Skip to content

Commit

Permalink
deps: update dependency hashicorp/packer to v1.11.0 (#187)
Browse files Browse the repository at this point in the history
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [hashicorp/packer](https://togithub.com/hashicorp/packer) | minor |
`"1.10.0"` -> `1.11.0` |

---

### Release Notes

<details>
<summary>hashicorp/packer (hashicorp/packer)</summary>

###
[`v1.11.0`](https://togithub.com/hashicorp/packer/blob/HEAD/CHANGELOG.md#1110-2024-05-31)

[Compare
Source](https://togithub.com/hashicorp/packer/compare/v1.10.3...v1.11.0-beta)

##### NOTES:

-   A LICENSE.txt file has been added to the Packer release artifacts.
    [GH-12931](https://togithub.com/hashicorp/packer/pull/12931)
    [GH-12940](https://togithub.com/hashicorp/packer/pull/12940)

- **Breaking Change**: Support for loading single-component plugins has
been removed from Packer.
[GH-12785](https://togithub.com/hashicorp/packer/pull/12785)

-   **Breaking Change**: Support for loading plugin binaries following
the naming convention of packer-plugin-name has been dropped. Packer
will now only load
plugins stored under the [Packer plugin
directory](https://developer.hashicorp.com/packer/docs/configure#packer-s-plugin-directory)
using the expected namespaced
directory and CHECKSUM files. This change drops support for loading
plugin
binaries in Packer's executable directory or a template's current
working
directory. [GH-12828](https://togithub.com/hashicorp/packer/pull/12828)

```shell
/Users/dev/.packer.d/plugins
└── github.com
    └── hashicorp
        └── happycloud
            ├── packer-plugin-happycloud_v0.0.1_x5.0_darwin_arm64
            └── packer-plugin-happycloud_v0.0.1_x5.0_darwin_arm64_SHA256SUM
```

##### FEATURES:

- core: Add `-ignore-prerelease-plugins` flag to disable the use of
development
plugin binaries for the `build` and `validate` commands development
plugin
binaries. [GH-12828](https://togithub.com/hashicorp/packer/pull/12828)
    [GH-12882](https://togithub.com/hashicorp/packer/pull/12882)
- Packer users can now track Packer version and plugin versions used for
each
    build artifact in HCP Packer.
    [GH-12866](https://togithub.com/hashicorp/packer/pull/12866)
-   hcl2: add textencodebase64 and textdecodebase64 funcs
For feature parity with Terraform, and since having access to strings
encoded in something that is not UTF-8 is required in some cases, we add
both the textencodebase64 and textdecodebase64 functions to HCL2
templates.
Please note these functions return base64 encoded byte slices because of
how
    cty/hcl defines strings (NFC normalised, UTF-8 encoded).
    [GH-12997](https://togithub.com/hashicorp/packer/pull/12997)

##### SECURITY:

-   Bump github.com/go-jose/go-jose/v3 to address GHSA-c5q2-7r4c-mv6g.
    [GH-12880](https://togithub.com/hashicorp/packer/pull/12880)
-   Bump golang.org/x/net to v0.24.0 to address GO-2024-2687.
    [GH-12924](https://togithub.com/hashicorp/packer/pull/12924)

