Repository navigation
feat(versions)!: add Terraform 1.16, retire 1.13, bump AWS CLI to 2.36.49 - #205
Merged
Merged
Conversation
…6.49 The matrix had drifted a full minor line behind upstream. Terraform 1.16 shipped (latest patch 1.16.3) while the repo still listed 1.13.5, 1.14.9 and 1.15.8; the AWS CLI sat at 2.36.6 against an upstream 2.36.49, 43 patch releases back. The image exists to ship these two CLIs at recent versions, so the drift is the user-facing defect, not a hygiene item. Apply the ADR-0015 window mechanically: HashiCorp patches 1.15 and 1.16, the graced line is 1.14, so 1.13 retires together with its signature material. Materialised with scripts/bump-version.sh (ADR-0021) — every SHA256SUMS and per-arch signature was fetched and GPG-verified before anything was written. Verified beyond the script, since --full cannot build in a hosted session (the egress proxy's CA is untrusted inside the build containers, see docs/agent-framework.md): validate.sh --fast passes, the test template renders, and each new version's material was checked against the real upstream artefact — terraform 1.15.9 and 1.16.3 binaries match the signed SHA256SUMS, 1.16.3 runs and self-reports, and the AWS CLI 2.36.49 archive verifies against the committed signature. CI's full matrix (ADR-0020) is the authoritative gate. BREAKING CHANGE: Terraform 1.13 is no longer built, so no new image combination will carry it. Previously published fully-pinned tags remain pullable forever (ADR-0003) — pin an existing vX.Y.Z_tf-1.13.5_aws-* tag, or move to 1.14 or later.
bgauduch
added
the
adr-not-needed
Claude
6 of 7 tasks
6 of 7 tasks
bgauduch
pushed a commit
that referenced
this pull request
Sep 24, 2026
🤖 I have created a release *beep* *boop* --- ## [11.0.0](v10.1.0...v11.0.0) (2026-09-23) ### ⚠ BREAKING CHANGES * **versions:** Terraform 1.13 is no longer built. Published `vX.Y.Z_tf-1.13.5_aws-*` tags stay pullable (ADR-0003); pin one, or move to 1.14 or later. ### Features * **versions:** add Terraform 1.16, retire 1.13, bump AWS CLI to 2.36.49 ([#205](#205)) ([db9db0c](db9db0c)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Brings the matrix back to upstream, applying the ADR-0015 window: Terraform 1.16 in, 1.13 out, AWS CLI to the latest 2.36 patch.
tf_versionsawscli_versionsWritten by
scripts/bump-version.sh(ADR-0021);docs/binaries-verifications.mdfollows the versions.build-testgreen on the full matrix.Roadmap phase / closes: Phase 3
Breaking change
Footer below.
Architecture Decision Record
docs/adr/(link: ____)Version bump applying ADR-0015; carries
adr-not-needed.Checklist
BREAKING CHANGE: Terraform 1.13 is no longer built. Published
vX.Y.Z_tf-1.13.5_aws-*tags stay pullable (ADR-0003); pin one, or move to 1.14 or later.