fix(deps): update module github.com/hashicorp/go-getter to v1.7.4 [security]

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/hashicorp/go-getter	v1.7.3 -> v1.7.4

GitHub Vulnerability Alerts

CVE-2024-3817

When go-getter is performing a Git operation, go-getter will try to clone the given repository. If a Git reference is not passed along with the Git url, go-getter will then try to check the remote repository’s HEAD reference of its default branch by passing arguments to the Git binary on the host it is executing on.

An attacker may format a Git URL in order to inject additional Git arguments to the Git call.

Consumers of the go-getter library should evaluate the risk associated with these issues in the context of their go-getter usage and upgrade go-getter to 1.7.4 or later.

---

Release Notes

hashicorp/go-getter (github.com/hashicorp/go-getter)

v1.7.4

Compare Source

What's Changed

• Escape user-provided strings in git commands https://github.com/hashicorp/go-getter/pull/483
• Fixed a bug in .netrc handling if the file does not exist https://github.com/hashicorp/go-getter/pull/433

Full Changelog: hashicorp/go-getter@v1.7.3...v1.7.4

---

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 44.52%. Comparing base (8dde68d) to head (776ab53).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #445   +/-   ##
=======================================
  Coverage   44.52%   44.52%           
=======================================
  Files          56       56           
  Lines        5471     5471           
=======================================
  Hits         2436     2436           
  Misses       2783     2783           
  Partials      252      252           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.