chore(deps): update module github.com/hashicorp/go-getter to v2 (9.3)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/hashicorp/go-getter	indirect	major	v1.7.9 -> v2.2.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/go-getter (github.com/hashicorp/go-getter)

v2.2.3

Compare Source

What's Changed

• Backport fix to prevent Git config alteration on Git update by @​nywilken in https://github.com/hashicorp/go-getter/pull/498

Other

• [v2] update s3, and gcs to use most recent v2 module version by @​nywilken in https://github.com/hashicorp/go-getter/pull/489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @​nywilken in https://github.com/hashicorp/go-getter/pull/490

Full Changelog: hashicorp/go-getter@v2.2.2...v2.2.3

v2.2.2

Compare Source

What's Changed

• remove repo-specific codeql action (port from v1) by @​nywilken in https://github.com/hashicorp/go-getter/pull/431
• gcs/v2: bump cloud.google.com/go/storage to 1.34.0 by @​lbajolet-hashicorp in https://github.com/hashicorp/go-getter/pull/488
• docs: bump version for godocs url by @​kudla in https://github.com/hashicorp/go-getter/pull/460
• [v2] update s3, and gcs to use most recent v2 module version by @​nywilken in https://github.com/hashicorp/go-getter/pull/489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @​nywilken in https://github.com/hashicorp/go-getter/pull/490

New Contributors

• @​lbajolet-hashicorp made their first contribution in https://github.com/hashicorp/go-getter/pull/488
• @​kudla made their first contribution in https://github.com/hashicorp/go-getter/pull/460

Full Changelog: hashicorp/go-getter@v2.2.1...cmd/go-getter/v2.2.2

v2.2.1

Compare Source

What's Changed

• [V2] Bump submodules to use most recent v2 module version by @​nywilken in https://github.com/hashicorp/go-getter/pull/416
• Port Decompression bomb security changes from v1 by @​nywilken in https://github.com/hashicorp/go-getter/pull/418
• Update Go-Getter test workflow to run on pull requests by @​nywilken in https://github.com/hashicorp/go-getter/pull/417
• Port bomb.zip test updates from v1 by @​nywilken in https://github.com/hashicorp/go-getter/pull/425
• [v2] update s3, gcs and cmd to use most recent v2 module version by @​nywilken in https://github.com/hashicorp/go-getter/pull/426

Full Changelog: hashicorp/go-getter@v2.2.0...v2.2.1

v2.2.0

Compare Source

What's Changed

• [v2] update s3, gcs and cmd to use most recent v2 module version by @​nywilken in https://github.com/hashicorp/go-getter/pull/400
• Port Decompression bomb security changes from v1 by @​nywilken in https://github.com/hashicorp/go-getter/pull/414
• Update Go-Getter V2 to use Go 1.18 by @​nywilken in https://github.com/hashicorp/go-getter/pull/381

Full Changelog: hashicorp/go-getter@v2.1.1...v2.2.0

v2.1.1

Compare Source

What's Changed

• Add Timeout to SmbClientGetter to go-getter/v2 by @​nywilken in https://github.com/hashicorp/go-getter/pull/369
• Upgrade AWS SDK version by @​kmoe in https://github.com/hashicorp/go-getter/pull/385

Other Changes

• Fix Go Tests for V2 by @​claire-labry in https://github.com/hashicorp/go-getter/pull/392
• Migrate go-getter v2 to GHA by @​claire-labry in https://github.com/hashicorp/go-getter/pull/388
• • Add Malformed S3 URL test by @​nywilken in https://github.com/hashicorp/go-getter/pull/380

New Contributors

• @​kmoe made their first contribution in https://github.com/hashicorp/go-getter/pull/385

Full Changelog: hashicorp/go-getter@v2.1.0...v2.1.1

v2.1.0

Compare Source

What's Changed

• Multiple fixes for go-getter v2 by @​nywilken in https://github.com/hashicorp/go-getter/pull/361
• Update X-Terraform-Get error messaging to match v1 by @​nywilken in https://github.com/hashicorp/go-getter/pull/364
• Update default Getters with known defaults by @​nywilken in https://github.com/hashicorp/go-getter/pull/363

