v1.0.7

Note

The v0.3.0 release of the Packer plugin SDK contains the following changes which will may affect the downloading of external files such as ISOs used by this plugin.

• Default timeouts have been added to the GitGetter, HgGetter, S3Getter, and GcsGetter getters to mitigate against resource exhaustion when calling out to external command line applications.
• Support for the X-Terraform-Get header has been disabled to mitigate against protocol switching, endless redirect, and configuration bypass abuse of custom HTTP response header processing.
• The default go-getter client has been updated to prevent arbitrary host access via go-getter's path traversal, symlink processing, and command injection flaws.

See Security Options for more details.

What's Changed

Other Changes

• Added release binaries for the supported distributions NetBSD, OpenBSD, and Solaris.
• Bump github.com/hashicorp/packer-plugin-sdk from 0.2.13 to 0.3.0 by @dependabot in #55
• goreleaser: add missing target goos/goarch by @lbajolet-hashicorp in #56
• Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 by @dependabot in #57

New Contributors

• @lbajolet-hashicorp made their first contribution in #56

Full Changelog: v1.0.6...v1.0.7

v1.0.6

Note

This release contains the latest golang.org/x/crypto/ssh module which implements client authentication support for signature algorithms based on SHA-2 for use with existing RSA keys. Previously, a client would fail to authenticate with RSA keys to servers that reject signature algorithms based on SHA-1.

What's Changed

Bug fixes🧑‍🔧 🐞

• Bump packer-plugin-sdk to address legacy SSH key algorithms in SSH communicator

Full Changelog: v1.0.5...v1.0.6

v1.0.5

Note

This release contains the latest golang.org/x/crypto/ssh module which implements client authentication support for signature algorithms based on SHA-2 for use with existing RSA keys. Previously, a client would fail to authenticate with RSA keys to servers that reject signature algorithms based on SHA-1.

What's Changed

Bug fixes🧑‍🔧 🐞

• Bump packer-plugin-sdk to address legacy SSH key algorithms in SSH communicator

Full Changelog: v1.0.4...v1.0.5

v1.0.4

What's Changed

Exciting New Features 🎉

• Add Packer plugin version information to client UserAgent by @bhcleek in #51

Other Changes

• Change provider name and add HCP Terraform Example by @rizkybiz in #47
• Fix provider test by @JenGoldstrich in #48

New Contributors

• @JenGoldstrich made their first contribution in #48
• @bhcleek made their first contribution in #51

Full Changelog: v1.0.3...v1.0.4

v1.0.3

What's Changed

Breaking Changes 🛠

• The environment variable DIGITALOCEAN_API_TOKEN has been deprecated in favor of DIGITALOCEAN_TOKEN or DIGITALOCEAN_ACCESS_TOKEN. The old variable will continue to work but will be removed in a future release.
• Update ENV VARS to match Terraform Digital Ocean Plugin by @rizkybiz in #44

Other Changes

• goreleaser: auto-generate changelog file by @azr in #43
• Update release signing configuration by @nywilken in #45
• DigitalOcean HCP Packer Support by @rizkybiz in #46

New Contributors

• @rizkybiz made their first contribution in #44
• @nywilken made their first contribution in #45

Full Changelog: v1.0.2...v1.0.3

v1.0.2

What's Changed

Doc improvements 📚

• update documentation links by @markcaudill in #30

Other Changes

• Validate plugin from the packer-sdc plugin-validate command by @azr in #36

New Contributors

• @markcaudill made their first contribution in #30
• @azr made their first contribution in #36

Full Changelog: v1.0.1...v1.0.2

v1.0.1

Bump github.com/zclconf/go-cty from 1.9.0 to 1.9.1

Bumps [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) from 1.9.0 to 1.9.1.
- [Release notes](https://github.com/zclconf/go-cty/releases)
- [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md)
- [Commits](https://github.com/zclconf/go-cty/compare/v1.9.0...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/zclconf/go-cty
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

v1.0.0

cut v1.0.0

v0.0.2

Update reference to import-gpg-action (#8)

Signed-off-by: Scott Macfarlane <[email protected]>