v1.7.1

Merge pull request #424 from hashicorp/fix-av-reports

Remove `bomb.zip` test file to stop anti-virus noise

v2.2.0

What's Changed

• [v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #400
• Port Decompression bomb security changes from v1 by @nywilken in #414
• Update Go-Getter V2 to use Go 1.18 by @nywilken in #381

Full Changelog: v2.1.1...v2.2.0

v1.7.0

What's Changed

• docs: provide logging recommendations by @mickael-hc in #371
• Update aws sdk version by @jukie in #384
• Update S3 URL in README by @twelvelabs in #378
• Migrate to GHA by @claire-labry in #379
• [COMPLIANCE] Update MPL 2.0 LICENSE by @hashicorp-copywrite in #386
• remove codesign entirely from go-getter by @claire-labry in #408
• Add decompression bomb mitigation options for v1 by @picatz in #412
• v1: decompressors: add LimitedDecompressors helper by @shoenig in #413

New Contributors

• @mickael-hc made their first contribution in #371
• @jukie made their first contribution in #384
• @twelvelabs made their first contribution in #378
• @hashicorp-copywrite made their first contribution in #386

Full Changelog: v1.6.2...v1.7.0

v2.1.1

What's Changed

• Add Timeout to SmbClientGetter to go-getter/v2 by @nywilken in #369
• Upgrade AWS SDK version by @kmoe in #385

Other Changes

• Fix Go Tests for V2 by @claire-labry in #392
• Migrate go-getter v2 to GHA by @claire-labry in #388
• • Add Malformed S3 URL test by @nywilken in #380

New Contributors

• @kmoe made their first contribution in #385

Full Changelog: v2.1.0...v2.1.1

v1.6.2

What's Changed

• Fix no getter available for X-Terraform-Get source protocol when using bare github or bitbucket hostnames: #370

v2.1.0

What's Changed

• Multiple fixes for go-getter v2 by @nywilken in #361
• Update X-Terraform-Get error messaging to match v1 by @nywilken in #364
• Update default Getters with known defaults by @nywilken in #363

Full Changelog: v2.0.2...v2.1.0

v1.6.1

Merge pull request #362 from hashicorp/update-x/sys-for-go1.18

Update `golang.org/x/sys` to work with `go1.18`

v2.0.2

What's Changed

• update s3 gcs and cmd to use most recent v2 module by @azr in #352
• Removed ova file type from the list of supported decompressors by @nywilken in #354

Full Changelog: v2.0.1...v2.0.2

v2.0.1

Enhancements

• Append tar and ova decompressor in v2 by @LeConTesteur in #351

Bug fixes 🐞

• fixes #320: Pass context to NewRequestWithContext so HTTP requests can… by @zeisss in #324
• Ignore comments in checksum files by @azr in #350

New Contributors

• @LeConTesteur made their first contribution in #351

Full Changelog: v2.0.0...v2.0.1

v1.5.11

What's Changed

• Redact SSH key from URL query parameter by @macedogm in #348
• gcs: only run oauth test if env var is set by @schmichael in #349

New Contributors

• @macedogm made their first contribution in #348

Full Changelog: v1.5.10...v1.5.11