Keeper-Security/terraform-provider-secretsmanager v1.3.0

on GitHub

Changelog

• 359f53d chore: upgrade Go toolchain to 1.26.2 to resolve 9 stdlib CVEs
• 8246bff chore: upgrade GitHub Actions to Node.js 24-compatible versions
• 06410eb fix: pre-release hardening — ephemeral resource bugs and doc corrections
• bb6fbba Merge pull request #86 from Keeper-Security/KSM-915-ephemeral-field-path
• 45cdd47 docs(KSM-915): add CHANGELOG entry and wildcard path example for ephemeral_field
• cec0d3e fix(KSM-915): remove path write-back in ephemeral_field Open()
• 6d7cdf4 fix: nil guard on reflect.TypeOf in getFieldItemsData — prevents panic on null value array elements
• 70d0661 fix: Craig review — pam_machine/pam_user DS docs, CHANGELOG count, ephemeral test assertion, doc comment
• 1842e08 fix(KSM-910): three custom field read-path bugs
• 8f0b3b7 docs(KSM-910): add custom block to all data source and ephemeral resource docs; fix ephemeral count in CHANGELOG
• 69c36a6 Merge pull request #85 from Keeper-Security/KSM-910-custom-fields-data-sources
• c1e0856 test(KSM-910): add check block assertions to ephemeral custom fields acceptance test
• b5bace8 feat(KSM-910): expose custom fields in data sources and ephemeral resources
• f478752 KSM-908: update docs and changelog for case-insensitive type normalization
• 55f7cdb KSM-908: normalize custom field type via StateFunc, validate known types
• f8181d9 KSM-908: suppress case-only diffs on custom field type attribute
• 31ffe17 docs: clarify KSM-888 CHANGELOG wording for paymentCard key format
• 3be7282 docs: add KSM-908 to CHANGELOG Fixed section
• 1bac414 Merge pull request #84 from Keeper-Security/KSM-908-custom-field-type-normalization
• c286650 KSM-908: normalize custom field type to canonical case before switch
• 7f13cce Merge pull request #83 from Keeper-Security/KSM-907-pam-label-validation
• 69a1a04 KSM-907: switch reserved label check to case-insensitive comparison
• 6f65c52 Merge pull request #82 from Keeper-Security/KSM-907-pam-label-validation
• 75bf481 KSM-907: Add validation for reserved custom field labels on PAM resources
• d2021f1 KSM-388: fix custom fields post-merge issues and test coverage
• 0d7f323 KSM-871: add PAM Remote Browser example with custom fields
• 0104d7c KSM-889: fix stale RFC3339 comments in custom field documentation
• e858b51 docs: update CHANGELOG for v1.3.0 release — move custom fields from Unreleased, add technical details for all features
• c7c3860 Merge pull request #77 from Keeper-Security/KSM-388-custom-fields
• 72abc34 docs(custom-fields): document format constraints and add KSM-888/889 changelog entries
• ff077a0 Merge pull request #81 from Keeper-Security/KSM-889-canonical-input-validation
• afb36c6 KSM-889: reject non-canonical checkbox and date values with clear errors
• c8b8a2b Merge pull request #80 from Keeper-Security/KSM-888-custom-field-round-trip
• 0a191d7 KSM-888: fix paymentCard key names to match SDK JSON tags
• a06631f test(custom-fields): add import and Computed metadata regression test
• 6128c0d test(custom-fields): verify custom schema presence and structure across all 22 resources
• d48ec6d test(custom-fields): add unit tests and fix reference type SDK structs
• a0aba20 docs: add custom block example to all 22 resource example files
• f23682a docs: add custom field documentation across all resources
• 9d6c26e test(custom-fields): add acceptance tests for new type coverage
• a92ec9d fix(custom-fields): use core.Checkbox with bool value for checkbox type
• d5fae28 feat(custom-fields): expand type coverage and add multi-value support
• 3d3cd4a feat(custom-fields): allow required and privacy_screen to round-trip
• af5d0eb feat(KSM-388): add custom fields to pam_machine and pam_user with merge logic
• b9c778a feat(KSM-388): add custom fields to pam_database, pam_directory, pam_remote_browser
• 425ade1 test(KSM-388): add custom field acceptance tests for encrypted_notes and bank_account
• add5355 feat(KSM-388): extend custom field support to all non-PAM resources
• 7fd15d3 fix(KSM-388): use UTC when reading date custom fields to avoid timezone drift
• 09db87d feat(KSM-388): add custom field support to resource_login (experiment)
• 9bb02d0 fix: mark sensitive fields to prevent secrets appearing in plan output
• c15a3c3 Merge pull request #79 from Keeper-Security/KSM-885-alpine-build
• 956e966 KSM-885: document Alpine Linux compatibility for all Linux binaries
• 1d89543 Merge pull request #78 from Keeper-Security/KSM-884-fix-pamhostname-key
• c8d5541 KSM-884: fix wrong JSON key in pamHostnameToListValue
• 4293e5d fix: bump cloudflare/circl to v1.6.3 and grpc to v1.79.3
• 9b10b45 chore: harden release GHA workflow security
• c0dd423 release(provider): v1.3.0 ephemeral resources, PAM Remote Browser, and fixes
• d084295 test(KSM-871): migrate all tests to mux factory, add testAccClient helper
• a650e5a fix(KSM-871): add nil-check guard and addressRef/cardRef warning diagnostics
• 593a11d fix(KSM-871): data source fix, missing tests, and comprehensive test coverage
• 7356e78 test: add comprehensive tests for ephemeral resources and pamRemoteBrowser
• 6db3688 test: add missing PAM ephemeral tests and pam_remote_browser example
• 7214702 fix: remove DiffSuppressFunc from computed-only data source field
• e1cd8de feat(KSM-871): add ephemeral resources and pamRemoteBrowser support
• 3ece493 feat(KSM-871): add ephemeral resources and pamRemoteBrowser support
• badbe49 Merge pull request #69 from Keeper-Security/release-v1.2.0
• c784576 release(provider): v1.2.0 bug fixes, PAM support, and dependency updates
• c44f443 Merge pull request #57 from Keeper-Security/KSM-680-sanitize-publish-workflow-inputs
• 82acef0 Moved user input from direct interpolation to ENV var string literal
• d7606b5 Added input sanitization for tag input in publish workflow
• 8464c3e Merge pull request #56 from Keeper-Security/KSM-527-add-pam-record-types
• 470998e KSM-527: Add support for PAM record types
• 11e2615 Merge pull request #49 from Keeper-Security/release-v1.1.7
• c0d4754 Add header image to README

Platform Compatibility

All Linux binaries are statically compiled (CGO_ENABLED=0) and have no C library dependencies.
The linux_amd64, linux_arm64, and linux_arm builds run on Alpine Linux and other musl-based
systems without modification — no special version required.