nightly

Nightly releases are snapshots of the development activity on the Packer project that may include new features and bug fixes scheduled for upcoming releases. These releases are made available to make it easier for users to test their existing build configurations against the latest Packer code base for potential issues or to experiment with new features, with a chance to provide feedback on ways to improve the changes before being released.

As these releases are snapshots of the latest code, you may encounter an issue compared to the latest stable release. Users are encouraged to run nightly releases in a non production environment. If you encounter an issue, please check our issue tracker to see if the issue has already been reported; if a report hasn't been made, please report it so we can review the issue and make any needed fixes.

Note: Nightly releases are only available via GitHub Releases, and artifacts are not codesigned or notarized. Distribution via other Release Channels such as the Releases Site or Homebrew is not yet supported.

v1.10.3

1.10.3 (April 22, 2024)

NOTES

• A LICENSE.txt file has been added to the Packer release artifacts.
  12981

FEATURES

• Packer users can now track Packer version and plugin versions used for each
  build artifact in HCP Packer.
  GH-12891
  GH-12910
  GH-12923
  GH-12926

SECURITY

• Bump github.com/go-jose/go-jose/v3 to address GHSA-c5q2-7r4c-mv6g.
  GH-12928
• Bump golang.org/x/net to v0.24.0 to address GO-2024-2687.
  GH-12924

BUG FIXES

• cmd/fmt: Display information error when Packer fmt fails due to HCL2
  parsing error. GH-12870

v1.11.0-alpha2

version: bump to v1.11.0-alpha2

v1.11.0-alpha

Bump github.com/go-jose/go-jose/v3 to address CVE-2024-28180

v1.10.2

1.10.2 (March 6, 2024)

NOTES:

• Continuing the work in in Packer v1.10.0 we introduced the ability to install
  a locally sourced plugin using packer plugins install --path, this
  release extends support to development plugin binaries - binaries that
  report "dev" as part of their plugin version. Instead of manually placing a
  downloaded binary into the executable or current working directory we
  encourage you to run the command packer plugins install –path <path-to- downloaded-extracted-binary> github.com/hashicorp/happycloud to install
  the binary into a Packer compatible path.
  GH-12855

IMPROVEMENTS:

• cmd/plugins: Add support for installing local development binaries to packer plugins install.
  GH-12855
• core: Validate bucket name when using hcp_packer_registry block.
  GH-12820
• core: Update github.com/hashicorp/hcp-sdk-go from 0.83.0 to 0.85.0.
  GH-12850
  GH-12827

BUG FIXES:

• core/hcp: HCP Packer build failures properly distinguish between incompatible
  plugins and general publishing errors.
  GH-12854
  GH-12835

v1.10.1

1.10.1 (January 30, 2024)

NOTES:

• HCP Packer has been updated to follow an artifact-agnostic approach for
  publishing and consuming built artifacts. To best support the new approach, HCP Packer components within Packer have
  been updated to use the v2 nomenclature when publishing build metadata to
  HCP Packer. These changes include data source components for consuming HCP
  Packer stored artifacts. The data source components hcp-packer-version
  and hcp-packer-artifact respectively replace, the now deprecated,
  hcp-packer-iteration
  and hcp-packer-image
  component data sources. The added changes are compatible with all existing HCP Packer workflows and do not warrant any
  immediate template changes by the user. However, we encourage all HCP Packer users to visit the updated
  HCP Packer CHANGELOG to familiarize themselves with the nomenclature changes.
  GH-12794 GH-12799
• The hcp-packer-image data source has been deprecated, please use HCP Packer
  Artifact data source instead.
  GH-12794
• The hcp-packer-iteration data source has been deprecated, please use HCP
  Packer Version data source instead.
  GH-12794
• The contextual variable packer.iterationID has been deprecated, please use
  the new contextual variable packer.versionFingerprint. The iterationID
  represents the HCP Packer iteration that build metadata has been publish
  to, with this release an Iteration is now referred to as a Version and the
  ID has been replaced by the Version Fingerprint.
  GH-12803

FEATURES:

• New Data source hcp-packer-artifact The HCP Packer Artifact Data Source
  retrieves information about an artifact from the HCP Packer Registry.
  GH-12794
• New Data source hcp-packer-version The HCP Packer Version Data Source
  retrieves information about HCP Packer Version from the HCP Packer.
  Registry. GH-12794

SECURITY:

• core: Bump Go dependencies to address various CVEs. GH-12777
• core: Bump github.com/cloudflare/circl to address GHSA-9763-4f94-gfch. GH-12781

IMPROVEMENTS:

• core: Bump github.com/hashicorp/hcp-sdk-go from 0.79.0 to 0.81.0
  GH-12792
  GH-12764
• core: Update error messaging for HCP incompatible plugin builds.
  GH-12800
• core: Update HCP Packer integration to use HCP Packer v2 nomenclature, with
  this change HCP Packer iterations are now referred to as Versions, and
  Images are now referred to as Artifacts. The data sources for interacting
  with HCP Packer have been respectively renamed to align with the terminology
  of Version and Artifact.
  GH-12794
  GH-12799
• core: Update spacing for flags within Help text.
  GH-12742
  GH-12743

v1.10.0

1.10.0 (December 5, 2023)

NOTES:

This release contains breaking changes for practitioner relying on plugins
previously bundled into Packer. As specified in the Bundled Plugins Removal announcement
HashiCorp maintained plugins will no longer be shipped with Packer.
Users are encouraged to use packer init or packer plugins [...] when managing required plugins
needed for executing their builds.
GH-12660

The affected plugins include:

• packer-plugin-amazon
• packer-plugin-ansible
• packer-plugin-azure
• packer-plugin-docker
• packer-plugin-googlecompute
• packer-plugin-qemu
• packer-plugin-vagrant
• packer-plugin-virtualbox
• packer-plugin-vmware
• packer-plugin-vsphere

SECURITY:

• Bump github.com/go-jose/go-jose/v3 to address GO-2023-2334. There have been
  no reported issues with Packer but we are bumping given that it is a
  secondary
  dependency. GH-12723
• Bump Go to 1.20.10 to Address CVE-2023-44487 / CVE-2023-39325.
  GH-12661
• Bump Go to 1.20.11 CVE-2023-45283. There have been no reported issues with
  Packer but we are bumping given its usage of the path/filepath pkg.
  GH-12690
• Bump Packer Plugin SDK to v0.5.2.
  GH-12717

PLUGINS:

• Removed all HashiCorp vendored plugins from being bundled into the Packer binary.
  GH-12660, GH-12720
• packer-plugin-hcloud: The Hetzner Cloud plugin has been handed over to the
  Hetzner integrations team. New releases for this plugin are available at
  https://github.com/hetznercloud/packer-plugin-hcloud. Existing references
  to the plugin will continue to work but users are advised to update the
  required_plugins block to use the new plugin source address.

  required_plugins {
     parallels = {
       source  =  "github.com/hetznercloud/hcloud"
       version =  "~> 1"
     }
  }
  

IMPROVEMENTS:

• cmd/init: Warn users running packer init on configuration templates with a
  missing required_plugins blocks.
  GH-12638
• cmd/plugins: Add --path flag to packer plugins install subcommand to
  support installation of plugins from a local binary rather than from
  GitHub. GH-12643
• cmd/plugins: Install SHA256SUM file with 0644 perms.
  GH-12665
• cmd/plugins: Remove SHA256SUM file on plugin removal.
  GH-12666
• cmd/plugins: Remove will error if it fails to find the plugin being selected
  for removal. GH-12669
• core/hcl2: Remove empty source file reference on unset variable errors.
  GH-12712
• core/hcl: Improve the recursive execution of data sources with other data
  source dependencies.
  GH-12608
• core: Bump github.com/hashicorp/hcp-sdk-go from 0.73.0 to 0.74.0 -
  GH-12704
• core: Bump Packer Plugin SDK to v0.5.2.
  GH-12717
• core: Provide integration link as hint in error message if a plugin component
  is unknown. GH-12705
• core: Update version output for packer -v and packer --version to match
  packer version.
  GH-12569
• docs: Update plugin installation guides with supported methods for 1.10.0 and
  above. GH-12713

BUG FIXES:

• cmd/plugins: Update packer plugin installed to show all installed plugin
  binaries, including any duplicate versions or binaries copied from a
  different source URI.
  GH-12731

v1.9.5

1.9.5 (December 4, 2023)

SECURITY

• Bump github.com/go-jose/go-jose/v3 to address GO-2023-2334.
  GH-12723

BUG FIXES:

• Add VirtualBox as known plugin prefix to prevent endless bundled plugin warning.
  GH-12719

v1.9.4

1.9.4 (August 18, 2023)

BUG FIXES:

• core: When invoking Packer with the CHECKPOINT_DISABLE environment variable the telemetry
  reporter is left uninitialized in order to disable telemetry reporting.
  Any method calls on the nil reporter is expected to check if the reporter is active or in
  NOOP mode. The SetBundledUsage function, introduced in Packer 1.9.2, failed to perform a nil
  check before attempting to modify an attribute, causing Packer to fail when telemetry is
  disabled. This release fixes this issue by introducing such a check.

v1.9.3

1.9.3 (August 17, 2023)

NOTES:

• New Docker Image: As part of the bundled plugin removal effort, a new
  Docker target called release-full has been added to the Packer release
  artifacts. The release-full image includes Packer and all the official
  plugins pre-installed in its environment. This image is being offered as an
  alternative option for those users who may still be relying on the plugin
  versions bundled into the Packer binary.
  GH-12532

IMPROVEMENTS:

• core/docs: Clarify the expected usage of the packer init command for HCL2
  template builds.GH-12535
• core/hcp: Add support for project-level service principals. A user connecting
  with a project level service principals must provide a valid HCP_PROJECT_ID
  in order to connect.
  GH-12520
  GH-12576
• core: A new Docker image packer:release-full has been added for all
  supported architectures. The release-full image includes Packer and all the
  official plugins pre-installed in its environment.
  GH-12532
• core: Add enhanced support to Packer telemetry for bundle plugins usage.
  GH-12536

BUG FIXES:

• core: Bump golang.org/x/net to v0.13.0 to address CVE GO-2023-1988. Packer
  itself is not vulnerable to the CVE as we don't render web pages, but
  security checks do point it as an issue that needs to be addressed.
  GH-12561
• core: Fix custom plugin loading in current working directory regression.
  GH-12544