packer

Commit Graph

Author	SHA1	Message	Date
Shengjing Zhu	d56db70a57	Bump github.com/pierrec/lz4 to v4.1.18	2 years ago
Lucas Bajolet	4d0a51c189	go.mod: bump golang.org/x/net to v0.13.0 The version of the golang.org/x/net we used (v0.8.0), is vulnerable to a rendering issue, potentially escaping text that should not be, which can enable other attacks then. Packer itself is not vulnerable to the CVE as we don't render web pages, but security checks do point it as an issue, so we fix it by updating the dependencies. CVE refrerence: GO-2023-1988	3 years ago
Wilken Rivera	8982d4f168	Migrate external Parallels plugin to Parallels/packer-plugin-parallels (#12476 ) * Update external plugin documentation source The Parallels plugin for Packer is now maintained by the Parallels team, under their respective GitHub org. This changes updates the source address for the external plugin that should be used for pulling new plugin documentation. * Removed packer-plugin-parallels for list of vendored plugins	3 years ago
Wilken Rivera	d67bacc8d3	Remove community plugins from the vendored plugins list (#12436 ) This step removes community plugins from the Packer binary release. These plugins are being maintained and released independently of Packer and have become out of date. To ensure users are using the latest version of the plugins they are being removed in favor of the external plugin installation processes.	3 years ago
Wilken Rivera	6a4c577d6a	Bump github.com/shirou/gopsutil to v3 (#12437 ) This change updates gopsutil to the latest available version. Fixes: https://github.com/hashicorp/packer/issues/12430	3 years ago
Wilken Rivera	65f6428fce	Remove external archived provisioner plugins (#12374 ) This change removes a set of plugins that have not been updated in a while. These plugins have been archived for some time now. Users wishing to continue using these plugins should use the `packer plugins install` or `packer init` commands to install the external plugin.	3 years ago
Wilken Rivera	13a24db0de	Remove IONOS plugins from vendored plugins (#12385 ) * Remove profitbricks plugin * Remove oneandone plugin The following plugins have been unmaintained for some time now, and their upstream cloud provider has consolidate the services. These plugins will continue to be available to Packer via direct installation using packer init or the packer plugins install command. But they will no longer be bundled with Packer.	3 years ago
Wilken Rivera	08d1dfe36c	Remove external plugin for Digital Ocean (#12376 ) The Digital Ocean plugin is now maintained and released by the Digital Ocean team. To ensure users are downloading the latest available version the plugin will nolonger be bundled with Packer.	3 years ago
Wilken Rivera	f678c06396	Migrate external UCloud plugin to ucloud/packer-plugin-ucloud (#12335 ) * Update external plugin documentation source The UCloud plugin for Packer is now maintained by the UCloud team, under their respective GitHub org. This changes updates the source address for the external plugin that should be used for pulling new plugin documentation. * Remove packer-plugin-ucloud from vendored plugins.	3 years ago
Wilken Rivera	20c2d48df7	Migrate external Linode plugin to linode/packer-plugin-linode (#12329 ) * Update external plugin documentation source The Linode plugin for Packer is now maintained by the Linode team, under their respective GitHub org. This changes updates the source address for the external plugin that should be used for pulling new plugin documentation. * Removed packer-plugin-linode for list of vendored plugins The Linode plugin for Packer is now maintained by the Linode team, under their respective GitHub org. This changes removes Linode from the vendored plugins lists.	3 years ago
dependabot[bot]	d7fdc9a9ec	build(deps): bump github.com/hashicorp/packer-plugin-sdk (#12306 ) Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.3.4 to 0.4.0. - [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases) - [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.3.4...v0.4.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/packer-plugin-sdk dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	512ef1ae39	build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.34.0 to 0.36.0 (#12292 ) Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.34.0 to 0.36.0. - [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases) - [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.34.0...v0.36.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcp-sdk-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Wilken Rivera	245df57ca6	Update golang.org/x/net to address GO-2023-1571 ``` » Go Modules Scanner ⚠︎ found OSV reported vulnerability GHSA-vvpx-j8f3-3w6h in golang.org/x/net@v0.5.0 ⚠︎ found OSV reported vulnerability GO-2023-1571 in golang.org/x/net@v0.5.0 ```	3 years ago
Wilken Rivera	fd3ab4710d	Bump bundled plugins to latest available version (#12271 )	3 years ago