Full Changelog: hashicorp/go-getter@v2.0.2...v2.1.0

v2.0.2

Compare Source

What's Changed

• update s3 gcs and cmd to use most recent v2 module by @​azr in https://github.com/hashicorp/go-getter/pull/352
• Removed ova file type from the list of supported decompressors by @​nywilken in https://github.com/hashicorp/go-getter/pull/354

Full Changelog: hashicorp/go-getter@v2.0.1...v2.0.2

v2.0.1

Compare Source

Enhancements

• Append tar and ova decompressor in v2 by @​LeConTesteur in https://github.com/hashicorp/go-getter/pull/351

Bug fixes 🐞

• fixes #​320: Pass context to NewRequestWithContext so HTTP requests can… by @​zeisss in https://github.com/hashicorp/go-getter/pull/324
• Ignore comments in checksum files by @​azr in https://github.com/hashicorp/go-getter/pull/350

New Contributors

• @​LeConTesteur made their first contribution in https://github.com/hashicorp/go-getter/pull/351

Full Changelog: hashicorp/go-getter@v2.0.0...v2.0.1

v2.0.0: with split client/requests and vendored plugins

Compare Source

v1.8.6

Compare Source

v1.8.5

Compare Source

What's Changed

• [chore] : Bump the go group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5766
• use %w to wrap error by @​Ericwww in https://github.com/hashicorp/go-getter/pull/475
• fix: #​538 http file download skipped if headResp.ContentLength is 0 by @​martijnvdp in https://github.com/hashicorp/go-getter/pull/539
• chore: fix error message capitalization in checksum function by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/578
• [chore] : Bump the go group with 8 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5777
• Fix git url with ambiguous ref by @​nimasamii in https://github.com/hashicorp/go-getter/pull/382
• fix: resolve compilation errors in get_git_test.go by @​CreatorHead in https://github.com/hashicorp/go-getter/pull/579
• [chore] : Bump the actions group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5822
• [chore] : Bump the go group with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5833
• test that arbitrary files cannot be checksummed by @​schmichael in https://github.com/hashicorp/go-getter/pull/250
• [chore] : Bump google.golang.org/api from 0.260.0 to 0.262.0 in the go group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5855
• [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5866
• [chore] : Bump the go group with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5888
• [chore] : Bump actions/cache from 5.0.2 to 5.0.3 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5899
• [chore] : Bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5922
• [chore] : Bump google.golang.org/api from 0.264.0 to 0.265.0 in the go group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5911
• [chore] : Bump the go group with 5 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5933
• IND-6310 - CRT Onboarding by @​nasareeny in https://github.com/hashicorp/go-getter/pull/584
• Fix crt build path by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/594
• [chore] : Bump the go group with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5966
• fix: remove checkout action from set-product-version job by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/598
• [chore] : Bump the actions group with 4 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5955
• fix(deps): upgrade go.opentelemetry.io/otel/sdk to v1.40.0 (GO-2026-4394) by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/599
• Prepare go-getter for v1.8.5 release by @​nasareeny in https://github.com/hashicorp/go-getter/pull/597
• [chore] : Bump the actions group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/6000
• sec: bump go and xrepos + redact aws tokens in url by @​dduzgun-security in https://github.com/hashicorp/go-getter/pull/604

NOTES:

Binary Distribution Update: To streamline our release process and align with other HashiCorp tools, all release binaries will now be published exclusively to the official HashiCorp release site. We will no longer attach release assets to GitHub Releases.

