macOS
Homebrewverified · 100%
brew install tfupdatelocal Homebrew formula metadata
MacPortsverified · 94%
sudo port install tfupdateMacPorts ports tree · sysutils/tfupdate/Portfile · source: api.github.com
brew
Install tfupdate with Homebrew, apk, MacPorts, Nix, zypper
Update version constraints in your Terraform configurations. Version 0.10.0 via Homebrew; verified 2026-07-03.
install
Additional install commands
Linux
Alpine Linux apkverified · 92%
sudo apk add tfupdateAlpine Linux edge package indexes · tfupdate · source: dl-cdn.alpinelinux.org
Nixverified · 92%
nix profile install nixpkgs#tfupdatenixpkgs package indexes · pkgs/by-name/tf/tfupdate/package.nix · source: api.github.com
openSUSE zypperverified · 92%
sudo zypper install tfupdateopenSUSE Tumbleweed package metadata · tfupdate · source: download.opensuse.org
overview
Package summary
Update version constraints in your Terraform configurations
Project links
Commands and aliases
- tfupdate
history
Project history and usage
tfupdate is a CLI for updating version constraints in Terraform and OpenTofu configurations. Its README documents support for Terraform core, OpenTofu core, providers, modules, dependency lock files, recursive updates, and release lookups from GitHub, GitLab, the Terraform Registry, and the OpenTofu Registry.
Project history
The README explains the design motivation: Terraform estates are often split across many directories, while best practice is to pin versions of core, providers, and modules. tfupdate was written to parse configuration and update version constraints across those scattered files.
The tool later grew beyond simple constraint editing. The README documents `release` subcommands for checking versions, `lock` support for updating `.terraform.lock.hcl` without the Terraform or OpenTofu CLI, and OpenTofu registry support through `TFREGISTRY_BASE_URL`.
Adoption history
The README documents installation through Homebrew, MacPorts, compiled releases, Go install, and Docker. The input metadata also records apk, Homebrew, MacPorts, Nix, and zypper packaging.
The README explicitly suggests integrating tfupdate with CI or a scheduler to check releases daily and create pull requests automatically, and links a CircleCI example and orb.
How it is used
Package users run subcommands such as `tfupdate terraform`, `tfupdate opentofu`, `tfupdate provider`, `tfupdate module`, `tfupdate release`, and `tfupdate lock`. The recursive flag lets teams update many directories in one pass, which is the core package-nerd use case.
For lock files, tfupdate can download provider packages, calculate hashes, and cache calculated values in memory, which the README calls out as a performance advantage when updating multiple directories recursively.
Why package nerds care
tfupdate is a dependency-maintenance tool for infrastructure code. It fills the same niche as language package updaters, but for Terraform/OpenTofu version constraints, provider locks, and module versions.
Its support across several Unix package managers makes it useful in automated developer environments where Terraform version bumps are handled by scheduled jobs rather than manual edits.
Timeline
- 2024-08-01: The GitHub releases page lists tfupdate v0.8.4.
- 2025-05-03: The GitHub releases page lists tfupdate v0.9.0.
- 2026-05-05: The GitHub releases page lists tfupdate v0.9.4.
- 2026: The input metadata records tfupdate packaging in apk, Homebrew, MacPorts, Nix, and zypper.
Related projects
- tfupdate works with Terraform, OpenTofu, GitHub and GitLab releases, Terraform Registry modules and providers, OpenTofu Registry data, CircleCI automation, and `.terraform.lock.hcl`.
Sources
- https://github.com/minamijoyo/tfupdate README
- https://github.com/minamijoyo/tfupdate/releases
- source_facts.package-manager
security posture
Risk level: green
narrow executable package without higher-risk signals.
Risk classifier
green risk · low confidence · appliance
Why
- narrow executable package without higher-risk signals
Signals
- metadata:no-higher-risk-signals
Install behavior
- No Homebrew post-install hook is recorded in formula metadata.
- Homebrew bottle metadata is available for 6 platform targets.
- Build metadata lists 1 build dependencies.
Recommended review
Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.
executables
Installed executables
| Command | Kind | Exposure | Note |
|---|---|---|---|
tfupdate | cli | global executable |
freshness
Version and freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
page generated2026-07-08
manager version0.10.0
manager updated2026-07-03
local dataok
upstreamcurrent
latest detectedv0.10.0
https://github.com/minamijoyo/tfupdate
- okNo freshness warnings were generated.
install metadata
Package metadata
| Package key | brew:tfupdate |
|---|---|
| Version | 0.10.0 |
| Package manager | Homebrew |
| Package manager page | https://formulae.brew.sh/formula/tfupdate |
| Homepage | https://github.com/minamijoyo/tfupdate |
| Repository | https://github.com/minamijoyo/tfupdate |
| Upstream docs | https://github.com/minamijoyo/tfupdate#readme |
| License | MIT |
| Source archive | https://github.com/minamijoyo/tfupdate/archive/refs/tags/v0.10.0.tar.gz |
| Last updated | 2026-07-03T04:12:50Z |
| Pulse | updated |
| Build dependencies | go |
| Bottle | available (on arm64_linux, arm64_sequoia, arm64_sonoma, arm64_tahoe, sonoma, x86_64_linux) |
| Homebrew post-install | not defined |
| Service | none declared |
registry facts
Source database details
| Source Database | Homebrew formula API |
|---|---|
| Tap | homebrew/core |
| Full Name | tfupdate |
| Version Scheme | 0 |
| Revision | 0 |
| Head Version | HEAD |
| Bottle Stable Root URL | https://ghcr.io/v2/homebrew/core |
| Deprecated | no |
| Disabled | no |
| Keg Only | no |
| URL Keys |
|
source database matches
Other package-manager records
Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.
Nix95%
tfupdate
nix profile install nixpkgs#tfupdate- normalized package name match
- Matched by: Tfupdate
apk95%
tfupdate 0.8.2-r16
Update version constraints in your Terraform configurations
https://github.com/minamijoyo/tfupdate
sudo apk add tfupdate- License: MIT
- Architecture: x86_64
- Source Package: tfupdate
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Tfupdate
apk95%
tfupdate-doc 0.8.2-r16
Update version constraints in your Terraform configurations (documentation)
https://github.com/minamijoyo/tfupdate
sudo apk add tfupdate-doc- License: MIT
- Architecture: x86_64
- Source Package: tfupdate
- normalized package name match
- Matched by: Tfupdate
zypper95%
tfupdate 0.9.4-1.1
Update version constraints in your Terraform configurations
https://github.com/minamijoyo/tfupdate
sudo zypper install tfupdate- License: MPL-2.0
- Category: Unspecified
- Architecture: x86_64
- Source Package: tfupdate
- 1 dependencies
- 1 provides
- normalized package name match
- Matched by: Tfupdate
MacPorts95%
tfupdate
sudo port install tfupdate- normalized package name match
- Matched by: Tfupdate
source trail
Generated from repository data
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
Combined YAML source
View the package source record on GitHub.
Used sources
- Geiger risk classifier
- Nucleus package database
- av.db category and tag curation
- cross-ecosystem install command graph
- curated package history
- external package-manager database matches
- package relationship graph
- package version freshness
- package-page enrichment