Tanmay Jain
df45eb7db5
Pin Action Refs to Latest
2026-07-09 18:33:35 +05:30
dependabot[bot]
e64148cb81
build(deps): bump golang.org/x/net in /packer_test/common/plugin_tester ( #13664 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.54.0 to 0.55.0.
- [Commits](https://github.com/golang/net/compare/v0.54.0...v0.55.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.55.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 12:43:52 +05:30
dependabot[bot]
7ee518a021
build(deps): bump golang.org/x/crypto ( #13672 )
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.47.0 to 0.52.0.
- [Commits](https://github.com/golang/crypto/compare/v0.47.0...v0.52.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.52.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-07-09 12:38:32 +05:30
Tanmay Jain
b233fff1e8
FEAT: Add continue_on_error option to HCL2 provisioner blocks ( #13674 )
2026-07-09 12:27:18 +05:30
Tanmay Jain
8b304b2b7f
FEAT: Add rfc3339_parse and unix_timestamp_parse HCL functions ( #13669 )
2026-07-08 16:01:46 +05:30
Tanmay Jain
b0451d400d
Updated Go Modules ( #13673 )
2026-07-08 15:25:35 +05:30
Tanmay Jain
9dc75dc66c
core/hcl2: support optional() attributes in variable object types ( #13670 )
2026-07-08 15:12:16 +05:30
eshan-tripathi
d5e6ccb165
Merge pull request #13671 from hashicorp/remove-old-website
...
chore: remove website, fix:references
2026-07-08 11:56:48 +05:30
eshan-tripathi
ba86798d7b
fix: CONTRIBUTING.md
2026-07-07 14:26:50 +05:30
eshan-tripathi
d2f2baa4b4
chore: remove website, fix:references
2026-07-07 12:21:06 +05:30
Tanmay Jain
b95fa4be03
chore: added an AGENTS.md ( #13668 )
2026-07-06 11:51:43 +05:30
Hari
2f86cc4001
chore(release): update changelog and version to 1.15.4 ( #13651 )
2026-06-03 18:27:30 +05:30
Hari
5ed27a3490
fix: update build constraints to support arm architecture on FreeBSD ( #13650 )
2026-06-03 16:52:34 +05:30
Hari
5c431e0e44
Removes Syft binary download/handling from the HCP SBOM provisioner ( #13636 )
2026-06-03 15:23:57 +05:30
hashicorp-copywrite[bot]
abc4bfffce
Merge pull request #13632 from hashicorp/compliance/add-headers
...
[COMPLIANCE] Add/Update Copyright Headers
2026-06-03 14:37:46 +05:30
Tanmay Jain
683af0c935
Merge pull request #13649 from hashicorp/dependabot/github_actions/actions-f333ae29b9
...
build(deps): bump the actions group across 1 directory with 7 updates
2026-06-03 12:36:00 +05:30
dependabot[bot]
a3f194a8d1
build(deps): bump the actions group across 1 directory with 7 updates
...
