Update module github.com/hashicorp/go-getter to v2

[pulumi-renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/hashicorp/go-getter	v1.8.6 → v2.2.3

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/go-getter (github.com/hashicorp/go-getter)

v2.2.3

Compare Source

What's Changed

• Backport fix to prevent Git config alteration on Git update by @​nywilken in #​498

Other

• [v2] update s3, and gcs to use most recent v2 module version by @​nywilken in #​489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @​nywilken in #​490

Full Changelog: hashicorp/go-getter@v2.2.2...v2.2.3

v2.2.2

Compare Source

What's Changed

• remove repo-specific codeql action (port from v1) by @​nywilken in #​431
• gcs/v2: bump cloud.google.com/go/storage to 1.34.0 by @​lbajolet-hashicorp in #​488
• docs: bump version for godocs url by @​kudla in #​460
• [v2] update s3, and gcs to use most recent v2 module version by @​nywilken in #​489
• Update cmd/go-getter to use that latest versions of go-getter/v2 by @​nywilken in #​490

New Contributors

• @​lbajolet-hashicorp made their first contribution in #​488
• @​kudla made their first contribution in #​460

Full Changelog: hashicorp/go-getter@v2.2.1...cmd/go-getter/v2.2.2

v2.2.1

Compare Source

What's Changed

• [V2] Bump submodules to use most recent v2 module version by @​nywilken in #​416
• Port Decompression bomb security changes from v1 by @​nywilken in #​418
• Update Go-Getter test workflow to run on pull requests by @​nywilken in #​417
• Port bomb.zip test updates from v1 by @​nywilken in #​425
• [v2] update s3, gcs and cmd to use most recent v2 module version by @​nywilken in #​426

Full Changelog: hashicorp/go-getter@v2.2.0...v2.2.1

v2.2.0

Compare Source

What's Changed

• [v2] update s3, gcs and cmd to use most recent v2 module version by @​nywilken in #​400
• Port Decompression bomb security changes from v1 by @​nywilken in #​414
• Update Go-Getter V2 to use Go 1.18 by @​nywilken in #​381

Full Changelog: hashicorp/go-getter@v2.1.1...v2.2.0

v2.1.1

Compare Source

What's Changed

• Add Timeout to SmbClientGetter to go-getter/v2 by @​nywilken in #​369
• Upgrade AWS SDK version by @​kmoe in #​385

Other Changes

• Fix Go Tests for V2 by @​claire-labry in #​392
• Migrate go-getter v2 to GHA by @​claire-labry in #​388
• • Add Malformed S3 URL test by @​nywilken in #​380

New Contributors

• @​kmoe made their first contribution in #​385

Full Changelog: hashicorp/go-getter@v2.1.0...v2.1.1

v2.1.0

Compare Source

What's Changed

• Multiple fixes for go-getter v2 by @​nywilken in #​361
• Update X-Terraform-Get error messaging to match v1 by @​nywilken in #​364
• Update default Getters with known defaults by @​nywilken in #​363

Full Changelog: hashicorp/go-getter@v2.0.2...v2.1.0

v2.0.2

Compare Source

What's Changed

• update s3 gcs and cmd to use most recent v2 module by @​azr in #​352
• Removed ova file type from the list of supported decompressors by @​nywilken in #​354

Full Changelog: hashicorp/go-getter@v2.0.1...v2.0.2

v2.0.1

Compare Source

Enhancements

• Append tar and ova decompressor in v2 by @​LeConTesteur in #​351

Bug fixes 🐞

• fixes #​320: Pass context to NewRequestWithContext so HTTP requests can… by @​zeisss in #​324
• Ignore comments in checksum files by @​azr in #​350

New Contributors

• @​LeConTesteur made their first contribution in #​351

Full Changelog: hashicorp/go-getter@v2.0.0...v2.0.1

v2.0.0: with split client/requests and vendored plugins

Compare Source

v1.8.8

1.8.8 (August 12, 2026)

SECURITY:

• git: Remove .git from the destination dir before git init, even if it's a file instead of a directory [GH-634]

IMPROVEMENTS:

• build: Updated Go to 1.26.5 [GH-657]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • Monday through Friday (* * * * 1-5)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.