Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps github.com/hashicorp/terraform-plugin-sdk/v2 from 2.30.0 to 2.37.0.

Release notes

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's releases.

v2.37.0

NOTES:

  • all: This Go module has been updated to Go 1.23 per the Go support policy. It is recommended to review the Go 1.23 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1445)
  • all: This release contains new fields and structs for implmenting managed resource identity. Resource identity is data that is defined by a separate schema and is stored alongside resource state. Identity data is used by Terrform to uniquely identify a remote object and is meant to be immutable during the remote object's lifecycle. Resources that support identity can now be imported using the identity attribute in Terraform configuration import blocks, available in Terraform v1.12+. The resource.Identity field on the schema.Resource struct can be used to support identity by defining an identity schema. Once the identity schema is defined, you can read and store identity data in the state file with the new IdentityData struct that is available via the Identity() method on schema.ResourceData and schema.ResourceDiff structs. (#1444)

FEATURES:

  • helper/schema: Added new TestResourceDataWithIdentityRaw function for creating a ResourceData struct with identity data for unit testing. (#1475)
  • helper/schema: Added new Identity field to Resource that supports defining an identity schema for managed resources only. (#1444)
  • Added new ImportStatePassthroughWithIdentity helper that can support both identity and ID importing via a single field. (#1474)

ENHANCEMENTS:

  • helper/schema: Added RequiredForImport and OptionalForImport fields to the Schema struct, which are only valid for identity schemas. (#1444)
  • helper/schema: Updated ResourceData to support passing of identity data in CRUD and import functions for managed resources. (#1444)

BUG FIXES:

  • helper/schema: Fixed bug that blocked write-only attributes from being used with resources without update functions. (#1472)

v2.37.0-beta.1

NOTES:

  • This beta pre-release continues the implementation of managed resource identity, which should now be used with Terraform v1.12.0-beta2. Managed resources now can support import by identity during plan and apply workflows. Managed resources that already support import via the schema.Resource.Importer field still need to set an ID during import when an identity is provided. The RequiredForImport and OptionalForImport fields on the identity schema can be used to control the validation that Terraform core will apply to the import config block. (#1463)

v2.37.0-alpha.1

NOTES:

  • all: This Go module has been updated to Go 1.23 per the Go support policy. It is recommended to review the Go 1.23 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1445)
  • This alpha pre-release contains an initial implementation for managed resource identity, which can used with Terraform v1.12.0-alpha20250319, to store and read identity data during plan and apply workflows. A managed resource identity can be used by defining an identity schema in the resource.Identity field. Once the identity schema is defined, you can read and store identity data in the new IdentityData struct that is available via the new Identity() method on ResourceData and ResourceDiff structs. (#1444)

v2.36.1

NOTES:

  • Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#1375)

BUG FIXES:

  • helper/schema: Fixed bug that allowed write-only attributes within set nested blocks. Any attribute within a set nested block with WriteOnly set to true will now trigger an error message. (#1427)

v2.36.0

NOTES:

  • Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#1375)

FEATURES:

  • helper/schema: Added WriteOnly schema behavior for managed resource schemas to indicate a write-only attribute. Write-only attribute values are not saved to the Terraform plan or state artifacts. (#1375)
  • helper/validation: Added PreferWriteOnlyAttribute() validator that warns practitioners when a write-only version of a configured attribute is available. (#1375)

... (truncated)

Changelog

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's changelog.

2.37.0 (May 16, 2025)

NOTES:

  • all: This Go module has been updated to Go 1.23 per the Go support policy. It is recommended to review the Go 1.23 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1445)
  • all: This release contains new fields and structs for implmenting managed resource identity. Resource identity is data that is defined by a separate schema and is stored alongside resource state. Identity data is used by Terrform to uniquely identify a remote object and is meant to be immutable during the remote object's lifecycle. Resources that support identity can now be imported using the identity attribute in Terraform configuration import blocks, available in Terraform v1.12+. The resource.Identity field on the schema.Resource struct can be used to support identity by defining an identity schema. Once the identity schema is defined, you can read and store identity data in the state file with the new IdentityData struct that is available via the Identity() method on schema.ResourceData and schema.ResourceDiff structs. (#1444)

