Changelog

Keep track of changes to HCP Terraform.

2026-06-08

Project-level run tasks. HCP Terraform now supports project-level run tasks, enabling organizations to apply security, compliance, and operational guardrails consistently across groups of workspaces while reducing manual overhead. Refer to HCP Terraform run tasks for more information.

2026-05-28

HCP Terraform Metrics. HCP Terraform now provides an API endpoint that you can use to gather metrics related to your HCP Terraform organization. Refer to HCP Terraform Metrics for more information.

2026-05-14

Delegated Policy Overrides. Organization owners can now delegate policy override permissions to specific teams. Teams with this permission can override failed soft-mandatory policy evaluations on the projects and workspaces they manage. Refer to Delegate policy overrides for more information.

2026-05-13

HCP Account Linking in SSO. The SSO sign-in flow now links a standalone TFC account to an HCP account and authorizes the SSO organization in a single step. Refer to HCP account linking for more information.

2026-05-06

Stacks Plan Diagnostics While Awaiting Approval. Plan-step warning diagnostics are now visible on the deployment run timeline while the plan is pending approval, so reviewers can act on them before approving. Refer to Review deployment runs for more information.

2026-04-30

Union and null-value tag filters for Workspaces API. You can now filter workspaces by tag union (filter[tag-union]=true) to match workspaces with any of the specified tags, and filter by null tag value (filter[tag-value-default-null]=true) to find workspaces with unset tag values. Refer to the Workspaces API documentation for more information.

2026-04-27

Stack State File Upload in the UI. During a deployment migration, users can now upload a .tfstackstate file directly from the HCP Terraform UI instead of using the CLI.

2026-04-21

Stacks New Configuration Button. The stack configurations page now has a "New configuration" button to fetch a fresh config from VCS, rerun an existing configuration, or tear down a stack, without using the CLI. Refer to Create and review configuration versions for more information.

2026-04-14

Added HCP Terraform changelog. This provides a historical record of feature changes in HCP Terraform. Refer to this page for ongoing updates.
Explorer Remote Module Support. Explorer now surfaces remote modules sourced from GitHub, Bitbucket, S3, GCS, and other VCS or HTTP hosts alongside registry modules, giving teams a complete view of module usage across their workspaces. Refer to Explorer documentation for more information.

2026-04-07

Extended Stack Configuration Create API. The POST /stacks/:id/stack-configurations endpoint now accepts a source parameter (manual, fetch, or reuse) and a destroy_all boolean, letting API users trigger fresh VCS fetches, reuse existing config content, or plan a full stack teardown without modifying the deployments config. Refer to Stack configurations API for more information.

2026-04-02

Stacks Trigger Patterns. Added a UI for configuring VCS trigger patterns on stacks, letting teams specify which file path changes should trigger a stack configuration run. Refer to Configure stacks for more information.

2026-04-01

IP Allowlists for HCP Terraform. Organization owners can now create IP allowlists to improve security by controlling user and agent access to their organizations. Refer to IP Allowlists documentation for more information.

2026-03-31

AWS Dynamic Credentials Quick Setup using AWS Temporary Delegation. HCP Terraform can automatically set up dynamic credentials for AWS to simplify authentication and improve security. Refer to AWS Quick Setup documentation for more information.
Registry Artifact Tagging. Enables tagging and categorization of modules and providers in the private registry to improve organization, discovery, and lifecycle management. Refer to Registry Tags documentation for more information.
HCP Terraform Optional Control of Org Membership (SSO Linked Accounts). New security control requiring organization members to link their HCP SSO accounts to ensure consistent identity management and access control. Refer to Single Sign-On documentation for more information.

2026-03-26

Maximum Time-to-Live (TTL) for API Tokens. The max TTL introduces guardrails around API token lifetimes to eliminate long-lived tokens and enable stronger, more consistent security practices across your organization. Refer to Single Sign-On documentation for more information.
Stack Working Directories. Stacks can now point at a subdirectory inside the connected VCS repository using a Stack working directory setting, so multiple stack configurations can live side by side in one repository. Refer to Configure stacks for more information.

2026-03-16

Terraform Queries Use the Plan Role. Workspaces with separate plan and apply IAM roles configured for dynamic credentials now use the plan role for terraform query runs, matching the read-only nature of queries. Refer to Dynamic provider credentials for more information.

2026-03-11

Workspaces UI update. Updates to the filtering experience allow for faster and easier ways to apply and remove different combinations of filters while also knowing exactly what filters are applied to the table view.

2026-03-09

Terraform Billing Run Insights. Enhanced billing and cost tracking features provide detailed insights into Terraform run costs, resource usage, and infrastructure spend patterns to help organizations manage costs. Refer to Cost Estimation documentation for more information.

2026-02-27

Stacks Published Outputs Inspector. Stack configurations now track each published output's previous and current value across configurations. The outputs are exposed through a new stack-published-outputs API endpoint and a table on the stack configuration page that lets reviewers inspect full values via a flyout.

2026-02-06

Stricter Permissions for Organization Data Retention Policy. Editing an organization's data retention policy now requires organization owner status, manage-workspaces, or manage-projects permissions. Project-level maintain and workspace-create access no longer grant this ability. Refer to Data retention policies for more information.

2026-02-03

Speculative Plan Autoscaling. Update to the HCP Terraform Operator allows Kubernetes to intelligently scale agent pods based on pending PR-driven plans to improve performance and resource utilization. Refer to Agents documentation for more information.

2026-02-02

Project-scoped Remote State Sharing. This feature allows users to share remote state across all workspaces in a project to simplify state management in addition to existing global and specific workspace options. Refer to Remote State Sharing documentation for more information.

2026-01-29

Team Tokens Required to Disable User Tokens. To prevent administrators from locking themselves out, a user-issued token can no longer disable the organization-wide "allow user tokens" setting. Use a team token to make this change. Refer to Disable user tokens for organizations for more information.

2026-01-28

HCP Terraform - Improve Performance / Processing Time of Policies. Performance optimizations reduce policy evaluation time to enable faster plan and apply operations while maintaining security and compliance checks. Refer to Policy Enforcement documentation for more information.

2026-01-27

Login and Logout Audit Events. Email and password login and logout events are now recorded in the audit log of every organization the user belongs to. Refer to Audit trails for more information.

2026-01-06

Pre-release Terraform Versions in Workspaces. Workspaces can now select pre-release Terraform versions from the workspace settings, useful for testing upcoming releases against your real configurations. Refer to Upgrade state to a new Terraform version for more information.

2026-01-05

Organization-level Stacks Page. Organizations now have a top-level Stacks page that lists every stack across all projects, with search and pagination. The "New stack" button only offers projects where you have permission to create stacks. Refer to Create a Stack for more information.

2025-12-01

PCI DSS Policies (AWS). Ready-to-use Sentinel policy sets automatically verify AWS infrastructure against PCI DSS compliance standards to help organizations meet regulatory requirements. Refer to PCI DSS Policy Set documentation for more information.

2025-10-28

Python SDK (python-tfe). The first official, HashiCorp-supported Python client for HCP Terraform provides Pydantic-based type safety and broad API coverage to improve developer experience. Refer to Python SDK documentation for more information.

2025-10-23

Terraform MCP Server. Added support for Terraform Search and Actions to allow AI agents to discover resources and trigger Day 2 workflows. Refer to Terraform MCP Server documentation for more information.

2025-10-20

Terraform Search. Global resource visibility across all workspaces and organizations allows teams to find and audit any managed cloud resource to improve governance and discovery. Refer to Terraform Import documentation for more information.
Terraform Actions. A framework for defining and running "Day 2" task-based operations (like snapshots or health checks) outside the standard apply lifecycle to extend Terraform's capabilities. Refer to Invoke Actions documentation for more information.

2025-10-01

HCP Terraform EU Region. The launch of a dedicated European control plane supports local data residency and GDPR compliance requirements for European customers. Refer to Europe Region documentation for more information.

2025-09-30

NIST SP 800-53 Policies. A new library of pre-written Sentinel policies helps organizations automate compliance with NIST 800-53 security controls. Refer to NIST Policy Set documentation for more information.

2025-09-25

Stacks. Enables managing multiple workspaces, providers, and environments as a single unit with a new orchestration engine to simplify complex infrastructure management. Refer to Stacks documentation for more information.
Cloudability Run Task. A new "Run Task" integration with IBM/Apptio Cloudability provides proactive AWS cost governance during the plan phase to help control infrastructure costs. Refer to Cloudability documentation for more information.

2025-09-24

Terraform MCP Server v0.3.0. Version 0.3.0 adds support for workspace management, private registries, and triggering runs via AI agents to expand automation capabilities. Refer to GitHub Releases for more information.

2025-09-04

ServiceNow Catalog. Introduces native approval workflow support within the ServiceNow Service Catalog integration for HCP Terraform to streamline change management processes. Refer to ServiceNow Integration documentation for more information.

2025-08-20

TFE / Agents on ARM. Native support for ARM64 architecture allows self-hosted agents and TFE instances to run on Graviton and other ARM chips to provide more deployment options and potential cost savings. Refer to Agents documentation for more information.

2025-05-02

HCP Waypoint – GitHub Actions Support. Enables triggering Waypoint Actions directly from GitHub Actions to bridge CI/CD with internal developer platform workflows. Refer to Waypoint Actions documentation for more information.