Gruntwork release 2025-11

Guides / Update Guides / Releases / 2025-11

This page is lists all the updates to the Gruntwork Infrastructure as Code Library that were released in 2025-11. For instructions on how to use these updates in your code, check out the updating documentation.

Here are the repos that were updated:

• pipelines-actions
• pipelines-cli
• pipelines-workflows
• terraform-aws-architecture-catalog
• terraform-aws-cache
• terraform-aws-control-tower
• terraform-aws-data-storage
• terraform-aws-eks
• terraform-aws-lambda
• terraform-aws-service-catalog
• terraform-aws-static-assets
• terraform-aws-vpc

pipelines-actions

v4.1.2

Published: 11/13/2025 | Release notes

• [Bug Fix] Use dedicated child account baseline command by @oredavids in https://github.com/gruntwork-io/pipelines-actions/pull/147

Full Changelog: https://github.com/gruntwork-io/pipelines-actions/compare/v4.1.1...v4.1.2

pipelines-cli

v0.40.7

Published: 11/26/2025 | Release notes

• Fix gitlab runner tag parsing by @Resonance1584 in https://github.com/gruntwork-io/pipelines/pull/502

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.40.6...v0.40.7

v0.40.6

Published: 11/14/2025 | Release notes

• Enable consolidated deletes in tests by @Resonance1584 in https://github.com/gruntwork-io/pipelines/pull/499
• DEV-1201 Fix retry failed jobs in github flaking by @Resonance1584 in https://github.com/gruntwork-io/pipelines/pull/500

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.40.5...v0.40.6

v0.40.5

Published: 11/10/2025 | Release notes

To mitigate a bug related to the OpenTofu/Terraform -destroy flag being set before Terragrunt flags when used with run --all plan -destroy, the flag is explicitly moved to the end of the argument list with an -- separator if detected.

This is an interim fix, with more nuanced flag ordering planned for the future.

• fix: Moving -destroy to the end of the args list by @yhakbar in https://github.com/gruntwork-io/pipelines/pull/497

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.40.4...v0.40.5

v0.40.4

Published: 11/4/2025 | Release notes

• Bump xcode version by @Resonance1584 in https://github.com/gruntwork-io/pipelines/pull/495
• DD fixes. New TG version. by @Resonance1584 in https://github.com/gruntwork-io/pipelines/pull/496

Full Changelog: https://github.com/gruntwork-io/pipelines/compare/v0.40.3...v0.40.4

pipelines-workflows

v4.0.7

Published: 11/27/2025 | Release notes

Parity release to keep Pipelines CLI version in sync. No impacts to GitHub functionality.

• Pipelines CLI v0.40.7 by @Resonance1584 in https://github.com/gruntwork-io/pipelines-workflows/pull/174

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v4...v4.0.7

v4.0.6

Published: 11/14/2025 | Release notes

• Fixed a race condition affecting the status check when retrying failed jobs
• Fixed drift-detection PR_CREATE_TOKEN fallback token

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v4...v4.0.6

v4.0.5

Published: 11/13/2025 | Release notes

• Fix child account baseline auth bug by @oredavids in https://github.com/gruntwork-io/pipelines-workflows/pull/172

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v4.0.4...v4.0.5

v4.0.4

Published: 11/10/2025 | Release notes

To mitigate a bug related to the OpenTofu/Terraform -destroy flag being set before Terragrunt flags when used with run --all plan -destroy, the flag is explicitly moved to the end of the argument list with an -- separator if detected.

This is an interim fix, with more nuanced flag ordering planned for the future.

• chore: Bumping Pipelines CLI version to v0.40.5 by @yhakbar in https://github.com/gruntwork-io/pipelines-workflows/pull/171

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v4...v4.0.4

v4.0.3

Published: 11/5/2025 | Release notes

• Allow Drift Detection to run on branches other than the deploy branch
• Remove ahead of main check from preflight when workflow is manually dispatched
• Allow alpha and beta Terragrunt releases to be used (minimum version check no longer applies)

Full Changelog: https://github.com/gruntwork-io/pipelines-workflows/compare/v4...v4.0.3

terraform-aws-architecture-catalog

v4.1.1

Published: 11/26/2025 | Release notes

• circleci: remove deploy job by @gcagle3 in https://github.com/gruntwork-io/terraform-aws-architecture-catalog/pull/1178
• multi_region_common.hcl: add eu-central-2 by @gcagle3 in https://github.com/gruntwork-io/terraform-aws-architecture-catalog/pull/1179

