Skip to main content

Gruntwork release 2025-03

Guides / Update Guides / Releases / 2025-03

This page is lists all the updates to the Gruntwork Infrastructure as Code Library that were released in 2025-03. For instructions on how to use these updates in your code, check out the updating documentation.

Here are the repos that were updated:

pipelines-actions​

v3.4.3​

Published: 3/6/2025 | Release notes

Full Changelog: https://github.com/gruntwork-io/pipelines-actions/compare/v3.4.2...v3.4.3

v3.4.2​

Published: 3/6/2025 | Release notes

Full Changelog: https://github.com/gruntwork-io/pipelines-actions/compare/v3.4.1...v3.4.2

pipelines-cli​

v0.36.6​

Published: 3/21/2025 | Release notes

  • When codebases have both pipelines config-as-code (HCL) and config.yml configs, we now prefer the HCL configs for deploy_branch_name and tf_binary

  • Pipelines no longer crashes if config.yml is missing when run in GitHub with only HCL based configuration.

  • DEV-841: Prefer HCL configs in github legacy config parsing when present by @ZachGoldberg in https://github.com/gruntwork-io/pipelines/pull/343

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.36.5...v0.36.6

v0.36.5​

Published: 3/17/2025 | Release notes

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.36.4...v0.36.5

v0.36.4​

Published: 3/12/2025 | Release notes

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.36.3...v0.36.4

v0.36.3​

Published: 3/7/2025 | Release notes

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.36.2...v0.36.3

v0.36.2​

Published: 3/4/2025 | Release notes

pipelines-workflows​

v3.7.9​

Published: 3/6/2025 | Release notes

This release changes the behavior of pipelines comment generation to ignore any comment artifacts that, for whatever reason, contain invalid json. Previously such invalid artifacts would cause the comment generation to fail entirely, now instead it continues and emits a warning.

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v3...v3.7.9

v3.7.8​

Published: 3/6/2025 | Release notes

If pipelines-execute exits with non-zero return code we now forward stderr to the comment.

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v3...v3.7.8

v3.7.7​

Published: 3/4/2025 | Release notes

  • Increase to pipelines cli v0.36.2 which includes updates to TOML parsing to avoid warnings/errors in logs for more sophisticated mise toml configurations

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v3...v3.7.7

terraform-aws-architecture-catalog​

v2.12.10​

Published: 3/13/2025 | Release notes

v2.12.9​

Published: 3/13/2025 | Release notes

v2.12.8​

Published: 3/13/2025 | Release notes

  • Bugfix in recently released gitlab templates

Full Changelog: https://github.com/gruntwork-io/terraform-aws-architecture-catalog/compare/v2.12.7...v2.12.8

v2.12.7​

Published: 3/13/2025 | Release notes

v2.12.6​

Published: 3/7/2025 | Release notes

v2.12.5​

Published: 3/6/2025 | Release notes

terraform-aws-ci​

v0.60.0​

Published: 3/3/2025 | Modules affected: ecs-deploy-runner, infrastructure-deployer | Release notes

  • SME-1851: Upgrade to aws-sdk-go-v2

terraform-aws-ci-steampipe​

v0.3.5​

Published: 3/13/2025 | Release notes

  • fix: Refactor contexts
  • chore: Add Terrascan to CI - CORE-1371
  • chore: LIB-83: Replace tfenv and tgswitch with mise
  • chore: Bump golang.org/x/net from 0.28.0 to 0.33.0 in /test
  • chore: Bump golang.org/x/net from 0.33.0 to 0.36.0 in /test

terraform-aws-cis-service-catalog​

v0.57.0​

Published: 3/3/2025 | Modules affected: networking | Release notes

  • Enforced no ingress\egress rules in VPC's default SG

terraform-aws-ecs​

v0.38.9​

Published: 3/24/2025 | Modules affected: ecs-cluster | Release notes

  • Added new vars that allows user to specify egress CIDR, protocol, and from/to port range for ecs-cluster security group egress

v0.38.8​

Published: 3/17/2025 | Modules affected: ecs-cluster | Release notes

  • tests: Bump golang.org/x/net from 0.33.0 to 0.36.0
  • ecs-cluster: support update_default_version

v0.38.7​

Published: 3/7/2025 | Modules affected: ecs-service, ecs-daemon-service | Release notes

