From e8f8490fdd8b7f0e0d7693cd95ca6d2c45f4f8db Mon Sep 17 00:00:00 2001
From: Alex English <alex.english80@gmail.com>
Date: Sat, 29 Aug 2026 14:52:19 -0700
Subject: [PATCH] Pin Terraform to 1.16 in CI

---
 terraform/backend.tf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/terraform/backend.tf b/terraform/backend.tf
index 2e2d9c6..46f0b35 100644
--- a/terraform/backend.tf
+++ b/terraform/backend.tf
@@ -1,4 +1,9 @@
 terraform {
+  // Pins major and minor; patch releases are still picked up. Without this the
+  // dflook plan/apply actions take whatever the latest Terraform release is, so
+  // CI silently upgraded itself -- state has been written by 1.7 through 1.16.
+  // This line alone chooses the CI Terraform version.
+  required_version = "~> 1.16.0"
   backend "s3" {
   }
 }