hashicorp/packer v1.10.0 on GitHub

1.10.0 (December 5, 2023)

NOTES:

This release contains breaking changes for practitioner relying on plugins
previously bundled into Packer. As specified in the Bundled Plugins Removal announcement
HashiCorp maintained plugins will no longer be shipped with Packer.
Users are encouraged to use packer init or packer plugins [...] when managing required plugins
needed for executing their builds.
GH-12660

The affected plugins include:

SECURITY:

Bump github.com/go-jose/go-jose/v3 to address GO-2023-2334. There have been
no reported issues with Packer but we are bumping given that it is a
secondary
dependency. GH-12723
Bump Go to 1.20.10 to Address CVE-2023-44487 / CVE-2023-39325.
GH-12661
Bump Go to 1.20.11 CVE-2023-45283. There have been no reported issues with
Packer but we are bumping given its usage of the path/filepath pkg.
GH-12690
Bump Packer Plugin SDK to v0.5.2.
GH-12717

PLUGINS:

Removed all HashiCorp vendored plugins from being bundled into the Packer binary.
GH-12660, GH-12720
packer-plugin-hcloud: The Hetzner Cloud plugin has been handed over to the
Hetzner integrations team. New releases for this plugin are available at
https://github.com/hetznercloud/packer-plugin-hcloud. Existing references
to the plugin will continue to work but users are advised to update the
required_plugins block to use the new plugin source address.
```
required_plugins {
   parallels = {
     source  =  "github.com/hetznercloud/hcloud"
     version =  "~> 1"
   }
}
```

IMPROVEMENTS:

cmd/init: Warn users running packer init on configuration templates with a
missing required_plugins blocks.
GH-12638
cmd/plugins: Add --path flag to packer plugins install subcommand to
support installation of plugins from a local binary rather than from
GitHub. GH-12643
cmd/plugins: Install SHA256SUM file with 0644 perms.
GH-12665
cmd/plugins: Remove SHA256SUM file on plugin removal.
GH-12666
cmd/plugins: Remove will error if it fails to find the plugin being selected
for removal. GH-12669
core/hcl2: Remove empty source file reference on unset variable errors.
GH-12712
core/hcl: Improve the recursive execution of data sources with other data
source dependencies.
GH-12608
core: Bump github.com/hashicorp/hcp-sdk-go from 0.73.0 to 0.74.0 -
GH-12704
core: Bump Packer Plugin SDK to v0.5.2.
GH-12717
core: Provide integration link as hint in error message if a plugin component
is unknown. GH-12705
core: Update version output for packer -v and packer --version to match
packer version.
GH-12569
docs: Update plugin installation guides with supported methods for 1.10.0 and
above. GH-12713

BUG FIXES:

cmd/plugins: Update packer plugin installed to show all installed plugin
binaries, including any duplicate versions or binaries copied from a
different source URI.
GH-12731