Skip to content

chore(deps): bump github.com/hashicorp/go-getter from 1.8.5 to 1.8.6#2676

Merged
eddycharly merged 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6
Apr 30, 2026
Merged

chore(deps): bump github.com/hashicorp/go-getter from 1.8.5 to 1.8.6#2676
eddycharly merged 1 commit into
mainfrom
dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 3, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/hashicorp/go-getter from 1.8.5 to 1.8.6.

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.8.6

No release notes provided.

Commits
  • d23bff4 Merge pull request #608 from hashicorp/dependabot/go_modules/go-security-9c51...
  • 2c4aba8 Merge pull request #613 from hashicorp/pull/v1.8.6
  • fe61ed9 Merge pull request #611 from hashicorp/SECVULN-41053
  • d533656 Merge pull request #606 from hashicorp/pull/CRT
  • 388f23d Additional test for local branch and head
  • b7ceaa5 harden checkout ref handling and added regression tests
  • 769cc14 Release version bump up
  • 6086a6a Review Comments Addressed
  • e02063c Revert "SECVULN Fix for git checkout argument injection enables arbitrary fil...
  • c93084d [chore] : Bump google.golang.org/grpc
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 3, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner April 3, 2026 09:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Apr 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6 branch from f0c8e74 to 65c248e Compare April 28, 2026 16:33
@eddycharly
eddycharly enabled auto-merge (squash) April 30, 2026 06:48
@eddycharly eddycharly added this to the v0.2.15 milestone Apr 30, 2026
@eddycharly

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6 branch 2 times, most recently from c4707f3 to fcbde43 Compare April 30, 2026 07:21
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.8.5 to 1.8.6.
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Commits](hashicorp/go-getter@v1.8.5...v1.8.6)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-getter
  dependency-version: 1.8.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6 branch from fcbde43 to 1fa0e24 Compare April 30, 2026 07:33
@eddycharly
eddycharly merged commit ad47a2e into main Apr 30, 2026
12 of 13 checks passed
@eddycharly
eddycharly deleted the dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6 branch April 30, 2026 07:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant