RepoJournal
HashiCorp

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

One email a day. Unsubscribe in one click.

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

HASHICORP TIGHTENS DEPENDENCY CHAIN ACROSS PACKER AND TERRAFORM

By RepoJournal · Filed · About HashiCorp

The xz compression library got patched across Packer's VirtualBox and QEMU plugins overnight, while Terraform's AWS provider shipped startup error logging and Nomad docs went live.

Both packer-plugin-virtualbox and packer-plugin-qemu upgraded the ulikunitz xz library to v0.5.15 [1][2], closing a known vulnerability surface that sits deep in the compression stack. This is the kind of quiet infrastructure hardening that matters most: small version bumps in widely-used transitive dependencies that most engineers won't notice until they need to. On the docs side, Nomad 2.0.3 release notes are now published [3] with functionality updates and broken link fixes already baked in. Consul Enterprise also moved to IBM's Support Cycle-2 model starting April 2026 [4], requiring a split between LTS and Enterprise support documentation to reduce future friction. The Terraform AWS Cloud Control provider merged startup error logging [5], adding observability for initialization failures through file writes and new makefile targets [6]. Web unified docs also has a routine sync PR queued [7] that requires careful merging to preserve continuity between public and private repos.

One email a day. Unsubscribe in one click.

Action items

References

  1. [1] update github.com/ulikunitz/xz to v0.5.15 ↗ hashicorp/packer-plugin-virtualbox
  2. [2] upgraded ulikunitz ↗ hashicorp/packer-plugin-qemu
  3. [3] [PUBLISH] nomad/2.0.3 ↗ hashicorp/web-unified-docs
  4. [4] Add Enterprise support page (#2575) hashicorp/web-unified-docs
  5. [5] Merge pull request #3185 from hashicorp/f-log_startup_errors hashicorp/terraform-provider-awscc
  6. [6] add makefile target to check startup errors hashicorp/terraform-provider-awscc
  7. [7] Repo sync ↗ hashicorp/web-unified-docs

Quick answers

What shipped in HashiCorp on June 10, 2026?
The xz compression library got patched across Packer's VirtualBox and QEMU plugins overnight, while Terraform's AWS provider shipped startup error logging and Nomad docs went live. In total, 22 commits and 8 pull requests landed.
Who contributed to HashiCorp on June 10, 2026?
3 developers shipped this update, including sanyaraj2424, github-actions[bot], and hashibot-web.
What were the notable HashiCorp updates?
update github.com/ulikunitz/xz to v0.5.15, upgraded ulikunitz, and [PUBLISH] nomad/2.0.3.

More from @hashicorp

Daily updates, in your inbox

Follow HashiCorp

Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

One email a day. Unsubscribe in one click. Read a past issue →

Elsewhere on the wire

Want every project, not just this one?