Nightly releases are snapshots of the development activity on the Packer project that may include new features and bug fixes scheduled for upcoming releases. These releases are made available to make it easier for users to test their existing build configurations against the latest Packer code base for potential issues or to experiment with new features, with a chance to provide feedback on ways t…
1.16.0 (July 24, 2026) FEATURES: provenance: add new provenance post-processor and packer verify-attestation command for SLSA Build L1/L2 supply-chain attestations. Derives in-toto subjects from Packer artifacts, builds SLSA Provenance v1 predicates with Git/CI metadata, and signs via local PEM key, cloud KMS (awskms://, gcpkms://, azurekms://, hashivault://), or keyless Sigstore (Fulcio + optiona…
1.15.4 (June 3, 2026) BUG FIXES: builder: update build constraints to support arm architecture on FreeBSD GH-13650 IMPROVEMENTS: hcp: removes Syft binary download/handling from the HCP SBOM provisioner GH-13636 SECURITY: deps: upgraded crypto version GH-13645 deps: upgraded go-git version GH-13645 deps: bump github.com/hashicorp/packer-plugin-sdk to 0.6.9 GH-13640 INTERNAL: build: bump Go to 1.25.…
1.15.3 (April 27, 2026) BUG FIXES: hcp: skip bucket update requests when description and labels already match, avoiding unnecessary updates for existing buckets. GH-13624
1.15.2 (April 21, 2026) FEATURES: provisioner: added support for the enforced provisioner. GH-13591 SECURITY: deps: bump github.com/go-jose/go-jose/v4 GH-13594 deps: bump go.opentelemetry.io/otel/sdk GH-13606 deps: update cloud.google.com/go and aws-sdk-go-v2 related dependencies GH-13610 INTERNAL: build: bump Go to 1.25.9 and refresh dependencies GH-13614 GH-13615
1.15.1 (March 26, 2026) FEATURES: hcp: native sbom generation for hcp. Refer to the guide here for more information. GH-13566 BUG FIXES: core: Scrub multiline sensitive values from build output (including OS-specific multiline sensitive-value fixtures) GH-13582 SECURITY: deps: bump syft to v1.42.3 (fixes GO-2026-4809) GH-13581 deps: bump github.com/hashicorp/packer-plugin-sdk to v0.6.7 GH-13581 de…
1.15.0 (February 4, 2026) IMPROVEMENTS: core/hcp: add support for updating HCP Packer registry channels and bucket log UI metadata. GH-13532 build: update Go to 1.24.12. GH-13553 docker: remove vmware and vsphere from the packer full image. GH-13442 docs: add comments to packer docs. GH-13534 compliance: update copyright and license headers. GH-13540 GH-13543 GH-13545 GH-13544 BUG FIXES: datasourc…
1.14.3 (November 18, 2025) IMPROVEMENTS: core/hcp: added cicd metadata support for BitBucket and Jenkins pipelines. GH-13513 GH-13505 core: bump github.com/hashicorp/packer-plugin-sdk to 0.6.4 GH-13494 docs: fix typos and linguistic errors in documentation. GH-13496 SECURITY: Bump golang.org/x/crypto to 0.43.0 GH-13518
1.14.2 (September 9, 2025) ✨ Features HCP Certificate Authentication Support – by @JenGoldstrich (#13435) Adds support for the HCP_CRED_FILE environment variable and removes restrictions on HCP_CLIENT_ID and HCP_CLIENT_SECRET when connecting builds to an HCP Packer registry. Upgrade Node.js to v22 – by @LeahMarieBush (#13450) Updates the Node.js version used for Packer website builds. 🐛 Bug Fixes…
1.14.1 (August 5, 2025) BUG FIXES: core: Changes on the packer plugin installation process to ensure that the plugin is installed correctly. The releases binary from official site releases.hashicorp.com was not getting installed from a proxy server, which was addressed in this PR. GH-13439
1.14.0 (Upcoming...) IMPROVEMENTS: core: Changes to pull official packer plugins binaries from official site (releases.hashicorp.com). This change allows Packer to automatically download and install official plugins from the HashiCorp official release site. This change standardizes our release process and ensures a more secure and reliable pipeline for plugin delivery. GH-13431 core: Updated the d…