TFLint v0.66.0: Terraform 1.17 Support and SARIF Formatter Fix

Introduction

TFLint v0.66.0 is a small but useful maintenance release. It adds compatibility with the newly released Terraform v1.17 and fixes a formatter bug affecting SARIF output. There are no breaking changes in this release, so upgrading is low-risk for existing pipelines.

What Is New

Terraform v1.17 support

TFLint now parses and lints configurations written for Terraform v1.17 (PR #2687). If the codebase already uses v1.17 syntax or features, upgrading TFLint avoids false positives from an outdated parser.

terraform {
  required_version = ">= 1.17.0"
}

SARIF formatter fix

When outputting results in SARIF format (--format sarif), TFLint previously emitted an empty helpUri field for rules that have no documentation link. This has been fixed so helpUri is simply omitted when there is no link (PR #2688). This matters for teams feeding TFLint SARIF output into GitHub code scanning or other SARIF consumers that validate the schema strictly.

tflint --format sarif > tflint-results.sarif

Chores and docs

The rest of the release is dependency bumps (Go, golang.org/x/net, grpc, go-jose, Alpine base image) and documentation fixes, including corrected Homebrew install instructions and dead-link fixes in the config guide. None of these require action from users.

The release notes are otherwise thin beyond these two items — see the full release page for the complete changelog.

Upgrade Steps

Pin the version in CI or local tooling, then upgrade.

# Homebrew
brew upgrade tflint
 
# Manual install / CI script
curl -s https://raw.githubusercontent.com/terraform-linters/tflint/master/install_linux.sh | bash

If TFLint version is pinned in a .tflint.hcl or via an installer script, bump it to v0.66.0:

# .tflint.hcl
plugin "terraform" {
  enabled = true
  preset  = "recommended"
}

If Terraform itself is upgraded to v1.17 alongside this, update the version constraint:

terraform {
  required_version = ">= 1.17.0, < 2.0.0"
}

Then re-initialize any modules relying on plugin caching:

terraform init -upgrade

Verify

Confirm the binary version and run a quick lint to make sure nothing regressed:

tflint --version
# TFLint version 0.66.0
 
tflint --init
tflint --format sarif ./... > /tmp/tflint.sarif
cat /tmp/tflint.sarif | grep -c helpUri

If using GitHub code scanning integration, confirm the SARIF file uploads without schema validation errors.

Conclusion

TFLint v0.66.0 is a routine upgrade: Terraform v1.17 compatibility plus a minor SARIF formatter fix. Teams using SARIF-based code scanning or already on Terraform v1.17 should upgrade; everyone else can treat this as a low-priority dependency refresh.