Bumps the actions group with 7 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout ) | `4.2.2` | `4.3.1` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials ) | `4.0.2` | `4.3.1` |
| [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action ) | `1.27.0` | `1.27.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact ) | `4.6.0` | `4.6.2` |
| [actions/github-script](https://github.com/actions/github-script ) | `7.0.1` | `7.1.0` |
| [actions/download-artifact](https://github.com/actions/download-artifact ) | `4.1.8` | `4.3.0` |
| [ncipollo/release-action](https://github.com/ncipollo/release-action ) | `1.15.0` | `1.21.0` |
Updates `actions/checkout` from 4.2.2 to 4.3.1
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](https://github.com/actions/checkout/compare/11bd71901bbe5b1630ceea73d27597364c9af683...34e114876b0b11c390a56381ad16ebd13914f8d5 )
Updates `aws-actions/configure-aws-credentials` from 4.0.2 to 4.3.1
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases )
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md )
- [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e3dd6a429d7300a6a4c196c26e071d42e0343502...7474bc4690e29a8392af63c5b98e7449536d5c3a )
Updates `slackapi/slack-github-action` from 1.27.0 to 1.27.1
- [Release notes](https://github.com/slackapi/slack-github-action/releases )
- [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md )
- [Commits](https://github.com/slackapi/slack-github-action/compare/37ebaef184d7626c5f204ab8d3baff4262dd30f0...fcfb566f8b0aab22203f066d80ca1d7e4b5d05b3 )
Updates `actions/upload-artifact` from 4.6.0 to 4.6.2
- [Release notes](https://github.com/actions/upload-artifact/releases )
- [Commits](https://github.com/actions/upload-artifact/compare/65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08...ea165f8d65b6e75b540449e92b4886f43607fa02 )
Updates `actions/github-script` from 7.0.1 to 7.1.0
- [Release notes](https://github.com/actions/github-script/releases )
- [Commits](https://github.com/actions/github-script/compare/60a0d83039c74a4aee543508d2ffcb1c3799cdea...f28e40c7f34bde8b3046d885e986cb6290c5673b )
Updates `actions/download-artifact` from 4.1.8 to 4.3.0
- [Release notes](https://github.com/actions/download-artifact/releases )
- [Commits](https://github.com/actions/download-artifact/compare/fa0a91b85d4f404e444e00e005971372dc801d16...d3f86a106a0bac45b974a628896c90dbdf5c8093 )
Updates `ncipollo/release-action` from 1.15.0 to 1.21.0
- [Release notes](https://github.com/ncipollo/release-action/releases )
- [Commits](https://github.com/ncipollo/release-action/compare/cdcc88a9acf3ca41c16c37bb7d21b9ad48560d87...339a81892b84b4eeb0f6e744e4574d79d0d9b8dd )
---
updated-dependencies:
- dependency-name: actions/checkout
dependency-version: 4.3.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
dependency-version: 4.3.1
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: slackapi/slack-github-action
dependency-version: 1.27.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/upload-artifact
dependency-version: 4.6.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: actions
- dependency-name: actions/github-script
dependency-version: 7.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: actions/download-artifact
dependency-version: 4.3.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
- dependency-name: ncipollo/release-action
dependency-version: 1.21.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: actions
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-06-03 06:56:15 +00:00
Tanmay Jain
219be22e1a
Merge pull request #13647 from hashicorp/module-update
...
Update Go version and refresh dependencies
2026-06-03 12:22:05 +05:30
Tanmay Jain
958d1a8315
Update Go version and refresh dependencies
2026-06-03 12:13:48 +05:30
mukulmohan177
cddfaf5d03
Merge pull request #13645 from hashicorp/authorization-bypass
...
upgraded go-git and crypto version
2026-06-03 08:26:34 +05:30
Taru Garg
9c9ad59981
Update Go version from 1.25.9 to 1.25.10 ( #13646 )
2026-06-02 18:11:25 +05:30
Tanmay Jain
46392d6e9f
Merge pull request #13640 from hashicorp/dependabot/go_modules/github.com/hashicorp/packer-plugin-sdk-0.6.9
...
build(deps): bump github.com/hashicorp/packer-plugin-sdk from 0.6.7 to 0.6.9
2026-06-02 14:59:17 +05:30
sanyaraj2424
277b49a248
upgraded crypto version
2026-06-01 10:38:00 +05:30
sanyaraj2424
14b14d0220
upgraded go-git version
2026-05-29 11:58:45 +05:30
dependabot[bot]
4a5aa7cfb1
build(deps): bump github.com/hashicorp/packer-plugin-sdk
...
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk ) from 0.6.7 to 0.6.9.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases )
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.6.7...v0.6.9 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
dependency-version: 0.6.9
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-05-26 01:24:44 +00:00
Taru Garg
287f5e33fb
Merge pull request #13638 from taru-garg-hashicorp/taru-garg-hashicorp/bom-fix
...
deps(cyclonedx-go): Bump cyclonedx-go dependency to 0.11.0
2026-05-22 17:34:15 +05:30
Tanmay Jain
342fc1c554
Merge pull request #13625 from hashicorp/cut-release-1.15.3
...
version: cut release v1.15.3
2026-04-27 14:34:55 +05:30
Tanmay Jain and Copilot
08fe3137c6
version: cut release v1.15.3
...