##### IMPROVEMENTS:

-   core: Bump github.com/hashicorp/hcp-sdk-go from 0.90.0 to 0.96.0.
    [GH-12935](https://togithub.com/hashicorp/packer/pull/12935)
    [GH-12942](https://togithub.com/hashicorp/packer/pull/12942)
    [GH-12960](https://togithub.com/hashicorp/packer/pull/12960)
    [GH-12979](https://togithub.com/hashicorp/packer/pull/12979)
- core: Bump github.com/hashicorp/packer-plugin-sdk from 0.5.2 to 0.5.3
    [GH-12932](https://togithub.com/hashicorp/packer/pull/12932)
-   core: Bump go-getter/v2 from 2.2.1 to v2.2.2
    [GH-12988](https://togithub.com/hashicorp/packer/pull/12988)
-   datasource/http: don't error on 2xx code
Previous versions of Packer only supported 200 as a success case for the
http
datasource. This change makes any status code from 200 to 299
successful.
    [GH-12989](https://togithub.com/hashicorp/packer/pull/12989)
- core: Move to predictable plugin loading schema - Packer will now only
load
plugins stored under the [Packer plugin
directory](https://developer.hashicorp.com/packer/docs/configure#packer-s-plugin-directory)
using the expected namespaced
    directory and CHECKSUM files.
    [GH-12828](https://togithub.com/hashicorp/packer/pull/12828)
-   core: Remove support loading single-component plugins.
    [GH-12785](https://togithub.com/hashicorp/packer/pull/12785)
- core: Rename internal `packer plugin` command to `packer execute` to
avoid user confusion with
    the plugins subcommand.
    [GH-12865](https://togithub.com/hashicorp/packer/pull/12865)
- core: Packer now considers development binaries when evaluating plugin
version constraints. This work allows users to use binaries with
versions
reported as "x.y.z-dev" to be used with the Packer `required_plugins`
    block. [GH-12828](https://togithub.com/hashicorp/packer/pull/12828)
- core: Packer now supports local paths to plugins for the `packer
plugins remove`
    command. This addition makes it possible to pipe commands like
`packer plugins installed` with it for speedy cleanup of installed
plugins.
    [GH-12886](https://togithub.com/hashicorp/packer/pull/12886)
- core: Relax Packer source address URIs within the `required_plugins`
block to
support the installation of local plugin binary using a custom or
internal
source address (e.g. mycompany.com/plugins/happyorg/happycloud). Remote
installation using `packer init` or `packer plugins install` does not
    support non-GitHub source URIs. Users using alternative hosts must
    install plugins manually using `packer plugins install --path`.
[GH-12911](https://togithub.com/hashicorp/packer/pull/12911),
\[[GH-12962](https://togithub.com/hashicorp/packer/issues/12962)]
([https://github.com/hashicorp/packer/pull/12962](https://togithub.com/hashicorp/packer/pull/12962))
- core: Remote plugins installed containing an internal version number
that
    differs from the version number within the binary name can lead to
confusion when tracking Packer plugin version information. To help track
such discrepancies in the plugin version, `packer init` and `packer
plugin
install` have been updated to reject installation of such plugins.
    1.0.0-dev). Users are encouraged to notify plugin maintainers of any
    version mismatches.
[GH-12915](https://togithub.com/hashicorp/packer/pull/12915),
[GH-12953](https://togithub.com/hashicorp/packer/pull/12953),
[GH-12972](https://togithub.com/hashicorp/packer/pull/12972)
-   core: don't load plugins with metadata in name
To avoid confusion with multiple plugins that report the same effective
version,
    plugins installed need to have no metadata in their name.
When installed through Packer commands, the metadata is scrubbed from
the name of the
installed plugin binary, but manually it may still be possible, so we
enforce
    that scrubbing at load-time as well.
    [GH-12980](https://togithub.com/hashicorp/packer/pull/12980)
-   core: Error when multiple paths are specified for PACKER_PLUGIN_PATH
Since Packer 1.11 removed the capability for PACKER_PLUGIN_PATH to
specify
multiple directories separated by `:` or `;` (depending on the
platform), we
are explicitly erroring when this is discovered, with suggestions as to
how
    to fix the problem.
    [GH-12967](https://togithub.com/hashicorp/packer/pull/12967)
- core: Version metadata support for plugins. Plugins may now formally
have metadata
in their versions, Packer supports it, and applies the semver
recommendations on
them, i.e. they are ignored for comparison/sorting purposes, but allowed
for
    adding extra information about a plugin.
    [GH-12888](https://togithub.com/hashicorp/packer/pull/12888)

Given the specified version constraint only versions greater than or
equal to 1.1.0 will be considered.

```hcl
amazon = {
  source = "github.com/hashicorp/amazon"
  version = ">= 1.1.0"
}
```

If a development binary is installed, Packer will use it if:

1.  It is the highest compatible version installed.
2. There is no final plugin version with the same version number
installed alongside it.

```shell
/Users/dev/.packer.d/plugins
└─ github.com
   └─ hashicorp
    	└── amazon
          ├── packer-plugin-amazon_v1.1.0_x5.0_darwin_arm64
          ├── packer-plugin-amazon_v1.1.0_x5.0_darwin_arm64_SHA256SUM
          ├── packer-plugin-amazon_v1.1.1-dev_x5.0_darwin_arm64
          └── packer-plugin-amazon_v1.1.1-dev_x5.0_darwin_arm64_SHA256SUM
```

Version 1.1.1-dev of the Amazon plugin will match the specified version
constraint and be used for executing the Packer build.

