terragrunt 0.98.0

[BrewTestBot]

Created by brew bump

---

Created with brew bump-formula-pr.

Details

release notes

## ✨ New Features
The --filter flag now implies --all
When using the --filter flag, it is now optional to also supply --all. Terragrunt will automatically set the --all flag when you use the --filter flag.
🐛 Bug Fixes
Plan files are now correctly passed as CLI arguments for destroy operations
A bug in the logic used for injecting plan files as arguments to the apply -destroy command resulted in the plan file argument being injected prior to the -auto-approve flag, which is disallowed in OpenTofu/Terraform. That bug has been fixed.
GCS bootstrap authentication fixed
A bug in the authentication logic for GCS backends prevented successful bootstrapping of backends when using the --auth-provider-cmd flag. That bug has been fixed.
Git-based and Graph-based combinations fixed
A bug in the discovery logic for Git worktrees prevented using a combination of Git-based and Graph-based filter expressions in the same filter from working correctly.
e.g.
 terragrunt find --filter '...^[HEAD^...HEAD]...'
That bug has been fixed.
Proper exit codes returned from -detailed-exitcode
A bug in the logic for handling retries combined with the OpenTofu/Terraform plan -detailed-exitcode and the Terragrunt --all flag resulted in the wrong exit code being returned when a failed run succeeded on a subsequent retry with a status code related to drift (exit code 2).
That logic has been corrected, and properly follows the rules outlined under the --all flag:
When not using -detailed-exitcode:

Terragrunt will return the highest exit code of all runs performed.

When using -detailed-exitcode:

If any run has an exit code that is 1, or greater than 2, run --all will return the highest exit code.
Otherwise, if any run returns an exit code of 2, run --all will return an exit code of 2.
Otherwise, run --all will return an exit code of 0.

OpenTelemetry traces in console mode fixed
A bug in OpenTelemetry trace exporting prevented traces from being exported when in console mode. That bug has been fixed.
Negation logic fixed
A bug in how negation logic was handled in filter expressions prevented successful exclusion of stacks from generation and over excluded units in runs when users only supplied negative filters.
⚙️ Process Improvements
GPG Signing
Release artifacts are now signed using both GPG and Cosign.
To start performing signature validation on assets, in addition to the asset you’re downloading from the GitHub releases page, you’ll want to download some of the following files:
VERSION="v0.XX.X"  # Replace with actual version of Terragrunt you are installing
curl -LO "https://github.com/gruntwork-io/terragrunt/releases/download/${VERSION}/SHA256SUMS"

# For GPG:
curl -LO "https://github.com/gruntwork-io/terragrunt/releases/download/${VERSION}/SHA256SUMS.gpgsig"

# For Cosign:
curl -LO "https://github.com/gruntwork-io/terragrunt/releases/download/${VERSION}/SHA256SUMS.sig"
curl -LO "https://github.com/gruntwork-io/terragrunt/releases/download/${VERSION}/SHA256SUMS.pem"
To verify with GPG:
curl -s https://gruntwork.io/.well-known/pgp-key.txt | gpg --import

gpg --verify SHA256SUMS.gpgsig SHA256SUMS

sha256sum -c SHA256SUMS --ignore-missing
To verify with Cosign:
cosign verify-blob SHA256SUMS \
  --signature SHA256SUMS.sig \
  --certificate SHA256SUMS.pem \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  --certificate-identity-regexp "github.com/gruntwork-io/terragrunt"

sha256sum -c SHA256SUMS --ignore-missing
Terragrunt installation documentation will be updated soon to recommend this on every installation, the Gruntwork maintained asdf plugin will be updated to do this automatically, and all Gruntwork recommended mechanisms for installing Terragrunt will support this going forward.
Upgrade to Go 1.25.5
The Golang toolchain used to build Terragrunt has been upgraded to v1.25.5.
Package reorganization
All top-level Golang packages in the Terragrunt project have been migrated to either internal or pkg. The distinction between the two indicates maintainer expectations as to whether either are being actively being consumed as libraries by third parties (with internal being impossible to import without vendoring in go modules).
Note that this does not indicate any backwards compatibility guarantee for usage of the Terragrunt as a library. It will remain unstable, and can change at any time.
What's Changed

feat: Automatically enable -all when using -filter by @yhakbar in feat: Automatically enable --all when using --filter gruntwork-io/terragrunt#5265
fix: Fixed passing of existing destroy plan files by @denis256 in bug: Fixed passing of existing destroy plan files gruntwork-io/terragrunt#5327
fix: Fixing auth in GCS bootstrap by @yhakbar in fix: Fixing auth in GCS bootstrap gruntwork-io/terragrunt#5342
fix: Fixing Git-expression + Graph-expression filter combinations by @yhakbar in fix: Fixing Git-expression + Graph-expression filter combinations gruntwork-io/terragrunt#5355
fix: Fixing detailed-exitcode by @yhakbar in fix: Fixing -detailed-exitcode gruntwork-io/terragrunt#5362
fix: traces output in console mode by @denis256 in fix: traces output in console mode gruntwork-io/terragrunt#5329
fix: Cleanup from #5342 by @yhakbar in fix: Cleanup from #5342 gruntwork-io/terragrunt#5356
fix: Fixing negation logic by @yhakbar in fix: Fixing negation logic gruntwork-io/terragrunt#5368
docs: Adding ambassadors by @karlcarstensen in Adding ambassadors gruntwork-io/terragrunt#5330
docs: Typo by @karlcarstensen in Typo gruntwork-io/terragrunt#5331
docs: Fix link to Dallas Slaughter by @karlcarstensen in Fix link to Dallas Slaughter gruntwork-io/terragrunt#5370
chore: Dropping more utils by @yhakbar in chore: Dropping more utils gruntwork-io/terragrunt#5300
chore: Lint everything when linting by @yhakbar in chore: Lint everything when linting gruntwork-io/terragrunt#5344
chore: Remove RunTarget from options by @yhakbar in chore: Remove RunTarget from options gruntwork-io/terragrunt#5264
chore: Undo -all and -graph wrap by @yhakbar in chore: Undo --all and --graph wrap gruntwork-io/terragrunt#5257
chore: move engine to internal package by @denis256 in chore: move engine to internal package gruntwork-io/terragrunt#5340
chore: scripts directories cleanup by @denis256 in chore: scripts directories cleanup gruntwork-io/terragrunt#5343
chore: Addressing #5355 feedback by @yhakbar in fix: Addressing #5355 feedback gruntwork-io/terragrunt#5363
chore: release files signing by @denis256 in feat: release files signing gruntwork-io/terragrunt#5291
chore: pkg packages organisation by @denis256 in chore: pkg packages organisation gruntwork-io/terragrunt#5358
chore: internal packages update by @denis256 in chore: internal packages update gruntwork-io/terragrunt#5360
chore: moved cli package to internal/cli by @denis256 in chore: moved cli package to internal/cli gruntwork-io/terragrunt#5345
chore: go 1.25.5 version update by @denis256 in chore: go 1.25.5 version update gruntwork-io/terragrunt#5339
build(deps): bump @smithy/config-resolver from 4.1.4 to 4.4.5 in /docs-starlight/src/fixtures/terralith-to-terragrunt/app/best-cat by @dependabot[bot] in build(deps): bump @smithy/config-resolver from 4.1.4 to 4.4.5 in /docs-starlight/src/fixtures/terralith-to-terragrunt/app/best-cat gruntwork-io/terragrunt#5328

Full Changelog: gruntwork-io/terragrunt@v0.97.2...v0.98

View the full release notes at https://github.com/gruntwork-io/terragrunt/releases/tag/v0.98.0.

---

[github-actions]

🤖 An automated task has requested bottles to be published to this PR.

Caution

Please do not push to this PR branch before the bottle commits have been pushed, as this results in a state that is difficult to recover from. If you need to resolve a merge conflict, please use a merge commit. Do not force-push to this PR branch.