Co-authored-by: Copilot <[email protected] >
2026-04-27 14:28:47 +05:30
Tanmay Jain
f4116306f8
Merge pull request #13624 from hashicorp/bucket-fix
...
Skips bucket update when metadata matches current state
2026-04-27 14:20:21 +05:30
Tanmay Jain
072dfdee9e
Skips bucket update when metadata matches current state
...
Prevents unnecessary update operations by checking if the
bucket's description and labels already match the requested
values before issuing an update.
Improves efficiency and avoids redundant API calls.
2026-04-27 14:07:59 +05:30
Hari
48f5e6becc
fix(deps): update github.com/Azure/go-ntlmssp to v0.1.1 ( #13622 )
2026-04-24 13:15:53 +05:30
dependabot[bot]
68a5acd3eb
build(deps): bump github.com/Azure/go-ntlmssp ( #13620 )
...
Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp ) from 0.0.0-20200615164410-66371956d46c to 0.1.1.
- [Release notes](https://github.com/Azure/go-ntlmssp/releases )
- [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1 )
---
updated-dependencies:
- dependency-name: github.com/Azure/go-ntlmssp
dependency-version: 0.1.1
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-24 12:44:55 +05:30
Hari and Copilot
9ca74f740b
Bump version to 1.15.2 and update changelog for release ( #13618 )
...
* Bump version to 1.15.2 and update changelog for release
* Cleanup changelog by removing outdated entries and sensitive data ref… (#13619 )
* Cleanup changelog by removing outdated entries and sensitive data references
* Clarify provisioner behavior in changelog to improve understanding of lifecycle enforcement
* Update changelog to clarify provisioner lifecycle enforcement and remove outdated bug fix entry
Co-authored-by: Copilot <[email protected] >
---------
Co-authored-by: Copilot <[email protected] >
---------
Co-authored-by: Copilot <[email protected] >
2026-04-24 12:13:21 +05:30
Hari
6a8612cedd
Update error message in TestSourceNotExisting for clarity ( #13616 )
2026-04-23 16:44:36 +05:30
Tanmay Jain
627c9f1d35
Merge pull request #13615 from hashicorp/go-fix
...
Update Go version and refresh dependencies
2026-04-21 11:44:16 +05:30
Tanmay Jain
c45722b902
Update Go version and refresh dependencies
...
Aligns project with Go 1.25.9 and updates several dependencies
to incorporate bug fixes, security enhancements, and improved
compatibility across packages.
Ensures continued stability and support for the latest upstream
features by tracking current releases.
2026-04-21 11:30:06 +05:30
Tanmay Jain
fae5ba683c
Merge pull request #13614 from hashicorp/go-update-1.25.9
...
Bumps Go version to 1.25.9 for compatibility
2026-04-21 11:13:04 +05:30
Tanmay Jain
206063490f
Bumps Go version to 1.25.9 for compatibility
2026-04-21 11:08:11 +05:30
Hari and Hari Om
eee3805c06
Feature/enforced provisioner ( #13591 )
...
* added the parser for the enforced block
* Enhance enforced provisioner parsing to support HCL and JSON formats
- Updated ParseProvisionerBlocks to handle both HCL and JSON syntax, including legacy JSON format.
- Added comprehensive test cases for JSON provisioner parsing.
- Improved ExtractBuildProvisionerHCL to merge inline commands from shell provisioners.
- Enhanced logging for enforced block operations in HCP Packer.
* Remove PublishEnforcedBlocks function from Bucket struct
* Remove ExtractBuildProvisionerHCL function and unused imports
* Reverted the version upgrade
* Added the internal-sdk for the enforcedProvsioner api changes
* Enhance enforced provisioner handling and error reporting
- Update error handling in FetchEnforcedBlocks to return detailed errors instead of warnings.
