build(deps): bump github.com/hashicorp/go-getter from 1.4.0 to 1.7.9
Open
Number: #3488
Type: Pull Request
State: Open
Type: Pull Request
State: Open
Author:
dependabot[bot]
Association: Contributor
Comments: 0
Association: Contributor
Comments: 0
Created:
August 20, 2025 at 12:51 PM UTC
(2 months ago)
(2 months ago)
Updated:
August 20, 2025 at 12:51 PM UTC
(2 months ago)
(2 months ago)
Labels:
dependencies go
dependencies go
Description:
Bumps github.com/hashicorp/go-getter from 1.4.0 to 1.7.9.
Release notes
Sourced from github.com/hashicorp/go-getter's releases.
v1.7.9
What's Changed
- Speed up XZ decompression by 5x with bufio wrapper by
@vsarunasin hashicorp/go-getter#520- Fix CI Workflow by
@mohanmanikanta2299in hashicorp/go-getter#522- test: Remove use of "mitchellh/go-testing-interface" for stdlib by
@jrasellin hashicorp/go-getter#523- fix: url redact of multiple sshkey by
@dduzgun-securityin hashicorp/go-getter#528- Publish arm binaries by
@sethvargoin hashicorp/go-getter#525- fix errcheck lint errors and run it as part of pr checks by
@abhijeetviswain hashicorp/go-getter#530- fix additional lint errors and increase linter scope by
@abhijeetviswain hashicorp/go-getter#531- IND-3728 enabling dependabot by
@KaushikiAnandin hashicorp/go-getter#529- fix: go-getter subdir paths by
@dduzgun-securityin hashicorp/go-getter#540New Contributors
@vsarunasmade their first contribution in hashicorp/go-getter#520@jrasellmade their first contribution in hashicorp/go-getter#523@sethvargomade their first contribution in hashicorp/go-getter#525@abhijeetviswamade their first contribution in hashicorp/go-getter#530@KaushikiAnandmade their first contribution in hashicorp/go-getter#529Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.8...v1.7.9
v1.7.8
What's Changed
- sec: fix s3 and gcs host checks by
@dduzgun-securityin hashicorp/go-getter#512Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.7...v1.7.8
v1.7.7
What's Changed
- Clean up git repo on disk when the ref checkout fails by
@james-warren0in hashicorp/go-getter#504- [COMPLIANCE] Add Copyright and License Headers by
@hashicorp-copywritein hashicorp/go-getter#409- Add CODEOWNERS file in .github/CODEOWNERS by
@mukeshjcin hashicorp/go-getter#505- IND-1804 Bump up dependencies to remediate vulnerabiities by
@mohanmanikanta2299in hashicorp/go-getter#513- Updating arguments in github release CI by
@mohanmanikanta2299in hashicorp/go-getter#514- Updating .goreleaser.yml file with valid version by
@mohanmanikanta2299in hashicorp/go-getter#515New Contributors
@james-warren0made their first contribution in hashicorp/go-getter#504@mukeshjcmade their first contribution in hashicorp/go-getter#505@mohanmanikanta2299made their first contribution in hashicorp/go-getter#513Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.6...v1.7.7
v1.7.6
What's Changed
- fix: Avoid panic when s3 URL is invalid by
@liamgin hashicorp/go-getter#501New Contributors
@liamgmade their first contribution in hashicorp/go-getter#501
... (truncated)
Commits
e702211Merge pull request #532 from hashicorp/dependabot/github_actions/actions-8948...df0a14f[chore] : Bump the actions group with 8 updates87541b2fix: go-getter subdir paths (#540)3713030[Compliance] - PR Template Changes Requiredaf2dd3cMerge pull request #529 from hashicorp/dependabot-intgebf52629updating dependabot.yml1f63e10changelog added, updated dependabot.yaml45af459fix additional lint errors and increase linter scopec8c6abafix errcheck lint errors and run it as part of pr checks9b76f98copywrite header added- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
Commits:
1
1
Files Changed:
1153
1153
Additions:
+138303
+138303
Deletions:
-43419
-43419
Package Dependencies
Package:
github.com/hashicorp/go-getter
Ecosystem:
go
go
Version Change:
1.4.0 → 1.7.9
Update Type:
Minor
Minor
Technical Details
| ID: | 5411310 |
| UUID: | 2759706855 |
| Node ID: | PR_kwDOCPpi686kfcjn |
| Host: | GitHub |
| Repository: | tencentcloudstack/terraform-provider-tencentcloud |
| Merge State: | Unknown |