The Wire · Showcase
DEPENDENCY BUMPS ROLL THROUGH HASHICORP'S CORE
By RepoJournal · Filed · About HashiCorp
Dependabot is on a roll, pushing 8 dependency updates across go-getter and memberlist while the azurerm team fights a flaky test.
HashiCorp's dependency hygiene is humming: go-getter [1] bumps six packages, including cloud.google.com/go/storage from 1.64.0 to 1.65.0 and AWS SDK v2 patch releases, while memberlist [2] advances miekg/dns to 1.1.73 and testify. These are routine maintenance bumps, but staying current on transitive deps is your cheapest insurance against CVEs. Meanwhile, the azurerm provider still has a stubborn test: TestAccEventGridEventSubscription_userIdentity passes, but the suite is dragging a BotService failure through Step 3/4 [3]. The PR description shows the test taking 278 seconds, a reminder that full azurerm acceptance runs are a marathon. MalikDagher's fix is small, yet it signals the provider's test suite needs attention before it bites a release [4]. For most teams, none of this blocks a deploy, but if you vendor go-getter or memberlist, a quick `go get -u` keeps you aligned with HashiCorp's own baseline.
One email a day. Unsubscribe in one click.
Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Review and merge the go-getter and memberlist dependabot PRs to stay current on security patches hashicorp/go-getter [monitor]
- → Keep an eye on azurerm test fixes; do not upgrade to a release that might carry flaky tests hashicorp/terraform-provider-azurerm [plan]
References
- [1] [chore] : Bump the go group with 6 updates ↗ hashicorp/go-getter
- [2] [chore] : Bump the go group with 2 updates ↗ hashicorp/memberlist
- [3] Test Fix: `TestAccEventGridEventSubscription_userIdentity` ↗ hashicorp/terraform-provider-azurerm
- [4] Test Fix: `TestAccEventGridEventSubscription_userIdentity` (#33044) hashicorp/terraform-provider-azurerm