v2.2.2

What's Changed

• remove repo-specific codeql action (port from v1) by @nywilken in #431
• gcs/v2: bump cloud.google.com/go/storage to 1.34.0 by @lbajolet-hashicorp in #488
• docs: bump version for godocs url by @kudla in #460
• [v2] update s3, and gcs to use most recent v2 module version by @nywilken in #489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @nywilken in #490

New Contributors

• @lbajolet-hashicorp made their first contribution in #488
• @kudla made their first contribution in #460

Full Changelog: v2.2.1...cmd/go-getter/v2.2.2

v1.7.4

What's Changed

• Escape user-provided strings in git commands #483
• Fixed a bug in .netrc handling if the file does not exist #433

Full Changelog: v1.7.3...v1.7.4

v1.7.3

What's Changed

• SEC-090: Automated trusted workflow pinning (2023-04-21) by @hashicorp-tsccr in #432
• SEC-090: Automated trusted workflow pinning (2023-09-11) by @hashicorp-tsccr in #454
• SEC-090: Automated trusted workflow pinning (2023-09-18) by @hashicorp-tsccr in #458
• don't change GIT_SSH_COMMAND when there is no sshKeyFile by @jbardin in #459

New Contributors

• @hashicorp-tsccr made their first contribution in #432

Full Changelog: v1.7.2...v1.7.3

v1.7.2

What's Changed

• Don't override GIT_SSH_COMMAND when not needed by @nl-brett-stime #300

Full Changelog: v1.7.1...v1.7.2

v2.2.1

What's Changed

• [V2] Bump submodules to use most recent v2 module version by @nywilken in #416
• Port Decompression bomb security changes from v1 by @nywilken in #418
• Update Go-Getter test workflow to run on pull requests by @nywilken in #417
• Port bomb.zip test updates from v1 by @nywilken in #425
• [v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #426

Full Changelog: v2.2.0...v2.2.1

v1.7.1

Merge pull request #424 from hashicorp/fix-av-reports

Remove `bomb.zip` test file to stop anti-virus noise

v2.2.0

What's Changed

• [v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #400
• Port Decompression bomb security changes from v1 by @nywilken in #414
• Update Go-Getter V2 to use Go 1.18 by @nywilken in #381

Full Changelog: v2.1.1...v2.2.0

v1.7.0

What's Changed

• docs: provide logging recommendations by @mickael-hc in #371
• Update aws sdk version by @jukie in #384
• Update S3 URL in README by @twelvelabs in #378
• Migrate to GHA by @claire-labry in #379
• [COMPLIANCE] Update MPL 2.0 LICENSE by @hashicorp-copywrite in #386
• remove codesign entirely from go-getter by @claire-labry in #408
• Add decompression bomb mitigation options for v1 by @picatz in #412
• v1: decompressors: add LimitedDecompressors helper by @shoenig in #413

New Contributors

• @mickael-hc made their first contribution in #371
• @jukie made their first contribution in #384
• @twelvelabs made their first contribution in #378
• @hashicorp-copywrite made their first contribution in #386

Full Changelog: v1.6.2...v1.7.0

v2.1.1

What's Changed

• Add Timeout to SmbClientGetter to go-getter/v2 by @nywilken in #369
• Upgrade AWS SDK version by @kmoe in #385

Other Changes

• Fix Go Tests for V2 by @claire-labry in #392
• Migrate go-getter v2 to GHA by @claire-labry in #388
• • Add Malformed S3 URL test by @nywilken in #380

New Contributors

• @kmoe made their first contribution in #385

Full Changelog: v2.1.0...v2.1.1

v1.6.2

What's Changed

• Fix no getter available for X-Terraform-Get source protocol when using bare github or bitbucket hostnames: #370