BlackTreeLifecycle intelligence
Evidence-linked product lifecycle intelligenceSUPPORT · SECURITY · RETIREMENT
← Lifecycle catalogue
RELEASE NOTESHASHICORPVERIFIED

PUBLISHER UPDATE · PACKER-1.16.1

PACKER-1.16.1 release notes and known issues

v1.16.1

Scope: HashiCorp Packer. This update record adds version, fix and known-issue context. Its publication date is not a lifecycle boundary.

Summary

1.16.1 (September 18, 2026) FEATURES: plugin/getter: add support for installing plugins from non-GitHub HTTPS sources, including mirrors and artifact repositories that expose the HashiCorp release directory format. GH-13691 IMPROVEMENTS: communicator/winrm: add configurable connection timeout and retry interval settings. GH-13701 build: update Go to 1.26.8 . GH-13701 BUG FIXES: core/hcl2: pass user variable values to builders, provisioners, and post-processors as packer_user_variables , restoring legacy {{ user "name" }} interpolation in plugin-managed templates. GH-13686 post-processor/shell-local: execute inline scripts through the shell to avoid intermittent ETXTBSY errors. GH-13701 build: bump github.com/shoenig/go-m1cpu to v0.2.2 to prevent segmentation faults on Apple M5 hardware. GH-13696 SECURITY: deps: bump google.golang.org/grpc to v1.83.2 in Packer and the plugin tester to reject requests missing both the :authority and Host headers. GH-13704 GH-13707 DEPENDENCIES: deps: bump github.com/hashicorp/packer-plugin-sdk to v0.6.11 . GH-13701 deps: bump github.com/hashicorp/go-getter/v2 to v2.2.4 . GH-13701 deps: bump github.com/hashicorp/hcp-sdk-go to v0.175.0 , github.com/go-git/go-git/v5 to v5.19.2 , and github.com/klauspost/compress to v1.18.7 . GH-13689 deps: bump golang.org/x/crypto to v0.56.0 , golang.org/x/net to v0.58.0 , and google.golang.org/grpc to v1.83.2 . GH-13701 GH-13707 deps: bump go.opentelemetry.io/otel , go.opentelemetry.io/otel/metric , and go.opentelemetry.io/otel/trace to v1.45.0 , and github.com/go-logr/logr to v1.4.4 . GH-13710 deps: update additional Go module dependencies in Packer and the plugin tester. GH-13689 GH-13701 INTERNAL: docs: update the README contribution link to use the main branch. GH-13700 compliance: update copyright headers. GH-13699

Improvements and security content

  • 1.16.1 (September 18, 2026) FEATURES: plugin/getter: add support for installing plugins from non-GitHub HTTPS sources, including mirrors and artifact repositories that expose the HashiCorp release directory format. GH-13691 IMPROVEMENTS: communicator/winrm: add configurable connection timeout and retry interval settings. GH-13701 build: update Go to 1.26.8 . GH-13701 BUG FIXES: core/hcl2: pass user variable values to builders, provisioners, and post-processors as packer_user_variables , restoring legacy {{ user "name" }} interpolation in plugin-managed templates. GH-13686 post-processor/shell-local: execute inline scripts through the shell to avoid intermittent ETXTBSY errors. GH-13701 build: bump github.com/shoenig/go-m1cpu to v0.2.2 to prevent segmentation faults on Apple M5 hardware. GH-13696 SECURITY: deps: bump google.golang.org/grpc to v1.83.2 in Packer and the plugin tester to reject requests missing both the :authority and Host headers. GH-13704 GH-13707 DEPENDENCIES: deps: bump github.com/hashicorp/packer-plugin-sdk to v0.6.11 . GH-13701 deps: bump github.com/hashicorp/go-getter/v2 to v2.2.4 . GH-13701 deps: bump github.com/hashicorp/hcp-sdk-go to v0.175.0 , github.com/go-git/go-git/v5 to v5.19.2 , and github.com/klauspost/compress to v1.18.7 . GH-13689 deps: bump golang.org/x/crypto to v0.56.0 , golang.org/x/net to v0.58.0 , and google.golang.org/grpc to v1.83.2 . GH-13701 GH-13707 deps: bump go.opentelemetry.io/otel , go.opentelemetry.io/otel/metric , and go.opentelemetry.io/otel/trace to v1.45.0 , and github.com/go-logr/logr to v1.4.4 . GH-13710 deps: update additional Go module dependencies in Packer and the plugin tester. GH-13689 GH-13701 INTERNAL: docs: update the README contribution link to use the main branch. GH-13700 compliance: update copyright headers. GH-13699

Known issues

Publisher statement

Not stated. The verified publisher record does not contain a known-issues statement.

Affected products and versions

Products

  • HashiCorp Packer

Affected versions

  • 1.16.1
  • 1.26.8
  • 0.2.2
  • 1.83.2
  • 0.6.11
  • 2.2.4
  • 0.175.0
  • 5.19.2
  • 1.18.7
  • 0.56.0
  • 0.58.0
  • 1.45.0
  • 1.4.4

Fixed versions or updates

  • No fixed version is stated in this record.

Recommended action

Review the official publisher document before deployment.

Official publisher evidence