CVS commit: pkgsrc/net/opentofu

["Adam Ciarcinski" <adam%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   adam
Date:           Thu Jul 23 11:50:50 UTC 2026

Modified Files:
        pkgsrc/net/opentofu: Makefile distinfo

Log Message:
opentofu: updated to 1.12.5

1.12.5

SECURITY ADVISORIES:

* Previous releases in the v1.12 series could be affected by several vulnerabilities:
  * The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake,
    allowing a passive network observer who can collect handshakes to de-anonymize the hostname of the server, even when ECH was being used.

BUG FIXES:
- Fixed bug where implicit moves and provider address changes would incorrectly cause providers.MovedResourceState to be used in place of providers.UpgradeResourceState


To generate a diff of this commit:
cvs rdiff -u -r1.24 -r1.25 pkgsrc/net/opentofu/Makefile
cvs rdiff -u -r1.3 -r1.4 pkgsrc/net/opentofu/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/opentofu/Makefile
diff -u pkgsrc/net/opentofu/Makefile:1.24 pkgsrc/net/opentofu/Makefile:1.25
--- pkgsrc/net/opentofu/Makefile:1.24   Thu Jul 16 11:20:38 2026
+++ pkgsrc/net/opentofu/Makefile        Thu Jul 23 11:50:50 2026
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.24 2026/07/16 11:20:38 adam Exp $
+# $NetBSD: Makefile,v 1.25 2026/07/23 11:50:50 adam Exp $
 
-DISTNAME=      opentofu-1.12.4
+DISTNAME=      opentofu-1.12.5
 CATEGORIES=    net
 MASTER_SITES=  ${MASTER_SITE_GITHUB:=opentofu/}
 GITHUB_TAG=    v${PKGVERSION_NOREV}

Index: pkgsrc/net/opentofu/distinfo
diff -u pkgsrc/net/opentofu/distinfo:1.3 pkgsrc/net/opentofu/distinfo:1.4
--- pkgsrc/net/opentofu/distinfo:1.3    Thu Jul 16 11:20:38 2026
+++ pkgsrc/net/opentofu/distinfo        Thu Jul 23 11:50:50 2026
@@ -1,4 +1,4 @@
-$NetBSD: distinfo,v 1.3 2026/07/16 11:20:38 adam Exp $
+$NetBSD: distinfo,v 1.4 2026/07/23 11:50:50 adam Exp $
 
 BLAKE2s (cel.dev_expr_@v_v0.25.1.mod) = c36f332c45cf24a4dd4d1a4c6ff42cd78732769e87b139ce56cd3f7c66ff685e
 SHA512 (cel.dev_expr_@v_v0.25.1.mod) = 67aecc4be51ad90133564333b4619f3195b522bcc4cec478fe37fcb7eef22a7efbfdbae97bfccd9ef1c45828116977a56a53451a037fd1ada3faa906278f4842
@@ -3270,9 +3270,9 @@ Size (k8s.io_utils_@v_v0.0.0-20260210185
 BLAKE2s (k8s.io_utils_@v_v0.0.0-20260210185600-b8788abfbbc2.zip) = e6100498bd64ac814972c5cbb0c31c8ad805b4b06a4ba22e2a671bc014719867
 SHA512 (k8s.io_utils_@v_v0.0.0-20260210185600-b8788abfbbc2.zip) = 6c1534e76de6e02d57166421074687e68057259a994d06111ee6e555b9eb958e285a20242c6dda1a4606fd6b48c717e1734894ef27672f50297e42cda4077814
 Size (k8s.io_utils_@v_v0.0.0-20260210185600-b8788abfbbc2.zip) = 241159 bytes
-BLAKE2s (opentofu-1.12.4.tar.gz) = 09d1e3aa7198716cbfb11048ba51e0ea1f24dd257650e5b3a9a5c576287c93d0
-SHA512 (opentofu-1.12.4.tar.gz) = 977348233cae8f5bd3fd8ac833af636ceef3a05740756ee250802b1aec6c7bfa52d9255859b86e9aa08112315268b4a36088fa6420ce6aa161fbab4a9fd70a38
-Size (opentofu-1.12.4.tar.gz) = 5094461 bytes
+BLAKE2s (opentofu-1.12.5.tar.gz) = 3be2c83754cea52fa250ba9c3e78278bcf0c3453c8bafebaf425c0c269507118
+SHA512 (opentofu-1.12.5.tar.gz) = 4a205eeabf6cd5e2a80f7e7aafa22d37ab536f5a38e2a89c6b43631b8f8892ed4f18b169999d888fdb239b0ad610c695f56c67b155463d583252b99f20d418d2
+Size (opentofu-1.12.5.tar.gz) = 5094877 bytes
 BLAKE2s (oras.land_oras-go_v2_@v_v2.6.0.mod) = 001865222181bb581953513833fae101359dae72d5c2473973fc2ce410806b15
 SHA512 (oras.land_oras-go_v2_@v_v2.6.0.mod) = 815563c90321f2eed25659de0de14be0819403b82f95aa998680d3fe761e13dd3009552638667a3211a96cda7232e8ab7a1a2f886290f6b98a8559e6c34884e6
 Size (oras.land_oras-go_v2_@v_v2.6.0.mod) = 188 bytes