  • ecs-service: Adding feature that picks up an existing Task Definition
  • ecs-service and ecs-daemon-service: Add availability_zone_rebalancing parameter to ECS service resources

terraform-aws-eks​

v0.76.1​

Published: 3/27/2025 | Modules affected: tests | Release notes

  • Bump golang.org/x/crypto from 0.21.0 to 0.31.0 in /test

v0.76.0​

Published: 3/19/2025 | Modules affected: eks-aws-auth-merger | Release notes

  • Bump golang.org/x/net from 0.23.0 to 0.36.0 in /modules/eks-aws-auth-merger/aws-auth-merger
  • Bump aws-auth-merger from Go 1.18 to 1.23

v0.75.0​

Published: 3/13/2025 | Modules affected: eks-cluster-control-plane | Release notes

  • Add Support For EKS Auto Mode

v0.74.2​

Published: 3/10/2025 | Modules affected: eks-cluster-control-plane | Release notes

  • Add support prefix lists for the EKS API security group.

v0.74.1​

Published: 3/10/2025 | Modules affected: eks-alb-ingress-controller | Release notes

  • Fix ALB ingress controller pod scheduling

v0.74.0​

Published: 3/4/2025 | Modules affected: eks-cluster-control-plane | Release notes

  • Updated SG name.

terraform-aws-security​

v0.75.14​

Published: 3/21/2025 | Modules affected: custom-iam-entity | Release notes

  • Added new var iam_role_path that allows user to specify the IAM Role Path.

v0.75.13​

Published: 3/13/2025 | Modules affected: auto-update | Release notes

  • Set dnf-automatic.txt to security updates

v0.75.12​

Published: 3/13/2025 | Modules affected: fail2ban | Release notes

  • Update Amazon Linux 2023 documentation
  • Update go modules used by tests (no functional change)

v0.75.11​

Published: 3/6/2025 | Modules affected: github-actions-openid-connect-provider, gitlab-pipelines-openid-connect-provider | Release notes

terraform-aws-service-catalog​

v0.121.1​

Published: 3/26/2025 | Modules affected: services/eks-workers | Release notes

  • Add variable asg_worker_enable_cloudwatch_alarms to enable/disable CloudWatch alarms for EKS Self-Managed Workers Auto-Scaling Groups (ASG).

v0.121.0​

Published: 3/19/2025 | Modules affected: networking, services | Release notes

  • Changed source module version modules/eks-cluster-control-plane from v0.73.2 to v0.74.0.

v0.120.1​

Published: 3/19/2025 | Release notes

  • Bump golang.org/x/net from 0.33.0 to 0.36.0 in /test

v0.120.0​

Published: 3/18/2025 | Modules affected: networking, services | Release notes

  • Changed source module version modules/eks-cluster-control-plane from v0.72.2 to v0.73.2.

v0.119.2​

Published: 3/17/2025 | Modules affected: services | Release notes

  • services/ecs-service: Update version for terraform-aws-ecs module used to v0.38.7

v0.119.1​

Published: 3/7/2025 | Modules affected: data-stores | Release notes

  • Added dynamic partition to modules\data-stores\s3-bucket.

v0.119.0​

Published: 3/6/2025 | Modules affected: base, services | Release notes

  • Added EBS volumes controls in ASGs.
  • Set required Terraform version to >= 1.3.0.
  • Added dynamic block_device_mappings configuration to modules/services/asg-service/main.tf to enable customizable EBS volume attachments. Examples have been updated to reflect this new capability.
  • Changed the value of gzip from true to false in modules/base/ec2-baseline/main.tf. This resolves an issue where EC2 service couldn't decode user data because it was both base64-encoded and gzipped. Removing gzip compression allows EC2 to properly process the user data.
  • Added update_default_version = true to aws_launch_template in modules/services/asg-service/main.tf to automatically set the default version to the latest when the template is updated.
  • Modified var.custom_user_data_override handling in modules/services/asg-service/main.tf to accept inline text instead of a file path. This change enables direct string input in the resource, passing File content via file() function and template rendering via templatefile() function with variable substitution.

v0.118.22​

Published: 3/6/2025 | Modules affected: services | Release notes

  • Add input to pass existing ecs task execution role

v0.118.21​

Published: 3/4/2025 | Modules affected: networking, services | Release notes

  • Bump terraform-aws-eks version to v0.72.3

v0.118.20​

Published: 3/4/2025 | Modules affected: networking, services | Release notes

  • Bump terraform-aws-eks version to v0.72.3

terraform-aws-static-assets​

v0.20.3​

Published: 3/4/2025 | Modules affected: cloudfront | Release notes

  • Added support of logging V2 for Cloudfront

terraform-aws-vpc​

v0.28.4​

Published: 3/24/2025 | Modules affected: vpc-interface-endpoint | Release notes

  • Bump golang.org/x/net from 0.33.0 to 0.36.0 in /test
  • Added ElastiCache Endpoint

terrapatch-cli​

v0.2.2​

Published: 3/13/2025 | Release notes