Note
The v0.3.0 release of the Packer plugin SDK contains the following changes which will may affect the downloading of external files such as ISOs used by this plugin.
- Default timeouts have been added to the GitGetter, HgGetter, S3Getter, and GcsGetter getters to mitigate against resource exhaustion when calling out to external command line applications.
- Support for the X-Terraform-Get header has been disabled to mitigate against protocol switching, endless redirect, and configuration bypass abuse of custom HTTP response header processing.
- The default go-getter client has been updated to prevent arbitrary host access via go-getter's path traversal, symlink processing, and command injection flaws.
See Security Options for more details.
What's Changed
Other Changes
- Added release binaries for the supported distributions NetBSD, OpenBSD, and Solaris.
- Bump github.com/hashicorp/packer-plugin-sdk from 0.2.13 to 0.3.0 by @dependabot in #55
- goreleaser: add missing target goos/goarch by @lbajolet-hashicorp in #56
- Bump github.com/hashicorp/hcl/v2 from 2.12.0 to 2.13.0 by @dependabot in #57
New Contributors
- @lbajolet-hashicorp made their first contribution in #56
Full Changelog: v1.0.6...v1.0.7