Skip to content

build(deps): bump the gomod-backward-compatible group with 15 updates #2618

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

build(deps): bump the gomod-backward-compatible group with 15 updates #2618

wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 29, 2025 •
edited
Loading

Bumps the gomod-backward-compatible group with 15 updates:

Package From To
cloud.google.com/go/compute/metadata 0.8.0 0.9.0
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.19.0 1.19.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.11.0 1.12.0
github.com/hashicorp/consul/api 1.32.1 1.32.4
github.com/hashicorp/terraform-plugin-framework 1.15.1 1.16.0
github.com/hashicorp/terraform-plugin-go 0.28.0 0.29.0
github.com/hashicorp/terraform-plugin-mux 0.20.0 0.21.0
github.com/hashicorp/terraform-plugin-sdk/v2 2.37.0 2.38.1
github.com/hashicorp/vault/api 1.20.0 1.21.0
github.com/hashicorp/vault/sdk 0.18.0 0.19.0
github.com/stretchr/testify 1.11.0 1.11.1
golang.org/x/crypto 0.41.0 0.42.0
golang.org/x/net 0.43.0 0.44.0
golang.org/x/oauth2 0.30.0 0.31.0
google.golang.org/api 0.248.0 0.250.0

Updates cloud.google.com/go/compute/metadata from 0.8.0 to 0.9.0

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

compute/metadata: v0.9.0

0.9.0 (2025-09-24)

Features

managedkafka: v0.8.1

0.8.1 (2025-09-18)

Bug Fixes

  • managedkafka: Upgrade gRPC service registration func (a10ecc9)

compute/metadata: v0.8.4

0.8.4 (2025-09-18)

Bug Fixes

  • compute/metadata: Set subClient for UseDefaultClient case (#12911) (9e2646b)

compute/metadata: v0.8.3

0.8.3 (2025-09-17)

Bug Fixes

  • compute/metadata: Disable Client timeouts for subscription client (#12910) (187a58a)

compute/metadata: v0.8.2

0.8.2 (2025-09-17)

Bug Fixes

compute/metadata: v0.8.1

0.8.1 (2025-09-16)

Bug Fixes

  • compute/metadata: Use separate client for subscribe methods (#12885) (76b80f8)
Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

Code changes required from v0.9.0

  • pubsub: Replace

    sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})

    with

    sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
    PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
})

  • trace: traceGRPCServerInterceptor will be provided from *trace.Client. Given an initialized *trace.Client named tc, instead of

    s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))

    write

    s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))

  • trace trace.GRPCClientInterceptor will also provided from *trace.Client. Instead of

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))

    write

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))

  • trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC interceptor as a dial option as shown below when initializing Cloud package clients:

    c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
if err != nil {
    ...

... (truncated)

Commits
  • d4f8670 BREAKING: all: regenerate toolkit client
  • 23179f2 readme: document Trace and Error Reporting clients
  • c2e00bb trace: switch to grpc-trace-bin for gRPC calls
  • 1de0ed4 rpcreplay: Fprintf functions
  • 8878988 bigtable/bttest: Return proper error code when entity already exists
  • e432073 bigtable: Don't retry on INTERNAL errors.
  • 84bf648 rpcreplay: responses to code review comments from previous CL
  • e687f27 rpcreplay: replay of unary RPCs
  • 9da216d spanner: more integration tests
  • a089e75 logging: document that Close flushes the loggers
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.19.1

1.19.1 (2025-09-11)

Bugs Fixed

  • Fixed resource identifier parsing for provider-specific resource hierarchies containing "resourceGroups" segments.

Other Changes

  • Improved error fall-back for improperly authored long-running operations.
  • Upgraded dependencies.
Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.12.0

1.12.0 (2025-09-16)

Features Added

  • Added DefaultAzureCredentialOptions.RequireAzureTokenCredentials. NewDefaultAzureCredential returns an error when this option is true and the environment variable AZURE_TOKEN_CREDENTIALS has no value.

