terraform

Commit Graph

Author	SHA1	Message	Date
Martin Atkins	40255906f0	go.mod: Update OpenTelemetry dependencies to v1.24.0 We previously had a strange assortment of different versions, but it's typically best to have all of these fixed to the same version because otherwise there can be quirky interactions where e.g. an interface type has changed without updating its implementors, etc. This intentionally does not yet upgrade the contrib packages or exporters because they imply other dependency upgrades that we want to perform separately first, so we can avoid changing too much at once.	2 years ago
Martin Atkins	d3b8a55781	go.mod: go get google.golang.org/protobuf@v1.33.0 Many of the changes between these two versions seem to be in parts of the library that Terraform doesn't use, but there are a few sensitive parts: - Slight changes to details of how the library implements the JSON encoding of protobuf. Terraform CLI/Core don't use this, but some of the backends might use it indirectly when talking to their underlying APIs. - Some details of the "protoreflect" package for working with protobuf descriptors dynamically (rather than using generated stubs) have changed, but it seems pretty marginal and unlikely to cause problems.	2 years ago
Martin Atkins	171db752c3	go.mod: go get github.com/xanzy/ssh-agent@v0.3.3 This improves how the library interacts with needed DLLs on Windows.	2 years ago
Martin Atkins	097102ee67	go.mod: go get github.com/pkg/browser@5ac0b6a4141c We use this library as a helper to open a web browser in "terraform login". The only significant update for Terraform's purposes is that on Windows it now launches a browser by directly calling the ShellExecuteW function, instead of running the "start.exe" program that indirectly calls that same function.	2 years ago
Martin Atkins	40c55417af	go.mod: go get github.com/packer-community/winrmcp@latest This update is just changing the readme to say that this dependency is unmaintained. We should probably migrate away from it eventually, but for now we'll just select the latest commit.	2 years ago
Martin Atkins	81c7f70dcc	go.mod: go get github.com/nishanths/exhaustive@v0.12.0 We use this only as part of our static analysis PR check, and so it should not have any runtime impact.	2 years ago
Martin Atkins	56006416ba	go.mod: go get golang.org/x/tools@v0.19.0 We use this just for development-time tools like "stringer", so this upgrade should not have any runtime impact.	2 years ago
Martin Atkins	c541757f4a	go.mod: go get golang.org/x/mod@v0.16.0 Aside from development tool dependencies we use this only for the directory hashing logic used to compute go module hashes, which we also use for Terraform provider hashes. There are no changes to the dirhash package in this update, so this should have no runtime impact.	2 years ago
Martin Atkins	b059985227	go.mod: go get golang.org/x/sync@v0.6.0 This update only changes a documentation comment, so cannot affect runtime behavior.	2 years ago
Martin Atkins	caa7a757bc	go.mod: go get golang.org/x/oauth2@v0.18.0 This only upgrades a Google-specific subpackage, and so the only potential impact is to the GCS backend.	2 years ago
Martin Atkins	9c7ece8ad4	go.mod: go get golang.org/x/net@v0.22.0 This update is largely focused on QUIC implementation changes, which do not directly affect Terraform. There is one fix for the HTTP2 implementation to terminate the stream if a sender recieves an out-of-bounds window update, which makes the implementation better match the specification. This seems unlikely to cause any practical problems for Terraform.	2 years ago
Martin Atkins	fad9c2a4cd	go.mod: go get golang.org/x/crypto@v0.21.0 This update is mostly internal changes that don't affect external behavior. The only update potentially significant to Terraform is the new exclusion of a particular root certificate that is used only for some specific names under the .tr CCTLD, but the certificate database doesn't specify that constraint in a way that the library can understand, so it's excluded to avoid making the trust for that certificate broader than intended.	2 years ago
Martin Atkins	a1d2169c85	go.mod: go get golang.org/x/term@v0.18.0 This update contains no real changes. It just updates transitive dependencies to newer versions that we've already selected anyway.	2 years ago
Martin Atkins	b3f6a6230d	go.mod: go get golang.org/x/sys@v0.18.0 This small update does not directly affect any Terraform functionality.	2 years ago
Martin Atkins	48df3121af	go.mod: go get github.com/mattn/go-shellwords@v1.0.12 We use this library only for interpreting the "TF_CLI_ARG_..." environment variables as additional command line arguments, so the potential impact of this is very limited. The upstream changes here expand on the supported dynamic behavior around backtick command execution and nested environment variable expansion. We don't use either of those features, but just to make sure I changed the code to force them off (since otherwise another package in the program could change the package's global configuration) and added test cases that will fail if they end up turned on.	2 years ago
Martin Atkins	61a5c1f57b	go.mod: go get github.com/hashicorp/terraform-registry-address@v0.2.3 This is really just a bunch of changes to the upstream go.mod for updates to its own dependencies, but Terraform already has new enough versions of those dependencies for other reasons and so this changes nothing.	2 years ago
Martin Atkins	5446b43c7b	go.mod: go get github.com/hashicorp/jsonapi@v1.3.1 This includes just some changes that a future version of hashicorp/go-tfe will need. We aren't yet ready to upgrade go-tfe itself because the cloud integration's mocks need to be updated to match the changed models.	2 years ago
Martin Atkins	8603ee0ab5	go.mod: go get github.com/hashicorp/go-slug@v0.14.0 This has just some changes to the "sourcebundle" building API, which doesn't affect Terraform CLI or Terraform Core because they currently only consume source bundles, not build them.	2 years ago
Martin Atkins	19ac954215	go.mod: go get github.com/hashicorp/go-plugin@v1.6.0 This contains the following changes that are relevant to Terraform's usage: - The auto-mtls certificates are slightly larger and now include issuer, root CAs, and server name entries. - TLS configuration now requires TLS 1.2 - The plugin connection being broken during shutdown is now reported in logs as a "DEBUG", not "ERROR".	2 years ago
Martin Atkins	77a4980074	go.mod: github.com/ProtonMail/go-crypto v1.0.0 We were previously using an untagged commit that slightly predated the v1.0.0 release. The changes between that commit and this tag are small and don't affect our use of this library for verifying signatures.	2 years ago
Martin Atkins	5811be26f8	go.mod: Separate modules at code ownership boundaries Historically it's been hard for us to keep on top of dependency upgrades as a matter of course because it's unclear which code owners might be affected by or responsible for an upgrade of each module. After trying a few different techniques to try to mitigate this, the most promising one seems to be to tell the Go toolchain that each of these components is a separate Go module, but then to stitch them all back together again using replace directives so that we can mostly ignore these module boundaries in everyday development. The one case where we _do_ need to pay attention to these boundaries is also the case where the separation is useful: upgrading a dependency of any one of these modules might potentially force upgrading it for another module too, and so the Go toolchain will help us notice that interaction and we can immediately which code owners might need to be involved in reviewing and testing that particular upgrade. To make that process less onerous, this adds a new makefile target "make syncdeps" which runs "go mod tidy" in all of the modules at once and thus forces the toolchain to align their dependencies to the extent required for them all to be linked together successfully, and to generate go.mod and/or go.sum diffs that will match our configured code ownership paths to trigger the appropriate code review requests. Hopefully before too long we'll be able to move all the backends out into provider plugins and delete the "legacy" module entirely and then this oddness won't be needed anymore, but as long as we're all trying to play together in this same sandbox this is a small amount of extra ceremony in return for hopefully reducing the level of anxiety involved in keeping the system's dependencies up to date more consistently.	2 years ago
Konstantin Yakushev	905b177d05	go get github.com/aws/aws-sdk-go-v2/service/dynamodb@v1.30.4	2 years ago
Konstantin Yakushev	fc5bed2471	go get github.com/aws/aws-sdk-go-v2/feature/s3/manager@v1.16.9	2 years ago
Konstantin Yakushev	5b4a3ba8a2	go get github.com/aws/aws-sdk-go-v2/feature/ec2/imds@v1.15.3	2 years ago
Konstantin Yakushev	f5bd53c6c4	go get github.com/aws/aws-sdk-go-v2@v1.25.3	2 years ago
Martin Atkins	d86eee6c1f	go.mod: Eliminate github.com/apparentlymart/go-dump I originally wrote this library as a stopgap measure because davecgh/go-spew produced a hard-to-read representation of cty.Value due to exposing the raw internals, whereas my "go-dump" instead just pretty-prints whatever fmt.Sprintf("%#v", ...) would return for a given value. However, in the meantime I wrote ctydebug as a more cty-specialized library for this purpose, and we switched to using go-cmp as our primary library for deep-comparing data structures, and so our few remaining uses of apparentlymart/go-dump were vestigial in tests that haven't been updated recently enough to have been updated to our new standards. This commit therefore swaps out all use of that library with combinations of go-cmp and ctydebug, matching our current standards for how to do these sorts of things in tests. This removes our dependency on "go-dump" altogether. At least one of our dependencies is still using go-dump as part of its own test suite, and so the Go toolchain still includes its declared version in our go.sum file. However, this library is no longer linked in to Terraform either in real builds or in test binaries, and so it gets dropped entirely from our go.mod file.	2 years ago
Alisdair McDiarmid	3cc43b0419	Merge pull request #34670 from bschaatsbergen/c/bump-golang-org-x-oauth2 Update `golang.org/x/oauth2` to `v0.17.0` for Google Cloud Storage SDK compatibility	2 years ago
James Bardin	8ff17813b7	update go-cty	2 years ago
James Bardin	a639adc27b	update hcl	2 years ago
James Bardin	bc3c185f2e	update hcl for function diags	2 years ago
Bruno Schaatsbergen	c6ee2652a0	chore: bump golang.org/xoauth2 to v0.17.0	2 years ago
Martin Atkins	929bc7e591	go.mod: Upgrade github.com/zclconf/go-cty-debug We use this utility library only in our tests. It was previously causing panics when comparing deeply-nested cty.Value structures due to a false-positive on go-cmp's cyclic transformer check, but now handles nested values itself by doing its own recursion so that go-cmp believes it's only transforming one level of value.	2 years ago
Brandon Croft	09f9131a5b	Bump go-slug to v0.13.4	2 years ago
dependabot[bot]	38119217d9	build(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#34504 ) Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.3.3 to 1.3.7. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.3.3...v1.3.7) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
James Bardin	f624437174	Merge pull request #34426 from hashicorp/dependabot/go_modules/golang.org/x/crypto-0.17.0 build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0	2 years ago
James Bardin	bc559c1775	pin to scoped functions in hcl	2 years ago
dependabot[bot]	f122f67f6e	build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.16.0 to 0.17.0. - [Commits](https://github.com/golang/crypto/compare/v0.16.0...v0.17.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>	2 years ago
Jamie Finnigan	05b0bdac99	adopt hashicorp/cli fork of mitchellh/cli (#34429 )	2 years ago
Brandon Croft	654fd0041c	Bump go-tfe to v1.41.0	2 years ago
Graham Davison	ebb8b503bc	Merge pull request #34386 from hashicorp/s3/b-configurable-endpoints backend/s3: Fix upstream error with endpoints in shared config files	2 years ago
Graham Davison	1989693dae	Updates dependencies	2 years ago
kmoe	2e91b7160f	deps: bump go-slug to v0.13.3 (#34400 )	2 years ago
Graham Davison	12d4e47565	Updates dependencies	2 years ago
Graham Davison	39b7def2bd	Updates `aws-sdk-go-base`	2 years ago
Martin Atkins	e8e20a2b0a	rpcapi: Emit top-level tracing spans for requests rpcapi is a normal gRPC server once it's running, so if the overall Terraform CLI process has been configured to export telemetry then this will emit a span for each incoming gRPC request. In later commits we'll hopefully add further telemetry downstream to cover interesting child spans such as running Terraform Core operations, but this is at least enough to observe which requests a client is making and what their outcomes were.	2 years ago
Graham Davison	4cfd1b34ef	Fixes dependency error	2 years ago
Graham Davison	4df60b4b90	Adds `https_proxy` and `no_proxy` parameters	2 years ago
Graham Davison	c3d4124ccf	Updates `aws-sdk-go-base`	2 years ago
Graham Davison	2ad5ec2d53	Updates dependency	2 years ago
Graham Davison	fce0cf6d9c	Adds support for `sso` endpoint override	2 years ago

1 2 3 4 5 ...

513 Commits (3d211eb42ffcdc9d33d56bc2785d64b22f158c39)