1117 Commits (backport-changes)

Author	SHA1	Message	Date
Tanmay Jain	14c7977929	Refactors sensitive multiline test to use OS-specific fixtures	3 weeks ago
Tanmay Jain	97952ced1f	BUG: Scrub multiline sensitive values from build output	3 weeks ago
Anurag Sharma	ea25de1315	feat: native sbom generation for hcp (#13566) ... * add configuration fields to SBOMInternalProvisioner * add os detection * move implementation to hcp-sbom * upload scanner binary and execute * use latest syft version always * reduce duplicate code * rename config fields appropriately * default to cyclonedx * add syft dependency * add support for elevated user for windows * add retry for download * add syft dependency Updates go version * optimization for windows * improve docs * update config usage rules * add unit tests * update golang version, fix linter issues * refactor and improvements * simplify few lines * refactor retry for scanner download * resolved conflicts * resolve conflicts from main * stick to syft v1 for compatibility * fix lint issues * stricter version check for syft * fix version eg * update go version to 1.25.7 * go mod changes	3 weeks ago
Tanmay Jain	e4e52c0711	Merge pull request #13544 from hashicorp/compliance/update-headers-batch-3 ... [IND-4226] [COMPLIANCE] Update Copyright Headers (Batch 3 of 5)	4 months ago
Tanmay Jain	46b216b203	Merge pull request #13545 from hashicorp/compliance/update-headers-batch-2 ... [IND-4226] [COMPLIANCE] Update Copyright Headers (Batch 2 of 5)	4 months ago
hashicorp-copywrite[bot]	219421c08c	[COMPLIANCE] Update Copyright and License Headers (Batch 2 of 5)	4 months ago
hashicorp-copywrite[bot]	a79100518c	[COMPLIANCE] Update Copyright and License Headers (Batch 3 of 5)	4 months ago
hashicorp-copywrite[bot]	6af0b29558	[COMPLIANCE] Update Copyright and License Headers	4 months ago
Anurag Sharma	543123ac17	bump golang.org/x/crypto to 0.43.0 (#13518) ... * bump golang.org/x/crypto to 0.43.0 CVE-2025-47913 GO-2025-4116 * fixed go.sum * fixed multiple warnings that prevented test runs * make generate * fix lint errors, update linter version * fix go vet issues	5 months ago
Sebastien Dionne	3cb0cd490e	Fix typos and linguistic errors in documentation ... Signed-off-by: Sebastien Dionne <survivant00@gmail.com>	6 months ago
anshulSharma	b99244845a	changes for allowing proxy server to fetch release binaries (#13439)	8 months ago
anshulSharma	a234126747	changes for pulling binary from releases.hashicorp.com (#13431) ... * changes for pulling binary from releases.hashicorp.com * cahnges for getting release from release official site * cahnges for getting release from release official site * unit test cases * unit test cases * unit test coverage * changes for getter releases.hashicorp.com * lint fix * lint fix * lint fix * manifest.json related changes * manifest.json related changes * manifest.json related changes * manifest.json related changes * github getter test cases * added test cases for getters * added test cases for getters * added test cases for getters * added test cases for getters * added test cases for getters * added test cases for plugins getter * unit test cases for getting release from official site * description to the methods	9 months ago
Tanmay Jain	24d73a2b6a	Fixed Test Cases	10 months ago
Tanmay Jain	04dc274eaa	IMPROV: Populating the PackerSensitiveVars variable	10 months ago
Tanmay Jain	9e90f48f2b	Updated Tests	12 months ago
Tanmay Jain	f41c2719a7	Deprecating `Message` method in UI interface	12 months ago
Lucas Bajolet	98198b5af8	packer: make GetBuilds return *[]CoreBuild ... The GetBuilds function, available on both HCL2 and legacy JSON configuration objects, used to return the Build interface. This typing by interface is not useful in this instance, since all the uses of `GetBuilds' are self-contained within Packer, and we're never using any other implementation for it than `*CoreBuild`. We've been relying on the dynamic type for all the builds being *CoreBuild in some places of the code, so to avoid potential surprises in the future, we'll change the signature now so it returns only concrete types.	1 year ago
Jenna Goldstrich	347c57306c	hcp: use enum for HCP SBOM upload ... Since the protos for uploading an SBOM for a build have been changed to use an enumeration instead of a plain string with the latest revisions to the HCP Packer SBOM support feature, we update how we reference those values for the SBOM format to use that enum instead.	1 year ago
