pkg.soopen package index

brew / rank 2498

Install tfupdate with Homebrew, apk, MacPorts, Nix, zypper

Update version constraints in your Terraform configurations. Version 0.10.2 via Homebrew; verified 2026-07-26. Also installable with nix: nix profile install nixpkgs#tfupdate.

Install commandSecurity notes

install

Additional install commands

macOS

Homebrewverified · 100%
brew install tfupdate

local Homebrew formula metadata

MacPortsverified · 94%
sudo port install tfupdate

MacPorts ports tree · sysutils/tfupdate/Portfile · source: api.github.com

Linux

Alpine Linux apkverified · 92%
sudo apk add tfupdate

Alpine Linux edge package indexes · tfupdate · source: dl-cdn.alpinelinux.org

Nixverified · 92%
nix profile install nixpkgs#tfupdate

nixpkgs package indexes · pkgs/by-name/tf/tfupdate/package.nix · source: api.github.com

openSUSE zypperverified · 92%
sudo zypper install tfupdate

openSUSE Tumbleweed package metadata · tfupdate · source: download.opensuse.org

overview

Package summary

Update version constraints in your Terraform configurations

Commands and aliases

  • tfupdate

history

Project history and usage

tfupdate is a CLI for updating version constraints in Terraform and OpenTofu configurations. Its README documents support for Terraform core, OpenTofu core, providers, modules, dependency lock files, recursive updates, and release lookups from GitHub, GitLab, the Terraform Registry, and the OpenTofu Registry.

Project history

The README explains the design motivation: Terraform estates are often split across many directories, while best practice is to pin versions of core, providers, and modules. tfupdate was written to parse configuration and update version constraints across those scattered files.

The tool later grew beyond simple constraint editing. The README documents `release` subcommands for checking versions, `lock` support for updating `.terraform.lock.hcl` without the Terraform or OpenTofu CLI, and OpenTofu registry support through `TFREGISTRY_BASE_URL`.

Adoption history

The README documents installation through Homebrew, MacPorts, compiled releases, Go install, and Docker. The input metadata also records apk, Homebrew, MacPorts, Nix, and zypper packaging.

The README explicitly suggests integrating tfupdate with CI or a scheduler to check releases daily and create pull requests automatically, and links a CircleCI example and orb.

How it is used

Package users run subcommands such as `tfupdate terraform`, `tfupdate opentofu`, `tfupdate provider`, `tfupdate module`, `tfupdate release`, and `tfupdate lock`. The recursive flag lets teams update many directories in one pass, which is the core package-nerd use case.

For lock files, tfupdate can download provider packages, calculate hashes, and cache calculated values in memory, which the README calls out as a performance advantage when updating multiple directories recursively.

Why package nerds care

tfupdate is a dependency-maintenance tool for infrastructure code. It fills the same niche as language package updaters, but for Terraform/OpenTofu version constraints, provider locks, and module versions.

Its support across several Unix package managers makes it useful in automated developer environments where Terraform version bumps are handled by scheduled jobs rather than manual edits.

Timeline

  • 2024-08-01: The GitHub releases page lists tfupdate v0.8.4.
  • 2025-05-03: The GitHub releases page lists tfupdate v0.9.0.
  • 2026-05-05: The GitHub releases page lists tfupdate v0.9.4.
  • 2026: The input metadata records tfupdate packaging in apk, Homebrew, MacPorts, Nix, and zypper.

Related projects

  • tfupdate works with Terraform, OpenTofu, GitHub and GitLab releases, Terraform Registry modules and providers, OpenTofu Registry data, CircleCI automation, and `.terraform.lock.hcl`.

security posture

Risk level: green

narrow executable package without higher-risk signals.

Risk classifier

green risk · low confidence · appliance

Why

  • narrow executable package without higher-risk signals

Signals

  • metadata:no-higher-risk-signals

Install behavior

  • No Homebrew bottle metadata was recorded.

Recommended review

Before unattended agent use, check whether the tool reads plaintext credentials, writes remote state, publishes artifacts, or shells out to plugins.

executables

Installed executables

CommandKindExposureNote
tfupdateexecutableindexed executableDiscovered from the local executable index.

freshness

Version and freshness

These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.

page generated2026-08-03
manager version0.10.2
manager updated2026-07-26
local dataunknown
upstreamnot available
latest detectednot detected
  • okNo freshness warnings were generated.

install metadata

Package metadata

Package keybrew:tfupdate
Version0.10.2
Package managerHomebrew
Homepagehttps://github.com/minamijoyo/tfupdate
Repositoryhttps://github.com/minamijoyo/tfupdate
Last updated2026-07-26T00:50:40+02:00
Pulseupdated
Bottlenot recorded
Servicenone declared

source database matches

Other package-manager records

Matches are pulled from external package-manager indexes and kept separate from local Automic Vault package links.

Nix95%

tfupdate

nix profile install nixpkgs#tfupdate
  • normalized package name match
  • Matched by: Tfupdate
nixpkgs package indexes · api.github.com · nixpkgs package indexes: pkgs/by-name/tf/tfupdate/package.nix from https://api.github.com/repos/NixOS/nixpkgs/git/trees/master?recursive=1
apk95%

tfupdate 0.8.2-r17

Update version constraints in your Terraform configurations

https://github.com/minamijoyo/tfupdate

sudo apk add tfupdate
  • License: MIT
  • Architecture: x86_64
  • Source Package: tfupdate
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Tfupdate
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tfupdate from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
apk95%

tfupdate-doc 0.8.2-r17

Update version constraints in your Terraform configurations (documentation)

https://github.com/minamijoyo/tfupdate

sudo apk add tfupdate-doc
  • License: MIT
  • Architecture: x86_64
  • Source Package: tfupdate
  • normalized package name match
  • Matched by: Tfupdate
Alpine Linux edge package indexes · dl-cdn.alpinelinux.org · Alpine Linux edge package indexes: tfupdate-doc from https://dl-cdn.alpinelinux.org/alpine/edge/testing/x86_64/APKINDEX.tar.gz
zypper95%

tfupdate 0.10.2-1.2

Update version constraints in your Terraform configurations

https://github.com/minamijoyo/tfupdate

sudo zypper install tfupdate
  • License: MPL-2.0
  • Category: Unspecified
  • Architecture: x86_64
  • Source Package: tfupdate
  • 1 dependencies
  • 1 provides
  • normalized package name match
  • Matched by: Tfupdate
openSUSE Tumbleweed package metadata · download.opensuse.org · openSUSE Tumbleweed package metadata: tfupdate from https://download.opensuse.org/tumbleweed/repo/oss/repodata/50b07339cb64c8ed4091bdbabddadc1ff5737b090e478818a195b40d8a3292861a879139b4a3987c31109699fde9fbf4a716367ddf4eef77da75f96e3193d6ed-primary.xml.zst
MacPorts95%

tfupdate

sudo port install tfupdate
  • normalized package name match
  • Matched by: Tfupdate
MacPorts ports tree · api.github.com · MacPorts ports tree: sysutils/tfupdate/Portfile from https://api.github.com/repos/macports/macports-ports/git/trees/master?recursive=1

package graph

Links come from deterministic package relationships, av.db category and tag curation, ecosystem matches, and package hub membership.

source trail

Generated from repository data

This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.

Used sources

  • Geiger risk classifier
  • cross-ecosystem install command graph
  • curated package history
  • external package-manager database matches
  • pkg.so package database
  • pkgdb category and tag curation