v0.16.4

What's Changed

• fix: bug in prefix and suffix check using filepath by @dduzgun-security in #78

New Contributors

• @dduzgun-security made their first contribution in #78

Full Changelog: v0.16.3...v0.16.4

v0.16.3

What's Changed

• Adjust destination path check by @NodyHub in #76

Note: This release may have issues when unpacking a tarball, we recommend using 0.16.4 or later.

Full Changelog: v0.16.2...v0.16.3

v0.16.2

What's Changed

• Add CODEOWNERS file in .github/CODEOWNERS by @mukeshjc in #72
• Deprecate unused pack/unpack option AllowSymlinkTarget by @NodyHub in #74

New Contributors

• @mukeshjc made their first contribution in #72
• @NodyHub made their first contribution in #74

Full Changelog: v0.16.1...v0.16.2

v0.16.1

• #68: Fix panic in sourcebundle package when RegistryMeta and Packages aren't the same size.

Full Changelog: v0.16.0...v0.16.1

v0.16.0

• #64: Remove the .Append(...) function from the sourcebundle diagnostics API. Consumers should instead use the built-in golang append() function. This ensures type-safety as you can't attempt to insert an invalid object into the diagnostics using the built-in function.

Note: this is technically a breaking change for consumers of the sourcebundle package since it removes a method, but we had previously marked it as experimental in the v0.12.0 release and warned that its API is subject to change. The package continues to be experimental and may change further before stabilizing.

v0.15.2

sourcebundle: Fixed a bug in the PackageMeta receiver method GetCommitMessage() string that caused it to return an empty string instead of the git commit message. (#61)

v0.15.1

#59: expose registry module version deprecation data in sourcebundle

v0.15.0

#56: collect commit messages in package meta struct.

Note: this is technically a breaking change for consumers of the sourcebundle package since it removes a method, but we had previously marked it as experimental in the v0.12.0 release and warned that its API is subject to change. The package continues to be experimental and may change further before stabilizing.

v0.14.0

• #55: revise the experimental sourcebundle package fetcher and registry client interfaces to improve future extensibility.

Note: this is technically a breaking change for consumers of the sourcebundle package, but we had previously marked it as experimental in the v0.12.0 release and warned that its API is subject to change. The package continues to be experimental and may change further before stabilizing.

v0.13.4

Fixed a bug with default exclusion rules for .terraformignore which caused the .terraform/modules directory to be excluded