Jenna Goldstrich	362c547211	hcp: integrate SBOM upload to HCP code ... Since packer now supports keeping track of SBOMs produced during a build, we add the code to integrate those changes into the internal/hcp package, so we do upload them on build completion.	1 year ago
Devashish	a353260f5d	packer: add hcp-sbom provisioner ... The hcp-sbom provisioner is a provisioner that acts essentially like a download-only file provisioner, which also verifies the file downloaded is a SPDX/CycloneDX JSON-encoded SBOM file, and sets up its upload to HCP Packer later on.	1 year ago
Lucas Bajolet	9f6f0ba6a2	packer: pick protobuf/gob for serialisation (#13025) ... As we're trying to move away from gob for serialising data over the wire, this commit adds the capability for Packer to pick dynamically between gob or protobuf for the serialisation format to communicate with plugins. As it stands, if all the plugins discovered are compatible with protobuf, and we have not forced gob usage, protobuf will be the serialisation format picked. If any plugin is not compatible with protobuf, gob will be used for communicating with all the plugins that will be used over the course of a command.	1 year ago
huochexizhan	6e417bb883	fix: fix slice init length	1 year ago
Lucas Bajolet	586762564b	hcl2template: intro and add UseSequential init opt ... Following up on the DAG work, this commit adds a new option for initialisation that disables DAG on request. By default we are going to use the DAG approach, with an option to fallback to using the older algorithm for evaluation in case users end-up in an edge-case that prevents them from building a template.	1 year ago
Lucas Bajolet	3e3b136f3c	packer: address unused lint errors	2 years ago
Lucas Bajolet	962ccdfc80	packer: address gosimple lint errors	2 years ago
Lucas Bajolet	e8d3a55b5f	packer: address errcheck lint errors ... In a couple places in the codebase we didn't check the errors from functions we execute. In some cases this is harmless (or at least ignorable), but others may need to log what went wrong, so for all the reported occurrences we either ignore explicitly or handle the error with a log.	2 years ago
Lucas Bajolet	2009079246	packer: remove ineffasign pointed assigns/decls ... Some of the variables we create are flagged by our linters as ineffective assignments, which makes sense as those are generally fed by code below, so we don't need to use the declaration/assignation syntax (:=) but instead can fall back to using var with a type to get the zero value of the declared entity.	2 years ago
Lucas Bajolet	4a7f5f38a6	Makefile: replace enumer upstream with dmarkham's (#13107) ... Since the enumer implementation we used hadn't been updated for 5+ years, this didn't work with recent linux/go versions, and enumer crashed while attempting to parse/analyse the source files. There's another alternative on Github, forked from the one we used, which seems more maintained now, and does produce the expected files in Packer.	2 years ago
IAMDAVID0920	d625694a88	refactor: remove deprecated InitializePluginVersion, replace with NewPluginVersion	2 years ago
Lucas Bajolet	97db9d82c4	packer: fix splitting error message on pathsep	2 years ago
Lucas Bajolet	ec92d231bc	packer: use filepath for getting plugin basename ... When Discovering plugins installed through the `Discover` function, we use the base name of the plugin binary we discovered preliminarly, then we match its name against a regex to extract the prefix for the plugin's components. Extracting the base path used to be done with `path.Base`, which while working perfectly on UNIX systems, does not on Windows as it uses `\\` as their path separator. To circumvent this problem, we use the `filepath` package to extract the base name of the plugin instead, making the discovery logic work again on Windows.	2 years ago
Lucas Bajolet	a852434410	packer: fix listing on windows with .exe ext ... Listing installed plugins on Windows requires the extension to be set in the ListOptions, otherwise they are not discovered. While working on the discovery code, and consolidating it in a single location, we've forgotten to pass the argument to ListInstallations, so that makes it impossible to automatically discover installed components on Windows. This commit fixes this issue for the plugins required, and the general discovery process during build/validate.	2 years ago
