FoxDen/core

Watch

Fork 0

Update dependency tflint to v0.64.0 #154

Merged

Doridian merged 1 commit from renovate/tflint-0.x into main

2026-09-15 13:41:34 -07:00

MaidFox commented

2026-09-15 11:11:31 -07:00

Member

This PR contains the following updates:

Package	Type	Update	Change
tflint	uses-with	minor	`v0.59.1` → `v0.64.0`

Release Notes

terraform-linters/tflint (tflint)

`v0.64.0`

Compare Source

What's Changed

Enhancements

cmd: include worker dir for no-range recursive issues by @Zakharden in #2524
config: add ignorable rule setting by @Zakharden in #2525
formatter(junit): include range in testcase name by @Zakharden in #2538

Bug Fixes

plugin: fetch attestation bundles from bundle_url by @Kunalbehbud in #2593
- Merged as #2600

Chores

Refactor formatter dispatch into format adapters by @bendrucker in #2556
Inline per-format print methods into their adapters by @bendrucker in #2557
build(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2559
build(deps): Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 by @dependabot[bot] in #2560
build(deps): Bump golang from 1.26.3-alpine3.23 to 1.26.4-alpine3.23 by @dependabot[bot] in #2558
release: Set branch name for Homebrew tap by @wata727 in #2561
Extract the shared runner-setup pipeline by @bendrucker in #2555
formatter: guard diagnostics with no source range by @bendrucker in #2562
docs: add Go install instructions to README by @RoseSecurity in #2563
build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by @dependabot[bot] in #2565
build(deps): Bump alpine from 3.23.4 to 3.24.0 by @dependabot[bot] in #2566
build(deps): Bump the go-x group with 2 updates by @dependabot[bot] in #2567
build(deps): Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 by @dependabot[bot] in #2568
fix(install): close download and zip readers by @RoseSecurity in #2564
build(deps): Bump alpine from 3.24.0 to 3.24.1 by @dependabot[bot] in #2570
build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-x group by @dependabot[bot] in #2571
build(deps): Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 by @dependabot[bot] in #2572
build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #2579
build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot[bot] in #2580
build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot[bot] in #2583
build(deps): Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by @dependabot[bot] in #2582
build(deps): Bump actions/attest from 4.1.0 to 4.1.1 by @dependabot[bot] in #2581
build(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #2584
build(deps): Bump golang.org/x/text from 0.38.0 to 0.39.0 in the go-x group by @dependabot[bot] in #2585
build(deps): Bump github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by @dependabot[bot] in #2588
build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in #2587

New Contributors

@Zakharden made their first contribution in #2524
@RoseSecurity made their first contribution in #2563
@Kunalbehbud made their first contribution in #2593

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.63.1...v0.64.0

`v0.63.1`

Compare Source

What's Changed

[!NOTE]
This release contains only a fix for the release pipeline; the actual behavior remains unchanged from v0.63.0.

Chores

Pass the GitHub App token as the step output by @wata727 in #2553
Remove unneeded job dependency by @wata727 in #2554

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.63.0...v0.63.1

`v0.63.0`

Compare Source

What's Changed

[!NOTE]
Due to a release pipeline issue, this release does not have a corresponding artifact attestation.
If you need to pass gh attestation verify, please use v0.63.1.

Enhancements

Add support for Terraform v1.15 by @wata727 in #2521
Bump tflint-ruleset-terraform to v0.15.0 by @wata727 in #2551

Chores

Migrate homebrew-core to third-party tap by @wata727 in #2531
Revise installation instructions in README.md by @wata727 in #2532
build(deps): Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by @dependabot[bot] in #2535
build(deps): Bump the go-x group with 3 updates by @dependabot[bot] in #2536
Migrate homebrew auto bump action to GoReleaser by @wata727 in #2534
Fix variable reference for client-id in release.yml by @wata727 in #2537
build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by @dependabot[bot] in #2546
build(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by @dependabot[bot] in #2548
build(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0 by @dependabot[bot] in #2549
build(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #2550
build(deps): Bump the go-x group with 2 updates by @dependabot[bot] in #2547
build(deps): Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by @dependabot[bot] in #2542
build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by @dependabot[bot] in #2540
build(deps): Bump golang from 1.26-alpine3.23 to 1.26.3-alpine3.23 by @dependabot[bot] in #2541
build(deps): Bump alpine from 3.23 to 3.23.4 by @dependabot[bot] in #2539
Add warning message to installation script by @wata727 in #2533

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.62.1...v0.63.0

`v0.62.1`

Compare Source

What's Changed

Bug Fixes

plugin: Skip fetching artifact attestations in GHES by @wata727 in #2527

Chores

build(deps): Bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 by @dependabot[bot] in #2511
build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #2512
docs: deprecate curl pipe bash installation by @dbuaon in #2514
build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by @dependabot[bot] in #2516
build(deps): Bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 by @dependabot[bot] in #2517
build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 by @dependabot[bot] in #2518
build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by @dependabot[bot] in #2519
build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 by @dependabot[bot] in #2520

New Contributors

@dbuaon made their first contribution in #2514

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.62.0...v0.62.1

`v0.62.0`

Compare Source

What's Changed

Enhancements

plugin: Add signature mode to control plugin verifications by @wata727 in #2483

Bug Fixes

plugin: Ignore forbidden attestation fetch errors by @wata727 in #2481

Chores

build(deps): Bump the go-x group with 4 updates by @dependabot[bot] in #2461
build(deps): Bump docker/build-push-action from 6.18.0 to 6.19.2 by @dependabot[bot] in #2463
build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.1 by @dependabot[bot] in #2464
build(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by @dependabot[bot] in #2467
build(deps): Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by @dependabot[bot] in #2469
build(deps): Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #2470
build(deps): Bump golang.org/x/net from 0.50.0 to 0.51.0 in the go-x group by @dependabot[bot] in #2472
build(deps): Bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 by @dependabot[bot] in #2473
build(deps): Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot[bot] in #2471
build(deps): Bump docker/metadata-action from 5.10.0 to 6.0.0 by @dependabot[bot] in #2474
build(deps): Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by @dependabot[bot] in #2476
build(deps): Bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in the go-x group by @dependabot[bot] in #2479
build(deps): Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by @dependabot[bot] in #2480
build(deps): Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by @dependabot[bot] in #2475
build(deps): Bump docker/build-push-action from 6.19.2 to 7.0.0 by @dependabot[bot] in #2477
build(deps): Bump docker/login-action from 3.7.0 to 4.0.0 by @dependabot[bot] in #2478
deps: Bump Go version to 1.26 by @wata727 in #2482
build(deps): Bump the go-x group with 3 updates by @dependabot[bot] in #2484
build(deps): Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #2489
build(deps): Bump mislav/bump-homebrew-formula-action from 3.6 to 4.1 by @dependabot[bot] in #2490
build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.1 to 0.24.0 by @dependabot[bot] in #2491
build(deps): Bump github.com/fatih/color from 1.18.0 to 1.19.0 by @dependabot[bot] in #2492
dependabot: Set cooldown period by @wata727 in #2493
build(deps): Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by @dependabot[bot] in #2495
build(deps): Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by @dependabot[bot] in #2496
build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #2498
build(deps): Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.4 to 1.7.8 by @dependabot[bot] in #2499
build(deps): Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by @dependabot[bot] in #2500
build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by @dependabot[bot] in #2501
build(deps): Bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.6 by @dependabot[bot] in #2502
build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by @dependabot[bot] in #2506
build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by @dependabot[bot] in #2503
build(deps): Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by @dependabot[bot] in #2497
build(deps): Bump docker/login-action from 4.0.0 to 4.1.0 by @dependabot[bot] in #2504
build(deps): Bump docker/build-push-action from 7.0.0 to 7.1.0 by @dependabot[bot] in #2507
release: Migrate attest-build-provenance to attest by @wata727 in #2508

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.61.0...v0.62.0

`v0.61.0`

Compare Source

What's Changed

Enhancements

version: add update notifications, json output by @bendrucker in #2421
build(deps): Bump github.com/terraform-linters/tflint-ruleset-terraform from 0.13.0 to 0.14.1 by @dependabot[bot] in #2445
plugin: Enable plugin keyless verification by default by @wata727 in #2453

Chores

build(deps): Bump actions/checkout from 5.0.0 to 5.0.1 by @dependabot[bot] in #2414
build(deps): Bump the go-x group with 3 updates by @dependabot[bot] in #2415
build(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 by @dependabot[bot] in #2416
build(deps): Bump google.golang.org/grpc from 1.76.0 to 1.77.0 by @dependabot[bot] in #2417
build(deps): Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 by @dependabot[bot] in #2418
build(deps): Bump actions/checkout from 5.0.1 to 6.0.0 by @dependabot[bot] in #2420
build(deps): Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #2419
build(deps): Bump docker/metadata-action from 5.9.0 to 5.10.0 by @dependabot[bot] in #2422
build(deps): Bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 by @dependabot[bot] in #2423
build(deps): Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #2425
build(deps): Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 in the go-x group by @dependabot[bot] in #2428
build(deps): Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by @dependabot[bot] in #2426
build(deps): Bump the go-x group with 3 updates by @dependabot[bot] in #2432
build(deps): Bump github.com/sigstore/sigstore-go from 1.1.3 to 1.1.4 by @dependabot[bot] in #2433
Add support for Terraform v1.14 by @wata727 in #2424
build(deps): Bump alpine from 3.22 to 3.23 by @dependabot[bot] in #2427
build(deps): Bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by @dependabot[bot] in #2437
build(deps): Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @dependabot[bot] in #2438
build(deps): Bump github.com/zclconf/go-cty-yaml from 1.1.0 to 1.2.0 by @dependabot[bot] in #2439
Add an integration test for root only traversal by @wata727 in #2436
build(deps): Bump google.golang.org/grpc from 1.77.0 to 1.78.0 by @dependabot[bot] in #2441
build(deps): Bump the go-x group with 3 updates by @dependabot[bot] in #2444
build(deps): Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #2446
docs: windows plugin development by @Netkracker in #2334
build(deps): Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 by @dependabot[bot] in #2450
build(deps): Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 by @dependabot[bot] in #2451
build(deps): Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by @dependabot[bot] in #2452
build(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #2454
build(deps): Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by @dependabot[bot] in #2455
build(deps): Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 by @dependabot[bot] in #2456
build(deps): Bump docker/login-action from 3.6.0 to 3.7.0 by @dependabot[bot] in #2458

New Contributors

@Netkracker made their first contribution in #2334

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.60.0...v0.61.0

This release introduces a new configuration file format: .tflint.json. This is useful for workflows such as automatically generating configuration files.
Please note that in order to use the .tflint.json, enabled plugins must be built with SDK v0.23+.

