50da6c8dc8
docs: Migrate link formats ( #12192 )
...
* Adding check-legacy-links-format workflow
* Adding test-link-rewrites workflow
* Migrating links to new format
* Updating docs-content-check-legacy-links-format hash
* chore: update source
* Update generated partials from Packer plugin SDK
* Bump packer-plugin-sdk to get latest packer-sdc
* Update website/content/docs/templates/hcl_templates/blocks/build/provisioner.mdx
* Update Plugin SDK to fix shell-local regression
---------
Co-authored-by: Kendall Strautman <[email protected] >
Co-authored-by: Wilken Rivera <[email protected] >
Co-authored-by: Kendall Strautman <[email protected] >
2023-01-27 09:47:08 -08:00
dependabot[bot]
15a3e4f5fb
build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.29.0 to 0.31.0
...
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go ) from 0.29.0 to 0.31.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases )
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.29.0...v0.31.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
2023-01-25 21:19:47 -05:00
Wilken Rivera
56f784ae95
Bump github.com/hashicorp/go-getter/v2 ( #12161 )
...
The latest version of Go-Getter contains a SMBClient timeout option,
along with an updated AWS SDK to improve S3 support.
```
go get github.com/hashicorp/go-getter/v2
go get github.com/hashicorp/go-getter/s3/v2
go get github.com/hashicorp/go-getter/gcs/v2
go mod tidy
```
2022-12-20 15:38:12 -05:00
dependabot[bot]
a6e7635d05
build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.28.0 to 0.29.0 ( #12163 )
...
Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go ) from 0.28.0 to 0.29.0.
- [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases )
- [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.28.0...v0.29.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcp-sdk-go
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-12-15 12:43:55 -05:00
Lucas Bajolet
027e920147
go.mod: bump golang.org/net to 0.4.0
...
As with the go version to 1.18.9, this fix concerns mitigations to the
GO-2022-1144 vulnerability.
Since we depend on golang.org/net too, we need to update it to a version
that is not vulnerable anymore, and this is starting at version 0.4.0
2022-12-12 16:17:51 -05:00
Wilken Rivera
f35270700f
Update external plugins to latest available release
2022-12-12 15:48:11 -05:00
Lucas Bajolet
08f1e85fb1
hcp: fix payloads for new SDK version
...
The grpc_gateway v2 changes had some repercussions in the payloads of
the API calls, making the current code non-functional against the latest
SDK.
2022-12-07 16:18:52 -05:00
Wilken Rivera
c1cd718e0e
Update github.com/stretchr/testify to address vulnerabilities in dependencies
...
* Resolves CVE-2022-28948 in gopkg.in/yaml.v3
Many thanks to chncaption for bubbling this vulnerability in #12908
2022-11-11 10:36:07 -05:00
dependabot[bot]
113bc5eea4
Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.1 ( #12015 )
...
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl ) from 2.13.0 to 2.14.1.
- [Release notes](https://github.com/hashicorp/hcl/releases )
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/hcl/compare/v2.13.0...v2.14.1 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-11-02 13:07:31 -04:00
Wilken Rivera
10c7b999ea
Update bundled plugins to latest available version ( #12085 )
2022-10-27 18:24:13 -04:00
Wilken Rivera
6eba1f598e
chore: Bump golang.org/x/text to v0.3.8
...
Address reported vulnerability GO-2022-1059 in golang.org/x/[email protected]
2022-10-12 15:59:17 -04:00
Wilken Rivera
d028844284
Update dependency to resolve GO-2022-0969 ( #12009 )
2022-09-20 16:57:17 -04:00
dependabot[bot]
f7ce79362d
Bump github.com/hashicorp/packer-plugin-sdk from 0.3.1 to 0.3.2 ( #11981 )
...
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk ) from 0.3.1 to 0.3.2.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases )
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.3.1...v0.3.2 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-09-20 13:08:38 -04:00
Wilken Rivera
11e71729f1
Remove Oracle plugin from the list of vendored plugins ( #11983 )
...
The latest release of the Oracle plugin for Packer removed
Solaris from its list of supported platforms. Since Packer still
releases binaries for Solaris the Oracle plugin will no longer be
bundled and distributed within the Packer binary. Practitioners relying
on the plugin can continue using the plugin by installing it manually
using either the `packer init` or `packer plugins install` commands.
