Skip to content

Conversation

@tgross
Copy link
Member

@tgross tgross commented Sep 8, 2025

The go-getter update in #26713 is not passing tests upstream (apparently hashicorp/go-getter#548 is the origin of the problem but that PR did not ever run tests). The issue being fixed isn't a critical vulnerability, so in the interest of preparing us for the next release, revert the go-getter change but keep the Go toolchain update.

We'll skip go-getter 1.8.0 and pick up the next patch version once its issues are fixed.

@tgross tgross requested review from a team as code owners September 8, 2025 18:57
@tgross tgross added backport/ent/1.10.x+ent backport to 1.10.x+ent release line backport/1.10.x backport to 1.10.x release line and removed backport/ent/1.10.x+ent backport to 1.10.x+ent release line labels Sep 8, 2025
gulducat
gulducat previously approved these changes Sep 8, 2025
Copy link
Member

@gulducat gulducat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm 👍

gulducat
gulducat previously approved these changes Sep 8, 2025
Copy link
Member

@gulducat gulducat left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

@tgross tgross merged commit 0b69999 into main Sep 9, 2025
38 checks passed
@tgross tgross deleted the revert-go-getter branch September 9, 2025 13:28
tgross added a commit that referenced this pull request Sep 9, 2025
The `go-getter` update in #26713 is not passing tests upstream (apparently hashicorp/go-getter#548 is the origin of the problem but that PR did not ever run tests). The issue being fixed isn't a critical vulnerability, so in the interest of preparing us for the next release, revert the `go-getter` change but keep the Go toolchain update.

We'll skip go-getter 1.8.0 and pick up the next patch version once its issues are fixed.
Reverts commit 8a96929.
tgross added a commit that referenced this pull request Sep 9, 2025
The `go-getter` update in #26713 is not passing tests upstream (apparently hashicorp/go-getter#548 is the origin of the problem but that PR did not ever run tests). The issue being fixed isn't a critical vulnerability, so in the interest of preparing us for the next release, revert the `go-getter` change but keep the Go toolchain update.

We'll skip go-getter 1.8.0 and pick up the next patch version once its issues are fixed.
Reverts commit 8a96929.

Co-authored-by: Tim Gross <tgross@hashicorp.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/1.10.x backport to 1.10.x release line

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants