Commit Graph
19006 Commits
Author SHA1 Message Date
Tanmay Jain b834f6403c security: drop x/crypto/openpgp by upgrading go-github v33 -> v75 2026-07-10 11:08:52 +05:30
dependabot[bot] e64148cb81 build(deps): bump golang.org/x/net in /packer_test/common/plugin_tester (#13664)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-version: 0.55.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 12:43:52 +05:30
dependabot[bot] 7ee518a021 build(deps): bump golang.org/x/crypto (#13672)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.47.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.47.0...v0.52.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.52.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 12:38:32 +05:30
Tanmay Jain b233fff1e8 FEAT: Add continue_on_error option to HCL2 provisioner blocks (#13674) 2026-07-09 12:27:18 +05:30
Tanmay Jain 8b304b2b7f FEAT: Add rfc3339_parse and unix_timestamp_parse HCL functions (#13669) 2026-07-08 16:01:46 +05:30
Tanmay Jain b0451d400d Updated Go Modules (#13673) 2026-07-08 15:25:35 +05:30
Tanmay Jain 9dc75dc66c core/hcl2: support optional() attributes in variable object types (#13670) 2026-07-08 15:12:16 +05:30
eshan-tripathi d5e6ccb165 Merge pull request #13671 from hashicorp/remove-old-website
chore: remove website, fix:references
2026-07-08 11:56:48 +05:30
eshan-tripathi ba86798d7b fix: CONTRIBUTING.md 2026-07-07 14:26:50 +05:30
eshan-tripathi d2f2baa4b4 chore: remove website, fix:references 2026-07-07 12:21:06 +05:30
Tanmay Jain b95fa4be03 chore: added an AGENTS.md (#13668) 2026-07-06 11:51:43 +05:30
Hari 2f86cc4001 chore(release): update changelog and version to 1.15.4 (#13651) 2026-06-03 18:27:30 +05:30
Hari 5ed27a3490 fix: update build constraints to support arm architecture on FreeBSD (#13650) 2026-06-03 16:52:34 +05:30
Hari 5c431e0e44 Removes Syft binary download/handling from the HCP SBOM provisioner (#13636) 2026-06-03 15:23:57 +05:30
hashicorp-copywrite[bot] abc4bfffce Merge pull request #13632 from hashicorp/compliance/add-headers
[COMPLIANCE] Add/Update Copyright Headers
2026-06-03 14:37:46 +05:30
Tanmay Jain 683af0c935 Merge pull request #13649 from hashicorp/dependabot/github_actions/actions-f333ae29b9
build(deps): bump the actions group across 1 directory with 7 updates
2026-06-03 12:36:00 +05:30
dependabot[bot] a3f194a8d1 build(deps): bump the actions group across 1 directory with 7 updates
Bumps the actions group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `4.3.1` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4.0.2` | `4.3.1` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `1.27.0` | `1.27.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.6.0` | `4.6.2` |
| [actions/github-script](https://github.com/actions/github-script) | `7.0.1` | `7.1.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact) | `4.1.8` | `4.3.0` |
| [ncipollo/release-action](https://github.com/ncipollo/release-action) | `1.15.0` | `1.21.0` |



Updates `actions/checkout` from 4.2.2 to 4.3.1
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...34e114876b0b11c390a56381ad16ebd13914f8d5)

Updates `aws-actions/configure-aws-credentials` from 4.0.2 to 4.3.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e3dd6a429d7300a6a4c196c26e071d42e0343502...7474bc4690e29a8392af63c5b98e7449536d5c3a)

Updates `slackapi/slack-github-action` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/slackapi/slack-github-action/releases)
- [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md)
- [Commits](https://github.com/slackapi/slack-github-action/compare/37ebaef184d7626c5f204ab8d3baff4262dd30f0...fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3)

Updates `actions/upload-artifact` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...ea165f8d65b6e75b540449e92b4886f43607fa02)

Updates `actions/github-script` from 7.0.1 to 7.1.0
- [Release notes](https://github.com/actions/github-script/releases)
- [Commits](https://github.com/actions/github-script/compare/60a0d83039c74a4aee543508d2ffcb1c3799cdea...f28e40c7f34bde8b3046d885e986cb6290c5673b)

Updates `actions/download-artifact` from 4.1.8 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases)
- [Commits](https://github.com/actions/download-artifact/compare/fa0a91b85d4f404e444e00e005971372dc801d16...d3f86a106a0bac45b974a628896c90dbdf5c8093)

Updates `ncipollo/release-action` from 1.15.0 to 1.21.0
- [Release notes](https://github.com/ncipollo/release-action/releases)
- [Commits](https://github.com/ncipollo/release-action/compare/cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87...339a81892b84b4eeb0f6e744e4574d79d0d9b8dd)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: slackapi/slack-github-action
  dependency-version: 1.27.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/upload-artifact
  dependency-version: 4.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: actions/github-script
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: actions/download-artifact
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: ncipollo/release-action
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-06-03 06:56:15 +00:00
Tanmay Jain 219be22e1a Merge pull request #13647 from hashicorp/module-update
Update Go version and refresh dependencies
2026-06-03 12:22:05 +05:30
Tanmay Jain 958d1a8315 Update Go version and refresh dependencies 2026-06-03 12:13:48 +05:30
mukulmohan177 cddfaf5d03 Merge pull request #13645 from hashicorp/authorization-bypass
upgraded go-git and crypto version
2026-06-03 08:26:34 +05:30
Taru Garg 9c9ad59981 Update Go version from 1.25.9 to 1.25.10 (#13646) 2026-06-02 18:11:25 +05:30
Tanmay Jain 46392d6e9f Merge pull request #13640 from hashicorp/dependabot/go_modules/github.com/hashicorp/packer-plugin-sdk-0.6.9
build(deps): bump github.com/hashicorp/packer-plugin-sdk from 0.6.7 to 0.6.9
2026-06-02 14:59:17 +05:30
sanyaraj2424 277b49a248 upgraded crypto version 2026-06-01 10:38:00 +05:30
sanyaraj2424 14b14d0220 upgraded go-git version 2026-05-29 11:58:45 +05:30
dependabot[bot] 4a5aa7cfb1 build(deps): bump github.com/hashicorp/packer-plugin-sdk
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.6.7 to 0.6.9.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.6.7...v0.6.9)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
  dependency-version: 0.6.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-05-26 01:24:44 +00:00
Taru Garg 287f5e33fb Merge pull request #13638 from taru-garg-hashicorp/taru-garg-hashicorp/bom-fix
deps(cyclonedx-go): Bump cyclonedx-go dependency to 0.11.0
2026-05-22 17:34:15 +05:30
Tanmay Jain 342fc1c554 Merge pull request #13625 from hashicorp/cut-release-1.15.3
version: cut release v1.15.3
2026-04-27 14:34:55 +05:30
Tanmay JainandCopilot 08fe3137c6 version: cut release v1.15.3
Co-authored-by: Copilot <[email protected]>
2026-04-27 14:28:47 +05:30
Tanmay Jain f4116306f8 Merge pull request #13624 from hashicorp/bucket-fix
Skips bucket update when metadata matches current state
2026-04-27 14:20:21 +05:30
Tanmay Jain 072dfdee9e Skips bucket update when metadata matches current state
Prevents unnecessary update operations by checking if the
bucket's description and labels already match the requested
values before issuing an update.

Improves efficiency and avoids redundant API calls.
2026-04-27 14:07:59 +05:30
Hari 48f5e6becc fix(deps): update github.com/Azure/go-ntlmssp to v0.1.1 (#13622) 2026-04-24 13:15:53 +05:30
dependabot[bot] 68a5acd3eb build(deps): bump github.com/Azure/go-ntlmssp (#13620)
Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) from 0.0.0-20200615164410-66371956d46c to 0.1.1.
- [Release notes](https://github.com/Azure/go-ntlmssp/releases)
- [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1)

---
updated-dependencies:
- dependency-name: github.com/Azure/go-ntlmssp
  dependency-version: 0.1.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 12:44:55 +05:30
HariandCopilot 9ca74f740b Bump version to 1.15.2 and update changelog for release (#13618)
* Bump version to 1.15.2 and update changelog for release

* Cleanup changelog by removing outdated entries and sensitive data ref… (#13619)

* Cleanup changelog by removing outdated entries and sensitive data references

* Clarify provisioner behavior in changelog to improve understanding of lifecycle enforcement

* Update changelog to clarify provisioner lifecycle enforcement and remove outdated bug fix entry

Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: Copilot <[email protected]>

---------

Co-authored-by: Copilot <[email protected]>
2026-04-24 12:13:21 +05:30
Hari 6a8612cedd Update error message in TestSourceNotExisting for clarity (#13616) 2026-04-23 16:44:36 +05:30
Tanmay Jain 627c9f1d35 Merge pull request #13615 from hashicorp/go-fix
Update Go version and refresh dependencies
2026-04-21 11:44:16 +05:30
Tanmay Jain c45722b902 Update Go version and refresh dependencies
Aligns project with Go 1.25.9 and updates several dependencies
to incorporate bug fixes, security enhancements, and improved
compatibility across packages.

