590 commits

Author	SHA1	Message	Date
dependabot[bot]	43716508b7	Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 ... Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.6.1 to 1.6.3. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.6.1...v1.6.3) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.3 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>	2026-02-26 11:39:46 +01:00
Daniel Banck	6826173a13	Bump go.opentelemetry.io/otel to v1.40.0	2026-02-23 18:04:47 +01:00
Radek Simko	889c90d565	go get -tool github.com/hashicorp/copywrite@v0.25.0	2026-02-17 13:56:34 +00:00
Brandon Croft	12276b836a	Revert "bump terraform-svchost to v0.2.0" ... This reverts commit 0f11f38d47.	2026-02-13 09:04:30 -07:00
Brandon Croft	0f11f38d47	bump terraform-svchost to v0.2.0	2026-02-04 09:11:20 +01:00
Jared Baker	6475423325	backend/s3: bump github.com/hashicorp/aws-sdk-go-base/v2 ... Incrementing the `aws-sdk-go-base` dependecy will also pull in the latest version of the AWS SDK for Go V2, which includes support for the newly launched `aws login` authentication method.	2026-01-08 10:59:37 -05:00
James Pogran	2c075b9f8e	Add component registry source resolution support to Terraform Stacks (#37888) ... * Add component registry source resolution support to Terraform Stacks This change implements the missing component source resolution case in the stack configuration loader, enabling Terraform Stacks to properly handle component registry sources from HCP Terraform and other component registries. The implementation mirrors the existing module registry resolution workflow, where component sources are first resolved to their versioned form using the source bundle's component metadata, then converted to final source addresses that can be used to locate the actual component code. This completes the integration between the terraform-registry-address component parsing capabilities and the go-slug sourcebundle component resolution APIs. * chore: bump go-slug to v0.18.1 * fix: add case for component final source type * chore: rm space * chore: sync module deps * chore: update testdata with separate bundle * fix: manifest file json obj with trailing comma * Add changelog entry to 1.14 --------- Co-authored-by: Michael Yocca <michael.yocca@hashicorp.com>	2025-12-10 09:16:03 -05:00
dependabot[bot]	7034a193d9	build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 (#37925) ... * build(deps): bump golang.org/x/crypto from 0.44.0 to 0.45.0 Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.44.0 to 0.45.0. - [Commits](https://github.com/golang/crypto/compare/v0.44.0...v0.45.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-version: 0.45.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * run syncdeps --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Daniel Banck <daniel@dbanck.de>	2025-11-21 10:54:50 +00:00
Sarah French	1dd8e60f15	chore: Bump golang.org/x/crypto dependency, ignore SA4003 linting errors globally (#37901) ... * chore: Upgrade golang.org/x/crypto - `go get golang.org/x/crypto@v0.44.0` * chore: Upgrade golang.org/x/crypto in submodules - `make syncdeps` * chore: Run `make generate` * chore: Ignore SA4003 linter error globally, as `golang.org/x/tools/cmd/stringer` generates code that breaks this rule when it's used with custom types that have unsigned integers or bytes as the underlying type.	2025-11-17 15:01:28 +00:00
Sarah French	2e5b5dee5d	Upgrade protoc and protoc-gen-go-grpc versions to matching terraform-plugin-go (#37647) ... * Update protoc version in downloader script * go get google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1 This matched terraform-plugin-go * make protobuf * Run `make protobuf` * Update generator to handle generic types from google.golang.org/grpc Looks like this was added in v1.69.3 in https://github.com/grpc/grpc-go/pull/7057 ? * Run `make generate` * Fix "cannot infer Res" compile error - more usage of generics * More fixing compile errors due to switching to use of a generic * Make putting `google.golang.org/grpc` import into generated files conditional * Run `make generate` * Update more places where generics now need to be used * Update generator to handle any types from google.golang.org/grpc in same switch case.	2025-10-22 14:46:18 +01:00
Radek Simko	cbda324977	backend/oss: Bump github.com/aliyun/aliyun-oss-go-sdk to v2.1.1 (#37442)	2025-10-15 08:49:00 -04:00
Dirk Avery	edb3f6487d	Bump go-getter v1.8.2	2025-10-09 18:15:58 -04:00
Liam Cervante	6b17cfe2e5	actions: connect invoke flag with TFC (#37544) ... * actions: connect invoke flag with TFC * use latest go-tfe	2025-10-08 19:29:32 +02:00
Dirk Avery	5e3a9fbdf3	Bump aws-sdk-go-base	2025-10-02 15:16:29 -04:00
Sarah French	ffbb62b369	Swap to using google.golang.org/protobuf/cmd/protoc-gen-go instead of github.com/golang/protobuf/protoc-gen-go (#37685) ... * Reformat Args in steps definitions * Swap to using the new version of protoc-gen-go that doesn't include grpc support (instead it relies on protoc-gen-go-grpc). Update command flags to reflect this change in tooling. See this comment for explanation: https://github.com/golang/protobuf/issues/1070#issuecomment-607293496 * Run `make protobuf` with problem generate steps commented out. * Use `require_unimplemented_servers=false` to minimise changes at the time of upgrading tooling In future we can navigate the consequences of this in its own PR. * WIP * Fix out/opt typo, add remaining flags once terraform1.proto was being found ok * Run `make protobuf` * `go get google.golang.org/grpc/cmd/protoc-gen-go-grpc@v1.3.0` && `go mod tidy` This version includes a feature that allows the copyright comment in the .proto file to be pulled across to generated _grpc.pb.go files. * Run `make protobuf` with new version of protoc-gen-go-grpc that allows copyright comment to be copied to generated output files * Potential fix for `internal/rpcapi/dynrpcserver/generator`	2025-09-30 11:52:24 +01:00
Daniel Banck	1ac8497994	Add support for Terraform Search in the cloud backend (TF-25935) (#37479)	2025-09-15 13:21:05 +02:00
Kristin Laemmert	bbb8af989c	deps: bump xz to address bug in previous version (#37573) ... * deps: bump xz, bug in previous version	2025-09-08 14:48:26 -04:00
Dirk Avery	92bf04ae16	bump: go-getter to 1.8.0	2025-09-05 17:39:55 -04:00
Amartya Majumdar	54af16eab9	[IPL-7725] Updating Calls to the Remote HCP Terraform API to Retrieve All Workspace Variables (#37241) ... * [IPL-7725] Resolving merge conflicts * [IPL-7725] Updating go.sum files --------- Co-authored-by: Amartya Majumdar <a.majumdar1041@gmail.com>	2025-09-03 15:26:07 +02:00
Deniz Onur Duzgun	05dfb52c2d	bump: go-getter to v1.7.9 (#37452) ... * bump: go-getter to v1.7.9 * run sync deps --------- Co-authored-by: Samsondeen Dare <samsondeen.dare@hashicorp.com>	2025-08-19 14:42:36 -04:00
James Bardin	fdc7be2676	udpate go-plugin@v1.7.0	2025-08-11 18:58:19 -04:00
Liam Cervante	2a1b4c3ed4	Update go-cty and HCL for 1.13 release (#37298)	2025-07-09 13:05:18 +02:00
Radek Simko	af07bd388e	deps: Bump terraform-registry-address to v0.3.0 (#37230) ... * deps: Bump terraform-registry-address to v0.3.0 * make syncdeps	2025-06-11 13:39:51 +00:00
dependabot[bot]	49a4ad3b26	Bump github.com/cloudflare/circl from 1.4.0 to 1.6.1 (#37227) ... Bumps [github.com/cloudflare/circl](https://github.com/cloudflare/circl) from 1.4.0 to 1.6.1. - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](https://github.com/cloudflare/circl/compare/v1.4.0...v1.6.1) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-11 09:28:23 +00:00
dependabot[bot]	23b71ddae6	Bump github.com/cli/go-gh/v2 from 2.11.2 to 2.12.1 (#37188) ... Bumps [github.com/cli/go-gh/v2](https://github.com/cli/go-gh) from 2.11.2 to 2.12.1. - [Release notes](https://github.com/cli/go-gh/releases) - [Commits](https://github.com/cli/go-gh/compare/v2.11.2...v2.12.1) --- updated-dependencies: - dependency-name: github.com/cli/go-gh/v2 dependency-version: 2.12.1 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2025-06-09 11:59:28 +01:00
