v3.4.5

Compare Source

NOTES:

• all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#​452)

v3.4.4

Compare Source

NOTES:

• data-source/http: Previous versions of this provider ignored any Host headers specified in the request_headers attribute when setting the HTTP request. Any specified Host request header will now be set on the HTTP request.

For example, in the following configuration:

data "http" "example" {
  url      = "https://www.example.com"
  request_headers = {
    Host = "www.differentexample.com"
  }
}

The HTTP request URL host is still www.example.com but the HTTP request Host header will now be www.differentexample.com instead of www.example.com.
(#​440)

BUG FIXES:

• data-source/http: Allow Host header in request_headers to be set on HTTP request (#​440)

v3.4.3

Compare Source

BUG FIXES:

• data-source/http: Avoid potentially leaking URL-embedded basic authentication credentials in logs and error messages (#​429)

v3.4.2

Compare Source

NOTES:

• data-source/http: Previously the HTTP request would unexpectedly always contain a body for all requests. Certain HTTP server implementations are sensitive to this data existing if it is not expected. Requests now only contain a request body if the request_body attribute is explicitly set. To exactly preserve the previous behavior, set request_body = "". (#​388)

BUG FIXES:

• data-source/http: Ensured HTTP request body is not sent unless configured (#​388)

v3.4.1

Compare Source

BUG FIXES:

• data-source/http: Includes update to go-retryablehttp fixing preservation of request body on temporary redirects or re-established HTTP/2 connections (#​346)

v3.4.0

Compare Source

ENHANCEMENTS:

• data-source/http: response_body_base64 has been added and contains a standard base64 encoding of the response body (#​158)
• data-source/http: Replaced issuing warning on the basis of possible non-text Content-Type with issuing warning if response body does not contain valid UTF-8. (#​158)

v3.3.0

Compare Source

NOTES:

• This Go module has been updated to Go 1.19 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#​245)

ENHANCEMENTS:

• data-source/http: Added retry with nested attempts, max_delay_ms and min_delay_ms (#​151)
• data-source/http: Added request_timeout_ms (#​151)

v3.2.1

Compare Source

BUG FIXES

• data-source/http: Using DefaultTransport to reinstate previous behavior (e.g., ProxyFromEnvironment) (#​198).

v3.2.0

Compare Source

ENHANCEMENTS:

• data-source/http: Added ca_cert_pem attribute which allows PEM encoded certificate(s) to be included in the set of root certificate authorities used when verifying server certificates (#​125).
• data-source/http: Added insecure attribute to allow disabling the verification of a server's certificate chain and host name. Defaults to false (#​125).