RepoJournal
HashiCorp @hashicorp
114 wires and counting

$ follow HashiCorp

Keep up with HashiCorp in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-08
stories 14
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Consul API gateway backport isolates failing routes

By RepoJournal · Filed · About HashiCorp

rishabh-gupta-hashicorp hashibot-web Jonathan Frappier mrgupta7
4 people shipped this
rishabh-gupta-hashicorp @rishabh-gupta-hashicorp 2 cited hashibot-web @hashibot-web 1 cited Jonathan Frappier @jonathanfrappier 1 cited mrgupta7 @mrgupta7 1 cited

A backported fix stops a single misconfigured route from taking down an entire API gateway listener.

Consul's API gateway discovery-chain synthesis now isolates failures per route. In a backport [1], if a single route on a listener fails to compile, synthesis skips and logs that route instead of discarding the entire listener's routing config. Previously, a genuine backend misconfiguration on one route would break every correctly-configured route sharing that listener. The fix is a backport, so it applies to supported release branches.

Security fixes landed across Consul and its tooling for dependencies qs, xmldom, fast-uri, and @babel/runtime. Consul patched qs, xmldom, and fast-uri [2]; ember-cli-api-double patched qs and @babel/runtime [3]. If your build pulls these packages transitively, update to the patched versions to close the vulnerabilities.

Documentation for cluster snapshot retention now removes tier names in favor of "non-development" to stay accurate if cluster tiers are renamed again [4]. The docs repos also ran their standard automated sync between public and private copies [5].

$ ls hashicorp/reviews/ # the step-back reads

the week in review Consul patches js-yaml, nanoid vulnerabilities the month in review Terraform providers widen AWS, Azure, and Google coverage while core clears Graph cruft
Topics: Go Infrastructure Full archive →

Quick answers

What shipped in HashiCorp on September 8, 2026?
A backported fix stops a single misconfigured route from taking down an entire API gateway listener. In total, 9 commits and 5 pull requests landed.
Who contributed to HashiCorp on September 8, 2026?
4 developers shipped this update, including hashibot-web, Jonathan Frappier, mrgupta7, and rishabh-gupta-hashicorp.
What were the notable HashiCorp updates?
fix: backport api-gateway error bulkheading, fix sec vuln for qs, xmldom and fast-uri, and fix sec vuln for qs, @babel/run time.
♥

$ log @hashicorp --recent

Copyright compliance sweep lands across HashiCorp repos 8 shipped HashiCorp: no material update 2 shipped Exec2 reports real RSS, fixes mountinfo permissions 10 shipped Provider SAML Site Auditor support, Consul vulnerability patches 22 shipped

$ log --all # elsewhere on the wire

@openclaw Selective evidence collection and truthful reviewer prompts land in ClawSweeper AI Agents Cline desktop commands unblocked from slow backend startup

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.