2022-09-15 12:31:52 -04:00
Wilken Rivera
ed72488e25
Bump golang.org/x/sys to address CVE-2022-29526 ( #11953 )
...
https://github.com/golang/go/issues/52313
2022-08-22 17:27:57 -04:00
Wilken Rivera
d7dca51108
Update Packer to use Go 1.18 ( #11927 )
...
This change updates Packer core Go version to 1.18. The move to Go 1.18 and not Go 1.19
is to allow the HCP Packer SDK time to upgrade to Go 1.18.
Changes Made:
* Bump go mod file to use Go 1.18
* Bump release pipeline to use Go 1.18
* Update plugin updater script to run go mod tidy for Go 1.18
* Update Linux job to use setup-go action
2022-08-18 09:41:29 -04:00
Wilken Rivera
392c4774da
Bump bundled plugins to latest available version ( #11917 )
2022-08-01 09:37:33 -04:00
Wilken Rivera
e3ad29d2aa
Update third-party plugin imports ( #11912 )
...
* packer-plugin-digitalocean: Update module import path
* packer-plugin-outscale: Remove bundled plugin
* packer-plugin-scaleway: Remove bundled plugin
2022-07-29 11:45:30 -04:00
Sylvia Moss
5c3d5c1295
Send channel id to HCP Packer ( #11861 )
2022-07-29 15:15:29 +02:00
Lucas Bajolet
0da7cf781e
go.mod: bump SDK to v0.3.1
2022-07-28 14:50:57 -04:00
dependabot[bot]
65611c1577
Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 ( #11856 )
...
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl ) from 2.12.0 to 2.13.0.
- [Release notes](https://github.com/hashicorp/hcl/releases )
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/hcl/compare/v2.12.0...v2.13.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-07-06 15:58:21 -04:00
Sylvia Moss
b849ace27b
Fail HCP datasources for revoked iteration ( #11854 )
2022-06-21 17:24:41 +02:00
Wilken Rivera
0e5ddcb133
Update plugins that use StepDownload to latest version ( #11844 )
2022-06-13 10:39:21 -04:00
Wilken Rivera
0324e0883a
Bump packer-plugin-sdk to latest version v0.3.0 ( #11843 )
...
This change brings in updates to Packer's usage of the go-getter plugin
used within the SDK for downloading ISO files. This can be a potentially
breaking change for some plugins as the update go-getter settings in the
SDK prevent reading/writing to suddir that require upload path
traversal (e.g /tmp/.../etc/hosts).
This change also includes 30 minute maximum timeouts for file
downloading to prevent resource exhaustion. This can be an issue for
very large or slow downloads if they exceed more then 30 minutes to
complete.
2022-06-13 09:22:58 -04:00
Wilken Rivera
6f1cefa53d
Bump versions for all recently plugins ( #11802 )
...
* Bump versions for all recently plugins
This change brings all plugins in Packer core up to date to address
issues with legacy SSH RSA-SHA1 key algorithms.
Related to: https://github.com/hashicorp/packer/pull/11761
* Update repository for packer-plugin-outscale
2022-05-25 15:51:40 -04:00
Wilken Rivera
9bf17ec952
Update external plugins to latest available release
2022-05-19 16:21:16 -04:00
dependabot[bot]
cec4f91d34
Bump github.com/hashicorp/packer-plugin-sdk from 0.2.12 to 0.2.13 ( #11774 )
...
Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk ) from 0.2.12 to 0.2.13.
- [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases )
- [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.12...v0.2.13 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/packer-plugin-sdk
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-05-19 13:13:01 -04:00
Sylvia Moss
5c0988acbd
bump hcp-sdk-go and fix import path ( #11763 )
...
* bump hcp-sdk-go and fix import path
* bump hcp-sdk-go 0.19.0
2022-05-10 14:01:26 +02:00
Wilken Rivera
5c1694ca9d
Bump packer-plugin-sdk ( #11754 )
...
The Packer Plugin SDK has been updated in v0.2.12 to address the
x/crypto/ssh fix for unsupported key algorithms. This change is specific
to the SSH communication which is mostly in the sdk pkg. But it is being
brought into Packer to have parity with all the external plugins, which
are being updated separately.
2022-05-05 13:35:38 -04:00
dependabot[bot]
36c2301781
Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0 ( #11737 )
...
Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl ) from 2.11.1 to 2.12.0.
- [Release notes](https://github.com/hashicorp/hcl/releases )
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md )
- [Commits](https://github.com/hashicorp/hcl/compare/v2.11.1...v2.12.0 )
---
updated-dependencies:
- dependency-name: github.com/hashicorp/hcl/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected] >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2022-04-29 12:27:41 -04:00