18983 Commits (c4e311c8caec884303eefc5003c56abbdd12393c)

 

All Branches   

Search

Author	SHA1	Message	Date
Hari Om	c4e311c8ca	docs: update hcp-sbom provisioner documentation to reflect deprecation of scanner_url and scanner_checksum options	2 weeks ago
Hari Om	4ee664a17c	Refactor FlatConfig structure and update tests ... - Changed `AutoGenerate` field in `FlatConfig` from required to optional. - Added `ScannerArgs` field to `FlatConfig`. - Updated HCL2Spec to reflect changes in `FlatConfig`. - Modified test cases in `provisioner_test.go` to accommodate changes in `AutoGenerate` and `ScannerArgs`. - Updated `ExecuteCommand` in tests to use the new command format. - Removed unused `syft_dependency.go` file as it is no longer necessary. Co-authored-by: Copilot <copilot@github.com>	2 weeks ago
Hari Om	cc75d71745	feat: add SBOM generation command and integrate Syft SDK for SBOM creation	2 weeks ago
Tanmay Jain	342fc1c554	Merge pull request #13625 from hashicorp/cut-release-1.15.3 ... version: cut release v1.15.3	4 weeks ago
Tanmay Jain	08fe3137c6	version: cut release v1.15.3 ... Co-authored-by: Copilot <copilot@github.com>	4 weeks ago
Tanmay Jain	f4116306f8	Merge pull request #13624 from hashicorp/bucket-fix ... Skips bucket update when metadata matches current state	4 weeks ago
Tanmay Jain	072dfdee9e	Skips bucket update when metadata matches current state ... Prevents unnecessary update operations by checking if the bucket's description and labels already match the requested values before issuing an update. Improves efficiency and avoids redundant API calls.	4 weeks ago
Hari	48f5e6becc	fix(deps): update github.com/Azure/go-ntlmssp to v0.1.1 (#13622)	4 weeks ago
dependabot[bot]	68a5acd3eb	build(deps): bump github.com/Azure/go-ntlmssp (#13620) ... Bumps [github.com/Azure/go-ntlmssp](https://github.com/Azure/go-ntlmssp) from 0.0.0-20200615164410-66371956d46c to 0.1.1. - [Release notes](https://github.com/Azure/go-ntlmssp/releases) - [Commits](https://github.com/Azure/go-ntlmssp/commits/v0.1.1) --- updated-dependencies: - dependency-name: github.com/Azure/go-ntlmssp dependency-version: 0.1.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	4 weeks ago
Hari	9ca74f740b	Bump version to 1.15.2 and update changelog for release (#13618) ... * Bump version to 1.15.2 and update changelog for release * Cleanup changelog by removing outdated entries and sensitive data ref… (#13619) * Cleanup changelog by removing outdated entries and sensitive data references * Clarify provisioner behavior in changelog to improve understanding of lifecycle enforcement * Update changelog to clarify provisioner lifecycle enforcement and remove outdated bug fix entry Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com> --------- Co-authored-by: Copilot <copilot@github.com>	4 weeks ago
Hari	6a8612cedd	Update error message in TestSourceNotExisting for clarity (#13616)	4 weeks ago
Tanmay Jain	627c9f1d35	Merge pull request #13615 from hashicorp/go-fix ... Update Go version and refresh dependencies	1 month ago
Tanmay Jain	c45722b902	Update Go version and refresh dependencies ... Aligns project with Go 1.25.9 and updates several dependencies to incorporate bug fixes, security enhancements, and improved compatibility across packages. Ensures continued stability and support for the latest upstream features by tracking current releases.	1 month ago
Tanmay Jain	fae5ba683c	Merge pull request #13614 from hashicorp/go-update-1.25.9 ... Bumps Go version to 1.25.9 for compatibility	1 month ago
Tanmay Jain	206063490f	Bumps Go version to 1.25.9 for compatibility	1 month ago
Hari	eee3805c06	Feature/enforced provisioner (#13591) ... * added the parser for the enforced block * Enhance enforced provisioner parsing to support HCL and JSON formats - Updated ParseProvisionerBlocks to handle both HCL and JSON syntax, including legacy JSON format. - Added comprehensive test cases for JSON provisioner parsing. - Improved ExtractBuildProvisionerHCL to merge inline commands from shell provisioners. - Enhanced logging for enforced block operations in HCP Packer. * Remove PublishEnforcedBlocks function from Bucket struct * Remove ExtractBuildProvisionerHCL function and unused imports * Reverted the version upgrade * Added the internal-sdk for the enforcedProvsioner api changes * Enhance enforced provisioner handling and error reporting - Update error handling in FetchEnforcedBlocks to return detailed errors instead of warnings. - Modify GetCoreBuildProvisionerFromBlock to accept build name for overrides. - Add tests for FetchEnforcedBlocks to ensure correct behavior