synced/coder
1
0
Fork 0
mirror of https://github.com/coder/coder.git synced 2025-07-13 21:36:50 +00:00
Code Issues Packages Projects Releases Wiki Activity
10,291 Commits 363 Branches 234 Tags
d4208d23aadef29fcaf17888538f13e12a99ded5
Commit Graph

44 Commits

Author SHA1 Message Date
blink-so[bot]
7e9a9e098c chore: update Terraform to 1.12.2 (#18407) 
Updates Terraform from 1.11.4 to 1.12.2 across all relevant files.

Changes include:
- GitHub Actions setup-tf configuration
- Dockerfile configurations (dogfood and base)
- Install script
- Provisioner install.go with version constants
- Test data files (tfstate.json, tfplan.json, version.txt)

Follows the same pattern as PR #17323 which updated to 1.11.4.

Co-authored-by: blink-so[bot] <211532188+blink-so[bot]@users.noreply.github.com>
Co-authored-by: sreya <4856196+sreya@users.noreply.github.com>
 2025-06-18 01:47:38 +10:00
Charlie Voiselle
8f64d49b22 chore: update alpine 3.21.2 => 3.21.3 (#17773) 
Resolves 3 CVEs in base container (1 High, 2 Medium)

| CVE ID         | CVSS Score | Package / Version               |
| -------------- | ---------- | ------------------------------  |
| CVE-2025-26519 | 8.1 High   | apk / alpine/musl / 1.2.5-r8    |
| CVE-2024-12797 | 6.3 Medium | apk / alpine/openssl / 3.3.2-r4 |
| CVE-2024-13176 | 4.1 Medium | apk / alpine/openssl / 3.3.2-r4 |
 2025-05-13 11:49:56 -04:00
Jon Ayers
8faaa14820 chore: update Terraform to 1.11.4 (#17323) 
Co-authored-by: Claude <noreply@anthropic.com>
 2025-04-09 22:50:15 -04:00
Jon Ayers
900eb251eb chore: update Terraform to 1.11.3 (#17256) 
- Generated with Claude Code
 2025-04-04 10:31:45 -04:00
Jon Ayers
8da568b132 chore: update Terraform version from 1.11.0 to 1.11.2 (#17081) 
🤖 Generated with [Claude Code](https://claude.ai/code)

---------

Co-authored-by: Claude <claude@anthropic.com>
 2025-03-25 00:57:15 -05:00
Jon Ayers
10f1e0b39a chore: update terraform to 1.11.0 (#16781) 2025-03-04 14:28:41 -05:00
Colin Adler
a777c2694e chore: upgrade terraform to 1.10.5 (#16519) 
- Updates `terraform` to
[v1.10.5](https://github.com/hashicorp/terraform/blob/v1.10.5/CHANGELOG.md#1105-january-22-2025)
- Updates provider to >=2.0.0 in provider testdata fixtures
- Fixes provider to required release version for resource monitors
- Fixes missing leading / in volumes in resource monitor tests
---------

Co-authored-by: Cian Johnston <cian@coder.com>
 2025-02-18 11:45:22 +00:00
dependabot[bot]
9bb3319f3a chore: bump alpine from 3.21.0 to 3.21.2 in /scripts (#16107) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2025-01-15 18:40:43 +05:00
dependabot[bot]
033c476302 chore: bump alpine from 3.20.3 to 3.21.0 in /scripts (#15793) 2024-12-09 22:43:27 +10:00
Colin Adler
074faec7d7 chore: update Terraform to 1.9.8 (#15256) 2024-10-28 15:24:57 -05:00
dependabot[bot]
c44d013519 chore: bump alpine from 3.20.2 to 3.20.3 in /scripts (#14614) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-09-13 00:01:57 +05:00
dependabot[bot]
1289937eae chore: bump alpine from 3.20.1 to 3.20.2 in /scripts (#14037) 
Bumps alpine from 3.20.1 to 3.20.2.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-08-01 18:57:37 +03:00
Colin Adler
7a34a70cb8 chore: upgrade terraform to 1.9.2 (#13895) 2024-07-15 13:27:08 -05:00
dependabot[bot]
7e20b56352 chore: bump alpine from 3.20.0 to 3.20.1 in /scripts (#13644) 
Bumps alpine from 3.20.0 to 3.20.1.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-06-24 11:48:07 -05:00
Colin Adler
b723da9e91 chore: upgrade terraform to v1.8.5 (#13429) 2024-06-02 13:10:28 -04:00
Danny Kopping
7569cccc51 chore: remove git pinning (#13414) 
Alpine 3.20 includes 2.45.1 by default: https://git.alpinelinux.org/aports/tree/main/git/APKBUILD?h=3.20-stable#n56

Follow-up from https://github.com/coder/coder/pull/13411#issuecomment-2139028721

Signed-off-by: Danny Kopping <danny@coder.com>
 2024-05-30 15:58:32 +02:00
Danny Kopping
a1671a633c Upgrade to git v2.45.1 to fix alpine 3.20 builds (#13411) 
Possibly fixes https://github.com/coder/coder/issues/13407

Signed-off-by: Danny Kopping <danny@coder.com>
 2024-05-30 08:36:24 +00:00
dependabot[bot]
5b78ec97b6 chore: bump alpine from 3.19.1 to 3.20.0 in /scripts (#13375) 
Bumps alpine from 3.19.1 to 3.20.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-05-28 12:45:16 -05:00
Colin Adler
80538c079d chore: update git -> 2.43.4 and terraform -> 1.7.5 (#13299) 
This fixes an RCE in git and gets us one minor version closer to fixing
a critical Terraform vulnerability. In the next release we'll bump to
1.8.x.
 2024-05-16 19:07:07 +00:00
Cian Johnston
36808f19dc feat!: update terraform to version 1.6.x, relax max version constraint (#12027) 
* feat(provisioner): relax max terraform version constraint

* feat!(scripts/Dockerfile.base): update bundled terraform to 1.6.x

* bump terraform version in Dogfood image

* fix over-zealous rename
 2024-02-06 17:58:26 -06:00
dependabot[bot]
71b79eace4 chore: bump alpine from 3.19.0 to 3.19.1 in /scripts (#11887) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-01-30 00:35:44 +03:00
dependabot[bot]
486d1fb697 chore: bump alpine from 3.18.5 to 3.19.0 in /scripts (#11126) 
Bumps alpine from 3.18.5 to 3.19.0.

---
updated-dependencies:
- dependency-name: alpine
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-11 23:24:16 +10:00
dependabot[bot]
b8e9262c51 chore: bump the scripts-docker group in /scripts with 1 update (#11020) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-12-04 10:38:58 -06:00
Colin Adler
fbfd192370 chore: update openssl in Dockerfile (#10701) 
Includes a security fix for CVE-2023-5363 and CVE-2023-5678.
 2023-11-14 13:40:30 -06:00
Colin Adler
7e6b549170 chore: upgrade Terraform to 1.5.7 (#10186) 2023-10-10 12:46:59 -05:00
dependabot[bot]
4df5c1ddec chore: bump the alpine image from 3.18.3 to 3.18.4 in Dockerfile.base (#9993) 
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2023-10-03 14:09:50 -05:00
Colin Adler
885041a65b revert: downgrade alpine to v3.18.3 (#9916) 2023-09-28 20:27:47 +00:00
Colin Adler
92c0237899 chore: upgrade alpine to v3.18.4 2023-09-28 19:47:48 +00:00
Cian Johnston
392b11272b fixup! fix(scripts): modify logic for determining terraform arch (#9595) (#9596) 2023-09-08 11:07:57 +00:00
Cian Johnston
a3a16a1586 fix(scripts): modify logic for determining terraform arch (#9595) 
Commit fb3616c used a build-arg to set the desired terrafomr
architeture to fetch. This is set in build_docker.sh but not
when building using depot.dev. Baking the logic into the
Dockerfile instead.
 2023-09-08 10:47:51 +00:00
Cian Johnston
fb3616c37e fix(scripts): wget terraform directly from releases.hashicorp.com (#9594) 2023-09-08 10:02:18 +00:00
Eric Paulsen
c217a0d819 fix!: remove jq from image (#8979) 
* fix: remove jq from base and add jq ext image

* Delete Dockerfile.ext-jq

---------

Co-authored-by: Muhammad Atif Ali <atif@coder.com>
 2023-08-16 21:20:33 -04:00
Colin Adler
a5c59b9934 chore: upgrade to alpine 3.18.3 (#8980) 2023-08-08 12:21:38 -05:00
Colin Adler
e68d508469 chore: bump openssl in base image (#8811) 2023-08-02 16:16:34 -05:00
Ben Potter
4821e2e6d8 chore: add jq to base image (#8563) 
* chore: add jq to base image

* fix formatting
 2023-07-20 07:04:56 -05:00
Colin Adler
132f1d0eb5 chore: fuzzy match alpine terraform version (#8506) 2023-07-13 14:36:45 -05:00
Colin Adler
c0835c443d chore: pin terraform to 1.5.2 (#8322) 
The Alpine ARM builders are no longer behind on releases.
 2023-07-05 12:59:58 -05:00
Colin Adler
41e7216df7 chore: upgrade terraform to 1.5.1 (#8160) 2023-06-22 19:08:40 +00:00
Colin Adler
1288a83e42 chore: upgrade openssl (#7883) 2023-06-06 16:59:56 -05:00
Ammar Bandukwala
9bb0253290 chore: update various dependencies (#7503) 
This will help us pass the security scanners.
 2023-05-14 20:37:50 +00:00
Dean Sheather
5961cf900d chore: bump terraform from 1.3.4-r3 to r4 in image (#7393) 
Looks like 1.3.4-r3 isn't available anymore, and 1.3.4-r4 is available
instead.
 2023-05-03 18:21:11 +00:00
Kyle Carberry
d3356fa48e fix: upgrade terraform in apk (#7146) 2023-04-14 20:10:17 -05:00
Cian Johnston
248c53d68d fix: install terraform in base Docker image (#6263) 
Updates the base Docker image to install Terraform version 1.3.4 (max supported version) by default.
Also updates documentation to reflect this change.
 2023-03-07 13:52:45 +00:00
Dean Sheather
d6947aeaca chore: fix depot build (#6057) 2023-02-06 16:49:33 +00:00