Skip to content

Commit c805733

Browse files
committed
Revert go-getter update (#26731)
The `go-getter` update in #26713 is not passing tests upstream (apparently hashicorp/go-getter#548 is the origin of the problem but that PR did not ever run tests). The issue being fixed isn't a critical vulnerability, so in the interest of preparing us for the next release, revert the `go-getter` change but keep the Go toolchain update. We'll skip go-getter 1.8.0 and pick up the next patch version once its issues are fixed. Reverts commit 8a96929.
1 parent 8c0d2ca commit c805733

File tree

3 files changed

+1365
-34
lines changed

3 files changed

+1365
-34
lines changed

.changelog/26713.txt

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,3 @@
11
```release-note:security
22
build: Update Go to 1.24.7 to address CVE-2025-47910
33
```
4-
5-
```release-note:security
6-
build: Update go-getter to 1.8.0 which uses aws-sdk-go (v2)
7-
```

go.mod

Lines changed: 3 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -55,7 +55,7 @@ require (
5555
github.com/hashicorp/go-cty-funcs v0.0.0-20200930094925-2721b1e36840
5656
github.com/hashicorp/go-discover v1.1.0
5757
github.com/hashicorp/go-envparse v0.1.0
58-
github.com/hashicorp/go-getter v1.8.0
58+
github.com/hashicorp/go-getter v1.7.9
5959
github.com/hashicorp/go-hclog v1.6.3
6060
github.com/hashicorp/go-immutable-radix/v2 v2.1.0
6161
github.com/hashicorp/go-kms-wrapping/v2 v2.0.18
@@ -183,19 +183,14 @@ require (
183183
github.com/armon/go-radix v1.0.0 // indirect
184184
github.com/aws/aws-sdk-go v1.55.6 // indirect
185185
github.com/aws/aws-sdk-go-v2 v1.38.3 // indirect
186-
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.10 // indirect
187186
github.com/aws/aws-sdk-go-v2/credentials v1.18.10 // indirect
188187
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.6 // indirect
189188
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.6 // indirect
190189
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.3 // indirect
191-
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.34 // indirect
192190
github.com/aws/aws-sdk-go-v2/service/ec2 v1.200.0 // indirect
193191
github.com/aws/aws-sdk-go-v2/service/ecs v1.53.8 // indirect
194192
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.1 // indirect
195-
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.7.2 // indirect
196193
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.6 // indirect
197-
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.15 // indirect
198-
github.com/aws/aws-sdk-go-v2/service/s3 v1.80.1 // indirect
199194
github.com/aws/aws-sdk-go-v2/service/sso v1.29.1 // indirect
200195
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.34.2 // indirect
201196
github.com/aws/aws-sdk-go-v2/service/sts v1.38.2 // indirect
@@ -247,8 +242,6 @@ require (
247242
github.com/gookit/color v1.3.1 // indirect
248243
github.com/gophercloud/gophercloud v0.1.0 // indirect
249244
github.com/gorilla/mux v1.8.1 // indirect
250-
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 // indirect
251-
github.com/hashicorp/aws-sdk-go-base/v2 v2.0.0-beta.65 // indirect
252245
github.com/hashicorp/errwrap v1.1.0 // indirect
253246
github.com/hashicorp/go-discover/provider/gce v0.0.0-20241120163552-5eb1507d16b4 // indirect
254247
github.com/hashicorp/go-immutable-radix v1.3.1 // indirect
@@ -348,8 +341,8 @@ require (
348341
golang.org/x/tools v0.35.0 // indirect
349342
google.golang.org/api v0.217.0 // indirect
350343
google.golang.org/genproto v0.0.0-20250115164207-1a7da9e5054f // indirect
351-
google.golang.org/genproto/googleapis/api v0.0.0-20250818200422-3122310a409c // indirect
352-
google.golang.org/genproto/googleapis/rpc v0.0.0-20250818200422-3122310a409c // indirect
344+
google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
345+
google.golang.org/genproto/googleapis/rpc v0.0.0-20250707201910-8d1bb00bc6a7 // indirect
353346
gopkg.in/fsnotify.v1 v1.4.7 // indirect
354347
gopkg.in/resty.v1 v1.12.0 // indirect
355348
gopkg.in/yaml.v2 v2.4.0 // indirect

0 commit comments

Comments
 (0)