Syed Shahidh Ilhan F	434bbc4e2f	fix: Update K8s and Consul API dependencies to address security vulnerabilities (#37150) ... * bump vulnerable packages Signed-off-by: SYSHIL <ilhan.syed@gmail.com> * make syncdeps Signed-off-by: SYSHIL <ilhan.syed@gmail.com> --------- Signed-off-by: SYSHIL <ilhan.syed@gmail.com>	2025-05-29 21:10:24 +01:00
Radek Simko	474fe47e25	backend/oci/deps: Pin flock to v0.10.0 (#36913)	2025-04-22 13:30:47 +01:00
Ravi Prakash Bharti	804e970211	Added Terraform backend implementation for OCI Object Storage (#36872) ... * Added Terraform backend implementation for OCI Object Storage * Update website/docs/language/backend/oci.mdx updated suggestion Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> * Update website/docs/language/backend/oci.mdx Added suggestion Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> * Update website/docs/language/backend/oci.mdx added suggestions Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> * Addressed feedback for variable prefix, documentation, prepareConfig * removed additional logs * Removed md5hash seperate file * Fix doc * go.mod * Added mandatory Unit test for oci backend * run go mod tidy and added test for TestBackendStateLocksInWS and TestBackendStateForceUnlockInWS * moved changelog to v1.12.0 * Addressed feedback_April_16 removed global log, Added tests and codeowner * mod file * Update CODEOWNERS Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com> * Addressed feedbach april 17th * mock env var and unset region for InstancePrincipal * syncdeps fix * goimports fix * Update internal/backend/remote-state/oci/backend_test.go Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com> --------- Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com> Co-authored-by: Radek Simko <radeksimko@users.noreply.github.com>	2025-04-22 09:38:18 +01:00
Ricard Bejarano	200f4cabb0	Bump golang.org/x/net from 0.37.0 to 0.38.0 (fixes CVE-2025-22872) (#36800) ... * Bump golang.org/x/net from 0.37.0 to 0.38.0 (fixes CVE-2025-22872) Signed-off-by: Ricard Bejarano <ricard@bejarano.io> * add changelog entry * go mod tidy Signed-off-by: Ricard Bejarano <ricard@bejarano.io> * Revert "add changelog entry" This reverts commit 88219e78e9. * make syncdeps Signed-off-by: Ricard Bejarano <ricard@bejarano.io> --------- Signed-off-by: Ricard Bejarano <ricard@bejarano.io>	2025-04-01 12:00:36 +01:00
Sarah French	6ef0498f9c	Update to Go 1.24.1, update dependencies (#36790) ... * go get github.com/hashicorp/go-azure-helpers@v0.72.0 * .go-version to 1.24.1 * Run `./scripts/syncdeps.sh` This propagates the Go version upgrade * gcs : go get google.golang.org/api@v0.155.0 * gcs: go mod tidy * Run `./scripts/syncdeps.sh` * make generate && make protobuf	2025-03-27 17:15:46 +00:00
dependabot[bot]	9313c6696a	Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#36748) ... * Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 Bumps [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) from 4.5.1 to 4.5.2. - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](https://github.com/golang-jwt/jwt/compare/v4.5.1...v4.5.2) --- updated-dependencies: - dependency-name: github.com/golang-jwt/jwt/v4 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * Run `./scripts/syncdeps.sh` --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Sarah French <sarah.french@hashicorp.com>	2025-03-27 12:11:52 +00:00
Sarah French	a04664a2e5	Update hashicorp/go-plugin dependency (#36561) ... * go get github.com/hashicorp/go-plugin * ./scripts/syncdeps.sh * make protobuf	2025-03-26 12:09:01 +00:00
Sarah French	53172a5f8a	Bump golang.org/x/net to v0.36.0 (#36691) ... * go get golang.org/x/net@v0.36.0 * go mod tidy * Run syncdeps.sh	2025-03-13 11:23:48 +00:00
Sebastian Marines	9237b11277	backend/s3: update hashicorp/aws-sdk-go-base/v2 to v2.0.0-beta62 ... This upgrade will add support for S3 backends in several new regions, including `mx-central-1`.	2025-03-06 11:09:19 -05:00
Sarah French	16598ab7ef	Update hashicorp/cli dependency (#36607) ... * go get github.com/hashicorp/cli * Run ./scripts/syncdeps.sh	2025-03-03 11:40:15 +00:00
Sarah French	b0dbd66eeb	Bump golang.org/x/oauth2 from v0.23.0 to v0.27.0 (#36584) ... * go get golang.org/x/oauth2@v0.27.0 * Run syncdeps.sh * Add change file for backport to v1.11.1	2025-02-28 10:05:03 +00:00
magodo	8913b2ffa8	Backend/azure: Update go-azure-sdk version to v0.20250131.1134653 (#36458) ... * dependencies: update go-azure-sdk to v0.20250131.1134653 * Update backend test for Github and ADO to not rely on the env vars * Setting ado_pipeline_service_connection_id during provider config * Update doc * changelog	2025-02-13 15:02:28 +00:00
James Bardin	bc45d60936	make syncdeps	2025-02-12 12:25:36 -05:00
James Bardin	eab0b4c14f	track binary tools using go tool	2025-02-12 12:24:41 -05:00
Samsondeen	16a34fe47f	Accept CLI option for the number of parallel ops in a test run's plan/apply (#36323)	2025-02-05 09:48:05 +01:00
James Bardin	f9de7186ae	make syncdeps	2025-02-04 07:22:49 -05:00
James Bardin	e20cd00566	update to latest HCL dev snapshot	2025-02-04 07:22:35 -05:00
magodo	b47f0d3def	Backend/azure/update to latest sdks (#36258) ... * Tom's state * Pass `go mod tidy` by updating giovanni storage api version from 2018-11-09 to 2023-11-03 * Doc: Add the newly added fields * Behavior code implemented and locally tested (sas/access key/aad/NA) * Test rework * Allow more auth methods to deploy resources * Fix * Fix2 * Fix3 * Fix a bug that use_aad_auth is not checked * Mention test runner has to ensure big enough parallelism * test client specify github oidc request token/url * enable github oidc * Fix * remove sender.go * remove sender.go * Update helper/sdk to latest version * Replace giovanni from tombuildsstuff org to jackofallops * Update per review comments * go mod tidy for kubernetes * changelog * Add license header * Update release document * Move the changelog location	2025-02-04 09:57:16 +00:00
Liam Cervante	270aaeb69a	update go-cty to latest patch release (#36376) ... * update go-cty to latest patch release * also fixes other bug	2025-01-22 11:10:23 +01:00
Sarah French	a8b126aeff	Upgrade hashicorp/go-getter dependency (#36326) ... * go get github.com/hashicorp/go-getter@v1.7.8 * Sync deps	2025-01-21 10:42:39 +00:00
dependabot[bot]	e538e0f228	build(deps): bump golang.org/x/net from 0.29.0 to 0.33.0 in /internal/backend/remote-state/s3 (#36298) ... * build(deps): bump golang.org/x/net in /internal/backend/remote-state/s3 Bumps [golang.org/x/net](https://github.com/golang/net) from 0.29.0 to 0.33.0. - [Commits](https://github.com/golang/net/compare/v0.29.0...v0.33.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> * chore: make syncdeps --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jared Baker <jared.baker@hashicorp.com>	2025-01-15 15:21:53 +00:00
Jan Harrie	b827ca459e	Upgraded github.com/hashicorp/go-slug v0.16.0 => v0.16.3 (#36273) ... * upgraded github.com/hashicorp/go-slug v0.16.0 => v0.16.3 * updated changelog * removed old entry from go-slug * upgraded github.com/hashicorp/go-slug v0.16.0 => v0.16.3 * upgraded github.com/hashicorp/go-slug v0.16.0 => v0.16.3 * Update CHANGELOG.md --------- Co-authored-by: Sarah French <15078782+SarahFrench@users.noreply.github.com>	2025-01-08 17:34:56 +00:00
Liam Cervante	fa27595fe3	Update go-cty to 1.16.0 (#36262) ... * Update go-cty to 1.16.0 * syndeps	2025-01-06 12:53:45 +01:00
dependabot[bot]	d2c0a0e992	Bump golang.org/x/crypto from 0.27.0 to 0.31.0 (#36203) ... * Bump golang.org/x/crypto from 0.27.0 to 0.31.0 Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.27.0 to 0.31.0. - [Commits](https://github.com/golang/crypto/compare/v0.27.0...v0.31.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com> * syncdeps --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Liam Cervante <liam.cervante@hashicorp.com>	2024-12-13 11:35:49 +01:00
James Bardin	762f9334de	make syncdeps	2024-12-12 09:08:23 -05:00