v17.5.1 - update terraform-plugin-sdk/v2 to v2.11.0.
-
Updates the Terraform provider's terraform-plugin-sdk/v2 dependency to v2.11.0 to silence alerts around GHSA-92mm-2pjq-r785 / CVE-2026-4660 in the hashicorp/go-getter package.
This vulnerability did not affect the Terraform provider (the hashicorp/go-getter package was an indirect dependency only used in hashicopr/terraform-exec's tfinstall binary), but updating terraform-plugin-sdk/v2 allowed for the removal of the dependency altogether which neatly solves the problem.