If, however, a 1.1.1 release version of the plugin is available, it will
have precedence over the development binary.

```shell
/Users/dev/.packer.d/plugins
└─ github.com
   └─ hashicorp
    	└── amazon
          ├── packer-plugin-amazon_v1.1.1-dev_x5.0_darwin_arm64
          ├── packer-plugin-amazon_v1.1.1-dev_x5.0_darwin_arm64_SHA256SUM
          ├── packer-plugin-amazon_v1.1.1_x5.0_darwin_arm64
          └── packer-plugin-amazon_v1.1.1_x5.0_darwin_arm64_SHA256SUM
```

##### BUG FIXES:

- core: fix plugin version ordering to not be lexicographic. This fixes
an issue
with how plugins are discovered by Packer, and ensures proper version
ordering.
This means that with this change, versions that are semantically
greater,
    but lexicographically inferior will be loaded.
Ex: 1.0.9 vs. 1.0.10; `1.0.9 > 1.0.10` lexicographically, but
semantically
    `1.0.10 > 1.0.9`
- core/hcp: fix potential race condition when storing plugin details to
the HCP
    Packer metadata storage map.
    [GH-12936](https://togithub.com/hashicorp/packer/pull/12936)
-   core: fix plugin listing on Windows
    This fix addresses bugs present in the alpha releases of 1.11, where
    the discovery of Windows binaries were not matching against the
    filename extension (.exe).
    [GH-12981](https://togithub.com/hashicorp/packer/pull/12981)

###
[`v1.10.3`](https://togithub.com/hashicorp/packer/blob/HEAD/CHANGELOG.md#1103-April-22-2024)

[Compare
Source](https://togithub.com/hashicorp/packer/compare/v1.10.2...v1.10.3)

##### NOTES

-   A LICENSE.txt file has been added to the Packer release artifacts.
    [GH-12931](https://togithub.com/hashicorp/packer/pull/12931)

##### FEATURES

- Packer users can now track Packer version and plugin versions used for
each
    build artifact in HCP Packer.
    [GH-12891](https://togithub.com/hashicorp/packer/pull/12891)
    [GH-12910](https://togithub.com/hashicorp/packer/pull/12910)
    [GH-12923](https://togithub.com/hashicorp/packer/pull/12923)
    [GH-12926](https://togithub.com/hashicorp/packer/pull/12926)

##### SECURITY

-   Bump github.com/go-jose/go-jose/v3 to address GHSA-c5q2-7r4c-mv6g.
    [GH-12928](https://togithub.com/hashicorp/packer/pull/12928)
-   Bump golang.org/x/net to v0.24.0 to address GO-2024-2687.
    [GH-12924](https://togithub.com/hashicorp/packer/pull/12924)

##### BUG FIXES

- cmd/fmt: Display information error when Packer `fmt` fails due to HCL2
parsing error.
[GH-12870](https://togithub.com/hashicorp/packer/pull/12870)

###
[`v1.10.2`](https://togithub.com/hashicorp/packer/blob/HEAD/CHANGELOG.md#1102-March-6-2024)

[Compare
Source](https://togithub.com/hashicorp/packer/compare/v1.10.1...v1.10.2)

##### NOTES:

- Continuing the work in in Packer v1.10.0 we introduced the ability to
install
    a locally sourced plugin using packer `plugins install --path`, this
release extends support to development plugin binaries - binaries that
report "dev" as part of their plugin version. Instead of manually
placing a
downloaded binary into the executable or current working directory we
encourage you to run the command `packer plugins install –path <path-to-
downloaded-extracted-binary> github.com/hashicorp/happycloud` to install
    the binary into a Packer compatible path.
    [GH-12855](https://togithub.com/hashicorp/packer/pull/12855)

##### IMPROVEMENTS:

- cmd/plugins: Add support for installing local development binaries to
`packer plugins install`.
    [GH-12855](https://togithub.com/hashicorp/packer/pull/12855)
-   core: Validate bucket name when using `hcp_packer_registry` block.
    [GH-12820](https://togithub.com/hashicorp/packer/pull/12820)
-   core: Update github.com/hashicorp/hcp-sdk-go from 0.83.0 to 0.85.0.
    [GH-12850](https://togithub.com/hashicorp/packer/pull/12850)
    [GH-12827](https://togithub.com/hashicorp/packer/pull/12827)

##### BUG FIXES:

- core/hcp: HCP Packer build failures properly distinguish between
incompatible
    plugins and general publishing errors.
    [GH-12854](https://togithub.com/hashicorp/packer/pull/12854)
    [GH-12835](https://togithub.com/hashicorp/packer/pull/12835)

###
[`v1.10.1`](https://togithub.com/hashicorp/packer/blob/HEAD/CHANGELOG.md#1101-January-30-2024)

[Compare
Source](https://togithub.com/hashicorp/packer/compare/v1.10.0...v1.10.1)

