GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — fix: bump bundled terraform to 1.17.1 (backport 2.34) by coder[bot] · Pull Request #31452 · coder/coder

Conversation

@coder

@coder coder Bot commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

Backport of #31438 to release/2.34. Bumps the bundled Terraform from 1.16.7 to 1.17.1, which is built with go-jose/v4 v4.1.6 and fixes GHSA-mgcc-cww5-fp2q in /opt/terraform/terraform. Flagged by the IronBank VAT scan of 2.38.3. No 1.16.x release has the fix yet, so this is a minor jump and maxTerraformVersion moves from 1.16.9 to 1.17.9.

Files follow this branch's previous Terraform bumps: install.go, install.sh, scripts/Dockerfile.base, .github/actions/setup-tf/action.yaml, mise.toml, mise.lock, flake.nix, the airgap docs, and testdata/version.txt. Checksums come from HashiCorp's GPG-verified terraform_1.17.1_SHA256SUMS.

Verified: go test ./provisioner/terraform/ passes with Terraform 1.17.1. Local git hooks were skipped; CI is the gate.

Part of ENT-228 (parent ENT-230). Backported to every supported release line per the backport policy in CONTRIBUTING.md.

Opened by Superblink on behalf of @droopy4096.

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
All reactions
@coder
fix: bump bundled terraform to 1.17.1 (backport 2.34)
32b12b4 
Terraform 1.17.1 is built with go-jose v4.1.6, which fixes GHSA-mgcc-cww5-fp2q in /opt/terraform/terraform (flagged by the IronBank VAT scan of 2.38.3). Terraform 1.16.x and 1.17.0 still ship go-jose v4.1.4.

Refs ENT-228
@linear-code

linear-code Bot commented Oct 28, 2026

Copy link
Copy Markdown

ENT-228
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@github-actions

github-actions Bot commented Oct 28, 2026

Copy link
Copy Markdown
Contributor

Docs preview

📖 View docs preview for docs/install/airgap.md
All reactions

Sorry, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.
@github-actions github-actions Bot added the community Pull Requests and issues created by the community. label Oct 28, 2026
@coder coder Bot added cherry-pick/v2.34 Cherry-pick PR targeting release/2.34 and removed community Pull Requests and issues created by the community. labels Oct 28, 2026
@coder coder Bot assigned droopy4096 Oct 28, 2026
@droopy4096
droopy4096 marked this pull request as ready for review October 28, 2026 21:34
@droopy4096
droopy4096 requested a review from jdomeracki-coder as a code owner October 28, 2026 21:34
jdomeracki-coder
jdomeracki-coder approved these changes Oct 29, 2026
View reviewed changes
@coder
coder Bot requested a review from denisra October 29, 2026 17:22
@denisra
denisra merged commit 1a93651 into release/2.34 Nov 2, 2026
46 of 47 checks passed

Uh oh!

There was an error while loading. Please reload this page.
@denisra
denisra deleted the superblink/ent-228-terraform-1171-release-234 branch November 2, 2026 18:21
@github-actions github-actions Bot locked and limited conversation to collaborators Nov 2, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@jdomeracki-coder jdomeracki-coder jdomeracki-coder approved these changes
@denisra denisra Awaiting requested review from denisra

Uh oh!

There was an error while loading. Please reload this page.

Assignees

@droopy4096 droopy4096

Labels

cherry-pick/v2.34 Cherry-pick PR targeting release/2.34

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

Uh oh!

There was an error while loading. Please reload this page.

3 participants

@jdomeracki-coder @droopy4096 @denisra
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.