v13.0.2

v13.0.1...v13.0.2

Added

• #381 More detailed description of input parameters with use-case examples.

Fixed

• #379 The uniquely identifiable name now takes both arg-target and arg-replace inputs into account as well (thank you, @tenpaiyomi). This is in addition to existing support for the following input parameters:
  • arg-chdir (i.e., working-directory)
  • arg-workspace
  • arg-backend-config
  • arg-var-file
  • arg-var
  • arg-destroy
  • tool (i.e., tofu or terraform (default))
  • PR number.
• #380 Display timestamp for issue_comment event trigger (thank you, @tenpaiyomi).

---

uses: op5dev/tf-via-pr@e3ad5ba455917af28a5282365ba7f22b4a005464 # v13.0.2

v13.0.1

v13.0.0...v13.0.1

Fixed

• #377 Determine PR number from issue_comment event trigger, in addition existing support for push, pull_request, merge_group, workflow_dispatch, and cron schedule events (thank you, @tenpaiyomi).

---

uses: op5dev/tf-via-pr@99250a65e362686bd7e2417de647b633beaec500 # v13.0.1

v13.0.0

v12.0.0...v13.0.0

Breaking

Rename

Following an organisation rename from DevSecTop to OP5dev, references to the old name may result in "Unable to resolve action" until updated to uses: op5dev/tf-via-pr@v13. ‼️

Inputs

The comment-pr input was overloaded as it determined the method of PR comment (i.e., update or recreate) in addition to whether a comment should be added at all (i.e., none). This has been simplified such that:

Before	After
comment-pr: update	comment-method: update (default)
comment-pr: recreate	comment-method: recreate
comment-pr: none	comment-pr: never (or on-change)

Added

• #370 New tag-actor parameter to tag the workflow triggering actor: always (default), on-change, or never (thank you, @jagregory).
• #370 New comment-method parameter which supersedes comment-pr to choose between: update existing comment (default) or recreate and delete previous one.
• #370 Enhance comment-pr parameter to add a PR comment: always (default), on-change, or never.

Changed

• #368 Rename references to reflect OP5dev organisation name (thank you, @bvs-langchain).

---

uses: op5dev/tf-via-pr@f455e10e6e83d28f53f505a2d8242433a17536f3 # v13.0.0

v12.1.0

v12.0.8...v12.1.0

Added

• #363 Support for init command input for checks and outputs only.
• #363 More workflow examples:
  • Run on pull_request (plan) and push (apply) events with conditional job stages based on plan file (thank you, @silnels-greenlane).
  • Run on pull_request (plan) and push (apply) events with fmt/validate checks and TFLint (thank you, @chris3ware).

Improved

• #362 Documentation:
  • List all supported repeatable arguments: arg-var, arg-backend-config, arg-replace and arg-target, using commas to separate multiple values (e.g., arg-var: key1=value1,key2=value2).
  • More line breaks for ease of legibility.

---

uses: devsectop/tf-via-pr@b3d1122eb0c8ba37a4f76280c14d7e7f6d3a81be # v12.1.0

v12

Update major version tag

v12.0.8

v12.0.7...v12.0.8

Fixed

• #360 Early-passing of variables depends on tofu (with its early-static-evaluation) or terraform tool usage (thank you, @joe-dematteo).

---

uses: devsectop/tf-via-pr@d83a2be572df0559c8a7adca1a9085b496925f48 # v12.0.8

v12.0.7

v12.0.6...v12.0.7

Fixed

• #354 Trigger push to default branch without associated PR has a fallback of 0 (thank you, @fulgas).

---

uses: devsectop/tf-via-pr@bbfe2549cfbff6a4ce05755c4bd76a1a22f4fd9e # v12.0.7

v12.0.6

v12.0.5...v12.0.6

Added

• #357 show-args parameter enables rendering of CLI arguments in the PR comment's header which wouldn't normally be part of the last command (thank you, @garysassano).
  E.g., The default value of workspace ensures that arg-workspace input is always rendered, even for plan or apply.
  • This complements the existing hide-args parameter for the inverse function, and overrides in case of conflict.
  • Both show-args and hide-args accept comma-separated list of inputs, such as "detailed-exitcode,lock,out".

Fixed

• #356 Reference workflow job ID from multiple chained matrices (thank you, @silnels-greenlane).

---

uses: devsectop/tf-via-pr@74126c383c6bedd3b31a05cd7b1ef98bf9e40351 # v12.0.6

v12.0.5

v12.0.4...v12.0.5

Note

While this is a patch release, existing PRs should be updated for consistent behaviour with plan files.

Added

• Pass in multiple comma-separated -backend-config values (thank you, @fulgas) (#352).
  E.g., arg-backend-config: encrypt=true,bucket="bucket-name",dynamodb_table="table-name".
  • This is in addition to existing support for -var, -target, and -replace comma-separated values.

Improved

• Portion of the plan file artifact name is hashed with MD5 for concise, fixed-length string (#352).
  • This is to address GitHub's 256 character limit for artifact naming.
  • As a bonus, this also masks potentially sensitive values. E.g., from arg-var input.
• Documentation to include "To-Do" tasks (#352).
• Documentation to include TF_CLI_ARGS workaround (thank you, @fulgas) (#353).
• Rendering of standard error (stderr) and standard output (stdout) combination (#353).
• Rendering of fmt format output with diff syntax highlighting (#353).

To-do

• Handling of inputs which contain space(s) (e.g., working-directory: "path to/directory").
• Handling of comma-separated inputs which contain comma(s) (e.g., arg-var: token=1,2,3)—use TF_CLI_ARGS workaround.

---

uses: devsectop/tf-via-pr@a917bd222a6a780f25d2c5cd1942f6b2c2f16a7a # v12.0.5

v12.0.4

v12.0.3...v12.0.4

Fixed

• Remove ' single quotes from surrounding CLI arguments—likely to fail on paths which include whitespace (thank you, @Setthawut-Peace) (#349).
• Render plan output when var-file or var is supplied (#349).
• Overzealous hide-args input—for example, "var" used to hide "var-file" as well (#349).
• Reorder exit code output order to match order of command operations (#348).

---

uses: devsectop/tf-via-pr@8bb3a5840d216ca8a78086b47c29debf26e93824 # v12.0.4