Who contributed to HashiCorp on June 1, 2026?

3 developers shipped this update, including taru-garg-2000, suresh-hashicorp, and dependabot[bot].

What were the notable HashiCorp updates?

version: prepare v1.1.8-dev, Merge pull request #155 from taru-garg-hashicorp/prepare-1.1.8, and add overrides for vulnerable packages.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

PACKER PLUGIN VAGRANT MOVES TO 1.1.8, CONSUL PATCHES VULNERABLE DEPENDENCIES

By RepoJournal · Filed 06:01 UTC on June 1, 2026 · About HashiCorp

3 people shipped this

dependabot[bot] @dependabot[bot] 2 cited

taru-garg-2000 @taru-garg-2000 1 cited

suresh-hashicorp @suresh-hashicorp 1 cited

Packer plugin Vagrant is stepping into v1.1.8 while Consul hardens its dependency chain against known vulnerabilities.

The Packer plugin Vagrant team prepared v1.1.8 [1][2], completing the version bump and copyright header compliance work needed for the release. Over in Consul, engineers merged overrides for vulnerable packages [3][4], tightening the security posture of the orchestrator's dependency graph. On the Vagrant side, routine maintenance continues with updates to ruby/setup-ruby [5] adding support for Ruby 4.0.5 in CI pipelines, while lock-threads bumped to 6.0.2 [6] to keep GitHub Actions automation current. Nomad driver Podman continues nightly snapshot releases [7] for early testing. Nothing critical lands today, but the Consul dependency hardening deserves attention if you're running recent versions.

Action items

→ Review Consul's vulnerable package overrides in your current deployment hashicorp/consul [plan]
→ Monitor Packer plugin Vagrant v1.1.8 release when it ships hashicorp/packer-plugin-vagrant [monitor]
→ Test Nomad driver Podman nightly against your workloads for early feedback hashicorp/nomad-driver-podman [monitor]

References

[1] version: prepare v1.1.8-dev ↗ hashicorp/packer-plugin-vagrant
[2] Merge pull request #155 from taru-garg-hashicorp/prepare-1.1.8 hashicorp/packer-plugin-vagrant
[3] add overrides for vulnerable packages ↗ hashicorp/consul
[4] add overrides for vulnerable packages (#23610) hashicorp/consul
[5] Bump ruby/setup-ruby from 1.299.0 to 1.310.0 ↗ hashicorp/vagrant
[6] Bump dessant/lock-threads from 5.0.1 to 6.0.2 ↗ hashicorp/vagrant
[7] nightly ↗ hashicorp/nomad-driver-podman

Quick answers

What shipped in HashiCorp on June 1, 2026?: Packer plugin Vagrant is stepping into v1.1.8 while Consul hardens its dependency chain against known vulnerabilities. In total, 3 commits, 5 pull requests, and 1 releases landed.
Who contributed to HashiCorp on June 1, 2026?: 3 developers shipped this update, including taru-garg-2000, suresh-hashicorp, and dependabot[bot].
What were the notable HashiCorp updates?: version: prepare v1.1.8-dev, Merge pull request #155 from taru-garg-hashicorp/prepare-1.1.8, and add overrides for vulnerable packages.

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 1 day ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

@hashicorp 2 days ago

CONSUL FIXES FLOODED MEMBER REJOIN BUG AS VSO PATCHES GRPC FRAME FLOOD

Consul patches a critical WAN flood regression that was incorrectly treating failed members as alive during rejoin sequences.

go 8 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM AWS PROVIDER GAINS S3 TABLES AND OPENSEARCH FEDERATION SUPPORT

The AWS provider shipped three enhancement PRs overnight that expand infrastructure-as-code coverage for S3 Tables metadata properties and OpenSearch security configurations, while the docs team cleaned up deprecated tutorial collections and fixed formatting bugs across Vault and PKI documentation.

go 60 shipped 1-min read

Elsewhere on the wire

AI Agents about 9 hours ago

CLAUDE OPUS 5 LANDS ACROSS THE STACK

The newest Anthropic model is now live in langchain, Cline, and llama-index, with native support for extended reasoning and 1M context windows.

ai-agents 28 shipped 1-min read

Local LLMs about 9 hours ago

OLLAMA LANDS LAGUNA SUPPORT AND CRUSHES MEMORY LEAKS WHILE SGLANG HITS V0.5.16 WITH CONFIDENCE-DRIVEN SPECULATIVE DECODING

Ollama shipped three critical performance and reliability fixes for Metal residency and concurrent access patterns, while SGL-Lang released 0.5.16 with a new speculative algorithm hitting 383.7 tok/s on DeepSeek-V4.