From this release, Cosign signatures (checksums.txt.keyless.sig and checksums.txt.pem) are deprecated. They will not be included in future releases. If your installation scripts depend on them, please migrate to gh attestation verify.

Enhancements

Add JSON configuration file support by @rorychatterton in #2391
Report structured errors in JUnit and CheckStyle XML formatters by @bendrucker in #2407

Changes

Alphabetize rulesets in version output by @bendrucker in #2404
release: Pin Cosign version and deprecate Cosign signatures by @wata727 in #2405

Bug Fixes

fix: only read TF_VAR for root module by @bendrucker in #2413

Chores

build(deps): Bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by @dependabot[bot] in #2376
build(deps): Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #2377
build(deps): Bump the go-x group with 3 updates by @dependabot[bot] in #2378
build(deps): Bump github.com/spf13/afero from 1.14.0 to 1.15.0 by @dependabot[bot] in #2380
build(deps): Bump github.com/zclconf/go-cty from 1.16.4 to 1.17.0 by @dependabot[bot] in #2379
build(deps): Bump golang.org/x/net from 0.43.0 to 0.44.0 in the go-x group by @dependabot[bot] in #2381
build(deps): Bump google.golang.org/grpc from 1.75.0 to 1.75.1 by @dependabot[bot] in #2382
build(deps): Bump github.com/sigstore/sigstore-go from 1.1.1 to 1.1.2 by @dependabot[bot] in #2383
build(deps): Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by @dependabot[bot] in #2384
build(deps): Bump mislav/bump-homebrew-formula-action from 3.5 to 3.6 by @dependabot[bot] in #2388
fix(script): GitHub API rate limit by @Sander0542 in #2390
Bump tflint-plugin-sdk to v0.23.0 by @wata727 in #2393
build(deps): Bump github.com/sigstore/sigstore-go from 1.1.2 to 1.1.3 by @dependabot[bot] in #2394
build(deps): Bump docker/login-action from 3.5.0 to 3.6.0 by @dependabot[bot] in #2395
build(deps): Bump the go-x group with 4 updates by @dependabot[bot] in #2397
build(deps): Bump google.golang.org/grpc from 1.75.1 to 1.76.0 by @dependabot[bot] in #2398
build(deps): Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by @dependabot[bot] in #2399
build(deps): Bump golang.org/x/net from 0.45.0 to 0.46.0 in the go-x group by @dependabot[bot] in #2400
build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.0 to 0.23.1 by @dependabot[bot] in #2402
build(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by @dependabot[bot] in #2408
build(deps): Bump docker/metadata-action from 5.8.0 to 5.9.0 by @dependabot[bot] in #2409
build(deps): Bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 in the go-x group by @dependabot[bot] in #2410

New Contributors

@Sander0542 made their first contribution in #2390
@rorychatterton made their first contribution in #2391

Full Changelog: https://github.com/terraform-linters/tflint/compare/v0.59.1...v0.60.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [tflint](https://github.com/terraform-linters/tflint) | uses-with | minor | `v0.59.1` → `v0.64.0` | --- ### Release Notes <details> <summary>terraform-linters/tflint (tflint)</summary> ### [`v0.64.0`](https://github.com/terraform-linters/tflint/releases/tag/v0.64.0) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.63.1...v0.64.0) #### What's Changed ##### Enhancements - cmd: include worker dir for no-range recursive issues by [@Zakharden](https://github.com/Zakharden) in [#2524](https://github.com/terraform-linters/tflint/pull/2524) - config: add ignorable rule setting by [@Zakharden](https://github.com/Zakharden) in [#2525](https://github.com/terraform-linters/tflint/pull/2525) - formatter(junit): include range in testcase name by [@Zakharden](https://github.com/Zakharden) in [#2538](https://github.com/terraform-linters/tflint/pull/2538) ##### Bug Fixes - plugin: fetch attestation bundles from bundle\_url by [@Kunalbehbud](https://github.com/Kunalbehbud) in [#2593](https://github.com/terraform-linters/tflint/pull/2593) - Merged as [#2600](https://github.com/terraform-linters/tflint/pull/2600) ##### Chores - Refactor formatter dispatch into format adapters by [@bendrucker](https://github.com/bendrucker) in [#2556](https://github.com/terraform-linters/tflint/pull/2556) - Inline per-format print methods into their adapters by [@bendrucker](https://github.com/bendrucker) in [#2557](https://github.com/terraform-linters/tflint/pull/2557) - build(deps): Bump docker/setup-buildx-action from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2559](https://github.com/terraform-linters/tflint/pull/2559) - build(deps): Bump github.com/mattn/go-colorable from 0.1.14 to 0.1.15 by [@dependabot](https://github.com/dependabot)\[bot] in [#2560](https://github.com/terraform-linters/tflint/pull/2560) - build(deps): Bump golang from 1.26.3-alpine3.23 to 1.26.4-alpine3.23 by [@dependabot](https://github.com/dependabot)\[bot] in [#2558](https://github.com/terraform-linters/tflint/pull/2558) - release: Set branch name for Homebrew tap by [@wata727](https://github.com/wata727) in [#2561](https://github.com/terraform-linters/tflint/pull/2561) - Extract the shared runner-setup pipeline by [@bendrucker](https://github.com/bendrucker) in [#2555](https://github.com/terraform-linters/tflint/pull/2555) - formatter: guard diagnostics with no source range by [@bendrucker](https://github.com/bendrucker) in [#2562](https://github.com/terraform-linters/tflint/pull/2562) - docs: add Go install instructions to README by [@RoseSecurity](https://github.com/RoseSecurity) in [#2563](https://github.com/terraform-linters/tflint/pull/2563) - build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#2565](https://github.com/terraform-linters/tflint/pull/2565) - build(deps): Bump alpine from 3.23.4 to 3.24.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2566](https://github.com/terraform-linters/tflint/pull/2566) - build(deps): Bump the go-x group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2567](https://github.com/terraform-linters/tflint/pull/2567) - build(deps): Bump github.com/sigstore/sigstore-go from 1.1.4 to 1.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2568](https://github.com/terraform-linters/tflint/pull/2568) - fix(install): close download and zip readers by [@RoseSecurity](https://github.com/RoseSecurity) in [#2564](https://github.com/terraform-linters/tflint/pull/2564) - build(deps): Bump alpine from 3.24.0 to 3.24.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2570](https://github.com/terraform-linters/tflint/pull/2570) - build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2571](https://github.com/terraform-linters/tflint/pull/2571) - build(deps): Bump github.com/sigstore/sigstore-go from 1.2.0 to 1.2.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2572](https://github.com/terraform-linters/tflint/pull/2572) - build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2579](https://github.com/terraform-linters/tflint/pull/2579) - build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2580](https://github.com/terraform-linters/tflint/pull/2580) - build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2583](https://github.com/terraform-linters/tflint/pull/2583) - build(deps): Bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#2582](https://github.com/terraform-linters/tflint/pull/2582) - build(deps): Bump actions/attest from 4.1.0 to 4.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2581](https://github.com/terraform-linters/tflint/pull/2581) - build(deps): Bump docker/build-push-action from 7.2.0 to 7.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2584](https://github.com/terraform-linters/tflint/pull/2584) - build(deps): Bump golang.org/x/text from 0.38.0 to 0.39.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2585](https://github.com/terraform-linters/tflint/pull/2585) - build(deps): Bump github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2588](https://github.com/terraform-linters/tflint/pull/2588) - build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2587](https://github.com/terraform-linters/tflint/pull/2587) #### New Contributors - [@Zakharden](https://github.com/Zakharden) made their first contribution in [#2524](https://github.com/terraform-linters/tflint/pull/2524) - [@RoseSecurity](https://github.com/RoseSecurity) made their first contribution in [#2563](https://github.com/terraform-linters/tflint/pull/2563) - [@Kunalbehbud](https://github.com/Kunalbehbud) made their first contribution in [#2593](https://github.com/terraform-linters/tflint/pull/2593) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.63.1...v0.64.0> ### [`v0.63.1`](https://github.com/terraform-linters/tflint/releases/tag/v0.63.1) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.63.0...v0.63.1) #### What's Changed > \[!NOTE] > This release contains only a fix for the release pipeline; the actual behavior remains unchanged from v0.63.0. ##### Chores - Pass the GitHub App token as the step output by [@wata727](https://github.com/wata727) in [#2553](https://github.com/terraform-linters/tflint/pull/2553) - Remove unneeded job dependency by [@wata727](https://github.com/wata727) in [#2554](https://github.com/terraform-linters/tflint/pull/2554) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.63.0...v0.63.1> ### [`v0.63.0`](https://github.com/terraform-linters/tflint/releases/tag/v0.63.0) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.62.1...v0.63.0) #### What's Changed > \[!NOTE] > Due to a release pipeline issue, this release does not have a corresponding artifact attestation. > If you need to pass `gh attestation verify`, please use v0.63.1. ##### Enhancements - Add support for Terraform v1.15 by [@wata727](https://github.com/wata727) in [#2521](https://github.com/terraform-linters/tflint/pull/2521) - Bump tflint-ruleset-terraform to v0.15.0 by [@wata727](https://github.com/wata727) in [#2551](https://github.com/terraform-linters/tflint/pull/2551) ##### Chores - Migrate homebrew-core to third-party tap by [@wata727](https://github.com/wata727) in [#2531](https://github.com/terraform-linters/tflint/pull/2531) - Revise installation instructions in README.md by [@wata727](https://github.com/wata727) in [#2532](https://github.com/terraform-linters/tflint/pull/2532) - build(deps): Bump sigstore/cosign-installer from 4.1.1 to 4.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2535](https://github.com/terraform-linters/tflint/pull/2535) - build(deps): Bump the go-x group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2536](https://github.com/terraform-linters/tflint/pull/2536) - Migrate homebrew auto bump action to GoReleaser by [@wata727](https://github.com/wata727) in [#2534](https://github.com/terraform-linters/tflint/pull/2534) - Fix variable reference for client-id in release.yml by [@wata727](https://github.com/wata727) in [#2537](https://github.com/terraform-linters/tflint/pull/2537) - build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2546](https://github.com/terraform-linters/tflint/pull/2546) - build(deps): Bump docker/build-push-action from 7.1.0 to 7.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2548](https://github.com/terraform-linters/tflint/pull/2548) - build(deps): Bump docker/metadata-action from 6.0.0 to 6.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2549](https://github.com/terraform-linters/tflint/pull/2549) - build(deps): Bump docker/login-action from 4.1.0 to 4.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2550](https://github.com/terraform-linters/tflint/pull/2550) - build(deps): Bump the go-x group with 2 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2547](https://github.com/terraform-linters/tflint/pull/2547) - build(deps): Bump google.golang.org/grpc from 1.81.0 to 1.81.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2542](https://github.com/terraform-linters/tflint/pull/2542) - build(deps): Bump goreleaser/goreleaser-action from 7.2.1 to 7.2.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2540](https://github.com/terraform-linters/tflint/pull/2540) - build(deps): Bump golang from 1.26-alpine3.23 to 1.26.3-alpine3.23 by [@dependabot](https://github.com/dependabot)\[bot] in [#2541](https://github.com/terraform-linters/tflint/pull/2541) - build(deps): Bump alpine from 3.23 to 3.23.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2539](https://github.com/terraform-linters/tflint/pull/2539) - Add warning message to installation script by [@wata727](https://github.com/wata727) in [#2533](https://github.com/terraform-linters/tflint/pull/2533) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.62.1...v0.63.0> ### [`v0.62.1`](https://github.com/terraform-linters/tflint/releases/tag/v0.62.1) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.62.0...v0.62.1) #### What's Changed ##### Bug Fixes - plugin: Skip fetching artifact attestations in GHES by [@wata727](https://github.com/wata727) in [#2527](https://github.com/terraform-linters/tflint/pull/2527) ##### Chores - build(deps): Bump github.com/zclconf/go-cty from 1.18.0 to 1.18.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2511](https://github.com/terraform-linters/tflint/pull/2511) - build(deps): Bump goreleaser/goreleaser-action from 7.0.0 to 7.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2512](https://github.com/terraform-linters/tflint/pull/2512) - docs: deprecate curl pipe bash installation by [@dbuaon](https://github.com/dbuaon) in [#2514](https://github.com/terraform-linters/tflint/pull/2514) - build(deps): Bump goreleaser/goreleaser-action from 7.1.0 to 7.2.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2516](https://github.com/terraform-linters/tflint/pull/2516) - build(deps): Bump github.com/apparentlymart/go-cidr from 1.1.0 to 1.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2517](https://github.com/terraform-linters/tflint/pull/2517) - build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2518](https://github.com/terraform-linters/tflint/pull/2518) - build(deps): Bump google.golang.org/grpc from 1.80.0 to 1.81.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2519](https://github.com/terraform-linters/tflint/pull/2519) - build(deps): Bump github.com/hashicorp/go-plugin from 1.7.0 to 1.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2520](https://github.com/terraform-linters/tflint/pull/2520) #### New Contributors - [@dbuaon](https://github.com/dbuaon) made their first contribution in [#2514](https://github.com/terraform-linters/tflint/pull/2514) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.62.0...v0.62.1> ### [`v0.62.0`](https://github.com/terraform-linters/tflint/releases/tag/v0.62.0) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.61.0...v0.62.0) #### What's Changed ##### Enhancements - plugin: Add signature mode to control plugin verifications by [@wata727](https://github.com/wata727) in [#2483](https://github.com/terraform-linters/tflint/pull/2483) ##### Bug Fixes - plugin: Ignore forbidden attestation fetch errors by [@wata727](https://github.com/wata727) in [#2481](https://github.com/terraform-linters/tflint/pull/2481) ##### Chores - build(deps): Bump the go-x group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2461](https://github.com/terraform-linters/tflint/pull/2461) - build(deps): Bump docker/build-push-action from 6.18.0 to 6.19.