Packer v1.15.1

v1.15.1
Added 1
  • Add native SBOM generation for HCP
Fixed 1
  • Scrub multiline sensitive values from build output including OS-specific multiline sensitive-value fixtures
Security 6
  • Bump syft to v1.42.3 to fix GO-2026-4809
  • Bump github.com/hashicorp/packer-plugin-sdk to v0.6.7
  • Bump github.com/hashicorp/hcp-sdk-go from 0.136.0 to 0.167.0
  • Update OpenTelemetry dependencies to v1.41.0
  • Upgrade go-git to v5.17.0 and grpc to 1.79.3
  • Update circl dependency to v1.6.3
1.15.1 (March 26, 2026)
FEATURES:
  • hcp: native sbom generation for hcp. Refer to the guide here for more information. GH-13566
BUG FIXES:
  • core: Scrub multiline sensitive values from build output (including OS-specific multiline sensitive-value fixtures) GH-13582
SECURITY:
  • deps: bump syft to v1.42.3 (fixes GO-2026-4809) GH-13581
  • deps: bump github.com/hashicorp/packer-plugin-sdk to v0.6.7 GH-13581
  • deps: bump github.com/hashicorp/hcp-sdk-go from 0.136.0 to 0.167.0 GH-13560
  • deps: Updates OpenTelemetry dependencies to v1.41.0 GH-13572
  • deps: Upgrade go-git to v5.17.0 and grpc to 1.79.3 GH-13570
  • deps: Updates circl dependency to v1.6.3 GH-13564
INTERNAL:
  • ci: Adds grouped and scheduled updates for GitHub Actions (monthly, grouped PRs, ignore major bumps) GH-13575
  • docs: remove docs validation from packer (docs changes move to web-unified-docs) GH-13577
  • legal: Update LICENSE GH-13563
View original

Upgraded? How did it go?

Discussion