Who contributed to HashiCorp on June 15, 2026?

2 developers shipped this update, including hariom-hashicorp and shashankNandigama.

What were the notable HashiCorp updates?

docs: Update hcp-sbom provisioner documentation for native SBOM generation and minor improvements in dockerfile.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

PACKER KILLS EXTERNAL SBOM SCANNERS, EMBEDS SYFT NATIVELY

By RepoJournal · Filed 06:01 UTC on June 15, 2026 · About HashiCorp

2 people shipped this

hariom-hashicorp @hariom-hashicorp 1 cited

shashankNandigama @shashankNandigama 1 cited

Packer's hcp-sbom provisioner just ditched the external binary dependency game and baked Syft directly into the build engine.

The docs are now live for what's been shipping under the hood: `scanner_url` and `scanner_checksum` are deprecated [1], replaced by Packer's embedded Syft SDK handling SBOM generation without external downloads. This matters because your provisioner configs need updating before those fields vanish, and the migration path is straightforward [1]. On the infrastructure side, Consul's Dockerfile got a layer consolidation pass [2], a small move but the kind of housekeeping that keeps your image builds lean and reproducible. Nothing critical across either desk, but the Packer change is the one to track if you're shipping SBOMs in production.

Action items

→ Audit hcp-sbom provisioner configs for scanner_url and scanner_checksum fields before next Packer update hashicorp/packer [plan]
→ Review Consul Dockerfile changes if you maintain custom build pipelines hashicorp/consul [monitor]

References

[1] docs: Update hcp-sbom provisioner documentation for native SBOM generation ↗ hashicorp/web-unified-docs
[2] minor improvements in dockerfile ↗ hashicorp/consul

Quick answers

What shipped in HashiCorp on June 15, 2026?: Packer's hcp-sbom provisioner just ditched the external binary dependency game and baked Syft directly into the build engine. In total, 2 commits and 2 pull requests landed.
Who contributed to HashiCorp on June 15, 2026?: 2 developers shipped this update, including hariom-hashicorp and shashankNandigama.
What were the notable HashiCorp updates?: docs: Update hcp-sbom provisioner documentation for native SBOM generation and minor improvements in dockerfile.

BOUNDARY BUMPED TO 1.6.1 AS DEPENDABOT SWEEPS CI/CD

Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.

go 6 shipped 1-min read

@hashicorp 2 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING

Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.

go 2 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 4 days ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.