Update dependency opentofu to v1.12.5

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
opentofu	tools	patch	1.12.2 → 1.12.5

---

Release Notes

opentofu/opentofu (opentofu)

v1.12.5

Compare Source

SECURITY ADVISORIES:

• Previous releases in the v1.12 series could be affected by several vulnerabilities:

  • The Encrypted Client Hello implementation (which is used by OpenTofu through the go stdlib) would leak the pre-shared key identities during the handshake,
    allowing a passive network observer who can collect handshakes to de-anonymize the hostname of the server, even when ECH was being used.

  This is fixed now by (#​4363)

BUG FIXES:

• Fixed bug where implicit moves and provider address changes would incorrectly cause providers.MovedResourceState to be used in place of providers.UpgradeResourceState (#​4375)

Full Changelog: opentofu/opentofu@v1.12.4...v1.12.5

v1.12.4

Compare Source

BUG FIXES:

• tofu plan -out no longer fails when the plan includes a resource with lifecycle { destroy = false } that needs replacement, which previously errored with invalid change action ForgetThenCreate. (#​4324)
• Moved block now correctly compares provider source addresses. (#​4280)[#​4280]
• Correct Source Provider Address now passed into Provider MoveResource requests. (#​4355)[#​4355]

Full Changelog: opentofu/opentofu@v1.12.3...v1.12.4

v1.12.3

Compare Source

BUG FIXES:

• Properly handle TF_ENCRYPTION with only blank spaces. (#​4265)
• The value resulted from the lifecycle.enabled evaluation now has its deprecation marks processed correctly (#​4162)
• Update documentation to clarify the usage restriction of ephemeral values in lifecycle.enabled. (#​4220)
• tofu console -lock=false now works as intended. (#​4291)

SECURITY ADVISORIES:

• Previous releases in the v1.12 series could read an arbitrary file during certain git operations via a maliciously crafted URL (#​4293)
  • Advisory: GHSA-q7j3-v8qv-22vq

Full Changelog: opentofu/opentofu@v1.12.2...v1.12.3

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.