DXE-6206 Merge pull request #139 from akamai/release/v2.33.5

Release/v2.33.5

Author: Slonimskaia

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Release notes
 
+## v2.33.5 (Feb 26, 2026)
+
+* Upgraded Akamai Terraform Provider to `v10.0.0`.
+* Fixed problems with `appsec` and `firewall` images.
+
 ## v2.33.4 (Jan 22, 2026)
 
 * Upgraded Terraform to version `1.13.5`.

dockerfiles/appsec.Dockerfile

@@ -10,12 +10,16 @@ ARG BASE=akamai/base
 
 FROM node:20-alpine3.23 AS builder
 
+COPY patches/ /tmp/patches/
+
 RUN apk add --no-cache git jq \
   # install cli-appsec from git
   # (akamai install does not add the --production flag, which increases
   # the footprint of the package since devDependencies are installed)
   && git clone --depth 1 https://github.com/akamai/cli-appsec.git \
   && cd cli-appsec \
+  && git apply --ignore-whitespace /tmp/patches/cli-appsec.patch  \
+  && rm -rf /tmp/patches \
   # Add npm overrides to fix vulnerabilities
   # CVE-2025-7783 (form-data), CVE-2025-58754 (axios), GHSA-3xgq-45jj-v275 (cross-spawn)
   && jq '.overrides["form-data"] = "^4.0.4" | .overrides["axios"] = "^1.13.2" | .overrides["cross-spawn"] = "^7.0.3"' package.json > package.json.tmp && mv package.json.tmp package.json \

dockerfiles/dns.Dockerfile

@@ -14,8 +14,10 @@ FROM golang:1.24.11-alpine3.23 AS builder
 COPY files/upx-noop /usr/bin/upx
 RUN chmod +x /usr/bin/upx
 
+ARG CLI_DNS_REF=0.6.0
+
 RUN apk add --no-cache $(apk search --no-cache | grep -q ^upx && echo -n upx) git \
-  && git clone --depth=1 https://github.com/akamai/cli-dns \
+  && git clone --depth=1 --branch ${CLI_DNS_REF} https://github.com/akamai/cli-dns \
   && cd cli-dns \
   && go mod vendor \
   # -ldflags="-s -w" strips debug information from the executable

dockerfiles/firewall.Dockerfile

@@ -10,10 +10,14 @@ ARG BASE=akamai/base
 
 FROM ${BASE}
 
+COPY patches/ /tmp/patches/
+
 RUN mkdir -p /cli/.akamai-cli/src \
   && apk add --no-cache python3 py3-pip \
   && apk add --no-cache --virtual .dev git gcc python3-dev py3-setuptools libffi-dev musl-dev openssl-dev \
   && git clone --depth 1 https://github.com/akamai/cli-firewall.git /cli/.akamai-cli/src/cli-firewall \
+  && git -C /cli/.akamai-cli/src/cli-firewall apply --ignore-whitespace /tmp/patches/cli-firewall.patch  \
+  && rm -rf /tmp/patches \
   && python3 -m venv /cli/.akamai-cli/venv/cli-firewall \
   && source /cli/.akamai-cli/venv/cli-firewall/bin/activate \
   && python -m pip install --no-cache-dir --upgrade pip \

dockerfiles/gtm.Dockerfile

@@ -14,8 +14,10 @@ FROM golang:1.24.11-alpine3.23 AS builder
 COPY files/upx-noop /usr/bin/upx
 RUN chmod +x /usr/bin/upx
 
+ARG CLI_GTM_REF=0.5.0
+
 RUN apk add --no-cache $(apk search --no-cache | grep -q ^upx && echo -n upx) git \
-  && git clone --depth=1 https://github.com/akamai/cli-gtm \
+  && git clone --depth=1 --branch ${CLI_GTM_REF} https://github.com/akamai/cli-gtm \
   && cd cli-gtm \
   && go mod vendor \
   # -ldflags="-s -w" strips debug information from the executable

dockerfiles/sandbox.Dockerfile

@@ -20,7 +20,7 @@ RUN apk add --no-cache git npm \
   # the footprint of the package since devDependencies are installed)
   && git clone --depth 1 https://github.com/akamai/cli-sandbox.git \
   && cd cli-sandbox \
-  && git apply --ignore-whitespace /tmp/patches/*.patch  \
+  && git apply --ignore-whitespace /tmp/patches/cli-sandbox*.patch  \
   && rm -rf /tmp/patches \
   && npm pkg set overrides.execa=">=2.0.0" overrides.tar="^7.5.4" overrides.qs="^6.14.1" \
   && npm install --ignore-scripts \

