v2.4.0

2.4.0 (August 6, 2025)

What's Changed

Exciting New Features

• Allow parent SIG images to referenced by their ID in GH-482
• Added KeyVaultSecret Datasource in GH-516

Bug Fixes

• Updating ARM Builder Disk Steps order in GH-505
• Prevents snapshot overwrite conflicts in managed images in GH-509
• Fetching the Blob Endpoint for Deletion from Account in GH-508
• fixes subscription ID while validating image in GH-473

Other Changes

• Update Golang-JWT to v5.2.2 in GH-493
• Enforce /x/net 0.38 in GH-494
• Updated SharedImageGallery param docs examples in GH-519
• CRT Migration Changes in GH-517

v2.3.3

What's Changed

• Bump github.com/hashicorp/packer-plugin-sdk from 0.6.0 to 0.6.1 by @dependabot in #483
• update golangci-lint to v1.60.1 by @JenGoldstrich in #486
• Fix linter by @JenGoldstrich in #487
• Add temp resource names to Generated Data by @JenGoldstrich in #488
• Disable DTL acceptance tests by @JenGoldstrich in #490

Full Changelog: v2.3.2...v2.3.3

v2.3.2

What's Changed

This release contains a fix for a weird to pin down HCP Packer Ancestry issue. In some cases the return value of the Gallery Image Version API doesn't contain the storage profile, which it does for others. This only occurs on some users SIG builds that are sourced from a SIG/ACG image created via VM (as opposed to a managed image). This resulted in the HCP Packer Ancestry relationship not being created where it should.

We didn't identify the reason for the API not returning the storage profile here, since "it works on my machine", but the plugin is now more resilient to this Azure API inconsistency.

Bug fixes

• fix: Handle checking for SIG-sourced parent when Azure API doesn't return Storage Profile by @JenGoldstrich in #479

Full Changelog: v2.3.1...v2.3.2

v2.3.1

What's Changed

This release contains two small changes to log more accurately what happens when the Azure plugin fails to fetch a SIG source name.

For HCP Packer Ancestry this plugin will try and fetch the source image name of the SIG, this is done because it can not be inferred since the SIG image may originally come from either a Virtual Machine, or a managed image, and we have to check the storage ID to figure out what type of image it is. When we fail the API check to get the gallery image version, the plugin continues since this was additional logic added for HCP Packer, and was added to not be a breaking change, but the error message was squashed before this release

• Clearly log result of failing to get the source name for SIG-sourced builds. by @JenGoldstrich in #476
• Clearly log result of unexpected Azure payloads when fetching a source image name on SIG-sourced builds by @JenGoldstrich in #477

Full Changelog: v2.3.0...v2.3.1

v2.3.0

Breaking Changes

On March 31st 2025 Azure will block the creation of basic public IP addresses, prior to this version would still create basic sku public IP's which is when the field private_virtual_network_with_public_ip is set, which enables bringing your own virtual network and subnet, and having the plugin create a network interface and public IP to connect to the build virtual machine from the host machine.

As of v2.3.0 a standard SKU Public IP Address will be created in Azure, however standard SKU Public IP's require a network security group to define any ingress, otherwise it is all blocked. This means users will need to create a network security group to allow ingress to their virtual networks.

There is an open request to allow Packer to create a network security group for users this was opened before this change. This can cause conflicts with the subnet's network security group, but since we expect that users may run into change, we will likely need to add support for Packer creating the NSG at a NIC level. If you have any feedback on how we address this problem, please reach out here #468 asap.

If you are using private_virtual_network_with_public_ip, you should upgrade to this release by March 31st 2025 or your builds will likely start failing.

You can read more about this deprecation in this official post from Microsoft

If you want to roll back to the previous behavior for this you can set the public_ip_sku field to Basic, but this will stop working on March 31st as stated above

What's Changed

Other Changes

• Bump github.com/hashicorp/packer-plugin-sdk from 0.5.4 to 0.6.0 by @dependabot in #464
• Make it clearer where users can find a target_region example by @JenGoldstrich in #470
• Use Standard IP SKU by default for edge case with private_virtual_network_with_public_ip field by @JenGoldstrich in #469

Full Changelog: v2.2.1...v2.3.0

v2.2.1

What's Changed

Exciting New Features 🎉

• Update crypto library and update testing resources off removed Windows 2012 DC image. by @JenGoldstrich in #457
• Build plugin with go v1.22 by @JenGoldstrich in #460
• make subscription_id configurable in cli by @mogrogan in #465

Full Changelog: v2.2.0...v2.2.1

v2.2.0

What's Changed

⚠️ Starting in April 2025, plugin versions prior to this may experience failures when the public_ip_sku field introduced in v2.1.4 is not set to Standard, or when bringing your own virtual network.

This release updates the default SKU of the Public IP address that this plugin creates when users do not provide a prior setup virtual network., https://azure.microsoft.com/en-us/updates/upgrade-to-standard-sku-public-ip-addresses-in-azure-by-30-september-2025-basic-sku-will-be-retired/, starting in April 2025 Azure will no longer allow the creation of basic IP SKUs, in version 2.1.4 of this plugin we included a warning informing users of this upcoming deprecation, please update as soon as possible, if you run into any issues upgrading please reach out to us via a GitHub issue.

• Public IP Address Standard IP SKU Default by @JenGoldstrich in #450
• Remove x5t Header Check by @JenGoldstrich in #452

Full Changelog: v2.1.9...v2.2.0

v2.1.9

What's Changed

Other Changes

• Fixed spacing issue on README by @straubt1 in #441
• fix error message by @sujithq in #443
• Fixed some more typos. by @lzandman in #445
• Update Azure SDK packages v0.20240411.1145857 -> v20241025.1143247 by @JenGoldstrich in #449

New Contributors

• @straubt1 made their first contribution in #441
• @sujithq made their first contribution in #443

Full Changelog: v2.1.8...v2.1.9

v2.1.8

What's Changed

Doc improvements 📚

• Add docs for target_region replicas field, make error message for it clearer by @JenGoldstrich in #437

Other Changes

• Fix replicated_regions not using shared_image_gallery_replica_count for build location when its specified in the list by @JenGoldstrich in #438
• Add Subscription ID and Tenant ID to build variables by @JenGoldstrich in #439
• chore: update version.go by @tenthirtyam in #435

New Contributors

• @tenthirtyam made their first contribution in #435

Full Changelog: v2.1.7...v2.1.8

v2.1.7

What's Changed

Other Changes

• Bump packer plugin SDK from 0.5.2 to 0.5.4 by @JenGoldstrich in #427
• Don't hardcode go version in acceptance tests by @JenGoldstrich in #429

Full Changelog: v2.1.6...v2.1.7