Ensures continued stability and support for the latest upstream
features by tracking current releases.
2026-04-21 11:30:06 +05:30
Tanmay Jain fae5ba683c Merge pull request #13614 from hashicorp/go-update-1.25.9
Bumps Go version to 1.25.9 for compatibility
2026-04-21 11:13:04 +05:30
Tanmay Jain 206063490f Bumps Go version to 1.25.9 for compatibility 2026-04-21 11:08:11 +05:30
HariandHari Om eee3805c06 Feature/enforced provisioner (#13591)
* added the parser for the enforced block

* Enhance enforced provisioner parsing to support HCL and JSON formats

- Updated ParseProvisionerBlocks to handle both HCL and JSON syntax, including legacy JSON format.

- Added comprehensive test cases for JSON provisioner parsing.

- Improved ExtractBuildProvisionerHCL to merge inline commands from shell provisioners.

- Enhanced logging for enforced block operations in HCP Packer.

* Remove PublishEnforcedBlocks function from Bucket struct

* Remove ExtractBuildProvisionerHCL function and unused imports

* Reverted the version upgrade

* Added the internal-sdk for the enforcedProvsioner api changes

* Enhance enforced provisioner handling and error reporting

- Update error handling in FetchEnforcedBlocks to return detailed errors instead of warnings.
- Modify GetCoreBuildProvisionerFromBlock to accept build name for overrides.
- Add tests for FetchEnforcedBlocks to ensure correct behavior and error handling.
- Implement diagnostics for unsupported legacy JSON templates.

* Implement enforced provisioner parsing and handling

- Introduced a new package `enforcedparser` to handle parsing of enforced provisioner blocks from HCL and JSON formats.

- Refactored existing code to utilize the new `ParseProvisionerBlocks` function from the `enforcedparser` package.

- Updated `GetCoreBuildProvisionerFromEnforcedBlock` method to convert enforced provisioner blocks into core build provisioners.

- Enhanced error handling and logging during the parsing process.

- Added tests for the new parsing functionality and ensured existing tests were updated to reflect changes.

- Modified `InjectEnforcedProvisioners` method in JSON registry to utilize the new parsing logic.

* Add test case for -skip-enforcement flag in BuildArgs

* Refactor sensitive variable handling in provisioners and add related tests

* Refactor enforced provisioner handling: remove internal parser, update tests, and streamline API interactions

* Enhance provisioner block parsing: add error handling for invalid combinations and expand test coverage

* Remove internal SDK replacement for enforced block types in go.mod

* Update dependencies in go.mod and go.sum: bump hcp-sdk-go and packer-plugin-sdk versions, adjust syft version, and update OpenTelemetry packages

* Update hcp-sdk-go dependency to v0.172.0 in go.mod and go.sum

* Fix formatting in TestBuildCommand_ParseArgs and add newline at end of json_enforced_test.go

* Refactor testJSONRegistryWithBuilds: remove environment variable setup and streamline registry initialization

* Rename injected variable for clarity in InjectEnforcedProvisioners function

---------

Co-authored-by: Hari Om <[email protected]>
2026-04-17 14:17:28 +05:30
Hari ea4bb3d39a Merge pull request #13610 from hashicorp/vulnerablity-fixes
Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.…
2026-04-17 12:05:01 +05:30
Hari Om 8a4139f5bd Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.google.com/go/storage to v1.61.3, and aws-sdk-go-v2 packages to latest versions; includes various other dependency updates for improved stability and performance. 2026-04-17 11:44:35 +05:30
Hari 1ac5804ecb Merge pull request #13606 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/go.opentelemetry.io/otel/sdk-1.43.0
build(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /packer_test/common/plugin_tester
2026-04-17 11:35:27 +05:30
Hari df9f5b14e4 Merge pull request #13594 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/github.com/go-jose/go-jose/v4-4.1.4
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /packer_test/common/plugin_tester
2026-04-17 11:21:54 +05:30
dependabot[bot] 0861349e00 build(deps): bump go.opentelemetry.io/otel/sdk
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.41.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-08 21:07:48 +00:00
dependabot[bot] e8904e8210 build(deps): bump github.com/go-jose/go-jose/v4
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4)

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
  dependency-version: 4.1.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
2026-04-03 03:44:58 +00:00
Anurag Sharma 33740b7c61 cut release v1.15.1 (#13588) v1.15.1 2026-03-26 16:44:34 +05:30
Tanmay Jain a664835382 Merge pull request #13582 from hashicorp/multi-line-secrets
BUG: Scrub multiline sensitive values from build output
2026-03-26 15:00:36 +05:30
Tanmay Jain 14c7977929 Refactors sensitive multiline test to use OS-specific fixtures 2026-03-26 12:25:55 +05:30
Tanmay Jain 97952ced1f BUG: Scrub multiline sensitive values from build output 2026-03-26 12:04:48 +05:30
Anurag Sharma c1aac01642 bump syft to v1.42.3 (#13581)
* bump syft to v1.42.3
fix GO-2026-4809

* bump sdk to v0.6.7

* update go version
2026-03-26 11:05:04 +05:30