v0.6.4

DEPENDENCIES:

• build(deps): Bump workflows to latest trusted versions by @hashicorp-tsccr in #185
• build(deps): bump github.com/ProtonMail/go-crypto from 1.1.0-alpha.0 to 1.1.0-alpha.1 by @dependabot in #187
• build(deps): bump github.com/ProtonMail/go-crypto from 1.1.0-alpha.1 to 1.1.0-alpha.2 by @dependabot in #189
• build(deps): bump golang.org/x/mod from 0.15.0 to 0.16.0 by @dependabot in #188
• build(deps): bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 by @dependabot in #190

v0.6.3

DEPENDENCIES:

• build(deps): bump github.com/go-git/go-git/v5 from 5.10.1 to 5.11.0 by @dependabot in #171
• build(deps): bump github.com/ProtonMail/go-crypto from 0.0.0-20230828082145-3c4c8a2d2371 to 1.0.0 by @dependabot in #179
• build(deps): bump github.com/ProtonMail/go-crypto from 1.0.0 to v1.1.0-alpha.0 by @radeksimko in #183
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in #175
• build(deps): bump golang.org/x/mod from 0.14.0 to 0.15.0 by @dependabot in #184
• build(deps): Bump workflows to latest trusted versions by @hashicorp-tsccr in #173
• build(deps): Bump workflows to latest trusted versions by @hashicorp-tsccr in #177
• build(deps): Bump workflows to latest trusted versions by @hashicorp-tsccr in #180
• build(deps): Bump workflows to latest trusted versions by @hashicorp-tsccr in #182
• build(deps): Replace mitchellh/cli w/ hashicorp/cli by @radeksimko in #176
• go: bump version to 1.21.5 by @radeksimko in #174

INTERNAL:

• github/release: Ensure production workflow doesn't start before staging by @radeksimko in #170

v0.6.2

What's Changed

• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @dependabot in #162
• build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.10.1 by @dependabot in #168
• build(deps): bump github.com/go-git/go-git/v5 from 5.9.0 to 5.10.0 by @dependabot in #163
• build(deps): bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in #160
• build(deps): bump golang.org/x/mod from 0.13.0 to 0.14.0 by @dependabot in #165
• build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by @dependabot in #161
• build(deps): Bump workflows to latest trusted versions by @hashicorp-tsccr in #167
• ci: Automate releasing via bob by @radeksimko in #99
• github: Replace dependabot with internal tooling by @radeksimko in #166
• go: bump version to 1.21.3 by @radeksimko in #164
• go: bump version to 1.21.4 by @radeksimko in #169

New Contributors

• @hashicorp-tsccr made their first contribution in #167

Full Changelog: v0.6.1...v0.6.2

v0.6.1

What's Changed

BUG FIXES:

• LatestVersion - use version Constraints passed in by @bjhaid in #159

INTERNALS:

• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @dependabot in #153
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @dependabot in #157
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @dependabot in #154
• build(deps): bump github.com/go-git/go-git/v5 from 5.8.1 to 5.9.0 by @dependabot in #155
• build(deps): bump golang.org/x/mod from 0.12.0 to 0.13.0 by @dependabot in #158
• Ensure go-version is 1.20.8 by @radeksimko in #156

New Contributors

• @bjhaid made their first contribution in #159

Full Changelog: v0.6.0...v0.6.1

v0.6.0

What's Changed

ENHANCEMENTS:

• Added Nomad to products by @benedmunds in #139
• releases: support enterprise versions by @colinodell in #148

BUG FIXES:

• build: Adapt to new Go toolchain versioning change in 1.21 by @radeksimko in #150

INTERNAL:

• build(deps): bump actions/checkout from 3.5.2 to 3.5.3 by @dependabot in #141
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @dependabot in #152
• build(deps): bump actions/setup-go from 4.0.0 to 4.0.1 by @dependabot in #136
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @dependabot in #149
• build(deps): bump github.com/go-git/go-git/v5 from 5.6.1 to 5.7.0 by @dependabot in #137
• build(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.8.0 by @dependabot in #146
• build(deps): bump github.com/go-git/go-git/v5 from 5.8.0 to 5.8.1 by @dependabot in #147
• build(deps): bump golang.org/x/mod from 0.10.0 to 0.11.0 by @dependabot in #142
• build(deps): bump golang.org/x/mod from 0.11.0 to 0.12.0 by @dependabot in #144
• build: bump BuildTimeout from 15 to 25 mins by @radeksimko in #151

New Contributors

• @benedmunds made their first contribution in #139
• @colinodell made their first contribution in #148

Full Changelog: v0.5.2...v0.6.0

v0.5.2

What's Changed

ENHANCEMENTS:

• Optimize checksum verification (results in ~80% memory usage reduction during installation) by @ammario in #132

INTERNAL:

• [COMPLIANCE] Add Copyright and License Headers by @hashicorp-copywrite in #106
• Add copywrite config by @radeksimko in #125
• build(deps): bump actions/checkout from 3.5.0 to 3.5.1 by @dependabot in #126
• build(deps): bump actions/checkout from 3.5.1 to 3.5.2 by @dependabot in #127
• build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 by @dependabot in #135
• build(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 by @dependabot in #123
• build(deps): bump golang.org/x/mod from 0.9.0 to 0.10.0 by @dependabot in #122
• build(deps): bump hashicorp/setup-copywrite from 1.0.0 to 1.1.2 by @dependabot in #128
• ci: Add PR test for copyright headers by @radeksimko in #124
• internal/releasesjson: replace deprecated openpgp dependency by @rolandshoemaker in #131
• releases: Add benchmark for ExectVersion.Install() by @radeksimko in #134
• releases: Add mock build for darwin/arm64 by @radeksimko in #133

New Contributors

• @rolandshoemaker made their first contribution in #131
• @ammario made their first contribution in #132

Full Changelog: v0.5.1...v0.5.2

v0.5.1

What's Changed

v0.5.1 contains no user-facing changes relative to v0.5.0, except to fix a build issue in which Linux binaries were not statically linked.

