v1.7.6

What's Changed

• fix: Avoid panic when s3 URL is invalid by @liamg in #501

New Contributors

• @liamg made their first contribution in #501

Full Changelog: v1.7.5...v1.7.6

v2.2.3

What's Changed

• Backport fix to prevent Git config alteration on Git update by @nywilken in #498

Other

• [v2] update s3, and gcs to use most recent v2 module version by @nywilken in #489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @nywilken in #490

Full Changelog: v2.2.2...v2.2.3

v1.7.5

What's Changed

• Prevent Git Config Alteration on Git Update by @dduzgun-security in #497

New Contributors

• @dduzgun-security made their first contribution in #497

Full Changelog: v1.7.4...v1.7.5

v2.2.2

What's Changed

• remove repo-specific codeql action (port from v1) by @nywilken in #431
• gcs/v2: bump cloud.google.com/go/storage to 1.34.0 by @lbajolet-hashicorp in #488
• docs: bump version for godocs url by @kudla in #460
• [v2] update s3, and gcs to use most recent v2 module version by @nywilken in #489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @nywilken in #490

New Contributors

• @lbajolet-hashicorp made their first contribution in #488
• @kudla made their first contribution in #460

Full Changelog: v2.2.1...cmd/go-getter/v2.2.2

v1.7.4

What's Changed

• Escape user-provided strings in git commands #483
• Fixed a bug in .netrc handling if the file does not exist #433

Full Changelog: v1.7.3...v1.7.4

v1.7.3

What's Changed

• SEC-090: Automated trusted workflow pinning (2023-04-21) by @hashicorp-tsccr in #432
• SEC-090: Automated trusted workflow pinning (2023-09-11) by @hashicorp-tsccr in #454
• SEC-090: Automated trusted workflow pinning (2023-09-18) by @hashicorp-tsccr in #458
• don't change GIT_SSH_COMMAND when there is no sshKeyFile by @jbardin in #459

New Contributors

• @hashicorp-tsccr made their first contribution in #432

Full Changelog: v1.7.2...v1.7.3

v1.7.2

What's Changed

• Don't override GIT_SSH_COMMAND when not needed by @nl-brett-stime #300

Full Changelog: v1.7.1...v1.7.2

v2.2.1

What's Changed

• [V2] Bump submodules to use most recent v2 module version by @nywilken in #416
• Port Decompression bomb security changes from v1 by @nywilken in #418
• Update Go-Getter test workflow to run on pull requests by @nywilken in #417
• Port bomb.zip test updates from v1 by @nywilken in #425
• [v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #426

Full Changelog: v2.2.0...v2.2.1

v1.7.1

Merge pull request #424 from hashicorp/fix-av-reports

Remove `bomb.zip` test file to stop anti-virus noise

v2.2.0

What's Changed

• [v2] update s3, gcs and cmd to use most recent v2 module version by @nywilken in #400
• Port Decompression bomb security changes from v1 by @nywilken in #414
• Update Go-Getter V2 to use Go 1.18 by @nywilken in #381

Full Changelog: v2.1.1...v2.2.0