dependabot[bot]	f82d93d9ac	build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.33.0 to 0.34.0 (#12262 ) Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.33.0 to 0.34.0. - [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases) - [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.33.0...v0.34.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcp-sdk-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Wilken Rivera	b3a1e98889	Update github.com/hashicorp/go-getter/v2 pkgs to address CVE-2023-0475	3 years ago
dependabot[bot]	ab90025dc2	build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.31.0 to 0.33.0 Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.31.0 to 0.33.0. - [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases) - [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.31.0...v0.33.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcp-sdk-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
Ashlee M Boyer	50da6c8dc8	docs: Migrate link formats (#12192 ) * Adding check-legacy-links-format workflow * Adding test-link-rewrites workflow * Migrating links to new format * Updating docs-content-check-legacy-links-format hash * chore: update source * Update generated partials from Packer plugin SDK * Bump packer-plugin-sdk to get latest packer-sdc * Update website/content/docs/templates/hcl_templates/blocks/build/provisioner.mdx * Update Plugin SDK to fix shell-local regression --------- Co-authored-by: Kendall Strautman <kendallstrautman@gmail.com> Co-authored-by: Wilken Rivera <wilken@hashicorp.com> Co-authored-by: Kendall Strautman <36613477+kendallstrautman@users.noreply.github.com>	3 years ago
dependabot[bot]	15a3e4f5fb	build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.29.0 to 0.31.0 Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.29.0 to 0.31.0. - [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases) - [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.29.0...v0.31.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcp-sdk-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	3 years ago
Wilken Rivera	56f784ae95	Bump github.com/hashicorp/go-getter/v2 (#12161 ) The latest version of Go-Getter contains a SMBClient timeout option, along with an updated AWS SDK to improve S3 support. ``` go get github.com/hashicorp/go-getter/v2 go get github.com/hashicorp/go-getter/s3/v2 go get github.com/hashicorp/go-getter/gcs/v2 go mod tidy ```	3 years ago
dependabot[bot]	a6e7635d05	build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.28.0 to 0.29.0 (#12163 ) Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.28.0 to 0.29.0. - [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases) - [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.28.0...v0.29.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcp-sdk-go dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Lucas Bajolet	027e920147	go.mod: bump golang.org/net to 0.4.0 As with the go version to 1.18.9, this fix concerns mitigations to the GO-2022-1144 vulnerability. Since we depend on golang.org/net too, we need to update it to a version that is not vulnerable anymore, and this is starting at version 0.4.0	3 years ago
Wilken Rivera	f35270700f	Update external plugins to latest available release	3 years ago
Lucas Bajolet	08f1e85fb1	hcp: fix payloads for new SDK version The grpc_gateway v2 changes had some repercussions in the payloads of the API calls, making the current code non-functional against the latest SDK.	3 years ago
Wilken Rivera	c1cd718e0e	Update github.com/stretchr/testify to address vulnerabilities in dependencies * Resolves CVE-2022-28948 in gopkg.in/yaml.v3 Many thanks to chncaption for bubbling this vulnerability in #12908	3 years ago
dependabot[bot]	113bc5eea4	Bump github.com/hashicorp/hcl/v2 from 2.13.0 to 2.14.1 (#12015 ) Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.13.0 to 2.14.1. - [Release notes](https://github.com/hashicorp/hcl/releases) - [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcl/compare/v2.13.0...v2.14.1) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcl/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Wilken Rivera	10c7b999ea	Update bundled plugins to latest available version (#12085 )	3 years ago
Wilken Rivera	6eba1f598e	chore: Bump golang.org/x/text to v0.3.8 Address reported vulnerability GO-2022-1059 in golang.org/x/text@v0.3.7	3 years ago
Wilken Rivera	d028844284	Update dependency to resolve GO-2022-0969 (#12009 )	3 years ago
dependabot[bot]	f7ce79362d	Bump github.com/hashicorp/packer-plugin-sdk from 0.3.1 to 0.3.2 (#11981 ) Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.3.1 to 0.3.2. - [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases) - [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.3.1...v0.3.2) --- updated-dependencies: - dependency-name: github.com/hashicorp/packer-plugin-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Wilken Rivera	11e71729f1	Remove Oracle plugin from the list of vendored plugins (#11983 ) The latest release of the Oracle plugin for Packer removed Solaris from its list of supported platforms. Since Packer still releases binaries for Solaris the Oracle plugin will no longer be bundled and distributed within the Packer binary. Practitioners relying on the plugin can continue using the plugin by installing it manually using either the `packer init` or `packer plugins install` commands.	3 years ago