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2463](https://github.com/terraform-linters/tflint/pull/2463) - build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2464](https://github.com/terraform-linters/tflint/pull/2464) - build(deps): Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2467](https://github.com/terraform-linters/tflint/pull/2467) - build(deps): Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2469](https://github.com/terraform-linters/tflint/pull/2469) - build(deps): Bump actions/setup-go from 6.2.0 to 6.3.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2470](https://github.com/terraform-linters/tflint/pull/2470) - build(deps): Bump golang.org/x/net from 0.50.0 to 0.51.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2472](https://github.com/terraform-linters/tflint/pull/2472) - build(deps): Bump github.com/zclconf/go-cty from 1.17.0 to 1.18.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2473](https://github.com/terraform-linters/tflint/pull/2473) - build(deps): Bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2471](https://github.com/terraform-linters/tflint/pull/2471) - build(deps): Bump docker/metadata-action from 5.10.0 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2474](https://github.com/terraform-linters/tflint/pull/2474) - build(deps): Bump sigstore/cosign-installer from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2476](https://github.com/terraform-linters/tflint/pull/2476) - build(deps): Bump golang.org/x/oauth2 from 0.35.0 to 0.36.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2479](https://github.com/terraform-linters/tflint/pull/2479) - build(deps): Bump google.golang.org/grpc from 1.79.1 to 1.79.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2480](https://github.com/terraform-linters/tflint/pull/2480) - build(deps): Bump docker/setup-buildx-action from 3.12.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2475](https://github.com/terraform-linters/tflint/pull/2475) - build(deps): Bump docker/build-push-action from 6.19.2 to 7.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2477](https://github.com/terraform-linters/tflint/pull/2477) - build(deps): Bump docker/login-action from 3.7.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2478](https://github.com/terraform-linters/tflint/pull/2478) - deps: Bump Go version to 1.26 by [@wata727](https://github.com/wata727) in [#2482](https://github.com/terraform-linters/tflint/pull/2482) - build(deps): Bump the go-x group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2484](https://github.com/terraform-linters/tflint/pull/2484) - build(deps): Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#2489](https://github.com/terraform-linters/tflint/pull/2489) - build(deps): Bump mislav/bump-homebrew-formula-action from 3.6 to 4.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2490](https://github.com/terraform-linters/tflint/pull/2490) - build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.1 to 0.24.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2491](https://github.com/terraform-linters/tflint/pull/2491) - build(deps): Bump github.com/fatih/color from 1.18.0 to 1.19.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2492](https://github.com/terraform-linters/tflint/pull/2492) - dependabot: Set cooldown period by [@wata727](https://github.com/wata727) in [#2493](https://github.com/terraform-linters/tflint/pull/2493) - build(deps): Bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2495](https://github.com/terraform-linters/tflint/pull/2495) - build(deps): Bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2496](https://github.com/terraform-linters/tflint/pull/2496) - build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2498](https://github.com/terraform-linters/tflint/pull/2498) - build(deps): Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.7.4 to 1.7.8 by [@dependabot](https://github.com/dependabot)\[bot] in [#2499](https://github.com/terraform-linters/tflint/pull/2499) - build(deps): Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.95.0 to 1.97.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#2500](https://github.com/terraform-linters/tflint/pull/2500) - build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2501](https://github.com/terraform-linters/tflint/pull/2501) - build(deps): Bump github.com/hashicorp/go-getter from 1.8.4 to 1.8.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2502](https://github.com/terraform-linters/tflint/pull/2502) - build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2506](https://github.com/terraform-linters/tflint/pull/2506) - build(deps): Bump google.golang.org/grpc from 1.79.3 to 1.80.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2503](https://github.com/terraform-linters/tflint/pull/2503) - build(deps): Bump sigstore/cosign-installer from 4.1.0 to 4.1.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2497](https://github.com/terraform-linters/tflint/pull/2497) - build(deps): Bump docker/login-action from 4.0.0 to 4.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2504](https://github.com/terraform-linters/tflint/pull/2504) - build(deps): Bump docker/build-push-action from 7.0.0 to 7.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2507](https://github.com/terraform-linters/tflint/pull/2507) - release: Migrate attest-build-provenance to attest by [@wata727](https://github.com/wata727) in [#2508](https://github.com/terraform-linters/tflint/pull/2508) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.61.0...v0.62.0> ### [`v0.61.0`](https://github.com/terraform-linters/tflint/releases/tag/v0.61.0) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.60.0...v0.61.0) #### What's Changed ##### Enhancements - `version`: add update notifications, json output by [@bendrucker](https://github.com/bendrucker) in [#2421](https://github.com/terraform-linters/tflint/pull/2421) - build(deps): Bump github.com/terraform-linters/tflint-ruleset-terraform from 0.13.0 to 0.14.