FEATURES:

  • helper/schema: Added new TestResourceDataWithIdentityRaw function for creating a ResourceData struct with identity data for unit testing. (#1475)
  • helper/schema: Added new Identity field to Resource that supports defining an identity schema for managed resources only. (#1444)
  • Added new ImportStatePassthroughWithIdentity helper that can support both identity and ID importing via a single field. (#1474)

ENHANCEMENTS:

  • helper/schema: Added RequiredForImport and OptionalForImport fields to the Schema struct, which are only valid for identity schemas. (#1444)
  • helper/schema: Updated ResourceData to support passing of identity data in CRUD and import functions for managed resources. (#1444)

BUG FIXES:

  • helper/schema: Fixed bug that blocked write-only attributes from being used with resources without update functions. (#1472)

2.37.0-beta.1 (April 18, 2025)

NOTES:

  • This beta pre-release continues the implementation of managed resource identity, which should now be used with Terraform v1.12.0-beta2. Managed resources now can support import by identity during plan and apply workflows. Managed resources that already support import via the schema.Resource.Importer field still need to set an ID during import when an identity is provided. The RequiredForImport and OptionalForImport fields on the identity schema can be used to control the validation that Terraform core will apply to the import config block. (#1463)

2.37.0-alpha.1 (March 20, 2025)

NOTES:

  • all: This Go module has been updated to Go 1.23 per the Go support policy. It is recommended to review the Go 1.23 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1445)
  • This alpha pre-release contains an initial implementation for managed resource identity, which can used with Terraform v1.12.0-alpha20250319, to store and read identity data during plan and apply workflows. A managed resource identity can be used by defining an identity schema in the resource.Identity field. Once the identity schema is defined, you can read and store identity data in the new IdentityData struct that is available via the new Identity() method on ResourceData and ResourceDiff structs. (#1444)

2.36.1 (February 19, 2025)

NOTES:

  • Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#1375)

BUG FIXES:

  • helper/schema: Fixed bug that allowed write-only attributes within set nested blocks. Any attribute within a set nested block with WriteOnly set to true will now trigger an error message. (#1427)

2.36.0 (February 04, 2025)

NOTES:

  • Write-only attribute support is in technical preview and offered without compatibility promises until Terraform 1.11 is generally available. (#1375)

... (truncated)

Commits
  • d636e58 Update changelog
  • d644d7d Update meta package SDKVersion
  • 5ffe9fb build(deps): bump github.com/hashicorp/terraform-plugin-go (#1486)
  • d547ff7 build(deps): bump github.com/hashicorp/terraform-json (#1482)
  • 67a5b0a build(deps): bump actions/setup-go from 5.4.0 to 5.5.0 (#1483)
  • 39397e1 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0 (#1484)
  • b3361de github: Use Dependabot to keep Actions updated (#1481)
  • 104e551 ResourceIdentity: Validate that identities do not change after Terraform stor...
  • d40c432 Prep changelogs for v2.37.0 release (#1479)
  • 5e69f97 Add catalog metadata (META.d) (#1480)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/hashicorp/terraform-plugin-sdk/v2](https://github.com/hashicorp/terraform-plugin-sdk) from 2.30.0 to 2.37.0.
- [Release notes](https://github.com/hashicorp/terraform-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-sdk@v2.30.0...v2.37.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 1, 2025
Copy link

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ GoSec scan found code issues:

  1. G115: integer overflow conversion int -> uint32, Severity: HIGH
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/kubevirt/schema/virtualmachineinstance/domain_spec.go:295:26
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/kubevirt/schema/virtualmachineinstance/domain_spec.go:292:26
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/kubevirt/schema/virtualmachineinstance/domain_spec.go:289:24
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/workspace_rbac.go:42:19
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/workspace_namespace.go:41:20
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_platform_setting.go:395:58
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_platform_setting.go:144:57
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_pcg_ippool.go:207:20
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:73:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:72:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:71:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:70:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_cluster_vsphere.go:893:43
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_cluster_vsphere.go:878:37
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_cluster_vsphere.go:864:14
    • ... (truncated), run gosec locally to capture all failure for the rule G115
  2. G402: TLS InsecureSkipVerify set true., Severity: HIGH
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/provider.go:208:93
  3. G109: Potential Integer overflow made by strconv.Atoi result conversion to int16/32, Severity: HIGH
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/workspace_namespace.go:41:15

Please review these findings and fix the issues before merging.

