fix(deps): update module github.com/hashicorp/go-getter to v2 - autoclosed by renovate[bot] · Pull Request #90 · upbound/provider-opentofu

renovate · 2025-09-01T17:03:00Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/hashicorp/go-getter	`v1.7.9` → `v2.2.3`

Release Notes

hashicorp/go-getter (github.com/hashicorp/go-getter)

`v2.2.3`

Compare Source

What's Changed

Backport fix to prevent Git config alteration on Git update by @nywilken in #498

Other

[v2] update s3, and gcs to use most recent v2 module version by @nywilken in #489
Update cmd/go-getter to use that latest versions of go-getter/v2 by @nywilken in #490

Full Changelog: hashicorp/go-getter@v2.2.2...v2.2.3

`v2.2.2`

Compare Source

What's Changed

remove repo-specific codeql action (port from v1) by @nywilken in #431
gcs/v2: bump cloud.google.com/go/storage to 1.34.0 by @lbajolet-hashicorp in #488
docs: bump version for godocs url by @kudla in #460
[v2] update s3, and gcs to use most recent v2 module version by @nywilken in #489
Update cmd/go-getter to use that latest versions of go-getter/v2 by @nywilken in #490

New Contributors

@lbajolet-hashicorp made their first contribution in #488
@kudla made their first contribution in #460

Full Changelog: hashicorp/go-getter@v2.2.1...cmd/go-getter/v2.2.2

`v2.2.1`

Compare Source

What's Changed

[V2] Bump submodules to use most recent v2 module version by @nywilken in #416
Port Decompression bomb security changes from v1 by @nywilken in #418
Update Go-Getter test workflow to run on pull requests by @nywilken in #417
Port bomb.zip test updates from v1 by @nywilken in #425
[v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #426

Full Changelog: hashicorp/go-getter@v2.2.0...v2.2.1

`v2.2.0`

Compare Source

What's Changed

[v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #400
Port Decompression bomb security changes from v1 by @nywilken in #414
Update Go-Getter V2 to use Go 1.18 by @nywilken in #381

Full Changelog: hashicorp/go-getter@v2.1.1...v2.2.0

`v2.1.1`

Compare Source

What's Changed

Add Timeout to SmbClientGetter to go-getter/v2 by @nywilken in #369
Upgrade AWS SDK version by @kmoe in #385

Other Changes

Fix Go Tests for V2 by @claire-labry in #392
Migrate go-getter v2 to GHA by @claire-labry in #388
- Add Malformed S3 URL test by @nywilken in #380

New Contributors

@kmoe made their first contribution in #385

Full Changelog: hashicorp/go-getter@v2.1.0...v2.1.1

`v2.1.0`

Compare Source

What's Changed

Multiple fixes for go-getter v2 by @nywilken in #361
Update X-Terraform-Get error messaging to match v1 by @nywilken in #364
Update default Getters with known defaults by @nywilken in #363

Full Changelog: hashicorp/go-getter@v2.0.2...v2.1.0

`v2.0.2`

Compare Source

What's Changed

update s3 gcs and cmd to use most recent v2 module by @azr in #352
Removed ova file type from the list of supported decompressors by @nywilken in #354

Full Changelog: hashicorp/go-getter@v2.0.1...v2.0.2

`v2.0.1`

Compare Source

Enhancements

Append tar and ova decompressor in v2 by @LeConTesteur in #351

Bug fixes 🐞

fixes #320: Pass context to NewRequestWithContext so HTTP requests can… by @zeisss in #324
Ignore comments in checksum files by @azr in #350

New Contributors

@LeConTesteur made their first contribution in #351

Full Changelog: hashicorp/go-getter@v2.0.0...v2.0.1

`v2.0.0`: with split client/requests and vendored plugins

Compare Source

`v1.8.3`

Compare Source

What's Changed

[chore] : Bump actions/cache from 4.2.4 to 4.3.0 in the actions group by @dependabot[bot] in #562
[chore] : Bump aws-actions/configure-aws-credentials from 5.0.0 to 5.1.0 in the actions group by @dependabot[bot] in #563
Remove failed decompressed files by @allisonlarson in #564

New Contributors

@allisonlarson made their first contribution in #564

Full Changelog: hashicorp/go-getter@v1.8.2...v1.8.3

`v1.8.2`

Compare Source

What's Changed

Ensure temporary directory symlinks do not cause errors by @cam-stitt in #560

New Contributors

@cam-stitt made their first contribution in #560

Full Changelog: hashicorp/go-getter@v1.8.1...v1.8.2

`v1.8.1`

Compare Source

What's Changed

chore(deps): bump ulikunitz/xz to v0.5.15 by @thevilledev in #550
Improve CI/CD, fix tests by @YakDriver in #554
[fix] Windows junction handling by @YakDriver in #557

New Contributors

@thevilledev made their first contribution in #550

Full Changelog: hashicorp/go-getter@v1.8.0...v1.8.1

`v1.8.0`

What's Changed

[chore] : Bump the actions group with 2 updates by @dependabot[bot] in #543
[chore] : Bump google-github-actions/auth from 2.1.12 to 3.0.0 in the actions group by @dependabot[bot] in #546
go: bump ulikunitz/xz to v.0.5.14 to resolve GHSA-jc7w-c686-c4v9 by @ryancragun in #547
Upgrade to aws-sdk-go-v2, v1 is unsupported by @YakDriver in #548
Modernize codebase: Fix linting issues, update CI/CD workflow, and improve test categorization by @YakDriver in #549

New Contributors

@ryancragun made their first contribution in #547
@YakDriver made their first contribution in #548

Full Changelog: hashicorp/go-getter@v1.7.9...v1.8.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-10-09T14:09:53Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