files/terraform.tf

@@ -2,7 +2,7 @@ terraform {
   required_providers {
     akamai = {
       source  = "akamai/akamai"
-      version = "9.3.0"
+      version = "10.0.0"
     }
 
     null = {

patches/cli-appsec.patch

@@ -0,0 +1,30 @@
+Subject: [PATCH] Fix
+---
+Index: bin/commands/accountprotectionrulesequence.modify.js
+IDEA additional info:
+Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
+<+>UTF-8
+===================================================================
+diff --git a/bin/commands/accountprotectionrulesequence.modify.js b/bin/commands/accountprotectionrulesequence.modify.js
+--- a/bin/commands/accountprotectionrulesequence.modify.js	(revision 02cc6416d6ac07dbf3a824dfffe4677b432e705a)
++++ b/bin/commands/accountprotectionrulesequence.modify.js	(date 1769606420376)
+@@ -1,4 +1,4 @@
+-let AccountProtectionRuleSequence = require('../../src/accountprotectionrulesequence')
++let AccountProtectionRuleSequence = require('../../src/accountProtectionRuleSequence')
+   .accountProtectionRuleSequence;
+ let out = require('./lib/out');
+ 
+Index: bin/commands/accountprotectionruleSequence.js
+IDEA additional info:
+Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
+<+>UTF-8
+===================================================================
+diff --git a/bin/commands/accountprotectionruleSequence.js b/bin/commands/accountprotectionruleSequence.js
+--- a/bin/commands/accountprotectionruleSequence.js	(revision 02cc6416d6ac07dbf3a824dfffe4677b432e705a)
++++ b/bin/commands/accountprotectionruleSequence.js	(date 1769606008883)
+@@ -1,4 +1,4 @@
+-let AccountProtectionRuleSequence = require('../../src/accountprotectionrulesequence')
++let AccountProtectionRuleSequence = require('../../src/accountProtectionRuleSequence')
+   .accountProtectionRuleSequence;
+ let out = require('./lib/out');
+ 

patches/cli-firewall.patch

@@ -0,0 +1,18 @@
+Subject: [PATCH] Bump prettytable
+---
+Index: requirements.txt
+IDEA additional info:
+Subsystem: com.intellij.openapi.diff.impl.patch.CharsetEP
+<+>UTF-8
+===================================================================
+diff --git a/requirements.txt b/requirements.txt
+--- a/requirements.txt	(revision 49ec6c94bb9fccc4073fb830a219421e81aae665)
++++ b/requirements.txt	(date 1769682371731)
+@@ -1,6 +1,6 @@
+ edgegrid-python==1.1.1
+ requests>=2.32.0
+-prettytable==0.7.2
++prettytable==3.17.0
+ configparser==3.5.0
+ click==7.1.1
+ urllib3>=2.6.0

test.bats

@@ -42,6 +42,11 @@
   [ "$status" -eq 0 ]
 }
 
+@test "cli: appsec is executable" {
+  run akamai appsec --help
+  [ "$status" -eq 0 ]
+}
+
 @test "cli: cloudlets is executable" {
   run akamai cloudlets --help
   [ "$status" -eq 0 ]
@@ -68,6 +73,11 @@
   [ "$status" -eq 0 ]
 }
 
+@test "cli: edgekv is executable" {
+  run akamai edgekv --help
+  [ "$status" -eq 0 ]
+}
+
 @test "cli: edgeworkers is executable" {
   run akamai edgeworkers --help
   [ "$status" -eq 0 ]
@@ -88,6 +98,11 @@
   [ "$status" -eq 0 ]
 }
 
+@test "cli: video-manager is executable" {
+  run akamai video-manager --help
+  [ "$status" -eq 0 ]
+}
+
 @test "cli: jsonnet is executable" {
   run akamai jsonnet --help
   [ "$status" -eq 0 ]
@@ -126,4 +141,9 @@
 @test "cli: gtm is executable" {
   run akamai gtm --help
   [ "$status" -eq 0 ]
+}
+
+@test "cli: test-center is executable" {
+  run akamai test-center --help
+  [ "$status" -eq 0 ]
 }