ext/dynblock: if iterator is invalid return this error instead of consequential errors (#656)
v2.19.0 (October 16, 2023)
Enhancements
ext/dynblock: dynblock.Expand now supports an optional hook for calling applications to check and potentially veto (by returning error diagnostics) particular for_each values. The behavior is unchanged for callers that don't set the new option. (#634)
Bugs Fixed
hclsyntax: Further fixes for treatment of "marked" values in the conditional expression, and better tracking of refined values into the conditional expression results, building on the fixes from v2.18.1. (#633)
v2.18.1 (October 5, 2023)
Bugs Fixed
hclsyntax: Conditional expressions will no longer panic when one or both of their results are "marked", as is the case for situations like how HashiCorp Terraform tracks its concept of "sensitive values". (#630)
v2.18.0 (August 30, 2023)
Enhancements
HCL now uses the tables from Unicode 15 when performing string normalization and character segmentation. HCL was previously using the Unicode 13 tables.
For calling applications where consistent Unicode support is important, consider also upgrading to Go 1.21 at the same time as adopting HCL v2.18.0 so that the standard library unicode tables (used for case folding, etc) will also be from Unicode 15.
v2.17.1 (August 30, 2023)
Enhancements
hclsyntax: When evaluating string templates that have a long known constant prefix, HCL will truncate the known prefix to avoid creating excessively-large refinements. String prefix refinements are intended primarily for relatively-short fixed prefixes, such as https:// at the start of a URL known to use that scheme. (#617)
ext/tryfunc: The "try" and "can" functions now handle unknown values slightly more precisely, and so can return known values in more situations when given expressions referring to unknown symbols. (#622)
msgpack: Now uses string encoding instead of float encoding for a whole number that is too large to fit in any of MessagePack's integer types.
function/stdlib: Type conversion functions (constructed with MakeToFunc) can now convert null values of unknown type into null values of the target type, rather than returning an unknown value in that case.
json: Will now correctly reject attempts to encode cty.DynamicVal, whereas before it would just produce an invalid JSON document without any error. (This is invalid because JSON encoding cannot support unknown values at all; cty.DynamicVal is a special case of unknown value where even the type isn't known.)
1.14.3 (February 29, 2024)
msgpack: Fixed edge-case bug that could cause loss of floating point precision when round-tripping due to incorrectly using a MessagePack integer to represent a large non-integral number. #176
cty: Fixed some false-negative numeric equality test results by comparing numbers as integers when possible. #176
1.14.2 (January 23, 2024)
convert: Converting from an unknown map value to an object type now correctly handles the situation where the map element type disagrees with an optional attribute of the target type, since when a map value is unknown we don't yet know which keys it has and thus cannot predict what subset of the elements will get converted as attributes in the resulting object. (#175)
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the go group with 12 updates in the / directory:
1.16.01.17.05.11.05.12.01.7.31.7.41.6.21.6.31.6.01.6.10.7.50.7.62.19.12.20.11.31.01.32.01.14.11.14.40.19.00.20.00.6.00.7.00.14.00.17.0Updates
github.com/fatih/colorfrom 1.16.0 to 1.17.0Release notes
Sourced from github.com/fatih/color's releases.
Commits
b6598b1Merge pull request #228 from klauspost/fix-println-issue-21800b1811Fix multi-parameter println spacing04994a8Merge pull request #224 from fatih/dependabot/go_modules/golang.org/x/sys-0.18.07526cadMerge branch 'main' into dependabot/go_modules/golang.org/x/sys-0.18.08d058caMerge pull request #222 from fatih/ci-updates2ac809fBump golang.org/x/sys from 0.17.0 to 0.18.051a7bbfci: update Go and Staticcheck versions799c49cMerge pull request #217 from fatih/dependabot/github_actions/actions/setup-go-5f8e0ec9Merge branch 'main' into dependabot/github_actions/actions/setup-go-5298abd8Merge pull request #221 from fatih/dependabot/go_modules/golang.org/x/sys-0.17.0Updates
github.com/go-git/go-git/v5from 5.11.0 to 5.12.0Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
302dddeMerge pull request #1060 from go-git/dependabot/go_modules/github.com/gliderl...6bba34dbuild: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7feaeb36Merge pull request #937 from matejrisek/feature/rename-short-fields7959a42Merge pull request #1052 from go-git/dependabot/go_modules/github.com/skeema/...4c17ce7build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.23f77e6fMerge pull request #1048 from pjbgf/fix-reset-validation6af38e0Merge pull request #1047 from avoidalone/mastere6c3e58Merge pull request #1044 from pjbgf/ff-merge04f7b23*: fix some commentsf4f1a87Merge pull request #971 from nodivbyzero/fix-177-diff-print-file-statsUpdates
github.com/hashicorp/go-getterfrom 1.7.3 to 1.7.4Release notes
Sourced from github.com/hashicorp/go-getter's releases.
Commits
268c11cescape user provide string to git (#483)975961fMerge pull request #433 from adrian-bl/netrc-fix5ccb39aMake addAuthFromNetrc ignore ENOTDIR errorsUpdates
github.com/hashicorp/go-hclogfrom 1.6.2 to 1.6.3Release notes
Sourced from github.com/hashicorp/go-hclog's releases.