Lucas Bajolet	682968d0df	packer: don't load plugins with metadata in name ... If a plugin is installed in the PACKER_PLUGIN_PATH, and its version contains metadata, we reject it. This is because metadata is free-form data, which could then make it possible to have multiple conflicting versions of a plugin installed, so we don't support it and explicitely reject plugins like those. A valid plugin with metadata in its version information should be installed without its metadata part, so there can only be one variant of the plugin installed at a specific version.	2 years ago
Lucas Bajolet	c7f2508373	addrs: return error on ParsePluginSource ... The ParsePluginSource function can be invoked from either a HCL2 context (when parsing a required_plugins block), or from the command-line itself. While in the first context a hcl.Diagnostics is coherent, in case the source to parse is a command-line argument, for example when installing or removing a plugin, the error message cannot have an HCL context, leading to errors that are incorrectly prefixed by a <nil> string dure to the lack of a reference to attach the diagnostic to. Therefore, in order to fix this behaviour, the logic that parses plugin sources now returns an error, and attaching the error to an HCL subject is done independently, if needed.	2 years ago
Lucas Bajolet	9b38e0eb5c	addrs: limit source component length to 16 ... When specifying/installing plugins, a source URI is required for Packer to be able to locate or install a plugin to the local plugin hierarchy. The plugin hierarchy is based on the plugin source, where each component in this hierarchy will become a directory. In order to avoid sources with too many levels of nesting, causing a lot of mkdirs, we limit the number of sources to 16 in this commit, this should be long enough for most of our users.	2 years ago
Lucas Bajolet	d2ade9a783	packer: register plugin components only once ... When running a packer command on an HCL2 template, depending on whether or not there are required_plugin blocks defined, Packer may need to discover and register a plugin's components multiple times. This is the behaviour ever since those blocks were introduced to Packer, but given we are doing the operation multiple times, this is suboptimal. This commit changes the way things works by first doing the restricted discovery of plugins (as dictated by required_plugins), then proceeding to the global discovery, with the change that subsequent component discoveries will not have precedence over those pre-discovered anymore. This allows us to invert the call order of both discovery phases safely, and maintains the constraints described in the templates.	2 years ago
Lucas Bajolet	f80ba2821b	packer: error multiple paths in PACKER_PLUGIN_PATH ... When a user defines PACKER_PLUGIN_PATH in their environment, we need to error if their path defines multiple directories separated by `:`. This used to be supported, but this is removed with 1.11 as we're simplifying the loading process for plugins, so we opted to fall-back to only one plugin directory supported.	2 years ago
Wilken Rivera	20345f9118	Add check to prevent the installation of version constraints matching a prerelease ... * Refactor InstallError string messages	2 years ago
Wilken Rivera	11dc684334	Add ConintuableInstallError for continuing installation on version mismatches	2 years ago
Wilken Rivera	2e8bdb5c4a	Use single buffer for storing binary file before writes ... * Only create plugin directories if there is potential plugin install	2 years ago
Wilken Rivera	2ca5b2707c	Add PrereleaseError for handling failed pre-release version installs ... ``` ~> packer init mondoo_req.pkr.hcl Failed getting the "github.com/mondoohq/cnspec" plugin: error: Remote installation of the plugin version 10.8.1-dev is unsupported. This is likely an upstream issue with the 10.8.1 release, which should be reported. If you require this specific version of the plugin, download the binary and install it manually. packer plugins install --path '<plugin_binary>' github.com/mondoohq/cnspec ```	2 years ago
Wilken Rivera	eafdda8a94	Update plugin-getter version matching check ... This change is an attempt to remove the need for additional temporary files, along with calls to stat the temp files, to reduce the number of files being created, opened, and closed. In addition to this change, the logic for falling back to a previous version if the highest matched version is a pre-release has been removed. Instead we will assume that any prior versions will exhibit the same issue and return immediately. A user can install the version manually if they will or they can modify their version constraint to a properly released version.	2 years ago
