Terraform v1.17.0-rc2 — Terraform

1.17.0-rc2 (October 14, 2026) NEW FEATURES: Terraform now supports variables and locals in provider requirements (#39153) A new -minimal-refresh planning option has been added, which will only refresh resources that have proposed changes. (#35290) policy: Terraform Policy is now generally available. The -policies flag for plan, apply, and query no longer requires an experimental build or the -allow-experimental-features flag. Query policies evaluate resources discovered by list blocks and…

Terraform v1.16.6 — Terraform

1.16.6 (October 14, 2026) BUG FIXES: cloud: terraform init can now find workspaces selected by key/value tags whose keys contain uppercase letters. (#39306) test: Allow module under test to use deprecated outputs. (#39207) NOTES: Prevent a HTTP/2 resource exhaustion via CVE-2026-78669. Exploitation would require a compromised (untrusted) provider/module registry. Such a threat is considered to be outside the perimeter of Terraform core security guarantees. (#39375)

containerd 2.4.2 — containerd

Welcome to the v2.4.2 release of containerd! The second patch release for containerd 2.4 contains various fixes Security Updates containerd CVE-2026-95839 GHSA-8647-2jxj-p2rc GHSA-hc94-p972-ch66 Highlights Container Runtime Interface (CRI) Apply hardening to not follow symlinks for container log files (#14302) Image Distribution Fix excessive memory usage during image pulls when registry downloads outpace content writes (#14342) Apply hardening to reject image references with ".." path…

• containerd 2.3.7 [containerd]
• containerd 2.2.10 [containerd]
• containerd 2.0.14 [containerd]