Commits
d12136aMerge pull request #141 from Ericwww/support-json-escapecb8687csupport configure json escape when log in json format5dbb615Merge pull request #138 from hashicorp/update-go1.221f0704ahclogvet: updates for go1.22Updates
github.com/hashicorp/go-pluginfrom 1.6.0 to 1.6.1Release notes
Sourced from github.com/hashicorp/go-plugin's releases.
Changelog
Sourced from github.com/hashicorp/go-plugin's changelog.
Commits
721087dChangelog++ for v1.6.1 (#309)8d2aaa4Add test for stdout scanner race with runner.Wait() (#300)557fdfbupdate google.golang.org/grpc to v1.58.3 to address CVE-2023-44487 (#296)90c365eWait for stdout pipe to close before calling runner.Wait() (#299)Updates
github.com/hashicorp/go-retryablehttpfrom 0.7.5 to 0.7.6Changelog
Sourced from github.com/hashicorp/go-retryablehttp's changelog.
Commits
d969eaaMerge pull request #225 from hashicorp/manicminer-patch-22ad8ed4v0.7.64077b29Changelog for #2101643719Merge pull request #210 from tomclegg/noretry-header-certeb08cceMerge branch 'main' into noretry-header-cert4fb315eMerge pull request #224 from hashicorp/tooling/pr-actionsf67cc6edeprecations, lintinge82c700GHA workflows for unit tests834d13dupdate go versione6c9accMerge pull request #223 from hashicorp/manicminer-patch-1Updates
github.com/hashicorp/hcl/v2from 2.19.1 to 2.20.1Release notes
Sourced from github.com/hashicorp/hcl/v2's releases.
Changelog
Sourced from github.com/hashicorp/hcl/v2's changelog.
... (truncated)
Commits
303be61Update CHANGELOG for 2.20.12a0a3f0Standardize on only two value dumping/diffing libraries5160967Merge pull request #668 from hashicorp/add-expr-syntax-errorcc3af98fix test error message if wrong type54e4175add SrcRange to ExprSyntaxError53ee54echore: add test from #6651cbb0d4feat: return ExprSyntaxError instead of nil when expression parsing fails for...57f8bbfupdate CHANGELOG.md for v2.2021a05d5Merge pull request #663 from hashicorp/ci-workflow-updates1f6a0f7Use make targets in CIUpdates
github.com/rs/zerologfrom 1.31.0 to 1.32.0Commits
147ae65Fix prettylog piping (#644)4d78dc5Add forwarding close methods to several writer implementations (#636)c1ab4edMake Log.Fatal() call Close on the writer before os.Exit(1) (#634)417580dadd: ContextLogger Interface LogObjectMarshaler (#623)602e90aFixed failing tests (#626)a9ec232Add stacktrace to Context (#630)3e8ae07Refactor: change Hook(h Hook) to Hook(hooks ...Hook) (#629)7fa45a4fixed documentation for tracing hook (#621)93fb5cbAdd TriggerLevelWriter. (#602)83e03c7stop using deprecated io/ioutils package (#620) (#620)Updates
github.com/stretchr/testifyfrom 1.8.4 to 1.9.0Release notes
Sourced from github.com/stretchr/testify's releases.
... (truncated)
Commits
bb548d0Merge pull request #1552 from stretchr/dependabot/go_modules/github.com/stret...814075fbuild(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2e045612Merge pull request #1339 from bogdandrutu/uintptr5b6926dMerge pull request #1385 from hslatman/not-implements9f97d67Merge pull request #1550 from stretchr/release-notesbcb0d3fInclude the auto-release notes in releasesfb770f8Merge pull request #1247 from ccoVeille/typos85d8bb6fix typos in comments, tests and github templatese2741faMerge pull request #1548 from arjunmahishi/msgAndArgs6e59f20http_assertions: assert that the msgAndArgs actually works in testsUpdates
github.com/zclconf/go-ctyfrom 1.14.1 to 1.14.4Changelog
Sourced from github.com/zclconf/go-cty's changelog.
Commits
74286a8v1.14.4 release4a34c33json: Refuse to encode cty.DynamicVal4b76b75stdlib: Conversion functions can accept unknown-typed nullsf41ae52msgpack: Never marshal integers as MessagePack float0e3c880functions: lookup third argument is not optionala0c3e7bPrepare for possible future 1.14.4 release304e4a8v1.14.3 release50ce6d3Update CHANGELOG.md1e9442ddon't use compact floats in msgpacka0315a5Use integer comparison for equalityUpdates
golang.org/x/oauth2from 0.19.0 to 0.20.0Commits
84cb9f7oauth2: fix typo in comment4b7f0bdgo.mod: update cloud.google.com/go/compute/metadata dependencye11eea8microsoft: added DeviceAuthURL to AzureADEndpointUpdates
golang.org/x/syncfrom 0.6.0 to 0.7.0Commits
14be23esemaphore: cancel acquisition with a done contextUpdates
github.com/sergi/go-difffrom 1.3.1 to 1.3.2-0.20230802210424-5b0b94c5c0d3Commits
Updates
golang.org/x/modfrom 0.14.0 to 0.17.0Commits
aa51b25modfile: do not collapse if there are unattached comments within blocks87140ecsumdb/tlog: make NewTiles only generate strictly necessary tiles18d3f56modfile: fix crash on AddGoStmt in empty File766dc5dmodfile: use new go version string format in WorkFile.add errorfa1ba42sumdb: replace globsMatchPath with module.MatchPrefixPatternsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show