RepoJournal
HashiCorp

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

HASHICORP COMPLIANCE SWEEP ACROSS ALL REPOS — COPYRIGHT HEADERS STANDARDIZED

By RepoJournal · Filed · About HashiCorp

Every major HashiCorp provider repository is undergoing a coordinated compliance audit to align with IBM licensing standards, and the headers are rolling in now.

The terraform-provider-tfe [1], terraform-provider-boundary [3], and boundary-plugin-gcp [7] are all receiving auto-generated copyright header updates as part of a systematic internal review. This isn't a functional change — it's hygiene work, but it signals a broader licensing alignment initiative across the product portfolio. In parallel, the TFE provider is shipping a real fix: the tfe_team_access resource now correctly transitions from admin access to custom permission blocks [2], resolving a state management bug that would have forced manual interventions. The Boundary provider also picked up a critical security bump to go-ntlmssp, patching CVE-2026-32952 [4] that could cause slice overflows on malicious NTLM challenges. The Vault CSI provider is moving faster on dependencies — gRPC upgraded to 1.81.0 [5] along with Kubernetes apimachinery and client-go updates, while the base image gets refreshed [6]. Watch for the compliance PRs to merge quickly; they're low-risk but broad.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] [COMPLIANCE] Add/Update Copyright Headers ↗ hashicorp/terraform-provider-tfe
  2. [2] Update Access from Admin to Custom ↗ hashicorp/terraform-provider-tfe
  3. [3] [COMPLIANCE] Add/Update Copyright Headers ↗ hashicorp/terraform-provider-boundary
  4. [4] build(deps): bump github.com/Azure/go-ntlmssp from 0.0.0-20221128193559-754e69321358 to 0.1.1 in the go-security group across 1 directory ↗ hashicorp/terraform-provider-boundary
  5. [5] Bump the gomod-backward-compatible group across 1 directory with 5 updates ↗ hashicorp/vault-csi-provider
  6. [6] Bump ubi10/ubi-minimal from 10.1-1778058333 to 10.1-1778461919 ↗ hashicorp/vault-csi-provider
  7. [7] [COMPLIANCE] Add/Update Copyright Headers ↗ hashicorp/boundary-plugin-gcp

Quick answers

What shipped in HashiCorp on May 12, 2026?
Every major HashiCorp provider repository is undergoing a coordinated compliance audit to align with IBM licensing standards, and the headers are rolling in now. In total, 8 commits and 12 pull requests landed.
Who contributed to HashiCorp on May 12, 2026?
3 developers shipped this update, including hashicorp-copywrite[bot], sana-faraz, and dependabot[bot].
What were the notable HashiCorp updates?
[COMPLIANCE] Add/Update Copyright Headers, Update Access from Admin to Custom, and [COMPLIANCE] Add/Update Copyright Headers.

More from @hashicorp

Daily updates, in your inbox

Follow HashiCorp

Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?