##### NOTES:

- **HCP Packer** has been updated to follow an artifact-agnostic
approach for
publishing and consuming built artifacts. To best support the new
approach, HCP Packer components within Packer have
been updated to use the v2 nomenclature when publishing build metadata
to
HCP Packer. These changes include data source components for consuming
HCP
Packer stored artifacts. The data source components
[hcp-packer-version](https://developer.hashicorp.com/packer/docs/datasources/hcp/hcp-packer-version)
and
[hcp-packer-artifact](https://developer.hashicorp.com/packer/docs/datasources/hcp/hcp-packer-artifact)
respectively replace, the now deprecated,

[hcp-packer-iteration](https://developer.hashicorp.com/packer/docs/datasources/hcp/hcp-packer-iteration)
and
[hcp-packer-image](https://developer.hashicorp.com/packer/docs/datasources/hcp/hcp-packer-image)
component data sources. The added changes are compatible with all
existing HCP Packer workflows and do not warrant any
immediate template changes by the user. However, we encourage all HCP
Packer users to visit the updated
HCP Packer
[CHANGELOG](https://developer.hashicorp.com/hcp/docs/changelog) to
familiarize themselves with the nomenclature changes.
[GH-12794](https://togithub.com/hashicorp/packer/pull/12794)
[GH-12799](https://togithub.com/hashicorp/packer/pull/12799)
- The `hcp-packer-image` data source has been deprecated, please use HCP
Packer
    Artifact data source instead.
    [GH-12794](https://togithub.com/hashicorp/packer/pull/12794)
- The `hcp-packer-iteration` data source has been deprecated, please use
HCP
    Packer Version data source instead.
    [GH-12794](https://togithub.com/hashicorp/packer/pull/12794)
- The contextual variable `packer.iterationID` has been deprecated,
please use
the new contextual variable `packer.versionFingerprint`. The iterationID
represents the HCP Packer iteration that build metadata has been publish
to, with this release an Iteration is now referred to as a Version and
the
    ID has been replaced by the Version Fingerprint.
    [GH-12803](https://togithub.com/hashicorp/packer/pull/12803)

##### FEATURES:

- **New Data source** `hcp-packer-artifact` The HCP Packer Artifact Data
Source
retrieves information about an artifact from the HCP Packer Registry.
    [GH-12794](https://togithub.com/hashicorp/packer/pull/12794)
- **New Data source** `hcp-packer-version` The HCP Packer Version Data
Source
    retrieves information about HCP Packer Version from the HCP Packer.
Registry. [GH-12794](https://togithub.com/hashicorp/packer/pull/12794)

##### SECURITY:

- core: Bump Go dependencies to address various CVEs.
[GH-12777](https://togithub.com/hashicorp/packer/pull/12777)
- core: Bump github.com/cloudflare/circl to address GHSA-9763-4f94-gfch.
[GH-12781](https://togithub.com/hashicorp/packer/pull/12781)

##### IMPROVEMENTS:

-   core: Bump github.com/hashicorp/hcp-sdk-go from 0.79.0 to 0.81.0
    [GH-12792](https://togithub.com/hashicorp/packer/pull/12792)
    [GH-12764](https://togithub.com/hashicorp/packer/pull/12764)
-   core: Update error messaging for HCP incompatible plugin builds.
    [GH-12800](https://togithub.com/hashicorp/packer/pull/12800)
- core: Update HCP Packer integration to use HCP Packer v2 nomenclature,
with
this change HCP Packer iterations are now referred to as Versions, and
Images are now referred to as Artifacts. The data sources for
interacting
with HCP Packer have been respectively renamed to align with the
terminology
    of Version and Artifact.
    [GH-12794](https://togithub.com/hashicorp/packer/pull/12794)
    [GH-12799](https://togithub.com/hashicorp/packer/pull/12799)
-   core: Update spacing for flags within Help text.
    [GH-12742](https://togithub.com/hashicorp/packer/pull/12742)
    [GH-12743](https://togithub.com/hashicorp/packer/pull/12743)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/hetznercloud/packer-plugin-hcloud).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zNzcuOCIsInVwZGF0ZWRJblZlciI6IjM3LjM3Ny44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
  • Loading branch information
renovate[bot] authored Jun 3, 2024
1 parent 1c4db33 commit 9ce7de1
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion .github/workflows/test.yml
Original file line number Diff line number Diff line change
Expand Up @@ -76,7 +76,7 @@ jobs:

- uses: hashicorp/[email protected]
with:
version: "1.10.0" # renovate: datasource=github-releases depName=hashicorp/packer extractVersion=v(?<version>.+)
version: 1.11.0 # renovate: datasource=github-releases depName=hashicorp/packer extractVersion=v(?<version>.+)

- run: packer init .
- run: packer validate .
Expand Down

0 comments on commit 9ce7de1

Please sign in to comment.