How to fix the current package doesnt match any of the checksums previously recorded in the dependency lock file in Terraform

Check that your project has a .terraform.lock.hcl file. This file should be committed to your version control system. If it doesn't exist or was accidentally deleted, regenerate it by running terraform init.

Run the terraform providers lock command with flags for all platforms your team uses. For example, to support macOS (Intel), macOS (ARM), and Linux:

terraform providers lock -platform=darwin_amd64 -platform=darwin_arm64 -platform=linux_amd64 -platform=linux_arm64

This command updates your .terraform.lock.hcl to include checksums for all specified platforms. After running this, commit the updated lock file to version control.

If terraform providers lock isn't available or you need to update to newer provider versions, use terraform init -upgrade. This tells Terraform to ignore the existing lock file, download the latest compatible versions matching your constraints, and generate a new lock file with fresh checksums:

terraform init -upgrade

After running this, always commit the updated .terraform.lock.hcl file to ensure your team has the same versions.

After updating the lock file using either method above, commit it to version control:

git add .terraform.lock.hcl
git commit -m 'Update Terraform lock file checksums for multi-platform support'
git push

Ensuring all team members work with the same lock file prevents future checksum mismatches.

On the machine or CI/CD system where you encountered the error, clean and reinitialize:

rm -rf .terraform/
terraform init

This clears any cached provider binaries and verifies that the new lock file works correctly.

Only use this approach if the above steps don't resolve the issue, and only in controlled environments where you fully understand the implications. Deleting the lock file removes version pinning safeguards:

rm .terraform.lock.hcl
rm -rf .terraform/
terraform init

This regenerates the lock file from scratch, but you lose the benefit of deterministic provider versions.