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2445](https://github.com/terraform-linters/tflint/pull/2445) - plugin: Enable plugin keyless verification by default by [@wata727](https://github.com/wata727) in [#2453](https://github.com/terraform-linters/tflint/pull/2453) ##### Chores - build(deps): Bump actions/checkout from 5.0.0 to 5.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2414](https://github.com/terraform-linters/tflint/pull/2414) - build(deps): Bump the go-x group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2415](https://github.com/terraform-linters/tflint/pull/2415) - build(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2416](https://github.com/terraform-linters/tflint/pull/2416) - build(deps): Bump google.golang.org/grpc from 1.76.0 to 1.77.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2417](https://github.com/terraform-linters/tflint/pull/2417) - build(deps): Bump golangci/golangci-lint-action from 9.0.0 to 9.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2418](https://github.com/terraform-linters/tflint/pull/2418) - build(deps): Bump actions/checkout from 5.0.1 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2420](https://github.com/terraform-linters/tflint/pull/2420) - build(deps): Bump actions/setup-go from 6.0.0 to 6.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2419](https://github.com/terraform-linters/tflint/pull/2419) - build(deps): Bump docker/metadata-action from 5.9.0 to 5.10.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2422](https://github.com/terraform-linters/tflint/pull/2422) - build(deps): Bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2423](https://github.com/terraform-linters/tflint/pull/2423) - build(deps): Bump actions/checkout from 6.0.0 to 6.0.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2425](https://github.com/terraform-linters/tflint/pull/2425) - build(deps): Bump golang.org/x/oauth2 from 0.33.0 to 0.34.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2428](https://github.com/terraform-linters/tflint/pull/2428) - build(deps): Bump golangci/golangci-lint-action from 9.1.0 to 9.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2426](https://github.com/terraform-linters/tflint/pull/2426) - build(deps): Bump the go-x group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2432](https://github.com/terraform-linters/tflint/pull/2432) - build(deps): Bump github.com/sigstore/sigstore-go from 1.1.3 to 1.1.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2433](https://github.com/terraform-linters/tflint/pull/2433) - Add support for Terraform v1.14 by [@wata727](https://github.com/wata727) in [#2424](https://github.com/terraform-linters/tflint/pull/2424) - build(deps): Bump alpine from 3.22 to 3.23 by [@dependabot](https://github.com/dependabot)\[bot] in [#2427](https://github.com/terraform-linters/tflint/pull/2427) - build(deps): Bump actions/attest-build-provenance from 3.0.0 to 3.1.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2437](https://github.com/terraform-linters/tflint/pull/2437) - build(deps): Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2438](https://github.com/terraform-linters/tflint/pull/2438) - build(deps): Bump github.com/zclconf/go-cty-yaml from 1.1.0 to 1.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2439](https://github.com/terraform-linters/tflint/pull/2439) - Add an integration test for root only traversal by [@wata727](https://github.com/wata727) in [#2436](https://github.com/terraform-linters/tflint/pull/2436) - build(deps): Bump google.golang.org/grpc from 1.77.0 to 1.78.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2441](https://github.com/terraform-linters/tflint/pull/2441) - build(deps): Bump the go-x group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2444](https://github.com/terraform-linters/tflint/pull/2444) - build(deps): Bump actions/setup-go from 6.1.0 to 6.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2446](https://github.com/terraform-linters/tflint/pull/2446) - docs: windows plugin development by [@Netkracker](https://github.com/Netkracker) in [#2334](https://github.com/terraform-linters/tflint/pull/2334) - build(deps): Bump github.com/theupdateframework/go-tuf/v2 from 2.3.0 to 2.3.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2450](https://github.com/terraform-linters/tflint/pull/2450) - build(deps): Bump github.com/sigstore/rekor from 1.4.3 to 1.5.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2451](https://github.com/terraform-linters/tflint/pull/2451) - build(deps): Bump github.com/sigstore/sigstore from 1.10.3 to 1.10.4 by [@dependabot](https://github.com/dependabot)\[bot] in [#2452](https://github.com/terraform-linters/tflint/pull/2452) - build(deps): Bump actions/checkout from 6.0.1 to 6.0.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2454](https://github.com/terraform-linters/tflint/pull/2454) - build(deps): Bump actions/attest-build-provenance from 3.1.0 to 3.2.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2455](https://github.com/terraform-linters/tflint/pull/2455) - build(deps): Bump github.com/theupdateframework/go-tuf/v2 from 2.3.1 to 2.4.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2456](https://github.com/terraform-linters/tflint/pull/2456) - build(deps): Bump docker/login-action from 3.6.0 to 3.7.