4 additional dependencies were updated

Details:

Package	Change
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`go.opentelemetry.io/otel`	`v1.33.0` -> `v1.36.0`
`go.opentelemetry.io/otel/metric`	`v1.33.0` -> `v1.36.0`
`go.opentelemetry.io/otel/trace`	`v1.33.0` -> `v1.36.0`

renovate · 2025-12-15T16:32:03Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

30 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go`	`v0.112.0` -> `v0.123.0`
`github.com/go-logr/logr`	`v1.4.2` -> `v1.4.3`
`github.com/google/s2a-go`	`v0.1.7` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.2` -> `v0.3.7`
`github.com/googleapis/gax-go/v2`	`v2.12.0` -> `v2.15.0`
`github.com/hashicorp/go-version`	`v1.6.0` -> `v1.8.0`
`github.com/klauspost/compress`	`v1.18.0` -> `v1.18.2`
`github.com/mattn/go-colorable`	`v0.1.13` -> `v0.1.14`
`go.opentelemetry.io/auto/sdk`	`v1.1.0` -> `v1.2.1`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.58.0` -> `v0.63.0`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.58.0` -> `v0.61.0`
`go.opentelemetry.io/otel`	`v1.33.0` -> `v1.39.0`
`go.opentelemetry.io/otel/metric`	`v1.33.0` -> `v1.39.0`
`golang.org/x/crypto`	`v0.45.0` -> `v0.46.0`
`golang.org/x/mod`	`v0.29.0` -> `v0.30.0`
`golang.org/x/net`	`v0.47.0` -> `v0.48.0`
`golang.org/x/oauth2`	`v0.27.0` -> `v0.33.0`
`golang.org/x/sync`	`v0.18.0` -> `v0.19.0`
`golang.org/x/sys`	`v0.38.0` -> `v0.39.0`
`golang.org/x/telemetry`	`v0.0.0-20251008203120-078029d740a8` -> `v0.0.0-20251111182119-bc8e575c7b54`
`golang.org/x/term`	`v0.37.0` -> `v0.38.0`
`golang.org/x/text`	`v0.31.0` -> `v0.32.0`
`golang.org/x/time`	`v0.9.0` -> `v0.14.0`
`golang.org/x/tools`	`v0.38.0` -> `v0.39.0`
`google.golang.org/api`	`v0.155.0` -> `v0.256.0`
`google.golang.org/genproto`	`v0.0.0-20240123012728-ef4313101c80` -> `v0.0.0-20250922171735-9219d122eba9`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20241209162323-e6fa225c2576` -> `v0.0.0-20251111163417-95abcf5c77ba`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20241209162323-e6fa225c2576` -> `v0.0.0-20251111163417-95abcf5c77ba`
`google.golang.org/grpc`	`v1.68.1` -> `v1.76.0`
`google.golang.org/protobuf`	`v1.36.5` -> `v1.36.10`

renovate · 2026-03-13T18:53:20Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/hashicorp/go-getter@v1.8.5 requires go >= 1.25.8 (running go 1.24.13)

renovate Bot requested a review from sergenyalcin as a code owner September 1, 2025 17:03

renovate Bot added the automated label Sep 1, 2025

renovate Bot requested review from jeanduplessis and turkenf as code owners September 1, 2025 17:03

renovate Bot added the automated label Sep 1, 2025

renovate Bot force-pushed the renovate/github.com-hashicorp-go-getter-2.x branch from 7067ffb to d8ae409 Compare October 9, 2025 14:09

jeanduplessis removed their request for review November 17, 2025 11:45

renovate Bot force-pushed the renovate/github.com-hashicorp-go-getter-2.x branch from d8ae409 to c047788 Compare December 3, 2025 13:01

renovate Bot requested review from erhancagirici and ulucinar as code owners December 3, 2025 13:01

renovate Bot force-pushed the renovate/github.com-hashicorp-go-getter-2.x branch from c047788 to 67c6f08 Compare February 2, 2026 19:36

renovate Bot force-pushed the renovate/github.com-hashicorp-go-getter-2.x branch 2 times, most recently from f7e577e to 66b6845 Compare February 25, 2026 12:44

fix(deps): update module github.com/hashicorp/go-getter to v2

6a37e2a

renovate Bot force-pushed the renovate/github.com-hashicorp-go-getter-2.x branch from 66b6845 to 6a37e2a Compare March 13, 2026 18:53

renovate Bot changed the title ~~fix(deps): update module github.com/hashicorp/go-getter to v2~~ fix(deps): update module github.com/hashicorp/go-getter to v2 - autoclosed Apr 10, 2026

renovate Bot closed this Apr 10, 2026

renovate Bot deleted the renovate/github.com-hashicorp-go-getter-2.x branch April 10, 2026 17:52

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update module github.com/hashicorp/go-getter to v2 - autoclosed#90

fix(deps): update module github.com/hashicorp/go-getter to v2 - autoclosed#90
renovate[bot] wants to merge 1 commit intomainfrom
renovate/github.com-hashicorp-go-getter-2.x

renovate Bot commented Sep 1, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Oct 9, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Dec 15, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Mar 13, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Sep 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

Other

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

Other Changes

New Contributors

What's Changed

What's Changed

Enhancements

Bug fixes 🐞

New Contributors

v2.0.0: with split client/requests and vendored plugins

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Configuration

Uh oh!

renovate Bot commented Oct 9, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: go.mod

Uh oh!

renovate Bot commented Dec 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

renovate Bot commented Mar 13, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 1, 2025 •

edited

Loading

`v2.0.0`: with split client/requests and vendored plugins

renovate Bot commented Oct 9, 2025 •

edited

Loading

renovate Bot commented Dec 15, 2025 •

edited

Loading