New Contributors

• @​Ericwww made their first contribution in https://github.com/hashicorp/go-getter/pull/475
• @​martijnvdp made their first contribution in https://github.com/hashicorp/go-getter/pull/539
• @​nimasamii made their first contribution in https://github.com/hashicorp/go-getter/pull/382
• @​nasareeny made their first contribution in https://github.com/hashicorp/go-getter/pull/584

Full Changelog: hashicorp/go-getter@v1.8.4...v1.8.5

v1.8.4

Compare Source

What's Changed

• [IND-4227][COMPLIANCE] chore: Fix lint issues-build tags by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/568
• [IND-4227] [COMPLIANCE] Update Copyright Headers by @​oss-core-libraries-dashboard[bot] inhttps://github.com/hashicorp/go-getter/pull/5666
• [COMPLIANCE] Update Copyright Headers by @​oss-core-libraries-dashboard[bot] inhttps://github.com/hashicorp/go-getter/pull/5711
• [chore] : Bump the actions group across 1 directory with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5677
• fix: allow downloading S3 files from MinIO over http by @​vsarunas in https://github.com/hashicorp/go-getter/pull/570
• [chore] : Bump the actions group across 1 directory with 6 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5744
• [chore] : Bump the go group across 1 directory with 12 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5755

New Contributors

• @​ssagarverma made their first contribution in https://github.com/hashicorp/go-getter/pull/568
• @​oss-core-libraries-dashboard[bot] made their first contribution inhttps://github.com/hashicorp/go-getter/pull/5666

Full Changelog: hashicorp/go-getter@v1.8.3...v1.8.4

v1.8.3

Compare Source

What's Changed

• [chore] : Bump actions/cache from 4.2.4 to 4.3.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5622
• [chore] : Bump aws-actions/configure-aws-credentials from 5.0.0 to 5.1.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5633
• Remove failed decompressed files by @​allisonlarson in https://github.com/hashicorp/go-getter/pull/564

New Contributors

• @​allisonlarson made their first contribution in https://github.com/hashicorp/go-getter/pull/564

Full Changelog: hashicorp/go-getter@v1.8.2...v1.8.3

v1.8.2

Compare Source

What's Changed

• Ensure temporary directory symlinks do not cause errors by @​cam-stitt in https://github.com/hashicorp/go-getter/pull/560

New Contributors

• @​cam-stitt made their first contribution in https://github.com/hashicorp/go-getter/pull/560

Full Changelog: hashicorp/go-getter@v1.8.1...v1.8.2

v1.8.1

Compare Source

What's Changed

• chore(deps): bump ulikunitz/xz to v0.5.15 by @​thevilledev in https://github.com/hashicorp/go-getter/pull/550
• Improve CI/CD, fix tests by @​YakDriver in https://github.com/hashicorp/go-getter/pull/554
• [fix] Windows junction handling by @​YakDriver in https://github.com/hashicorp/go-getter/pull/557

New Contributors

• @​thevilledev made their first contribution in https://github.com/hashicorp/go-getter/pull/550

Full Changelog: hashicorp/go-getter@v1.8.0...v1.8.1

v1.8.0

What's Changed

• [chore] : Bump the actions group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5433
• [chore] : Bump google-github-actions/auth from 2.1.12 to 3.0.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5466
• go: bump ulikunitz/xz to v.0.5.14 to resolve GHSA-jc7w-c686-c4v9 by @​ryancragun in https://github.com/hashicorp/go-getter/pull/547
• Upgrade to aws-sdk-go-v2, v1 is unsupported by @​YakDriver in https://github.com/hashicorp/go-getter/pull/548
• Modernize codebase: Fix linting issues, update CI/CD workflow, and improve test categorization by @​YakDriver in https://github.com/hashicorp/go-getter/pull/549

New Contributors

• @​ryancragun made their first contribution in https://github.com/hashicorp/go-getter/pull/547
• @​YakDriver made their first contribution in https://github.com/hashicorp/go-getter/pull/548

Full Changelog: hashicorp/go-getter@v1.7.9...v1.8.0

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[elastic-renovate-prod]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[elastic-renovate-prod]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 2.x releases. But if you manually upgrade to 2.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.