- Modify GetCoreBuildProvisionerFromBlock to accept build name for overrides.
- Add tests for FetchEnforcedBlocks to ensure correct behavior and error handling.
- Implement diagnostics for unsupported legacy JSON templates.
* Implement enforced provisioner parsing and handling
- Introduced a new package `enforcedparser` to handle parsing of enforced provisioner blocks from HCL and JSON formats.
- Refactored existing code to utilize the new `ParseProvisionerBlocks` function from the `enforcedparser` package.
- Updated `GetCoreBuildProvisionerFromEnforcedBlock` method to convert enforced provisioner blocks into core build provisioners.
- Enhanced error handling and logging during the parsing process.
- Added tests for the new parsing functionality and ensured existing tests were updated to reflect changes.
- Modified `InjectEnforcedProvisioners` method in JSON registry to utilize the new parsing logic.
* Add test case for -skip-enforcement flag in BuildArgs
* Refactor sensitive variable handling in provisioners and add related tests
* Refactor enforced provisioner handling: remove internal parser, update tests, and streamline API interactions
* Enhance provisioner block parsing: add error handling for invalid combinations and expand test coverage
* Remove internal SDK replacement for enforced block types in go.mod
* Update dependencies in go.mod and go.sum: bump hcp-sdk-go and packer-plugin-sdk versions, adjust syft version, and update OpenTelemetry packages
* Update hcp-sdk-go dependency to v0.172.0 in go.mod and go.sum
* Fix formatting in TestBuildCommand_ParseArgs and add newline at end of json_enforced_test.go
* Refactor testJSONRegistryWithBuilds: remove environment variable setup and streamline registry initialization
* Rename injected variable for clarity in InjectEnforcedProvisioners function
---------
Co-authored-by: Hari Om <[email protected] >
2026-04-17 14:17:28 +05:30
Hari
ea4bb3d39a
Merge pull request #13610 from hashicorp/vulnerablity-fixes
...
Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.…
2026-04-17 12:05:01 +05:30
Hari Om
8a4139f5bd
Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.google.com/go/storage to v1.61.3, and aws-sdk-go-v2 packages to latest versions; includes various other dependency updates for improved stability and performance.
2026-04-17 11:44:35 +05:30
Hari
1ac5804ecb
Merge pull request #13606 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/go.opentelemetry.io/otel/sdk-1.43.0
...
build(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /packer_test/common/plugin_tester
2026-04-17 11:35:27 +05:30
Hari
df9f5b14e4
Merge pull request #13594 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/github.com/go-jose/go-jose/v4-4.1.4
...
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /packer_test/common/plugin_tester
2026-04-17 11:21:54 +05:30
dependabot[bot]
0861349e00
build(deps): bump go.opentelemetry.io/otel/sdk
...
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) from 1.41.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.43.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.43.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-04-08 21:07:48 +00:00
dependabot[bot]
e8904e8210
build(deps): bump github.com/go-jose/go-jose/v4
...
Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from 4.1.3 to 4.1.4.
- [Release notes](https://github.com/go-jose/go-jose/releases )
- [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 )
---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v4
dependency-version: 4.1.4
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <[email protected] >
2026-04-03 03:44:58 +00:00
Anurag Sharma
33740b7c61
cut release v1.15.1 ( #13588 )
v1.15.1
2026-03-26 16:44:34 +05:30
Tanmay Jain
a664835382
Merge pull request #13582 from hashicorp/multi-line-secrets
...
BUG: Scrub multiline sensitive values from build output
2026-03-26 15:00:36 +05:30
Tanmay Jain
14c7977929
Refactors sensitive multiline test to use OS-specific fixtures
2026-03-26 12:25:55 +05:30
Tanmay Jain
97952ced1f
BUG: Scrub multiline sensitive values from build output
2026-03-26 12:04:48 +05:30
Anurag Sharma
c1aac01642
bump syft to v1.42.3 ( #13581 )
...
* bump syft to v1.42.3
fix GO-2026-4809
* bump sdk to v0.6.7
* update go version
2026-03-26 11:05:04 +05:30