Update dependency opentofu to v1.9.0

[renovate]

This PR contains the following updates:

Package	Update	Change
opentofu	minor	1.8.7 -> 1.9.0

---

Release Notes

opentofu/opentofu (opentofu)

v1.9.0

Compare Source

We're proud to announce that OpenTofu 1.9.0 is now officially out! 🎉

This release includes a lot of major and minor new features, as well as a ton of community contributions!

The highlights are:

• for_each in provider configuration blocks: An alternate (aka "aliased") provider configuration can now have multiple dynamically-chosen instances using the for_each argument:

  provider "aws" {
    alias    = "by_region"
    for_each = var.aws_regions
  
    region = each.key
  }

  Each instance of a resource can also potentially select a different instance of the associated provider configuration, making it easier to declare infrastructure that ought to be duplicated for each region.

• -exclude planning option: similar to -target, this allows operators to tell OpenTofu to work on only a subset of the objects declared in the configuration or tracked in the state.

  tofu plan -exclude=kubernetes_manifest.crds

  While -target specifies the objects to include and skips everything not needed for the selected objects, -exclude instead specifies objects to skip. OpenTofu will exclude the selected objects and everything that depends on them.

Please take the above for a spin and let us know your feedback!

For all the features, see the related blog post or the detailed changelog.

You can find the full diff here.

v1.8.8

Compare Source

SECURITY:

• Upgraded golang.org/x/crypto to resolve CVE-2024-45337. (#​2287)
• Upgraded golang.org/x/net to resolve CVE-2024-45338. (#​2311)

BUG FIXES:

• tofu test now removes outputs of destroyed modules between different test runs. (#​2274)

---

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.