Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Bump github.com/hashicorp/go-getter from 1.5.3 to 1.7.0 (#125)
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.5.3 to 1.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/hashicorp/go-getter/releases">github.com/hashicorp/go-getter's releases</a>.</em></p> <blockquote> <h2>v1.7.0</h2> <h2>What's Changed</h2> <ul> <li>docs: provide logging recommendations by <a href="https://github.com/mickael-hc"><code>@mickael-hc</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/371">hashicorp/go-getter#371</a></li> <li>Update aws sdk version by <a href="https://github.com/Jukie"><code>@Jukie</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/384">hashicorp/go-getter#384</a></li> <li>Update S3 URL in README by <a href="https://github.com/twelvelabs"><code>@twelvelabs</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/378">hashicorp/go-getter#378</a></li> <li>Migrate to GHA by <a href="https://github.com/claire-labry"><code>@claire-labry</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/379">hashicorp/go-getter#379</a></li> <li>[COMPLIANCE] Update MPL 2.0 LICENSE by <a href="https://github.com/hashicorp-copywrite"><code>@hashicorp-copywrite</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/386">hashicorp/go-getter#386</a></li> <li>remove codesign entirely from go-getter by <a href="https://github.com/claire-labry"><code>@claire-labry</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/408">hashicorp/go-getter#408</a></li> <li>Add decompression bomb mitigation options for v1 by <a href="https://github.com/picatz"><code>@picatz</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/412">hashicorp/go-getter#412</a></li> <li>v1: decompressors: add LimitedDecompressors helper by <a href="https://github.com/shoenig"><code>@shoenig</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/413">hashicorp/go-getter#413</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mickael-hc"><code>@mickael-hc</code></a> made their first contribution in <a href="https://redirect.github.com/hashicorp/go-getter/pull/371">hashicorp/go-getter#371</a></li> <li><a href="https://github.com/Jukie"><code>@Jukie</code></a> made their first contribution in <a href="https://redirect.github.com/hashicorp/go-getter/pull/384">hashicorp/go-getter#384</a></li> <li><a href="https://github.com/twelvelabs"><code>@twelvelabs</code></a> made their first contribution in <a href="https://redirect.github.com/hashicorp/go-getter/pull/378">hashicorp/go-getter#378</a></li> <li><a href="https://github.com/hashicorp-copywrite"><code>@hashicorp-copywrite</code></a> made their first contribution in <a href="https://redirect.github.com/hashicorp/go-getter/pull/386">hashicorp/go-getter#386</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hashicorp/go-getter/compare/v1.6.2...v1.7.0">https://github.com/hashicorp/go-getter/compare/v1.6.2...v1.7.0</a></p> <h2>v1.6.2</h2> <h2>What's Changed</h2> <ul> <li>Fix <code>no getter available for X-Terraform-Get source protocol</code> when using bare github or bitbucket hostnames: <a href="https://redirect.github.com/hashicorp/go-getter/issues/370">#370</a></li> </ul> <h2>v1.6.1</h2> <p>No release notes provided.</p> <h2>v1.5.11</h2> <h2>What's Changed</h2> <ul> <li>Redact SSH key from URL query parameter by <a href="https://github.com/macedogm"><code>@macedogm</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/348">hashicorp/go-getter#348</a></li> <li>gcs: only run oauth test if env var is set by <a href="https://github.com/schmichael"><code>@schmichael</code></a> in <a href="https://redirect.github.com/hashicorp/go-getter/pull/349">hashicorp/go-getter#349</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/macedogm"><code>@macedogm</code></a> made their first contribution in <a href="https://redirect.github.com/hashicorp/go-getter/pull/348">hashicorp/go-getter#348</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/hashicorp/go-getter/compare/v1.5.10...v1.5.11">https://github.com/hashicorp/go-getter/compare/v1.5.10...v1.5.11</a></p> <h2>v1.5.10</h2> <ul> <li>When