Other Changes

  • AzureDeveloperCLICredential no longer hangs when AZD_DEBUG is set
  • GetToken methods of AzureCLICredential and AzureDeveloperCLICredential return an error when TokenRequestOptions.Claims has a value because these credentials can't acquire a token in that case. The error messages describe the action required to get a token.

sdk/internal/v1.11.2

1.11.2 (2025-07-30)

Other Changes

  • errorinfo.NonRetriable() doesn't wrap errors which are already NonRetriable
Commits

Updates github.com/hashicorp/consul/api from 1.32.1 to 1.32.4

Commits
  • d869c1d Backport of api: added helper types for census reporting ent api into release...
  • 0819206 Updated the changelogs and version for v1.21.5 (#22831)
  • bef5f12 Backport of ui: add copyright headers to new files into release/1.21.x (#22827)
  • d3e6767 Backport of bug - fix menu dropdown not opening after delete into release/1.2...
  • cc346fe Backport of Fix bug consul namespaces disappearing into release/1.21.x (#22819)
  • c400907 Backport of UI accessibility bugs into release/1.21.x (#22814)
  • 55e3dbf Backport: sec: perform constant time compare for sensitive values (#22537) (#...
  • d6001f2 Backport of [SECVULN-8636] Filter ACL for anonymous token along with empty to...
  • 38febd6 Consul ENT default version change (#22783)
  • 15aa895 Backport: deps: migrate mapstructure to go-viper (#22581) (#22780)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-framework from 1.15.1 to 1.16.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-framework's releases.

v1.16.0

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1217)
  • Support for the new action{} block is in technical preview and offered without compatibility promises until Terraform 1.14 is generally available. (#1181)
  • action: This release contains a new interface (action.Action) and packages for implementing action types, available in Terraform 1.14+. An action in Terraform can be defined by providers to model side-effects that practitioners can reference in their configurations via the lifecycle.action_trigger block. (#1181)
  • List support is in technical preview and offered without compatibility promises until Terraform 1.14 is generally available. (#1150)
  • list: This release contains a new interface (list.ListResource) and packages for implementing list resource types, available in Terraform 1.14+. A list resource in Terraform can be defined by providers to list remote resources within a given scope. (#1150)

FEATURES:

  • action: New package for implementing actions. (#1181)
  • action/schema: New package for implementing action schemas. (#1183)
  • types: Exported a previously internal function, TerraformTypeToFrameworkType, which converts tftypes.Type to a known framework type. (#1200)
  • list: New package for implementing list resources. (#1150)
  • all: Update Framework to handle new ListResource RPCs. (#1157)

ENHANCEMENTS:

  • provider: Added ProviderWithActions interface for implementing actions. (#1181)
  • provider: Added ActionData to ConfigureResponse, to pass provider-defined data to action.Action implementations. (#1185)
  • provider: Added ListResourceData to ConfigureResponse, to pass provider-defined data to list.ListResource implementations. (#1202)
  • tfsdk: Allow SetAtPath to be called with a tftypes.Value. (#1198)
  • tfsdk: Allow SetAttribute to be called with a tftypes.Value. (#1205)
  • list: Add the ListResourceWithRawV5Schemas and ListResourceWithRawV6Schemas interfaces to support list implementation on non-framework resources. (#1198)

v1.16.0-beta.1

FEATURES:

  • actions: Initial package implementation and new Actions RPC support (#1181)

ENHANCEMENTS:

  • list: add limit field to ListResult (#1182)
  • list: add primitives, list and map types to schema (#1177)
  • actions: add schema interface and unlinked schema (#1183)
  • actions: add standard validation methods and interfaces for ValidateActionConfig RPCs (#1188)
  • actions: add attributes and nested blocks to schema package (#1186)

BUG FIXES:

  • list: call Configure in ListResource RPC and remove the ListResource call in ValidateListResourceConfig (#1192)

v1.16.0-alpha.1

NOTES:

  • This alpha pre-release contains the initial implementation for list resource that returns a list of resource identities for a single managed resource type. (#1157)
  • The ListResource and ValidateListResourceConfig RPCs are considered experimental and may change up until general availability (#1178)

BUG FIXES:

... (truncated)

Changelog

Sourced from github.com/hashicorp/terraform-plugin-framework's changelog.