and error handling. - Implement diagnostics for unsupported legacy JSON templates. * Implement enforced provisioner parsing and handling - Introduced a new package `enforcedparser` to handle parsing of enforced provisioner blocks from HCL and JSON formats. - Refactored existing code to utilize the new `ParseProvisionerBlocks` function from the `enforcedparser` package. - Updated `GetCoreBuildProvisionerFromEnforcedBlock` method to convert enforced provisioner blocks into core build provisioners. - Enhanced error handling and logging during the parsing process. - Added tests for the new parsing functionality and ensured existing tests were updated to reflect changes. - Modified `InjectEnforcedProvisioners` method in JSON registry to utilize the new parsing logic. * Add test case for -skip-enforcement flag in BuildArgs * Refactor sensitive variable handling in provisioners and add related tests * Refactor enforced provisioner handling: remove internal parser, update tests, and streamline API interactions * Enhance provisioner block parsing: add error handling for invalid combinations and expand test coverage * Remove internal SDK replacement for enforced block types in go.mod * Update dependencies in go.mod and go.sum: bump hcp-sdk-go and packer-plugin-sdk versions, adjust syft version, and update OpenTelemetry packages * Update hcp-sdk-go dependency to v0.172.0 in go.mod and go.sum * Fix formatting in TestBuildCommand_ParseArgs and add newline at end of json_enforced_test.go * Refactor testJSONRegistryWithBuilds: remove environment variable setup and streamline registry initialization * Rename injected variable for clarity in InjectEnforcedProvisioners function --------- Co-authored-by: Hari Om <58305594+Madhav008@users.noreply.github.com>	1 month ago
Hari	ea4bb3d39a	Merge pull request #13610 from hashicorp/vulnerablity-fixes ... Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.…	1 month ago
Hari Om	8a4139f5bd	Update dependencies: bump cloud.google.com/go/auth to v0.18.2, cloud.google.com/go/storage to v1.61.3, and aws-sdk-go-v2 packages to latest versions; includes various other dependency updates for improved stability and performance.	1 month ago
Hari	1ac5804ecb	Merge pull request #13606 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/go.opentelemetry.io/otel/sdk-1.43.0 ... build(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /packer_test/common/plugin_tester	1 month ago
Hari	df9f5b14e4	Merge pull request #13594 from hashicorp/dependabot/go_modules/packer_test/common/plugin_tester/github.com/go-jose/go-jose/v4-4.1.4 ... build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 in /packer_test/common/plugin_tester	1 month ago
dependabot[bot]	0861349e00	build(deps): bump go.opentelemetry.io/otel/sdk ... Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.41.0 to 1.43.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.43.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	1 month ago
dependabot[bot]	e8904e8210	build(deps): bump github.com/go-jose/go-jose/v4 ... Bumps [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) from 4.1.3 to 4.1.4. - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Anurag Sharma	33740b7c61	cut release v1.15.1 (#13588)	2 months ago
Tanmay Jain	a664835382	Merge pull request #13582 from hashicorp/multi-line-secrets ... BUG: Scrub multiline sensitive values from build output	2 months ago
Tanmay Jain	14c7977929	Refactors sensitive multiline test to use OS-specific fixtures	2 months ago
Tanmay Jain	97952ced1f	BUG: Scrub multiline sensitive values from build output	2 months ago
Anurag Sharma	c1aac01642	bump syft to v1.42.3 (#13581) ... * bump syft to v1.42.3 fix GO-2026-4809 * bump sdk to v0.6.7 * update go version	2 months ago
Anurag Sharma	6e0db5c792	fix: exclude syft dependency import on NetBSD, OpenBSD, and Solaris (#13578) ... The syft library has a transitive dependency on containerd, which includes platform-specific code that doesn't compile on NetBSD, OpenBSD, and Solaris. This change adds build constraints to exclude the syft import on these platforms. The hcp-sbom provisioner functionality is unaffected since it downloads and executes pre-built syft binaries at runtime rather than using the Go library directly. The import exists solely for dependency tracking in license and security scanning tools.	2 months ago
Anurag Sharma	0c9d2c689c	docs: remove docs validation from packer (#13577) ... * don't update markdown files anymore This needs to be done in web-unified-docs repo * add contriubting guide for docs	2 months ago
Anurag Sharma	ea25de1315	feat: native sbom generation for hcp (#13566) ... * add configuration fields to SBOMInternalProvisioner * add os detection * move implementation to hcp-sbom * upload scanner binary and execute * use latest syft version always * reduce duplicate code * rename config fields appropriately * default to cyclonedx * add syft dependency * add support for elevated user for windows * add retry for download * add syft dependency Updates go version * optimization for windows * improve docs * update config usage rules * add unit tests * update golang version, fix linter issues * refactor and improvements * simplify few lines * refactor retry for scanner download * resolved conflicts * resolve conflicts from main * stick to syft v1 for compatibility * fix lint issues * stricter version check for syft * fix version eg * update go version to 1.25.7 * go mod changes	2 months ago
Tanmay Jain	d897421b23	Adds grouped and scheduled updates for GitHub Actions (#13575) ... Configures automated dependency updates for GitHub Actions workflows, groups all actions in a single pull request, schedules updates monthly, and ignores major version bumps to reduce noise and streamline updates.	2 months ago
Tanmay Jain	8d9a4cfdfc	Merge pull request #13565 from hashicorp/dependabot/go_modules/github.com/hashicorp/packer-plugin-sdk-0.6.6 ... build(deps): bump github.com/hashicorp/packer-plugin-sdk from 0.6.4 to 0.6.6	2 months ago
Tanmay Jain	897d4a57d7	Merge pull request #13572 from hashicorp/otel-update ... Updates OpenTelemetry dependencies to v1.41.0	2 months ago
Tanmay Jain	2f2704c84d	Updates OpenTelemetry dependencies to v1.41.0 ... Ensures compatibility with the latest OpenTelemetry libraries, potentially addressing security and stability improvements. Prepares codebase for new features and bug fixes from upstream.	2 months ago
dependabot[bot]	a13d7cedf9	build(deps): bump github.com/hashicorp/packer-plugin-sdk ... Bumps [github.com/hashicorp/packer-plugin-sdk](https://github.com/hashicorp/packer-plugin-sdk) from 0.6.4 to 0.6.6. - [Release notes](https://github.com/hashicorp/packer-plugin-sdk/releases) - [Changelog](https://github.com/hashicorp/packer-plugin-sdk/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/packer-plugin-sdk/compare/v0.6.4...v0.6.6) --- updated-dependencies: - dependency-name: github.com/hashicorp/packer-plugin-sdk dependency-version: 0.6.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Tanmay Jain	b7c9df6d70	Merge pull request #13560 from hashicorp/dependabot/go_modules/github.com/hashicorp/hcp-sdk-go-0.167.0 ... build(deps): bump github.com/hashicorp/hcp-sdk-go from 0.136.0 to 0.167.0	2 months ago
dependabot[bot]	4a41160643	build(deps): bump github.com/hashicorp/hcp-sdk-go ... Bumps [github.com/hashicorp/hcp-sdk-go](https://github.com/hashicorp/hcp-sdk-go) from 0.136.0 to 0.167.0. - [Release notes](https://github.com/hashicorp/hcp-sdk-go/releases) - [Changelog](https://github.com/hashicorp/hcp-sdk-go/blob/main/CHANGELOG.md) - [Commits](https://github.com/hashicorp/hcp-sdk-go/compare/v0.136.0...v0.167.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/hcp-sdk-go dependency-version: 0.167.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2 months ago
Tanmay Jain	29b4bf24b2	Merge pull request #13570 from hashicorp/mod-update ... Upgrade go-git to v5.17.0 and grpc to 1.79.3	2 months ago
Tanmay Jain	a96954deaf	Upgrade go-git to v5.17.0 and grpc to 1.79.3	2 months ago
Tanmay Jain	e29c0afb8d	Merge pull request #13564 from hashicorp/vuln-fix ... Updates circl dependency to v1.6.3	2 months ago
Tanmay Jain	6210b0a4ce	Updates circl dependency to v1.6.3 ... Brings in latest upstream improvements and bug fixes from circl. Helps maintain compatibility and security with indirect dependencies.	2 months ago
Blake Ryder	9faf685cc7	Merge pull request #13563 from hashicorp/chore/packer-license-pr-2026-03-11 ... Update LICENSE	2 months ago
creatorHead	e4108562bc	Update LICENSE	2 months ago
Karthik P	2c5d23b26a	Merge pull request #13561 from hashicorp/karthik/go-git/upgrade	3 months ago
kp2099	d7abe43ccc	go-git package upgrade	3 months ago
Tanmay Jain	ef9c2e65f6	Merge pull request #13558 from hashicorp/prepare-1.15.1 ... version: prepare dev v1.15.1	4 months ago
Tanmay Jain	708f748911	version: prepare dev v1.15.1	4 months ago
Tanmay Jain	87a51e9ad8	Merge pull request #13557 from hashicorp/cut-release-1.15.0 ... version: cut release v1.15.0	4 months ago
Tanmay Jain	17bc81ea6c	version: cut release v1.15.0	4 months ago
Tanmay Jain	41d5e9afa6	Merge pull request #13553 from hashicorp/go-update ... Updates Go version to 1.24.12	4 months ago