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2458](https://github.com/terraform-linters/tflint/pull/2458) #### New Contributors - [@Netkracker](https://github.com/Netkracker) made their first contribution in [#2334](https://github.com/terraform-linters/tflint/pull/2334) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.60.0...v0.61.0> ### [`v0.60.0`](https://github.com/terraform-linters/tflint/releases/tag/v0.60.0) [Compare Source](https://github.com/terraform-linters/tflint/compare/v0.59.1...v0.60.0) #### What's Changed This release introduces a new configuration file format: `.tflint.json`. This is useful for workflows such as automatically generating configuration files. Please note that in order to use the `.tflint.json`, enabled plugins must be built with SDK v0.23+. From this release, Cosign signatures (`checksums.txt.keyless.sig` and `checksums.txt.pem`) are deprecated. They will not be included in future releases. If your installation scripts depend on them, please migrate to `gh attestation verify`. ##### Enhancements - Add JSON configuration file support by [@rorychatterton](https://github.com/rorychatterton) in [#2391](https://github.com/terraform-linters/tflint/pull/2391) - Report structured errors in JUnit and CheckStyle XML formatters by [@bendrucker](https://github.com/bendrucker) in [#2407](https://github.com/terraform-linters/tflint/pull/2407) ##### Changes - Alphabetize rulesets in version output by [@bendrucker](https://github.com/bendrucker) in [#2404](https://github.com/terraform-linters/tflint/pull/2404) - release: Pin Cosign version and deprecate Cosign signatures by [@wata727](https://github.com/wata727) in [#2405](https://github.com/terraform-linters/tflint/pull/2405) ##### Bug Fixes - fix: only read TF\_VAR for root module by [@bendrucker](https://github.com/bendrucker) in [#2413](https://github.com/terraform-linters/tflint/pull/2413) ##### Chores - build(deps): Bump actions/attest-build-provenance from 2.4.0 to 3.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2376](https://github.com/terraform-linters/tflint/pull/2376) - build(deps): Bump actions/setup-go from 5.5.0 to 6.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2377](https://github.com/terraform-linters/tflint/pull/2377) - build(deps): Bump the go-x group with 3 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2378](https://github.com/terraform-linters/tflint/pull/2378) - build(deps): Bump github.com/spf13/afero from 1.14.0 to 1.15.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2380](https://github.com/terraform-linters/tflint/pull/2380) - build(deps): Bump github.com/zclconf/go-cty from 1.16.4 to 1.17.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2379](https://github.com/terraform-linters/tflint/pull/2379) - build(deps): Bump golang.org/x/net from 0.43.0 to 0.44.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2381](https://github.com/terraform-linters/tflint/pull/2381) - build(deps): Bump google.golang.org/grpc from 1.75.0 to 1.75.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2382](https://github.com/terraform-linters/tflint/pull/2382) - build(deps): Bump github.com/sigstore/sigstore-go from 1.1.1 to 1.1.2 by [@dependabot](https://github.com/dependabot)\[bot] in [#2383](https://github.com/terraform-linters/tflint/pull/2383) - build(deps): Bump sigstore/cosign-installer from 3.9.2 to 3.10.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2384](https://github.com/terraform-linters/tflint/pull/2384) - build(deps): Bump mislav/bump-homebrew-formula-action from 3.5 to 3.6 by [@dependabot](https://github.com/dependabot)\[bot] in [#2388](https://github.com/terraform-linters/tflint/pull/2388) - fix(script): GitHub API rate limit by [@Sander0542](https://github.com/Sander0542) in [#2390](https://github.com/terraform-linters/tflint/pull/2390) - Bump tflint-plugin-sdk to v0.23.0 by [@wata727](https://github.com/wata727) in [#2393](https://github.com/terraform-linters/tflint/pull/2393) - build(deps): Bump github.com/sigstore/sigstore-go from 1.1.2 to 1.1.3 by [@dependabot](https://github.com/dependabot)\[bot] in [#2394](https://github.com/terraform-linters/tflint/pull/2394) - build(deps): Bump docker/login-action from 3.5.0 to 3.6.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2395](https://github.com/terraform-linters/tflint/pull/2395) - build(deps): Bump the go-x group with 4 updates by [@dependabot](https://github.com/dependabot)\[bot] in [#2397](https://github.com/terraform-linters/tflint/pull/2397) - build(deps): Bump google.golang.org/grpc from 1.75.1 to 1.76.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2398](https://github.com/terraform-linters/tflint/pull/2398) - build(deps): Bump sigstore/cosign-installer from 3.10.0 to 4.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2399](https://github.com/terraform-linters/tflint/pull/2399) - build(deps): Bump golang.org/x/net from 0.45.0 to 0.46.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2400](https://github.com/terraform-linters/tflint/pull/2400) - build(deps): Bump github.com/terraform-linters/tflint-plugin-sdk from 0.23.0 to 0.23.1 by [@dependabot](https://github.com/dependabot)\[bot] in [#2402](https://github.com/terraform-linters/tflint/pull/2402) - build(deps): Bump golangci/golangci-lint-action from 8.0.0 to 9.0.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2408](https://github.com/terraform-linters/tflint/pull/2408) - build(deps): Bump docker/metadata-action from 5.8.0 to 5.9.0 by [@dependabot](https://github.com/dependabot)\[bot] in [#2409](https://github.com/terraform-linters/tflint/pull/2409) - build(deps): Bump golang.org/x/oauth2 from 0.32.0 to 0.33.0 in the go-x group by [@dependabot](https://github.com/dependabot)\[bot] in [#2410](https://github.com/terraform-linters/tflint/pull/2410) #### New Contributors - [@Sander0542](https://github.com/Sander0542) made their first contribution in [#2390](https://github.com/terraform-linters/tflint/pull/2390) - [@rorychatterton](https://github.com/rorychatterton) made their first contribution in [#2391](https://github.com/terraform-linters/tflint/pull/2391) **Full Changelog**: <https://github.com/terraform-linters/tflint/compare/v0.59.1...v0.60.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

MaidFox added 1 commit

2026-09-15 11:11:31 -07:00

Update dependency tflint to v0.64.0

/ lint (pull_request) Successful in 55s

Details

16316f9571