Full Changelog: https://github.com/gruntwork-io/terraform-aws-architecture-catalog/compare/v4.1.0...v4.1.1

v4.1.0

Published: 11/19/2025 | Release notes

• Upgraded usage of terraform-aws-control-tower modules to v1.1.0

Full Changelog: https://github.com/gruntwork-io/terraform-aws-architecture-catalog/compare/v4.0.2...v4.1.0

v4.0.2

Published: 11/6/2025 | Release notes

• chore: Upgrading default Terragrunt version in templates to 0.93.1 by @yhakbar in https://github.com/gruntwork-io/terraform-aws-architecture-catalog/pull/1176

Full Changelog: https://github.com/gruntwork-io/terraform-aws-architecture-catalog/compare/v4.0.1...v4.0.2

terraform-aws-cache

v1.0.3

Published: 11/11/2025 | Release notes

• feat(elastic-cache): Add Event Notifications for ElastiCache cluster by @Zoltowska in https://github.com/gruntwork-io/terraform-aws-cache/pull/173

• @Zoltowska made their first contribution in https://github.com/gruntwork-io/terraform-aws-cache/pull/173

Full Changelog: https://github.com/gruntwork-io/terraform-aws-cache/compare/v1.0.2...v1.0.3

v1.0.2

Published: 11/3/2025 | Release notes

• Update AWS provider version constraint to support v6 by @james00012 in https://github.com/gruntwork-io/terraform-aws-cache/pull/171

Full Changelog: https://github.com/gruntwork-io/terraform-aws-cache/compare/v1.0.1...v1.0.2

terraform-aws-control-tower

v1.1.0

Published: 11/13/2025 | Modules affected: landingzone | Release notes

• landingzone/control-tower-account-factory and landingzone/control-tower-account-factory-async modules now support using OU paths; with this change, you can specify either a simple OU name (e.g., 'Prod') or a path separated by forward slashes (e.g., 'Workloads/Prod').

terraform-aws-data-storage

v0.42.0

Published: 11/19/2025 | Release notes

• Add Aurora Serverless V2 auto-pause and backup schedule timezone support by @james00012 in https://github.com/gruntwork-io/terraform-aws-data-storage/pull/536
• fix: Update db_name constraints and add proper validation by @james00012 in https://github.com/gruntwork-io/terraform-aws-data-storage/pull/534
• feat(aurora) Add cluster_monitoring_interval option by @cornet in https://github.com/gruntwork-io/terraform-aws-data-storage/pull/537
• docs: Fix broken links and improve documentation consistency by @james00012 in https://github.com/gruntwork-io/terraform-aws-data-storage/pull/527

Full Changelog: https://github.com/gruntwork-io/terraform-aws-data-storage/compare/v0.41.1...v0.42.0

terraform-aws-eks

v3.1.2

Published: 11/19/2025 | Modules affected: eks-k8s-karpenter | Release notes

• LIB-3801: Allow additional policies attachment for karpenter node role

terraform-aws-lambda

v1.2.0

Published: 11/4/2025 | Release notes

• Bump golang.org/x/net from 0.36.0 to 0.38.0 in /test by @dependabot[bot] in https://github.com/gruntwork-io/terraform-aws-lambda/pull/273

• Bump requests from 2.32.0 to 2.32.4 in /examples/lambda-build/python by @dependabot[bot] in https://github.com/gruntwork-io/terraform-aws-lambda/pull/274

• Bump urllib3 from 1.26.19 to 2.5.0 in /examples/lambda-build/python by @dependabot[bot] in https://github.com/gruntwork-io/terraform-aws-lambda/pull/275

• fix: conditionalize lambda iam role trust by @bt-macole in https://github.com/gruntwork-io/terraform-aws-lambda/pull/277

• feat: Add AWS Lambda SnapStart support by @james00012 in https://github.com/gruntwork-io/terraform-aws-lambda/pull/279

• @bt-macole made their first contribution in https://github.com/gruntwork-io/terraform-aws-lambda/pull/277

Full Changelog: https://github.com/gruntwork-io/terraform-aws-lambda/compare/v1.1.0...v1.2.0

terraform-aws-service-catalog

v0.142.0

Published: 11/20/2025 | Modules affected: networking | Release notes

• Update VPC and Route53 modules to support AWS Provider v6.x

v0.141.0

Published: 11/10/2025 | Modules affected: modules/networking/vpc, modules/services/eks-argocd, modules/services/eks-cluster, modules/services/eks-core-services | Release notes

• Bump terraform-aws-eks to v2.1.1

terraform-aws-static-assets

v1.1.2

Published: 11/5/2025 | Modules affected: s3-cloudfront | Release notes

• Added Optional Name Suffix for Origin Access Control Resource

terraform-aws-vpc

v0.28.9

Published: 11/25/2025 | Modules affected: network-acl-inbound, network-acl-outbound, route, transit-gateway-attachment | Release notes

• VPC v1: AWS Provider Version Bump. Enabled usage of AWS Provider v6.x.x.