1.16.0 (September 17, 2025)

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1217)
  • Support for the new action{} block is in technical preview and offered without compatibility promises until Terraform 1.14 is generally available. (#1181)
  • action: This release contains a new interface (action.Action) and packages for implementing action types, available in Terraform 1.14+. An action in Terraform can be defined by providers to model side-effects that practitioners can reference in their configurations via the lifecycle.action_trigger block. (#1181)
  • List support is in technical preview and offered without compatibility promises until Terraform 1.14 is generally available. (#1150)
  • list: This release contains a new interface (list.ListResource) and packages for implementing list resource types, available in Terraform 1.14+. A list resource in Terraform can be defined by providers to list remote resources within a given scope. (#1150)

FEATURES:

  • action: New package for implementing actions. (#1181)
  • action/schema: New package for implementing action schemas. (#1183)
  • types: Exported a previously internal function, TerraformTypeToFrameworkType, which converts tftypes.Type to a known framework type. (#1200)
  • list: New package for implementing list resources. (#1150)
  • all: Update Framework to handle new ListResource RPCs. (#1157)

ENHANCEMENTS:

  • provider: Added ProviderWithActions interface for implementing actions. (#1181)
  • provider: Added ActionData to ConfigureResponse, to pass provider-defined data to action.Action implementations. (#1185)
  • provider: Added ListResourceData to ConfigureResponse, to pass provider-defined data to list.ListResource implementations. (#1202)
  • tfsdk: Allow SetAtPath to be called with a tftypes.Value. (#1198)
  • tfsdk: Allow SetAttribute to be called with a tftypes.Value. (#1205)
  • list: Add the ListResourceWithRawV5Schemas and ListResourceWithRawV6Schemas interfaces to support list implementation on non-framework resources. (#1198)

1.16.0-beta.1 (July 31, 2025)

FEATURES:

  • actions: Initial package implementation and new Actions RPC support (#1181)

ENHANCEMENTS:

  • list: add limit field to ListResult (#1182)
  • list: add primitives, list and map types to schema (#1177)
  • actions: add schema interface and unlinked schema (#1183)
  • actions: add standard validation methods and interfaces for ValidateActionConfig RPCs (#1188)
  • actions: add attributes and nested blocks to schema package (#1186)

BUG FIXES:

  • list: call Configure in ListResource RPC and remove the ListResource call in ValidateListResourceConfig (#1192)

1.16.0-alpha.1 (July 22, 2025)

NOTES:

  • This alpha pre-release contains the initial implementation for list resource that returns a list of resource identities for a single managed resource type. (#1157)

... (truncated)

Commits

Updates github.com/hashicorp/terraform-plugin-go from 0.28.0 to 0.29.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-go's releases.

v0.29.0

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#556)
  • tfprotov5+tfprotov6: An upcoming release will require the ActionServer implementation as part of ProviderServer. (#534)

FEATURES:

  • tfprotov5+tfprotov6: Upgraded protocols and added types to support the new action type. (#534)
  • tfprotov5+tfprotov6: Upgraded protocols and added types to support the new list type (#525)

ENHANCEMENTS:

  • tftypes: tftypes.Value.IsFullyNull() allows SDKs to determine when a value is null or consists of only null elements and attributes. (#541)

v0.29.0-beta.1

NOTES:

  • Updates the ValidateListResourceConfig RPC to validate include_resource as well as limit (#538)

FEATURES:

  • tfprotov5+tfprotov6: Add action validation RPC (#539)

ENHANCEMENTS:

  • tftypes: tftypes.Value.IsFullyNull() allows SDKs to determine when a value is null or consists of only null elements and attributes. (#541)

BUG FIXES:

  • Fix proto field numbering for GetProviderSchema (#539)

v0.29.0-alpha.1

NOTES:

  • This alpha pre-release contains the protocol definitions and Go type definitions for list resources, which are a new type of resource. (#512)
  • A ProviderServerWithListResource can be used with the terraform query subcommand in Terraform 1.13.0-alpha20250708 and later to search unmanaged infrastructure. (#512)
  • The list resource protocol definitions are considered experimental and may change up until general availability. (#512)
  • tfprotov5+tfprotov6: An upcoming release will require the ValidateListResourceConfig and ListResource implementations as part of ProviderServer. (#514)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-go's changelog.

0.29.0 (September 17, 2025)

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#556)
  • tfprotov5+tfprotov6: An upcoming release will require the ActionServer implementation as part of ProviderServer. (#534)

FEATURES:

  • tfprotov5+tfprotov6: Upgraded protocols and added types to support the new action type. (#534)
  • tfprotov5+tfprotov6: Upgraded protocols and added types to support the new list type (#525)

ENHANCEMENTS:

  • tftypes: tftypes.Value.IsFullyNull() allows SDKs to determine when a value is null or consists of only null elements and attributes. (#541)

0.29.0-beta.1 (July 31, 2025)

NOTES:

  • Updates the ValidateListResourceConfig RPC to validate include_resource as well as limit (#538)

FEATURES:

  • tfprotov5+tfprotov6: Add action validation RPC (#539)

ENHANCEMENTS:

  • tftypes: tftypes.Value.IsFullyNull() allows SDKs to determine when a value is null or consists of only null elements and attributes. (#541)

BUG FIXES:

  • Fix proto field numbering for GetProviderSchema (#539)

0.29.0-alpha.1 (July 08, 2025)

NOTES:

  • This alpha pre-release contains the protocol definitions and Go type definitions for list resources, which are a new type of resource. (#512)
  • A ProviderServerWithListResource can be used with the terraform query subcommand in Terraform 1.13.0-alpha20250708 and later to search unmanaged infrastructure. (#512)
  • The list resource protocol definitions are considered experimental and may change up until general availability. (#512)
  • tfprotov5+tfprotov6: An upcoming release will require the ValidateListResourceConfig and ListResource implementations as part of ProviderServer. (#514)
Commits
  • a361c9b Update changelog
  • 9c9e494 add changelog for list (#561)
  • 2cd3335 add action changelogs (#560)
  • c3810b1 Simplify actions to one schema type (#559)
  • 0d697e5 build(deps): Bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#557)
  • ef1c33e build(deps): Bump google.golang.org/grpc from 1.75.0 to 1.75.1 (#558)
  • 45d8122 build(deps): Bump github.com/hashicorp/go-plugin from 1.6.3 to 1.7.0 (#555)
  • d021075 build(deps): Bump the github-actions group with 2 updates (#556)
  • 4c19f06 Update action proto v5/v6 definitions to match TF core (#554)
  • f90fa5d build(deps): Bump github.com/hashicorp/terraform-registry-address (#553)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-mux from 0.20.0 to 0.21.0

Release notes

Sourced from github.com/hashicorp/terraform-plugin-mux's releases.

v0.21.0

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#324)

FEATURES:

  • all: Upgraded mux server implementations to support action types. (#314)
  • all: Upgraded mux server implementations to support the new list. (#313)

v0.21.0-alpha.1

NOTES:

  • This alpha pre-release contains the ListResource RPC which returns a list of resource identities for a single managed resource type. (#313)
  • The ListResource and ValidateListResourceConfig RPCs are considered experimental and may change up until general availability. (#310)
  • This alpha pre-release contains the Actions RPC that allows practitioners to specify and invoke non-CRUD, ad-hoc operations that can cause changes to managed resources. (#314)
  • The Actions and ValidateActionConfig RPCs are considered experimental and may change up until general availability. (#317)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-mux's changelog.

0.21.0 (September 17, 2025)

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#324)

FEATURES:

  • all: Upgraded mux server implementations to support action types. (#314)
  • all: Upgraded mux server implementations to support the new list. (#313)

0.21.0-alpha.1 (July 31, 2025)

NOTES:

  • This alpha pre-release contains the ListResource RPC which returns a list of resource identities for a single managed resource type. (#313)
  • The ListResource and ValidateListResourceConfig RPCs are considered experimental and may change up until general availability. (#310)
  • This alpha pre-release contains the Actions RPC that allows practitioners to specify and invoke non-CRUD, ad-hoc operations that can cause changes to managed resources. (#314)
  • The Actions and ValidateActionConfig RPCs are considered experimental and may change up until general availability. (#317)
Commits
  • b38198f Update changelog
  • 8af620e build(deps): bump github.com/hashicorp/terraform-plugin-go (#328)
  • dacc35a add changelog for list (#327)
  • c551d8b Simplify actions to one schema type (#325)
  • f55e317 add action changelogs (#326)
  • 3bb81cc build(deps): bump the github-actions group with 2 updates (#324)
  • 2483daa actions: Remove unused action schema types and add linked resource configs to...
  • 27bdf68 chore: remove old docs (#322)
  • 6d917c2 build(deps): bump the github-actions group with 2 updates (#321)
  • 8c6b97f [CI] Update lock workflow file
  • Additional commits viewable in compare view

Updates github.com/hashicorp/terraform-plugin-sdk/v2 from 2.37.0 to 2.38.1

Release notes

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's releases.

v2.38.1

BUG FIXES:

  • all: Prevent identity change validation from raising an error when prior identity is empty (all attributes are null) (#1527)

v2.38.0

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1518)
  • helper/schema: Update the provider server to handle the ListResource RPCs by returning an error since they are not supported by SDKv2. (#1521)
  • helper/schema: Update the provider server to handle Action RPCs by returning an error since they are not supported by SDKv2. (#1522)

ENHANCEMENTS:

  • helper/schema: Added new helper methods for converting Resource and Identity schemas to protocol representations. (#1504)
  • helper/schema: Added an additional validation check to ensure the resource identity object is not null. (#1513)
  • helper/schema: Added the TfTypeIdentityState() and TfTypeResourceState() methods to ResourceData which return the identity and state values as a tftypes.Value. (#1508)
Changelog

Sourced from github.com/hashicorp/terraform-plugin-sdk/v2's changelog.

2.38.1 (September 22, 2025)

BUG FIXES:

  • all: Prevent identity change validation from raising an error when prior identity is empty (all attributes are null) (#1527)

2.38.0 (September 17, 2025)

NOTES:

  • all: This Go module has been updated to Go 1.24 per the Go support policy. It is recommended to review the Go 1.24 release notes before upgrading. Any consumers building on earlier Go versions may experience errors. (#1518)
  • helper/schema: Update the provider server to handle the ListResource RPCs by returning an error since they are not supported by SDKv2. (#1521)
  • helper/schema: Update the provider server to handle Action RPCs by returning an error since they are not supported by SDKv2. (#1522)

ENHANCEMENTS:

