Increasingly popular Terraform fork OpenTofu has pushed out release 1.10 – with new support for external encryption key providers, native S3 locking, OCI registry support, advanced resource migration, and more.

Open Container Initiative registry support lets users deploy OCI infrastructure (e.g. Harbor or Amazon ECR) to store and distribute modules and providers privately, sign, verify, and version artifacts and more, as the project works to boost security and enterprise-readiness.

Multiple organisations launched OpenTofu after the August 2023 decision by Terraform guardian Hashicorp to switch to a less permissive software licence. The Linux Foundation project reached GA in January 2024. 

(OpenTofu and Terraform alike are Infrastructure-as-Code or "IAC" tools for building, changing, and managing infrastructure across platforms like public clouds, private clouds, and SaaS services. They let users define a desired infrastructure state in configuration files.)

It has been downloaded ~10 million times from GitHub alone and has been adopted by the likes of Oracle for its EBS Cloud Manager. Harness, Scalr and Spacelift are among the project’s key enterprise supporters.

OpenTofu 1.10 adds support for external key providers, allowing integration with users’ preferred secret management tools (it names AWS KMS, GCP KMS, and the OpenSSF’s “OpenBAO” project; users can encrypt state and plan files at rest for local storage and when using a backend..)

Join peers following The Stack on LinkedIn

Users can also now manage state across multiple projects in a single PostgreSQL instance in what Spacelift’s Flavius Dinu described as “cleaner, centralized management of IaC at scale… great for platform teams.”

The full release notes are here.

Spacelift developer advocate Dinu commented: “The project now has a thriving ecosystem of over 3,900 providers and over 23,600 modules, making it easy to build and manage infrastructure across every cloud platform with confidence. We see this 1.10 release as yet another milestone proving that community-led innovation is thriving.”

He added: “On April 23, 2025, OpenTofu officially joined the Cloud Native Computing Foundation (CNCF) as a Sandbox project. This isn’t just symbolic; it reflects the project’s strong foundation in open governance and commitment to being community-owned and vendor-neutral. This is a huge reassurance for teams looking for stability and independence…” 

The link has been copied!