Skip to content

fix(deps): bump hc-install to v0.9.4 for expired HashiCorp GPG key - #24

Closed
daniele-mucci-form3 wants to merge 1 commit into
form3tech-oss:masterfrom
daniele-mucci-form3:fix/hc-install-expired-gpg-key
Closed

fix(deps): bump hc-install to v0.9.4 for expired HashiCorp GPG key#24
daniele-mucci-form3 wants to merge 1 commit into
form3tech-oss:masterfrom
daniele-mucci-form3:fix/hc-install-expired-gpg-key

Conversation

@daniele-mucci-form3

Copy link
Copy Markdown

Summary

  • Bumps github.com/hashicorp/hc-install from v0.6.4 to v0.9.4 to replace HashiCorp's expired release signing GPG key (expired 2026-04-18)
  • Fixes acceptance tests failing with unable to verify checksums signature: openpgp: key expired when Terraform CLI is auto-downloaded via terraform-exec
  • Updates Go toolchain requirement to 1.25.8 (required by hc-install v0.9.4)

Context

When TF_ACC=1, the test framework downloads Terraform via terraform-exechc-install. The old embedded signing key expired, causing Terraform CLI installation to fail during acceptance tests.

Upstream issue: hashicorp/hc-install#370

Test plan

  • go build -mod=vendor succeeds
  • go test -mod=vendor ./... passes

Made with Cursor

Acceptance tests auto-download Terraform via hc-install, which failed after
HashiCorp's release signing key expired. Update hc-install and vendor deps.

Co-authored-by: Cursor <cursoragent@cursor.com>
@daniele-mucci-form3
daniele-mucci-form3 requested a review from a team as a code owner July 23, 2026 13:52
@daniele-mucci-form3

Copy link
Copy Markdown
Author

Abandoning in favour of pre-installing Terraform in CI.

@daniele-mucci-form3
daniele-mucci-form3 deleted the fix/hc-install-expired-gpg-key branch July 23, 2026 14:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants