Who contributed to HashiCorp on May 15, 2026?

3 developers shipped this update, including Manishakumari-hc, paras-gupta2, and skj-skj.

What were the notable HashiCorp updates?

Dockerfile:go-discover new sha added, Dockerfile: go-discover sha updated, and Fix TestServiceResource_addIngress test.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

CONSUL STACK PATCHES CRITICAL CONTAINER VULNERABILITIES OVERNIGHT

By RepoJournal · Filed 06:01 UTC on May 15, 2026 · About HashiCorp

3 people shipped this

Manishakumari-hc @Manishakumari-hc 2 cited

paras-gupta2 @paras-gupta2 1 cited

skj-skj @skj-skj 1 cited

Both consul-k8s and consul-dataplane shipped go-discover updates that fix two container CVEs, and you need them before your next production deploy.

HashiCorp's Consul ecosystem moved fast overnight to lock down container vulnerabilities GO-2026-4918 and GHSA-mh2q-q3fh-2475 across the stack [1] [2]. The consul-k8s Dockerfile updated its go-discover dependency [1], and consul-dataplane followed with the same patch [2], meaning your service mesh infrastructure needs both updates to close the gap. Beyond security, consul-k8s fixed a flaky ingress test that was causing false failures in CI [3], eliminating the kind of test brittleness that makes deploys painful. On the Terraform side, the TFE provider shipped support for SAML provider_type attributes [4], letting you specify IdP vendors like Okta or Entra directly in configuration instead of wrestling with generic SAML configs. These are solid, incremental wins across the board, but the container fixes are the ones that demand attention first.

Action items

→ Rebuild and redeploy consul-k8s and consul-dataplane with updated go-discover SHA before next production window hashicorp/consul-k8s [immediate]
→ Review SAML provider_type attribute for TFE and test with your IdP configuration hashicorp/terraform-provider-tfe [plan]
→ Pull latest consul-k8s test fixes to stabilize your local CI runs hashicorp/consul-k8s [monitor]

References

[1] Dockerfile:go-discover new sha added ↗ hashicorp/consul-k8s
[2] Dockerfile: go-discover sha updated ↗ hashicorp/consul-dataplane
[3] Fix TestServiceResource_addIngress test ↗ hashicorp/consul-k8s
[4] Adds `provider_type` attribute to specify the saml idp provider type ↗ hashicorp/terraform-provider-tfe

Quick answers

What shipped in HashiCorp on May 15, 2026?: Both consul-k8s and consul-dataplane shipped go-discover updates that fix two container CVEs, and you need them before your next production deploy. In total, 4 commits and 4 pull requests landed.
Who contributed to HashiCorp on May 15, 2026?: 3 developers shipped this update, including Manishakumari-hc, paras-gupta2, and skj-skj.
What were the notable HashiCorp updates?: Dockerfile:go-discover new sha added, Dockerfile: go-discover sha updated, and Fix TestServiceResource_addIngress test.

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 1 day ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

@hashicorp 2 days ago

CONSUL FIXES FLOODED MEMBER REJOIN BUG AS VSO PATCHES GRPC FRAME FLOOD

Consul patches a critical WAN flood regression that was incorrectly treating failed members as alive during rejoin sequences.

go 8 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM AWS PROVIDER GAINS S3 TABLES AND OPENSEARCH FEDERATION SUPPORT

The AWS provider shipped three enhancement PRs overnight that expand infrastructure-as-code coverage for S3 Tables metadata properties and OpenSearch security configurations, while the docs team cleaned up deprecated tutorial collections and fixed formatting bugs across Vault and PKI documentation.

go 60 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.