613 commits

Author	SHA1	Message	Date
Michael Yocca	18d0d4f4b8	chore: bump go-tfe dep to v1.105.0	2026-05-12 09:13:26 +02:00
Daniel Schmidt	6e8052393c	update go version	2026-05-11 15:27:42 +02:00
Daniel Schmidt	8bb06a4a89	update net package	2026-05-11 15:27:42 +02:00
dependabot[bot]	daff46edf6	build(deps): bump github.com/Azure/go-ntlmssp (#38433)	2026-04-27 13:16:42 +02:00
Daniel Banck	cd5eb226cc	Bump github.com/go-jose/go-jose/v4 to v4.1.4	2026-04-13 17:44:11 +02:00
Sarah French	2c5e03f229	Bump go-getter to v1.8.6, bump Go version, address breaking changes introduced by dependency bump. (#38374) ... * chore: go get github.com/hashicorp/go-getter@v1.8.6 & make syncdeps. Replace deprecated methods. The interceptor methods used in the rpcapi package needed to be replaced with the new stats-handlers. These were removed around v1.36.0 of the go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency * chore: Update .go-version * tests: Address breaking change in cloud.google.com/go/storage dependency that affects returned errors See 0dd7d3d62e for more information.	2026-04-13 14:20:02 +01:00
Sarah French	9b970d5454	chore: go get go.opentelemetry.io/otel/sdk@v1.43.0 & make syncdeps (#38366)	2026-04-09 13:55:20 +02:00
Sarah French	6f6fef17a3	Bump github.com/aws/aws-sdk-go-v2 related packages to address reported vulnerability (#38362) ... * chore: go get github.com/aws/aws-sdk-go-v2/service/s3@v1.97.3 * chore: make syncdeps	2026-04-08 21:19:36 +01:00
dependabot[bot]	8b9fe1a7f6	Bump github.com/antchfx/xpath from 1.1.10 to 1.3.6 ... Bumps [github.com/antchfx/xpath](https://github.com/antchfx/xpath) from 1.1.10 to 1.3.6. - [Release notes](https://github.com/antchfx/xpath/releases) - [Commits](https://github.com/antchfx/xpath/compare/v1.1.10...v1.3.6) --- updated-dependencies: - dependency-name: github.com/antchfx/xpath dependency-version: 1.3.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-04-01 12:17:11 +02:00
Brandon Croft	b4ddd25f6e	Bump terraform-svchost to 0.2.1 (#38236)	2026-04-01 12:08:23 +02:00
James Bardin	4279e71f05	udpate go-cty@v1.18.0	2026-03-12 13:54:30 -04:00
dependabot[bot]	43716508b7	Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 ... Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-02-26 11:39:46 +01:00
Daniel Banck	6826173a13	Bump go.opentelemetry.io/otel to v1.40.0	2026-02-23 18:04:47 +01:00
Sarah French	817ed318db	chore: Update go version from 1.25 to 1.25.7 (#38185) ... * chore: Update go version from 1.25 to 1.25.7 * chore: make syncdeps	2026-02-17 17:09:45 +00:00
Radek Simko	889c90d565	go get -tool github.com/hashicorp/copywrite@v0.25.0	2026-02-17 13:56:34 +00:00
Brandon Croft	12276b836a	Revert "bump terraform-svchost to v0.2.0" ... This reverts commit 0f11f38d47.	2026-02-13 09:04:30 -07:00
Brandon Croft	0f11f38d47	bump terraform-svchost to v0.2.0	2026-02-04 09:11:20 +01:00
Jared Baker	6475423325	backend/s3: bump github.com/hashicorp/aws-sdk-go-base/v2 ... Incrementing the `aws-sdk-go-base` dependecy will also pull in the latest version of the AWS SDK for Go V2, which includes support for the newly launched `aws login` authentication method.	2026-01-08 10:59:37 -05:00
James Pogran	2c075b9f8e	Add component registry source resolution support to Terraform Stacks (#37888) ... * Add component registry source resolution support to Terraform Stacks This change implements the missing component source resolution case in the stack configuration loader, enabling Terraform Stacks to properly handle component registry sources from HCP Terraform and other component registries. The implementation mirrors the existing module registry resolution workflow, where component sources are first resolved to their versioned form using the source bundle's component metadata, then converted to final source addresses that can be used to locate the actual component code. This completes the integration between the terraform-registry-address component parsing capabilities and the go-slug sourcebundle component resolution APIs. * chore: bump go-slug to v0.18.1 * fix: add case for component final source type * chore: rm space * chore: sync module deps * chore: update testdata with separate bundle * fix: manifest file json obj with trailing comma * Add changelog entry to 1.14 --------- Co-authored-by: Michael Yocca <michael.yocca@hashicorp.com>	2025-12-10 09:16:03 -05:00
dependabot[bot]	7034a193d9	build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#37925) ... * build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0. - [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * run syncdeps --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Daniel Banck <daniel@dbanck.de>	2025-11-21 10:54:50 +00:00
