v3.4.5

NOTES:

• all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#452)

v3.4.4

NOTES:

• data-source/http: Previous versions of this provider ignored any Host headers specified in the request_headers attribute when setting the HTTP request. Any specified Host request header will now be set on the HTTP request.

For example, in the following configuration:

data "http" "example" {
  url      = "https://www.example.com"
  request_headers = {
    Host = "www.differentexample.com"
  }
}

The HTTP request URL host is still www.example.com but the HTTP request Host header will now be www.differentexample.com instead of www.example.com.
(#440)

BUG FIXES:

• data-source/http: Allow Host header in request_headers to be set on HTTP request (#440)

v3.4.3

BUG FIXES:

• data-source/http: Avoid potentially leaking URL-embedded basic authentication credentials in logs and error messages (#429)

v3.4.2

NOTES:

• data-source/http: Previously the HTTP request would unexpectedly always contain a body for all requests. Certain HTTP server implementations are sensitive to this data existing if it is not expected. Requests now only contain a request body if the request_body attribute is explicitly set. To exactly preserve the previous behavior, set request_body = "". (#388)

BUG FIXES:

• data-source/http: Ensured HTTP request body is not sent unless configured (#388)

v3.4.1

BUG FIXES:

• data-source/http: Includes update to go-retryablehttp fixing preservation of request body on temporary redirects or re-established HTTP/2 connections (#346)

v3.4.0

ENHANCEMENTS:

• data-source/http: response_body_base64 has been added and contains a standard base64 encoding of the response body (#158)
• data-source/http: Replaced issuing warning on the basis of possible non-text Content-Type with issuing warning if response body does not contain valid UTF-8. (#158)

v3.3.0

NOTES:

• This Go module has been updated to Go 1.19 per the Go support policy. Any consumers building on earlier Go versions may experience errors. (#245)

ENHANCEMENTS:

• data-source/http: Added retry with nested attempts, max_delay_ms and min_delay_ms (#151)
• data-source/http: Added request_timeout_ms (#151)

v3.2.1

BUG FIXES

• data-source/http: Using DefaultTransport to reinstate previous behavior (e.g., ProxyFromEnvironment) (#198).

v3.2.0

ENHANCEMENTS:

• data-source/http: Added ca_cert_pem attribute which allows PEM encoded certificate(s) to be included in the set of root certificate authorities used when verifying server certificates (#125).
• data-source/http: Added insecure attribute to allow disabling the verification of a server's certificate chain and host name. Defaults to false (#125).

v3.1.0

ENHANCEMENTS:

• data-source/http: Allow optionally specifying HTTP request method and body (#21).