fetching files from Google Cloud Storage, go-getter will now consider the <code>GOOGLE_OAUTH_ACCESS_TOKEN</code> environment variable as a potential source of a Google Cloud Platform access token. (<a href="https://redirect.github.com/hashicorp/go-getter/pull/302">#302</a>)</li> <li>Fixed a regression from v1.5.9 where <code>git::</code> sources would no longer accept direct commit ids in the optional <code>ref</code> argument, and would instead only allow named refs from the remote. As a compromise, go-getter will now accept for <code>ref</code> anything that <code>git checkout</code> would accept as a valid tree selector, <em>unless</em> you also set <code>depth</code> to activate shallow clone mode in which case <code>ref</code> must be a named ref due to requirements of the Git protocol in that case. (<a href="https://redirect.github.com/hashicorp/go-getter/pull/345">#345</a>)</li> </ul> <h2>v1.5.9</h2> <p>Fix git shallow clone (<code>depth</code> parameter) for any ref. See <a href="https://redirect.github.com/hashicorp/go-getter/issues/266">#266</a></p> <h2>v1.5.8</h2> <p>No release notes provided.</p> <h2>v1.5.7</h2> <p>In 1.5.7, we moved to using signore, an internal tool, for GPG signing.</p> <h2>v1.5.5</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/hashicorp/go-getter/commit/0edab85348271c843782993345b07b1ac98912e6"><code>0edab85</code></a> Merge pull request <a href="https://redirect.github.com/hashicorp/go-getter/issues/413">#413</a> from hashicorp/limited-decompressors-helper</li> <li><a href="https://github.com/hashicorp/go-getter/commit/b38771f0162e6ef445f793c8c62efc31d56d4297"><code>b38771f</code></a> decompressors: add LimitedDecompressors helper</li> <li><a href="https://github.com/hashicorp/go-getter/commit/78e6721a2a76266718dc92c3c03c1571dffdefdc"><code>78e6721</code></a> Merge pull request <a href="https://redirect.github.com/hashicorp/go-getter/issues/412">#412</a> from hashicorp/mitigate-decompression-bomb</li> <li><a href="https://github.com/hashicorp/go-getter/commit/cf15d8405d9a700e9c25df7194d095b7dfdff914"><code>cf15d84</code></a> Add decompression bomb mitigation options</li> <li><a href="https://github.com/hashicorp/go-getter/commit/d229395f5a7d9f36340f313c7130ae3852cedc1a"><code>d229395</code></a> Merge pull request <a href="https://redirect.github.com/hashicorp/go-getter/issues/408">#408</a> from hashicorp/remove-codesign</li> <li><a href="https://github.com/hashicorp/go-getter/commit/b55f8f7e9bfa4a102bcc8d8c2acfcd2b133fa7f3"><code>b55f8f7</code></a> remove codesign entirely from go-getter</li> <li><a href="https://github.com/hashicorp/go-getter/commit/611343a8c115405f84a0e47a420a7c07ecdc6e5b"><code>611343a</code></a> Merge pull request <a href="https://redirect.github.com/hashicorp/go-getter/issues/386">#386</a> from hashicorp/compliance/add-license</li> <li><a href="https://github.com/hashicorp/go-getter/commit/7220a3dd635be2967b7de48658611092d56481eb"><code>7220a3d</code></a> Merge pull request <a href="https://redirect.github.com/hashicorp/go-getter/issues/379">#379</a> from hashicorp/migrate-to-gha</li> <li><a href="https://github.com/hashicorp/go-getter/commit/2daac52df7e59e2fd7e5339d712e3321f36f4844"><code>2daac52</code></a> Update get_gcs_test.go</li> <li><a href="https://github.com/hashicorp/go-getter/commit/95c5f2d069aa35b144090709230d724b3a871bd4"><code>95c5f2d</code></a> Update get_s3_test.go</li> <li>Additional commits viewable in <a href="https://github.com/hashicorp/go-getter/compare/v1.5.3...v1.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/hashicorp/go-getter&package-manager=go_modules&previous-version=1.5.3&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/codefresh-io/terraform-provider-codefresh/network/alerts). </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
- Loading branch information