Wilken Rivera	ed72488e25	Bump golang.org/x/sys to address CVE-2022-29526 (#11953 ) https://github.com/golang/go/issues/52313	4 years ago
Wilken Rivera	d7dca51108	Update Packer to use Go 1.18 (#11927 ) This change updates Packer core Go version to 1.18. The move to Go 1.18 and not Go 1.19 is to allow the HCP Packer SDK time to upgrade to Go 1.18. Changes Made: * Bump go mod file to use Go 1.18 * Bump release pipeline to use Go 1.18 * Update plugin updater script to run go mod tidy for Go 1.18 * Update Linux job to use setup-go action	4 years ago
Wilken Rivera	392c4774da	Bump bundled plugins to latest available version (#11917 )	4 years ago
Wilken Rivera	e3ad29d2aa	Update third-party plugin imports (#11912 ) * packer-plugin-digitalocean: Update module import path * packer-plugin-outscale: Remove bundled plugin * packer-plugin-scaleway: Remove bundled plugin	4 years ago
Sylvia Moss	5c3d5c1295	Send channel id to HCP Packer (#11861 )	4 years ago
Lucas Bajolet	0da7cf781e	go.mod: bump SDK to v0.3.1	4 years ago
dependabot[bot]	65611c1577	Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 (#11856 ) Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.12.0 to 2.13.0. - [Release notes](https://github.com/hashicorp/hcl/releases) - [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcl/compare/v2.12.0...v2.13.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcl/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 years ago
Sylvia Moss	b849ace27b	Fail HCP datasources for revoked iteration (#11854 )	4 years ago
Wilken Rivera	0e5ddcb133	Update plugins that use StepDownload to latest version (#11844 )	4 years ago
Wilken Rivera	0324e0883a	Bump packer-plugin-sdk to latest version v0.3.0 (#11843 ) This change brings in updates to Packer's usage of the go-getter plugin used within the SDK for downloading ISO files. This can be a potentially breaking change for some plugins as the update go-getter settings in the SDK prevent reading/writing to suddir that require upload path traversal (e.g /tmp/.../etc/hosts). This change also includes 30 minute maximum timeouts for file downloading to prevent resource exhaustion. This can be an issue for very large or slow downloads if they exceed more then 30 minutes to complete.	4 years ago
Wilken Rivera	6f1cefa53d	Bump versions for all recently plugins (#11802 ) * Bump versions for all recently plugins This change brings all plugins in Packer core up to date to address issues with legacy SSH RSA-SHA1 key algorithms. Related to: https://github.com/hashicorp/packer/pull/11761 * Update repository for packer-plugin-outscale	4 years ago
Wilken Rivera	9bf17ec952	Update external plugins to latest available release	4 years ago
dependabot[bot]	cec4f91d34	Bump github.com/hashicorp/packer-plugin-sdk from 0.2.12 to 0.2.13 (#11774 ) Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.2.12 to 0.2.13. - [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases) - [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.2.12...v0.2.13) --- updated-dependencies: - dependency-name: github.com/hashicorp/packer-plugin-sdk dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 years ago
Sylvia Moss	5c0988acbd	bump hcp-sdk-go and fix import path (#11763 ) * bump hcp-sdk-go and fix import path * bump hcp-sdk-go 0.19.0	4 years ago
Wilken Rivera	5c1694ca9d	Bump packer-plugin-sdk (#11754 ) The Packer Plugin SDK has been updated in v0.2.12 to address the x/crypto/ssh fix for unsupported key algorithms. This change is specific to the SSH communication which is mostly in the sdk pkg. But it is being brought into Packer to have parity with all the external plugins, which are being updated separately.	4 years ago
dependabot[bot]	36c2301781	Bump github.com/hashicorp/hcl/v2 from 2.11.1 to 2.12.0 (#11737 ) Bumps [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) from 2.11.1 to 2.12.0. - [Release notes](https://github.com/hashicorp/hcl/releases) - [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcl/compare/v2.11.1...v2.12.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcl/v2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 years ago
Adrien Delorme	039155612a	get go-getter 2.0.2, that won't untar OVA files (#11675 )	4 years ago
Wilken Rivera	8e1e0329ad	Bump external plugin versions Bumping external plugins containing critical bug fixes or improvements	4 years ago
Wilken Rivera	bdaa03be31	Update monogo-driver to address CVE-2021-20329 (#11617 )	4 years ago

1 2 3 4 5 ...

354 Commits (8dcc6b9fd9af8d4f47a758fb18324858cdfd9996)