chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main)

[elastic-renovate-prod]

This PR contains the following updates:

Package	Type	Update	Change
github.com/hashicorp/go-getter	indirect	minor	v1.7.9 -> v1.8.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/go-getter (github.com/hashicorp/go-getter)

v1.8.6

Compare Source

v1.8.5

Compare Source

What's Changed

• [chore] : Bump the go group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5766
• use %w to wrap error by @​Ericwww in https://github.com/hashicorp/go-getter/pull/475
• fix: #​538 http file download skipped if headResp.ContentLength is 0 by @​martijnvdp in https://github.com/hashicorp/go-getter/pull/539
• chore: fix error message capitalization in checksum function by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/578
• [chore] : Bump the go group with 8 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5777
• Fix git url with ambiguous ref by @​nimasamii in https://github.com/hashicorp/go-getter/pull/382
• fix: resolve compilation errors in get_git_test.go by @​CreatorHead in https://github.com/hashicorp/go-getter/pull/579
• [chore] : Bump the actions group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5822
• [chore] : Bump the go group with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5833
• test that arbitrary files cannot be checksummed by @​schmichael in https://github.com/hashicorp/go-getter/pull/250
• [chore] : Bump google.golang.org/api from 0.260.0 to 0.262.0 in the go group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5855
• [chore] : Bump actions/checkout from 6.0.1 to 6.0.2 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5866
• [chore] : Bump the go group with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5888
• [chore] : Bump actions/cache from 5.0.2 to 5.0.3 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5899
• [chore] : Bump aws-actions/configure-aws-credentials from 5.1.1 to 6.0.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5922
• [chore] : Bump google.golang.org/api from 0.264.0 to 0.265.0 in the go group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5911
• [chore] : Bump the go group with 5 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5933
• IND-6310 - CRT Onboarding by @​nasareeny in https://github.com/hashicorp/go-getter/pull/584
• Fix crt build path by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/594
• [chore] : Bump the go group with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5966
• fix: remove checkout action from set-product-version job by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/598
• [chore] : Bump the actions group with 4 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5955
• fix(deps): upgrade go.opentelemetry.io/otel/sdk to v1.40.0 (GO-2026-4394) by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/599
• Prepare go-getter for v1.8.5 release by @​nasareeny in https://github.com/hashicorp/go-getter/pull/597
• [chore] : Bump the actions group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/6000
• sec: bump go and xrepos + redact aws tokens in url by @​dduzgun-security in https://github.com/hashicorp/go-getter/pull/604

NOTES:

Binary Distribution Update: To streamline our release process and align with other HashiCorp tools, all release binaries will now be published exclusively to the official HashiCorp release site. We will no longer attach release assets to GitHub Releases.

New Contributors

• @​Ericwww made their first contribution in https://github.com/hashicorp/go-getter/pull/475
• @​martijnvdp made their first contribution in https://github.com/hashicorp/go-getter/pull/539
• @​nimasamii made their first contribution in https://github.com/hashicorp/go-getter/pull/382
• @​nasareeny made their first contribution in https://github.com/hashicorp/go-getter/pull/584

Full Changelog: hashicorp/go-getter@v1.8.4...v1.8.5

v1.8.4

Compare Source

What's Changed

• [IND-4227][COMPLIANCE] chore: Fix lint issues-build tags by @​ssagarverma in https://github.com/hashicorp/go-getter/pull/568
• [IND-4227] [COMPLIANCE] Update Copyright Headers by @​oss-core-libraries-dashboard[bot] inhttps://github.com/hashicorp/go-getter/pull/5666
• [COMPLIANCE] Update Copyright Headers by @​oss-core-libraries-dashboard[bot] inhttps://github.com/hashicorp/go-getter/pull/5711
• [chore] : Bump the actions group across 1 directory with 3 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5677
• fix: allow downloading S3 files from MinIO over http by @​vsarunas in https://github.com/hashicorp/go-getter/pull/570
• [chore] : Bump the actions group across 1 directory with 6 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5744
• [chore] : Bump the go group across 1 directory with 12 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5755

New Contributors

• @​ssagarverma made their first contribution in https://github.com/hashicorp/go-getter/pull/568
• @​oss-core-libraries-dashboard[bot] made their first contribution inhttps://github.com/hashicorp/go-getter/pull/5666

Full Changelog: hashicorp/go-getter@v1.8.3...v1.8.4

v1.8.3

Compare Source

What's Changed

• [chore] : Bump actions/cache from 4.2.4 to 4.3.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5622
• [chore] : Bump aws-actions/configure-aws-credentials from 5.0.0 to 5.1.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5633
• Remove failed decompressed files by @​allisonlarson in https://github.com/hashicorp/go-getter/pull/564

New Contributors

• @​allisonlarson made their first contribution in https://github.com/hashicorp/go-getter/pull/564

Full Changelog: hashicorp/go-getter@v1.8.2...v1.8.3

v1.8.2

Compare Source

What's Changed

• Ensure temporary directory symlinks do not cause errors by @​cam-stitt in https://github.com/hashicorp/go-getter/pull/560

New Contributors

• @​cam-stitt made their first contribution in https://github.com/hashicorp/go-getter/pull/560

Full Changelog: hashicorp/go-getter@v1.8.1...v1.8.2

v1.8.1

Compare Source

What's Changed

• chore(deps): bump ulikunitz/xz to v0.5.15 by @​thevilledev in https://github.com/hashicorp/go-getter/pull/550
• Improve CI/CD, fix tests by @​YakDriver in https://github.com/hashicorp/go-getter/pull/554
• [fix] Windows junction handling by @​YakDriver in https://github.com/hashicorp/go-getter/pull/557

New Contributors

• @​thevilledev made their first contribution in https://github.com/hashicorp/go-getter/pull/550

Full Changelog: hashicorp/go-getter@v1.8.0...v1.8.1

v1.8.0

What's Changed

• [chore] : Bump the actions group with 2 updates by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5433
• [chore] : Bump google-github-actions/auth from 2.1.12 to 3.0.0 in the actions group by @​dependabot[bot] inhttps://github.com/hashicorp/go-getter/pull/5466
• go: bump ulikunitz/xz to v.0.5.14 to resolve GHSA-jc7w-c686-c4v9 by @​ryancragun in https://github.com/hashicorp/go-getter/pull/547
• Upgrade to aws-sdk-go-v2, v1 is unsupported by @​YakDriver in https://github.com/hashicorp/go-getter/pull/548
• Modernize codebase: Fix linting issues, update CI/CD workflow, and improve test categorization by @​YakDriver in https://github.com/hashicorp/go-getter/pull/549

New Contributors

• @​ryancragun made their first contribution in https://github.com/hashicorp/go-getter/pull/547
• @​YakDriver made their first contribution in https://github.com/hashicorp/go-getter/pull/548

Full Changelog: hashicorp/go-getter@v1.7.9...v1.8.0

---

Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-24 01:19 UTC · Rule: default
• 🚫 Left the queue — 2026-04-24 02:16 UTC · at 4446ef73df64d08083e67116fdb342794727fe4f

This pull request spent 56 minutes 48 seconds in the queue, with no time running CI.

Reason

The pull request conflicts with pull requests ahead in queue: #5297, #5304, #5306, #5308

Hint

There is nothing you can do for now. If the pull request ahead in the queue is merged, this pull request will become conflicting and you'll have to update it.
If the pull request ahead is not merged, you can requeue this pull request with a @mergifyio queue comment.

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/main-github.com-hashicorp-go-getter-1.x upstream/renovate/main-github.com-hashicorp-go-getter-1.x
git merge upstream/main
git push upstream renovate/main-github.com-hashicorp-go-getter-1.x

[mergify]

This pull request is now in conflicts. Could you fix it? 🙏
To fixup this pull request, you can check out it locally. See documentation: https://help.github.com/articles/checking-out-pull-requests-locally/

git fetch upstream
git checkout -b renovate/main-github.com-hashicorp-go-getter-1.x upstream/renovate/main-github.com-hashicorp-go-getter-1.x
git merge upstream/main
git push upstream renovate/main-github.com-hashicorp-go-getter-1.x

[mergify]

Merge Queue Status

• ✅ Entered queue — 2026-04-24 05:56 UTC · Rule: default
• ✅ Checks started · on draft merge queue: embarking main (ae37f5c) and #5311 together #5538
• 🚫 Left the queue — 2026-04-24 06:14 UTC · at a9b6e614ed2ed44b4fa494dabbb1403e2d463838

This pull request spent 18 minutes 8 seconds in the queue, with no time running CI.

Waiting for:

• check-success=Lint
• check-success=Unit Test
• any of:
  • check-neutral = Lint
  • check-skipped = Lint
  • check-success = Lint
• any of:
  • check-neutral = Unit Test
  • check-skipped = Unit Test
  • check-success = Unit Test

All conditions

• check-success=Lint
• check-success=Unit Test
• any of [🛡 GitHub branch protection]:
  • check-neutral = Lint
  • check-skipped = Lint
  • check-success = Lint
• any of [🛡 GitHub branch protection]:
  • check-neutral = Unit Test
  • check-skipped = Unit Test
  • check-success = Unit Test
• #approved-reviews-by >= 1 [🛡 GitHub branch protection]
  • chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main) #5311
• #approved-reviews-by >= 1 [🛡 GitHub repository ruleset rule [org] Require a PR for Renovate]
  • chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main) #5311
• #approved-reviews-by >= 1 [🛡 GitHub repository ruleset rule [org] Require a PR]
  • chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main) #5311
• #changes-requested-reviews-by = 0 [🛡 GitHub branch protection]
  • chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main) #5311
• #changes-requested-reviews-by = 0 [🛡 GitHub repository ruleset rule [org] Require a PR for Renovate]
  • chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main) #5311
• #changes-requested-reviews-by = 0 [🛡 GitHub repository ruleset rule [org] Require a PR]
  • chore(deps): update module github.com/hashicorp/go-getter to v1.8.6 (main) #5311
• check-success=Manifest Tests
• check-success=Package Cloudbeat (docker)
• check-success=Package Cloudbeat (tar.gz)
• check-success=Test Rego Policies
• any of [🛡 GitHub branch protection]:
  • check-success = CLA
  • check-neutral = CLA
  • check-skipped = CLA
• any of [🛡 GitHub branch protection]:
  • check-success = Package Cloudbeat (docker)
  • check-neutral = Package Cloudbeat (docker)
  • check-skipped = Package Cloudbeat (docker)
• any of [🛡 GitHub branch protection]:
  • check-success = Package Cloudbeat (tar.gz)
  • check-neutral = Package Cloudbeat (tar.gz)
  • check-skipped = Package Cloudbeat (tar.gz)
• any of [🛡 GitHub branch protection]:
  • check-success = Manifest Tests
  • check-neutral = Manifest Tests
  • check-skipped = Manifest Tests
• any of [🛡 GitHub branch protection]:
  • check-success = Test Rego Policies
  • check-neutral = Test Rego Policies
  • check-skipped = Test Rego Policies

Reason

Pull request #5311 has been merged manually at 3f7771c

Hint

You were too fast!