Sarah French	1dd8e60f15	chore: Bump golang.org/x/crypto dependency, ignore SA4003 linting errors globally (#37901) ... * chore: Upgrade golang.org/x/crypto - `go get golang.org/x/crypto@v0.44.0` * chore: Upgrade golang.org/x/crypto in submodules - `make syncdeps` * chore: Run `make generate` * chore: Ignore SA4003 linter error globally, as `golang.org/x/tools/cmd/stringer` generates code that breaks this rule when it's used with custom types that have unsigned integers or bytes as the underlying type.	2025-11-17 15:01:28 +00:00
Sarah French	2e5b5dee5d	Upgrade protoc and protoc-gen-go-grpc versions to matching terraform-plugin-go (#37647) ... * Update protoc version in downloader script * go get google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 This matched terraform-plugin-go * make protobuf * Run `make protobuf` * Update generator to handle generic types from google.golang.org/grpc Looks like this was added in v1.69.3 in https://github.com/grpc/grpc-go/pull/7057 ? * Run `make generate` * Fix "cannot infer Res" compile error - more usage of generics * More fixing compile errors due to switching to use of a generic * Make putting `google.golang.org/grpc` import into generated files conditional * Run `make generate` * Update more places where generics now need to be used * Update generator to handle any types from google.golang.org/grpc in same switch case.	2025-10-22 14:46:18 +01:00
Radek Simko	cbda324977	backend/oss: Bump github.com/aliyun/aliyun-oss-go-sdk to v2.1.1 (#37442)	2025-10-15 08:49:00 -04:00
Dirk Avery	edb3f6487d	Bump go-getter v1.8.2	2025-10-09 18:15:58 -04:00
Liam Cervante	6b17cfe2e5	actions: connect invoke flag with TFC (#37544) ... * actions: connect invoke flag with TFC * use latest go-tfe	2025-10-08 19:29:32 +02:00
Dirk Avery	5e3a9fbdf3	Bump aws-sdk-go-base	2025-10-02 15:16:29 -04:00
Sarah French	ffbb62b369	Swap to using google.golang.org/protobuf/cmd/protoc-gen-go instead of github.com/golang/protobuf/protoc-gen-go (#37685) ... * Reformat Args in steps definitions * Swap to using the new version of protoc-gen-go that doesn't include grpc support (instead it relies on protoc-gen-go-grpc). Update command flags to reflect this change in tooling. See this comment for explanation: https://github.com/golang/protobuf/issues/1070#issuecomment-607293496 * Run `make protobuf` with problem generate steps commented out. * Use `require_unimplemented_servers=false` to minimise changes at the time of upgrading tooling In future we can navigate the consequences of this in its own PR. * WIP * Fix out/opt typo, add remaining flags once terraform1.proto was being found ok * Run `make protobuf` * `go get google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.3.0` && `go mod tidy` This version includes a feature that allows the copyright comment in the .proto file to be pulled across to generated _grpc.pb.go files. * Run `make protobuf` with new version of protoc-gen-go-grpc that allows copyright comment to be copied to generated output files * Potential fix for `internal/rpcapi/dynrpcserver/generator`	2025-09-30 11:52:24 +01:00
Daniel Banck	1ac8497994	Add support for Terraform Search in the cloud backend (TF-25935) (#37479)	2025-09-15 13:21:05 +02:00
Kristin Laemmert	bbb8af989c	deps: bump xz to address bug in previous version (#37573) ... * deps: bump xz, bug in previous version	2025-09-08 14:48:26 -04:00
Dirk Avery	92bf04ae16	bump: go-getter to 1.8.0	2025-09-05 17:39:55 -04:00
Amartya Majumdar	54af16eab9	[IPL-7725] Updating Calls to the Remote HCP Terraform API to Retrieve All Workspace Variables (#37241) ... * [IPL-7725] Resolving merge conflicts * [IPL-7725] Updating go.sum files --------- Co-authored-by: Amartya Majumdar <a.majumdar1041@gmail.com>	2025-09-03 15:26:07 +02:00
Deniz Onur Duzgun	05dfb52c2d	bump: go-getter to v1.7.9 (#37452) ... * bump: go-getter to v1.7.9 * run sync deps --------- Co-authored-by: Samsondeen Dare <samsondeen.dare@hashicorp.com>	2025-08-19 14:42:36 -04:00
Samsondeen	9f01530237	go: bump version to 1.25 (#37436)	2025-08-18 12:17:59 +02:00
James Bardin	fdc7be2676	udpate go-plugin@v1.7.0	2025-08-11 18:58:19 -04:00
Radek Simko	71a300c8f7	go: bump version to 1.24.5 (#37304)	2025-07-09 13:53:51 +02:00
Liam Cervante	2a1b4c3ed4	Update go-cty and HCL for 1.13 release (#37298)	2025-07-09 13:05:18 +02:00
Radek Simko	af07bd388e	deps: Bump terraform-registry-address to v0.3.0 (#37230) ... * deps: Bump terraform-registry-address to v0.3.0 * make syncdeps	2025-06-11 13:39:51 +00:00