FIXES

• ci: Disable CGO for CLI Linux builds by @radeksimko in #110

INTERNAL

• version: Trim spaces (newlines) from VERSION file by @radeksimko in #104
• build(deps): bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #105
• fs: Set logger in Version test by @radeksimko in #100
• Update Readme + add testable examples by @radeksimko in #101
• build(deps): bump golang.org/x/mod from 0.7.0 to 0.8.0 by @dependabot in #107
• build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 by @dependabot in #108
• fs: Add some logging to help debug flaky test by @radeksimko in #109
• build(deps): bump github.com/go-git/go-git/v5 from 5.4.2 to 5.6.0 by @dependabot in #111
• build(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 by @dependabot in #112
• build(deps): bump golang.org/x/mod from 0.8.0 to 0.9.0 by @dependabot in #113
• ci: Bump timeout for E2E tests by @radeksimko in #114
• Bump go.mod to 1.18 by @radeksimko in #115
• build(deps): bump actions/setup-go from 3.5.0 to 4.0.0 by @dependabot in #116
• build(deps): bump actions/checkout from 3.3.0 to 3.4.0 by @dependabot in #118
• build(deps): bump github.com/go-git/go-git/v5 from 5.6.0 to 5.6.1 by @dependabot in #117
• build(deps): bump actions/checkout from 3.4.0 to 3.5.0 by @dependabot in #119

Full Changelog: v0.5.0...v0.5.1

v0.5.0

What's Changed

ENHANCEMENTS

• command line interface by @tgross in #60
• Add downloaded zip file to paths to be removed by @alenkacz in #74
• build: detect Go version from go.mod by @radeksimko in #76
• internal/build: Run 'go mod download' before go build by @radeksimko in #90

FIXES

• installer: Allow context propagation to reach http requests by @mafredri in #68
• internal/build: Fix installation of some Go versions by @radeksimko in #85
• internal/releasesjson: Prevent path traversal by @radeksimko in #92
• Report version correctly by @radeksimko in #97

INTERNAL

• Bump go version to 1.19.5 by @radeksimko in #98
• [COMPLIANCE] Update MPL 2.0 LICENSE by @hashicorp-copywrite in #71
• ci: Release binaries via CRT by @radeksimko in #96
• ci: bump workflow timeouts by @radeksimko in #75
• ci: run E2E tests nightly by @radeksimko in #77
• ci: fix nightly GHA workflow by @radeksimko in #79
• ci: Run tests on Go 1.18 & 1.19 by @radeksimko in #86
• ci: Add OS name to test job titles by @radeksimko in #89
• ci/nightly-tests: add missing checkout step by @radeksimko in #80
• github: Pin external GitHub Actions to hashes by @radeksimko in #83
• build(deps): bump github.com/hashicorp/go-version from 1.5.0 to 1.6.0 by @dependabot in #63
• build(deps): bump github.com/mitchellh/cli from 1.1.3 to 1.1.4 by @dependabot in #67
• build(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9 by @dependabot in #69
• build(deps): bump github.com/mitchellh/cli from 1.1.4 to 1.1.5 by @dependabot in #73
• ci: bump actions versions & enable dependabot updates by @radeksimko in #78
• build(deps): bump actions/checkout from 3.2.0 to 3.3.0 by @dependabot in #87
• ci: Enable dependabot for releases/testdata/terraform by @radeksimko in #94
• build(deps): bump actions/upload-artifact from 3.1.1 to 3.1.2 by @dependabot in #102
• build(deps): bump hashicorp/actions-go-build from 0.1.7 to 0.1.9 by @dependabot in #103
• deps: bump golang.org/x/crypto to 0.5.0 by @radeksimko in #91
• releases: bump mitchellh/cli to 1.1.5 in testdata by @radeksimko in #93
• build+ci: Bump default timeouts for building by @radeksimko in #95

New Contributors

• @tgross made their first contribution in #60
• @mafredri made their first contribution in #68
• @hashicorp-copywrite made their first contribution in #71
• @alenkacz made their first contribution in #74

Full Changelog: v0.4.0...v0.5.0

v0.4.0

ENHANCEMENTS

• fs.Version to support version constrained binary discovery by @magodo in #52
• build: bump default clone timeout from 2 to 5 mins by @radeksimko in #62

INTERNAL

• build(deps): bump github.com/hashicorp/go-version from 1.4.0 to 1.5.0 by @dependabot in #61

v0.3.2

BUG FIXES:

• Support releases-api returned Content-Type by @smacfarlane in #57

INTERNAL:

• build(deps): bump github.com/hashicorp/go-version from 1.3.0 to 1.4.0 by @dependabot in #47
• build(deps): bump github.com/google/go-cmp from 0.5.6 to 0.5.7 by @dependabot in #48
• build(deps): bump github.com/google/go-cmp from 0.5.7 to 0.5.8 by @dependabot in #54
• use Response.ContentLength & clarify log messages by @radeksimko in #49
• ci: bump timeout for E2E tests by @radeksimko in #50