Bump github.com/hashicorp/go-getter from 1.6.1 to 1.7.3

[dependabot[bot]]

Bumps github.com/hashicorp/go-getter from 1.6.1 to 1.7.3.

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.3

What's Changed

• SEC-090: Automated trusted workflow pinning (2023-04-21) by @​hashicorp-tsccr in hashicorp/go-getter#432
• SEC-090: Automated trusted workflow pinning (2023-09-11) by @​hashicorp-tsccr in hashicorp/go-getter#454
• SEC-090: Automated trusted workflow pinning (2023-09-18) by @​hashicorp-tsccr in hashicorp/go-getter#458
• don't change GIT_SSH_COMMAND when there is no sshKeyFile by @​jbardin in hashicorp/go-getter#459

New Contributors

• @​hashicorp-tsccr made their first contribution in hashicorp/go-getter#432

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.2...v1.7.3

v1.7.2

What's Changed

• Don't override GIT_SSH_COMMAND when not needed by @​nl-brett-stime hashicorp/go-getter#300

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.1...v1.7.2

v1.7.1

No release notes provided.

v1.7.0

What's Changed

• docs: provide logging recommendations by @​mickael-hc in hashicorp/go-getter#371
• Update aws sdk version by @​Jukie in hashicorp/go-getter#384
• Update S3 URL in README by @​twelvelabs in hashicorp/go-getter#378
• Migrate to GHA by @​claire-labry in hashicorp/go-getter#379
• [COMPLIANCE] Update MPL 2.0 LICENSE by @​hashicorp-copywrite in hashicorp/go-getter#386
• remove codesign entirely from go-getter by @​claire-labry in hashicorp/go-getter#408
• Add decompression bomb mitigation options for v1 by @​picatz in hashicorp/go-getter#412
• v1: decompressors: add LimitedDecompressors helper by @​shoenig in hashicorp/go-getter#413

New Contributors

• @​mickael-hc made their first contribution in hashicorp/go-getter#371
• @​Jukie made their first contribution in hashicorp/go-getter#384
• @​twelvelabs made their first contribution in hashicorp/go-getter#378
• @​hashicorp-copywrite made their first contribution in hashicorp/go-getter#386

Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.6.2...v1.7.0

v1.6.2

What's Changed

• Fix no getter available for X-Terraform-Get source protocol when using bare github or bitbucket hostnames: #370

Commits

• 0298a22 Merge pull request #459 from hashicorp/jbardin/setup-git-env
• c70d9c9 don't change GIT_SSH_COMMAND if there's no keyfile
• 3d5770f Merge pull request #458 from hashicorp/tsccr-auto-pinning/trusted/2023-09-18
• 0688979 Result of tsccr-helper -log-level=info -pin-all-workflows .
• e66f244 Merge pull request #454 from hashicorp/tsccr-auto-pinning/trusted/2023-09-11
• e80b3dc Result of tsccr-helper -log-level=info -pin-all-workflows .
• 2d49e24 Merge pull request #432 from hashicorp/tsccr-auto-pinning/trusted/2023-04-21
• dbb4c7a Result of tsccr-helper -pin-all-workflows .
• c12e42f Merge pull request #429 from hashicorp/remove_codeql_workflow
• 8480407 remove repo-specific codeql action, in favor of centralized job
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)