go.mod: go get github.com/hashicorp/go-getter@v1.8.0

Browse Source

This is the first version of go-getter that uses AWS SDK for Go v2, instead
of the now-obsolete SDK v1. This means that we no longer have an indirect
dependency on the obsolete SDK version, and so should generate less noise
for security scanners that are configured to check for unmaintained
dependencies.

This does unfortunately also force upgrading some of the AWS SDK v2
dependencies, which potentially affects the "s3" backend too. This is the
typical risk of having all of these external integrations linked
directly into our executables, but most of these are just minor upgrades
that we likely would've adopted in the near future anyway.

The newer version of go-getter also uses newer versions of some of its
other dependencies, but we were already on newer versions of most of them
anyway and so the main effect here is just to drop the older versions from
our go.sum file now that they are no longer included in the module version
selection process.

Signed-off-by: Martin Atkins <mart@degeneration.co.uk>

...

This commit is contained in:

Martin Atkins

2025-09-15 09:02:01 -07:00

parent 189c4535f1

commit 8b459587ca

2 changed files with 90 additions and 1095 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download Patch File Download Diff File Expand all files Collapse all files

1124

go.sum

File diff suppressed because it is too large Load Diff