@SivaanandM SivaanandM changed the base branch from main to tf-palette-4.7.b September 5, 2025 05:29
@SivaanandM SivaanandM merged commit 023eba6 into tf-palette-4.7.b Sep 5, 2025
6 checks passed
@SivaanandM SivaanandM deleted the dependabot/go_modules/github.com/hashicorp/terraform-plugin-sdk/v2-2.37.0 branch September 5, 2025 05:34
vishwanaths pushed a commit that referenced this pull request Sep 10, 2025
* PLT-1887: Fixed eks dynamic cluster provisioning, removed cp entry in api call (#643)

* Fix: update sso resource to have correct validation and description within oidc section (#641) (#642)

Co-authored-by: dal13002 <[email protected]>

* saml email fix

* PLT:1898- Fixed GoSec issues (#645)

* Fixed G115 Go sec issues

* Fixed G109 and G402

* PLT-1898: Fixed all GO sec issues

* Added windows support for spectro-tf-format script

* refreshed sdk

Signed-off-by: Sivaanand Murugesan <[email protected]>

* refreshed depandabot issue

* PLT-1879: Added LXD support for MAAS Cluster (#651)

* PLT-1879: Added LXD support for MAAS Cluster

* docs

* PLT-1799:Added support for AzureUSSecretCloud in Azure cloud account. (#653)

* refresh sdk

* PLT-1944: Removed depricated spectrocloud_macro resources (#661)

* PLT-1852: Added import support for all resources (#647)

* PLT-1852: Added import support for all resoruces

* Fixed alert import

Signed-off-by: Sivaanand Murugesan <[email protected]>

* fixed import for application profile

* tested cluster group import

* fix

* refreshed docs

* Fixed application import

* refresh template

* Fixed ippool import

* fixed dns map import

* tested backup storage location

* test oci registry

* fixed all resource import

---------

Signed-off-by: Sivaanand Murugesan <[email protected]>

* PLT-1946: Fixed application profile import (#662)

* Bump github.com/hashicorp/go-cty (#659)

Bumps [github.com/hashicorp/go-cty](https://github.com/hashicorp/go-cty) from 1.4.1-0.20200414143053-d3edf31b6320 to 1.5.0.
- [Changelog](https://github.com/hashicorp/go-cty/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/go-cty/commits/v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-cty
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.30.0 to 2.37.0 (#657)

Bumps [github.com/hashicorp/terraform-plugin-sdk/v2](https://github.com/hashicorp/terraform-plugin-sdk) from 2.30.0 to 2.37.0.
- [Release notes](https://github.com/hashicorp/terraform-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-sdk@v2.30.0...v2.37.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sivaanand Murugesan <[email protected]>

* Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#660)

Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump k8s.io/api from 0.23.5 to 0.34.0 (#658)

Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.23.5 to 0.34.0.
- [Commits](kubernetes/api@v0.23.5...v0.34.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sivaanand Murugesan <[email protected]>

* Bump github.com/hashicorp/terraform-plugin-docs from 0.16.0 to 0.22.0 (#656)

Bumps [github.com/hashicorp/terraform-plugin-docs](https://github.com/hashicorp/terraform-plugin-docs) from 0.16.0 to 0.22.0.
- [Release notes](https://github.com/hashicorp/terraform-plugin-docs/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-docs/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-docs@v0.16.0...v0.22.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/terraform-plugin-docs
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sivaanand Murugesan <[email protected]>

* fixed dependency refresh issues

* PLT-1947: Fixed import support for sshkey, application, clusterprofile, alert, virtual cluster and application (#664)

* PLT-1886: Fixed cluster profile manifest pack day 2 operation (#665)

* refreshed palette sdk go

* refresh fix

---------

Signed-off-by: Sivaanand Murugesan <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dal13002 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant