-repository-manager's fleet workflow will select the new
binary explicitly via `TERRAFORM_BINARY_NAME=terraform1.15.8` — the same
mechanism `examples.yml` already uses, honoured by
`@cdktn/provider-schema`'s binary resolution (`provider-schema.ts:33`).

**Sequencing**: this must merge before the 0.24.0 release PR so the
post-release image build (docker.yml on push to main, tagged
`0.24.0-<sha>`) carries the binary.

🤖 Generated with [Claude Code](https://claude.com/claude-code)
X-Guardian pushed a commit to X-Guardian/cdk-terrain that referenced this pull request Aug 10, 2026
@open-constructs-cdktn Simon Heather
chore(release): release v0.24.0 (open-constructs#303)
37dd8dc 
🤖 Release PR — merge to cut a new release. Kept open and rebased
as commits land on `main`.
---


<details><summary>0.24.0</summary>

##
[0.24.0](open-constructs/cdk-terrain@v0.23.4...v0.24.0)
(2026-08-06)


### ⚠ BREAKING CHANGES

* **lib:** validate Terraform function versions by default
([open-constructs#362](open-constructs#362))
* **deps:** Require Node 22 minimum
([open-constructs#345](open-constructs#345))
* **lib:** preserve symlinks in TerraformAsset walkers
([open-constructs#321](open-constructs#321))
* **cli:** replace node-fetch with undici
([open-constructs#306](open-constructs#306))

### Features

* **lib:** canonical asset hashes behind the canonicalAssetHashes
feature flag
([open-constructs#323](open-constructs#323))
([76dd4ff](open-constructs@76dd4ff))
* **lib:** validate Terraform function versions by default
([open-constructs#362](open-constructs#362))
([4ac0736](open-constructs@4ac0736))
* support newer provider plugin-protocol features via targetVersions
(RFC-04)
([open-constructs#296](open-constructs#296))
([90322f9](open-constructs@90322f9))


### Bug Fixes

* **cli:** don't downgrade prebuilt providers on a transient registry
failure
([open-constructs#298](open-constructs#298))
([a960c5c](open-constructs@a960c5c))
* **cli:** include dev dependencies in npm version lookup
([open-constructs#280](open-constructs#280))
([955204a](open-constructs@955204a))
* **docs:** fix stale constructs pin breaking with()/IMixin docs
([open-constructs#305](open-constructs#305))
([605cf63](open-constructs@605cf63))
* **gha:** Allow pnpm to update the lockfile after package updates
([open-constructs#318](open-constructs#318))
([a899b7c](open-constructs@a899b7c))
* **gha:** Fix pnpm upgrade workflow
([open-constructs#335](open-constructs#335))
([e1a69fc](open-constructs@e1a69fc))
* **gha:** flip merged release PR label to autorelease: tagged
([open-constructs#302](open-constructs#302))
([8d64f6c](open-constructs@8d64f6c))
* **gha:** mint the Go-publish token from the CDKTN Maintainers app
([open-constructs#369](open-constructs#369))
([71921ce](open-constructs@71921ce))
* **gha:** mint the Go-publish token from the open-constructs-cdktn App
([open-constructs#368](open-constructs#368))
([179f10c](open-constructs@179f10c))
* **gha:** pass the Go-publish App token as x-access-token userinfo
([open-constructs#370](open-constructs#370))
([4e3ff19](open-constructs@4e3ff19))
* **lib:** Disallow constructs 10.8 until support can be added
([open-constructs#363](open-constructs#363))
([8bdae0d](open-constructs@8bdae0d))
* **lib:** preserve symlinks in TerraformAsset walkers
([open-constructs#321](open-constructs#321))
([6360e20](open-constructs@6360e20))
* typo in `moveFromId` JSDoc
([open-constructs#355](open-constructs#355))
([e1cf8ce](open-constructs@e1cf8ce))


### Miscellaneous Chores

* **cli:** replace Ink + React with smaller-tree CLI libraries
([open-constructs#264](open-constructs#264))
([a6aff7e](open-constructs@a6aff7e))
* **cli:** replace node-fetch with undici
([open-constructs#306](open-constructs#306))
([1317141](open-constructs@1317141))
* **deps:** bump glob to 13.0.6
([open-constructs#307](open-constructs#307))
([47ee2bb](open-constructs@47ee2bb))
* **deps:** bump the github-actions-backward-compatible group with 2
updates
([open-constructs#295](open-constructs#295))
([eab2a01](open-constructs@eab2a01))
* **deps:** replace lerna with nx
([open-constructs#315](open-constructs#315))
([94999fc](open-constructs@94999fc))
* **deps:** Require Node 22 minimum
([open-constructs#345](open-constructs#345))
([2bf315d](open-constructs@2bf315d))
* **deps:** update ci-info to 4.4.0 across all packages
([open-constructs#329](open-constructs#329))
([557a163](open-constructs@557a163))
* **deps:** update fs-extra to 11.3.6 across all packages
([open-constructs#328](open-constructs#328))
([95753a9](open-constructs@95753a9))
* **deps:** update minimatch to 10.2.5
([open-constructs#330](open-constructs#330))
([d1c1c53](open-constructs@d1c1c53))
* **deps:** Update sscaff to v2.0.388
([open-constructs#331](open-constructs#331))
([38ea0ba](open-constructs@38ea0ba))
* **deps:** Update zod to v4.4.3
([open-constructs#332](open-constructs#332))
([c10ee35](open-constructs@c10ee35))
* **deps:** Upgrade dependencies
([open-constructs#347](open-constructs#347))
([45d3a66](open-constructs@45d3a66))
* remove cdktf from tests
([open-constructs#277](open-constructs#277))
([dc9a8e9](open-constructs@dc9a8e9))
* ship Terraform 1.15.8 in the jsii-terraform image
([open-constructs#367](open-constructs#367))
([deaa9b0](open-constructs@deaa9b0))
* Upgrade dependencies for lib
([open-constructs#348](open-constructs#348))
([d616f17](open-constructs@d616f17))
</details>

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: open-constructs-cdktn[bot] <291052431+open-constructs-cdktn[bot]@users.noreply.github.com>
@github-actions

github-actions Bot commented Sep 6, 2026

Copy link
Copy Markdown
Contributor

I'm going to lock this pull request because it has been closed for 30 days. This helps our maintainers find and focus on the active issues. If you've found a problem that seems related to this change, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.

@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Sep 6, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@so0k