  • helper/schema: Added new helper methods for converting Resource and Identity schemas to protocol representations. (#1504)
  • helper/schema: Added an additional validation check to ensure the resource identity object is not null. (#1513)
  • helper/schema: Added the TfTypeIdentityState() and TfTypeResourceState() methods to ResourceData which return the identity and state values as a tftypes.Value. (#1508)
Commits
  • cada9f3 Update changelog
  • 66bbff0 Update meta package SDKVersion
  • f5ba712 identity: Update change validation to ensure empty identities (all null attri...
  • ef9dd9f Update changelog
  • 9163250 Update meta package SDKVersion
  • 7a87b04 build(deps): bump github.com/hashicorp/terraform-plugin-go (#1526)
  • fdc4a14 build(deps): bump github.com/hashicorp/terraform-json (#1523)
  • d8ee719 action: Implement error returning for action RPCs (#1522)
  • 183e62b list: implement list RPCs (#1521)
  • 24a3c3e build(deps): bump golang.org/x/crypto from 0.41.0 to 0.42.0 (#1519)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api from 1.20.0 to 1.21.0

Release notes

Sourced from github.com/hashicorp/vault/api's releases.

v1.20.4

No release notes provided.

v1.20.3

No release notes provided.

v1.20.2

August 06, 2025

SECURITY:

BUG FIXES:

  • agent/template: Fixed issue where templates would not render correctly if namespaces was provided by config, and the namespace and mount path of the secret were the same. [GH-31392]
  • identity/mfa: revert cache entry change from #31217 and document cache entry values [GH-31421]

v1.20.1

No release notes provided.

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

Previous versions

1.20.4

September 24, 2025

SECURITY:

CHANGES:

IMPROVEMENTS:

  • Raft: Auto-join will now allow you to enforce IPv4 on networks that allow IPv6 and dual-stack enablement, which is on by default in certain regions. (1fd38796)
  • auth/cert: Support RFC 9440 colon-wrapped Base64 certificates in x_forwarded_for_client_cert_header, to fix TLS certificate auth errors with Google Cloud Application Load Balancer. [GH-31501]
  • secrets/database (enterprise): Add support for reading, listing, and recovering static roles from a loaded snapshot. Also add support for reading static credentials from a loaded snapshot. (24cd1aa5)
  • secrets/ssh: Add support for recovering the SSH plugin CA from a loaded snapshot (enterprise only). (0087af9d)

BUG FIXES:

  • auth/cert: Recover from partially populated caches of trusted certificates if one or more certificates fails to load. [GH-31438]
  • core: Role based quotas now work for cert auth (fc775dea)
  • sys/mounts: enable unsetting allowed_response_headers [GH-31555]
  • ui: Fix page loading error when users navigate away from identity entities and groups list views. (81170963)

1.20.3

August 28, 2025

FEATURES:

SECURITY:

CHANGES:

  • core: Bump Go version to 1.24.6. (ce56e14e)
  • http: Add JSON configurable limits to HTTP handling for JSON payloads: max_json_depth, max_json_string_value_length, max_json_object_entry_count, max_json_array_element_count. [GH-31069]
  • sdk: Upgrade to go-secure-stdlib/[email protected], which also bumps github.com/docker/docker to v28.3.3+incompatible (8f172169)
  • secrets/openldap (enterprise): update plugin to v0.16.1

IMPROVEMENTS:

... (truncated)

Commits
  • e40eca1 VAULT-39294: Deprecate recover_snapshot_id query param and use a header inste...
  • c9605c7 VAULT-36947: Support force unloading a snapshot (

@dependabot
build(deps): bump the gomod-backward-compatible group with 15 updates
2528141 
Bumps the gomod-backward-compatible group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/compute/metadata](https://github.com/googleapis/google-cloud-go) | `0.8.0` | `0.9.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.19.0` | `1.19.1` |
| [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.11.0` | `1.12.0` |
| [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.32.1` | `1.32.4` |
| [github.com/hashicorp/terraform-plugin-framework](https://github.com/hashicorp/terraform-plugin-framework) | `1.15.1` | `1.16.0` |
| [github.com/hashicorp/terraform-plugin-go](https://github.com/hashicorp/terraform-plugin-go) | `0.28.0` | `0.29.0` |
| [github.com/hashicorp/terraform-plugin-mux](https://github.com/hashicorp/terraform-plugin-mux) | `0.20.0` | `0.21.0` |
| [github.com/hashicorp/terraform-plugin-sdk/v2](https://github.com/hashicorp/terraform-plugin-sdk) | `2.37.0` | `2.38.1` |
| [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) | `1.20.0` | `1.21.0` |
| [github.com/hashicorp/vault/sdk](https://github.com/hashicorp/vault) | `0.18.0` | `0.19.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.11.0` | `1.11.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.41.0` | `0.42.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.43.0` | `0.44.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.30.0` | `0.31.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.248.0` | `0.250.0` |


Updates `cloud.google.com/go/compute/metadata` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@v0.8.0...v0.9.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.19.0 to 1.19.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.19.0...sdk/azcore/v1.19.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.11.0 to 1.12.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/sdk-breaking-changes-guide-migration.md)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.11.0...sdk/azcore/v1.12.0)

Updates `github.com/hashicorp/consul/api` from 1.32.1 to 1.32.4
- [Release notes](https://github.com/hashicorp/consul/releases)
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md)
- [Commits](hashicorp/consul@api/v1.32.1...api/v1.32.4)

Updates `github.com/hashicorp/terraform-plugin-framework` from 1.15.1 to 1.16.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-framework/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-framework/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-framework@v1.15.1...v1.16.0)

Updates `github.com/hashicorp/terraform-plugin-go` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-go/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-go/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-go@v0.28.0...v0.29.0)

Updates `github.com/hashicorp/terraform-plugin-mux` from 0.20.0 to 0.21.0
- [Release notes](https://github.com/hashicorp/terraform-plugin-mux/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-mux/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-mux@v0.20.0...v0.21.0)

Updates `github.com/hashicorp/terraform-plugin-sdk/v2` from 2.37.0 to 2.38.1
- [Release notes](https://github.com/hashicorp/terraform-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-sdk@v2.37.0...v2.38.1)

Updates `github.com/hashicorp/vault/api` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@v1.20.0...api/v1.21.0)

Updates `github.com/hashicorp/vault/sdk` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md)
- [Commits](hashicorp/vault@sdk/v0.18.0...sdk/v0.19.0)

Updates `github.com/stretchr/testify` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.11.0...v1.11.1)

Updates `golang.org/x/crypto` from 0.41.0 to 0.42.0
- [Commits](golang/crypto@v0.41.0...v0.42.0)

Updates `golang.org/x/net` from 0.43.0 to 0.44.0
- [Commits](golang/net@v0.43.0...v0.44.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.31.0
- [Commits](golang/oauth2@v0.30.0...v0.31.0)

Updates `google.golang.org/api` from 0.248.0 to 0.250.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.248.0...v0.250.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/compute/metadata
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/consul/api
  dependency-version: 1.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/terraform-plugin-framework
  dependency-version: 1.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/terraform-plugin-go
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/terraform-plugin-mux
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
  dependency-version: 2.38.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/hashicorp/vault/sdk
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-backward-compatible
- dependency-name: golang.org/x/crypto
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: golang.org/x/net
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
- dependency-name: google.golang.org/api
  dependency-version: 0.250.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-backward-compatible
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies go Pull requests that update Go code labels Sep 29, 2025
@dependabot dependabot bot requested review from a team as code owners September 29, 2025 00:03
@dependabot dependabot bot added dependencies go Pull requests that update Go code labels Sep 29, 2025
@dependabot dependabot bot requested a review from drivera258 September 29, 2025 00:03
This was referenced Sep 29, 2025
Closed
Closed
Closed
Closed
Closed
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 6, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/gomod-backward-compatible-e32eabc36d branch October 6, 2025 00:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@drivera258 drivera258 Awaiting requested review from drivera258 drivera258 is a code owner automatically assigned from hashicorp/vault

Assignees

No one assigned

Labels

dependencies go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants