9.json (10633B)
1 { 2 "number": 9, 3 "title": "Bump github.com/hashicorp/terraform-plugin-go from 0.20.0 to 0.22.1", 4 "state": "open", 5 "diff_file": "9.diff", 6 "author": "dependabot[bot]", 7 "created_at": "2024-03-12T02:26:18Z", 8 "closed_at": null, 9 "merged_at": null, 10 "base_ref": "main", 11 "head_ref": "dependabot/go_modules/github.com/hashicorp/terraform-plugin-go-0.22.1", 12 "labels": [ 13 "dependencies" 14 ], 15 "assignees": [], 16 "requested_reviewers": [], 17 "body": "Bumps [github.com/hashicorp/terraform-plugin-go](https://github.com/hashicorp/terraform-plugin-go) from 0.20.0 to 0.22.1.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/hashicorp/terraform-plugin-go/releases\">github.com/hashicorp/terraform-plugin-go's releases</a>.</em></p>\n<blockquote>\n<h2>v0.22.1</h2>\n<p>NOTES:</p>\n<ul>\n<li>all: Upgraded google.golang.org/protobuf dependency, which includes a fix for CVE-2024-24786. While the fixed feature is not used in this Go module, this upgrade may silence security vulnerability scanner reports that are based purely on dependency versions. (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/385\">#385</a>)</li>\n</ul>\n<p>BUG FIXES:</p>\n<ul>\n<li>tftypes: Fixed an edge-case where <code>(Value).Equal</code> would panic when comparing two values with underlying <code>DynamicPseudoType</code> types and different concrete values. (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/383\">#383</a>)</li>\n</ul>\n<h2>v0.22.0</h2>\n<p>BREAKING CHANGES:</p>\n<ul>\n<li>tfprotov5+tfprotov6: Modified the response returned from the CallFunction RPC, replacing diagnostics with function error (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/380\">#380</a>)</li>\n</ul>\n<p>NOTES:</p>\n<ul>\n<li>all: This Go module has been updated to Go 1.21 per the <a href=\"https://go.dev/doc/devel/release#policy\">Go support policy</a>. It is recommended to review the <a href=\"https://go.dev/doc/go1.21\">Go 1.21 release notes</a> before upgrading. Any consumers building on earlier Go versions may experience errors. (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/381\">#381</a>)</li>\n<li>all: If using terraform-plugin-framework, terraform-plugin-mux, or terraform-plugin-sdk, only upgrade this Go module when upgrading those Go modules to terraform-plugin-framework@v1.6.0, terraform-plugin-mux@v0.15.0, and terraform-plugin-sdk/v2@v2.33.0, or greater, respectively (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/380\">#380</a>)</li>\n</ul>\n<h2>v0.21.0</h2>\n<p>NOTES:</p>\n<ul>\n<li>tfprotov5+tfprotov6: An upcoming release will require the MoveResourceState implementation as part of ResourceServer (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/364\">#364</a>)</li>\n</ul>\n<p>FEATURES:</p>\n<ul>\n<li>tfprotov5+tfprotov6: Upgraded protocols and added types to support the <code>MoveResourceState</code> RPC (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/364\">#364</a>)</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/hashicorp/terraform-plugin-go/blob/main/CHANGELOG.md\">github.com/hashicorp/terraform-plugin-go's changelog</a>.</em></p>\n<blockquote>\n<h2>0.22.1 (March 11, 2024)</h2>\n<p>NOTES:</p>\n<ul>\n<li>all: Upgraded google.golang.org/protobuf dependency, which includes a fix for CVE-2024-24786. While the fixed feature is not used in this Go module, this upgrade may silence security vulnerability scanner reports that are based purely on dependency versions. (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/385\">#385</a>)</li>\n</ul>\n<p>BUG FIXES:</p>\n<ul>\n<li>tftypes: Fixed an edge-case where <code>(Value).Equal</code> would panic when comparing two values with underlying <code>DynamicPseudoType</code> types and different concrete values. (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/383\">#383</a>)</li>\n</ul>\n<h2>0.22.0 (February 22, 2024)</h2>\n<p>BREAKING CHANGES:</p>\n<ul>\n<li>tfprotov5+tfprotov6: Modified the response returned from the CallFunction RPC, replacing diagnostics with function error (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/380\">#380</a>)</li>\n</ul>\n<p>NOTES:</p>\n<ul>\n<li>all: This Go module has been updated to Go 1.21 per the <a href=\"https://go.dev/doc/devel/release#policy\">Go support policy</a>. It is recommended to review the <a href=\"https://go.dev/doc/go1.21\">Go 1.21 release notes</a> before upgrading. Any consumers building on earlier Go versions may experience errors. (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/381\">#381</a>)</li>\n<li>all: If using terraform-plugin-framework, terraform-plugin-mux, or terraform-plugin-sdk, only upgrade this Go module when upgrading those Go modules to terraform-plugin-framework@v1.6.0, terraform-plugin-mux@v0.15.0, and terraform-plugin-sdk/v2@v2.33.0, or greater, respectively (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/380\">#380</a>)</li>\n</ul>\n<h2>0.21.0 (January 26, 2024)</h2>\n<p>NOTES:</p>\n<ul>\n<li>tfprotov5+tfprotov6: An upcoming release will require the MoveResourceState implementation as part of ResourceServer (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/364\">#364</a>)</li>\n</ul>\n<p>FEATURES:</p>\n<ul>\n<li>tfprotov5+tfprotov6: Upgraded protocols and added types to support the <code>MoveResourceState</code> RPC (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/364\">#364</a>)</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/a99dc457730f300499ac3041c92159831abd90b3\"><code>a99dc45</code></a> Update changelog</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/0d7e0a15ab0a1e2448c992c5b1885412d41e2e12\"><code>0d7e0a1</code></a> Update CHANGELOG for <a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/385\">#385</a> (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/387\">#387</a>)</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/d47f32b98c7a35bd86a87a6559313e0a030d02d3\"><code>d47f32b</code></a> build(deps): Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/385\">#385</a>)</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/dea00219bdb3af0b3bcfb590e735d4067199855a\"><code>dea0021</code></a> build(deps): Bump google.golang.org/grpc from 1.62.0 to 1.62.1 (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/386\">#386</a>)</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/720b6484af9a32cad97325dfcfb8dd1513c4f90e\"><code>720b648</code></a> Adding go toolchain directive (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/384\">#384</a>)</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/769432be552b725097bc31fba962f56620409afb\"><code>769432b</code></a> build(deps): Bump google.golang.org/grpc from 1.61.1 to 1.62.0 (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/382\">#382</a>)</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/570828eaa7d0a3edfa3a3ea4abf4363cf1460335\"><code>570828e</code></a> tftypes: Adjust <code>(tftypes.Value).Equal</code> function to support dynamic value com...</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/01b86e957909a2845ecce8d58f502771b4d70d99\"><code>01b86e9</code></a> Update changelog</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/d39a78e69824ad918078d13c0f63638162ae1122\"><code>d39a78e</code></a> all: Update Go Module to Go 1.21 (<a href=\"https://redirect.github.com/hashicorp/terraform-plugin-go/issues/381\">#381</a>)</li>\n<li><a href=\"https://github.com/hashicorp/terraform-plugin-go/commit/90a82fe9715d52bae9ea775601c4539526501237\"><code>90a82fe</code></a> tfprotov5+tfprotov6: Replace usage of diagnostics in CallFunction RPC with fu...</li>\n<li>Additional commits viewable in <a href=\"https://github.com/hashicorp/terraform-plugin-go/compare/v0.20.0...v0.22.1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n\n\n</details>", 18 "comments": [], 19 "review_comments": [] 20 }