dependabot[bot]	49a4ad3b26	Bump github.com/cloudflare/circl from 1.4.0 to 1.6.1 (#37227) ... Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.4.0 to 1.6.1. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.4.0...v1.6.1) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-11 09:28:23 +00:00
dependabot[bot]	23b71ddae6	Bump github.com/cli/go-gh/v2 from 2.11.2 to 2.12.1 (#37188) ... Bumps [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) from 2.11.2 to 2.12.1. - [Release notes](https://github.com/cli/go-gh/releases) - [Commits](https://github.com/cli/go-gh/compare/v2.11.2...v2.12.1) --- updated-dependencies: - dependency-name: github.com/cli/go-gh/v2 dependency-version: 2.12.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-09 11:59:28 +01:00
Syed Shahidh Ilhan F	434bbc4e2f	fix: Update K8s and Consul API dependencies to address security vulnerabilities (#37150) ... * bump vulnerable packages Signed-off-by: SYSHIL <ilhan.syed@gmail.com> * make syncdeps Signed-off-by: SYSHIL <ilhan.syed@gmail.com> --------- Signed-off-by: SYSHIL <ilhan.syed@gmail.com>	2025-05-29 21:10:24 +01:00
Radek Simko	474fe47e25	backend/oci/deps: Pin flock to v0.10.0 (#36913)	2025-04-22 13:30:47 +01:00
Ravi Prakash Bharti	804e970211	Added Terraform backend implementation for OCI Object Storage (#36872) ... * Added Terraform backend implementation for OCI Object Storage * Update website/docs/language/backend/oci.mdx updated suggestion Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> * Update website/docs/language/backend/oci.mdx Added suggestion Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> * Update website/docs/language/backend/oci.mdx added suggestions Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> * Addressed feedback for variable prefix, documentation, prepareConfig * removed additional logs * Removed md5hash seperate file * Fix doc * go.mod * Added mandatory Unit test for oci backend * run go mod tidy and added test for TestBackendStateLocksInWS and TestBackendStateForceUnlockInWS * moved changelog to v1.12.0 * Addressed feedback_April_16 removed global log, Added tests and codeowner * mod file * Update CODEOWNERS Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com> * Addressed feedbach april 17th * mock env var and unset region for InstancePrincipal * syncdeps fix * goimports fix * Update internal/backend/remote-state/oci/backend_test.go Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com> --------- Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com>	2025-04-22 09:38:18 +01:00
Daniel Banck	0fb145daa8	Bump Go version to 1.24.2 (#36870)	2025-04-10 11:28:07 +02:00
Ricard Bejarano	200f4cabb0	Bump golang.org/x/net from 0.37.0 to 0.38.0 (fixes CVE-2025-22872) (#36800) ... * Bump golang.org/x/net from 0.37.0 to 0.38.0 (fixes CVE-2025-22872) Signed-off-by: Ricard Bejarano <ricard@bejarano.io> * add changelog entry * go mod tidy Signed-off-by: Ricard Bejarano <ricard@bejarano.io> * Revert "add changelog entry" This reverts commit 88219e78e9. * make syncdeps Signed-off-by: Ricard Bejarano <ricard@bejarano.io> --------- Signed-off-by: Ricard Bejarano <ricard@bejarano.io>	2025-04-01 12:00:36 +01:00
Sarah French	6ef0498f9c	Update to Go 1.24.1, update dependencies (#36790) ... * go get github.com/hashicorp/go-azure-helpers@v0.72.0 * .go-version to 1.24.1 * Run `./scripts/syncdeps.sh` This propagates the Go version upgrade * gcs : go get google.golang.org/api@v0.155.0 * gcs: go mod tidy * Run `./scripts/syncdeps.sh` * make generate && make protobuf	2025-03-27 17:15:46 +00:00
dependabot[bot]	9313c6696a	Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#36748) ... * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.1 to 4.5.2. - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2) --- updated-dependencies: - dependency-name: github.com/golang-jwt/jwt/v4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Run `./scripts/syncdeps.sh` --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sarah French <sarah.french@hashicorp.com>	2025-03-27 12:11:52 +00:00
Sarah French	a04664a2e5	Update hashicorp/go-plugin dependency (#36561) ... * go get github.com/hashicorp/go-plugin * ./scripts/syncdeps.sh * make protobuf	2025-03-26 12:09:01 +00:00
Sarah French	53172a5f8a	Bump golang.org/x/net to v0.36.0 (#36691) ... * go get golang.org/x/net@v0.36.0 * go mod tidy * Run syncdeps.sh	2025-03-13 11:23:48 +00:00
Sebastian Marines	9237b11277	backend/s3: update hashicorp/aws-sdk-go-base/v2 to v2.0.0-beta62 ... This upgrade will add support for S3 backends in several new regions, including `mx-central-1`.	2025-03-06 11:09:19 -05:00
Sarah French	16598ab7ef	Update hashicorp/cli dependency (#36607) ... * go get github.com/hashicorp/cli * Run ./scripts/syncdeps.sh	2025-03-03 11:40:15 +00:00