Bump hashicorp/http from 3.4.1 to 3.4.5

[dependabot]

Bumps hashicorp/http from 3.4.1 to 3.4.5.

Release notes

Sourced from hashicorp/http's releases.

v3.4.5

NOTES:

• all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#452)

v3.4.4

NOTES:

• data-source/http: Previous versions of this provider ignored any Host headers specified in the request_headers attribute when setting the HTTP request. Any specified Host request header will now be set on the HTTP request.

For example, in the following configuration:

data "http" "example" {
  url      = "https://www.example.com"
  request_headers = {
    Host = "www.differentexample.com"
  }
}

The HTTP request URL host is still www.example.com but the HTTP request Host header will now be www.differentexample.com instead of www.example.com. (#440)

BUG FIXES:

• data-source/http: Allow Host header in request_headers to be set on HTTP request (#440)

v3.4.3

BUG FIXES:

• data-source/http: Avoid potentially leaking URL-embedded basic authentication credentials in logs and error messages (#429)

v3.4.2

NOTES:

• data-source/http: Previously the HTTP request would unexpectedly always contain a body for all requests. Certain HTTP server implementations are sensitive to this data existing if it is not expected. Requests now only contain a request body if the request_body attribute is explicitly set. To exactly preserve the previous behavior, set request_body = "". (#388)

BUG FIXES:

• data-source/http: Ensured HTTP request body is not sent unless configured (#388)

Changelog

Sourced from hashicorp/http's changelog.

3.4.5 (September 10, 2024)

NOTES:

• all: This release introduces no functional changes. It does however include dependency updates which address upstream CVEs. (#452)

3.4.4 (July 31, 2024)

NOTES:

• data-source/http: Previous versions of this provider ignored any Host headers specified in the request_headers attribute when setting the HTTP request. Any specified Host request header will now be set on the HTTP request.

For example, in the following configuration:

data "http" "example" {
  url      = "https://www.example.com"
  request_headers = {
    Host = "www.differentexample.com"
  }
}

The HTTP request URL host is still www.example.com but the HTTP request Host header will now be www.differentexample.com instead of www.example.com. (#440)

BUG FIXES:

• data-source/http: Allow Host header in request_headers to be set on HTTP request (#440)

3.4.3 (June 03, 2024)

BUG FIXES:

• data-source/http: Avoid potentially leaking URL-embedded basic authentication credentials in logs and error messages (#429)

3.4.2 (February 29, 2024)

NOTES:

• data-source/http: Previously the HTTP request would unexpectedly always contain a body for all requests. Certain HTTP server implementations are sensitive to this data existing if it is not expected. Requests now only contain a request body if the request_body attribute is explicitly set. To exactly preserve the previous behavior, set request_body = "". (#388)

BUG FIXES:

• data-source/http: Ensured HTTP request body is not sent unless configured (#388)

Commits

• 22679bc Update changelog
• 173f5fc all: Bump minimum Go module version to 1.22 (#452)
• a021d57 Result of tsccr-helper -log-level=info gha update -latest . (#453)
• 08ecf12 build(deps): bump golang.org/x/net from 0.28.0 to 0.29.0 (#451)
• 5e21d7a build(deps): bump hashicorp/setup-terraform from 3.1.1 to 3.1.2 (#449)
• f38748c Result of tsccr-helper -log-level=info gha update -latest . (#448)
• 3bb8f61 Result of tsccr-helper -log-level=info gha update -latest . (#447)
• 8a2d0c3 build(deps): bump github.com/hashicorp/terraform-plugin-testing (#446)
• b3558ff build(deps): bump golang.org/x/net from 0.27.0 to 0.28.0 (#445)
• 7b99cb6 build(deps): bump github.com/hashicorp/terraform-plugin-framework (#444)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

🦙 MegaLinter status: ✅ SUCCESS

Descriptor	Linter	Files	Fixed	Errors	Elapsed time
✅ COPYPASTE	jscpd	yes		no	2.0s
✅ EDITORCONFIG	editorconfig-checker	1		0	0.43s
✅ REPOSITORY	checkov	yes		no	25.53s
✅ REPOSITORY	devskim	yes		no	2.08s
✅ REPOSITORY	dustilock	yes		no	0.76s
✅ REPOSITORY	gitleaks	yes		no	1.77s
✅ REPOSITORY	git_diff	yes		no	0.01s
✅ REPOSITORY	grype	yes		no	17.35s
✅ REPOSITORY	kics	yes		no	62.24s
✅ REPOSITORY	secretlint	yes		no	0.97s
✅ REPOSITORY	syft	yes		no	0.37s
✅ REPOSITORY	trivy	yes		no	7.71s
✅ REPOSITORY	trivy-sbom	yes		no	2.45s
✅ REPOSITORY	trufflehog	yes		no	8.63s
✅ TERRAFORM	terraform-fmt	1	0	0	0.04s
✅ TERRAFORM	terrascan	yes		no	8.17s
✅ TERRAFORM	tflint	yes		no	2.12s

See detailed report in MegaLinter reports
Set VALIDATE_ALL_CODEBASE: true in mega-linter.yml to validate all sources, not only the diff

MegaLinter is graciously provided by