Lucas Bajolet	35bd020a3e	plugin-getter: rm vocal log on checksum entries ... When a checksum file for a release is downloaded and iterated upon to find the compatible binary for a release, we used to log each non-compatible entry in the logs. This is noisy as we know there's going to be multiple entries that don't match the host's os/arch, and there's no good reason to show those, so we silence them.	2 years ago
Lucas Bajolet	7823a40a25	packer: ensure versions match for remote installs ... Since we're hardening what Packer is able to load locally when it comes to plugins, we need also to harden the installation process a bit. While testing we noticed some remotes had published their plugins with version mismatches between the tag and the binary. This was not a problem in the past, as Packer did not care for this, only the binary name was important, and the plugin could be installed without problem. Nowadays however, since Packer enforces the plugin version reported in the name to be the same as the plugin self-reported version, this makes it impossible for the installed plugin to load anymore in such an instance. Therefore in order to limit confusion, and so users are able to understand the problem and report it to the plugins with that mismatch, we instead install the plugin as a dev version, and report it to the user so they can still use it, but are able to report it to the plugin developers.	2 years ago
Lucas Bajolet	77d537c389	packer: remove duplicate version variable ... When listing installed plugins, we check that the plugin's reported version through describe matches what's in the name of the file. Doing do, we were parsing the same version string twice without modifying it, which was not necessary, so this commit changes that.	2 years ago
Lucas Bajolet	32e64c98d1	packer: fix filename in verbose logs	2 years ago
Lucas Bajolet	04a2542a6f	packer/getter: don't report other os/arch as errs ... Whenever a Github release exposes an entry for another OS/arch combination, this gets registered as an error, which in the event no binary is compatible with the host's OS/arch, gets reported at the end of the getter process. While this is sound in theory, in practice we get the list of all the combinations that don't match the host's, which is not something a Packer user can act on, and might therefore be more confusing than helping to solve the issue. Therefore we opt in this commit to stop registering those cases as real errors, and only log them as an INFO statement.	2 years ago
Lucas Bajolet	64ae3e8ea4	packer: alias version as goversion for getter ... Since we named the version from the getter `version', this means we have a naming conflict inside the loop that attempts to install a versioned candidate for a plugin, making it impossible to invoke something from the go-version package. Since we'll introduce a change that needs the latter capability, we must either rename the local variable to something else than `version', or we need to alias the package locally. This commit implements the latter, opting to call the package goversion.	2 years ago
Lucas Bajolet	d40df8e899	packer: check if errs is nil before getting length ... When installing a remote plugin, and after we've either successfully installed a binary, or exhausted all the possible sources, we print a final error message if nothing was reported. However, given that errs is a pointer to a structure, and if no errors were produced, the the error list could be nil, leading to the call to `Len()' to crash Packer. This is exceedingly rare as in general the code attempts to read multiple sources from Github, and therefore we almost always get some error reported, but while changing the function's code, I managed to make it crash while removing/changing some error statements. Therefore to avoid future surprises, we first check that `errs' is not nil before invoking `Len()' on it, as no errors and no plugins installed mean that something went wrong all the same.	2 years ago
Lucas Bajolet	56fab30fa1	plugin: factorise calling describe on binaries ... Given that calling the describe command on plugins and deserialising the output as a plugin description is something done in multiple places in the code, we factorise this operation so we don't need to copy/paste the code around.	2 years ago