RepoJournal
HashiCorp @hashicorp
126 wires and counting

$ follow HashiCorp

Keep up with HashiCorp in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-06-30
stories 9
GitHub RSS Archive Reviews Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

VAULT OPERATOR ADOPTS TERRATEST 1.0, CONSUL DUMPS NODE20 RUNTIMES

By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology

dependabot[bot] suresh-hashicorp KaushikiAnand nitin-sachdev-29
4 people shipped this
dependabot[bot] @dependabot[bot] 2 cited suresh-hashicorp @suresh-hashicorp 1 cited KaushikiAnand @KaushikiAnand 1 cited nitin-sachdev-29 @nitin-sachdev-29 1 cited

Vault Secrets Operator moved to Terratest's first stable release while Consul and TFE Helm tightened CI security posture across the org.

Vault Secrets Operator cut over to Terratest 1.0.0 [1], the testing library's first stable release after years of development. Simultaneously, the same repo pulled four backward-compatible updates [2] including new versions of go-openapi/strfmt, gomega, and google.golang.org/api. Over in Consul, the team eliminated tech debt by migrating all GitHub Actions workflows from deprecated Node 20 to Node 24 [3] [4], closing out a compliance window before EOL. TFE Helm followed suit with least-privilege permissions enforcement [5], adding explicit read-only blocks to their CI workflow after the org moved to secure-by-default. Meanwhile, Consul-K8s shipped a critical ACL policy fix [6] that restores mesh gateway cross-partition permissions needed for Sameness Group failover in partitioned deployments. The fix expands test coverage across peering and namespace combinations to catch regressions.

Action items

References

  1. [1] Bump github.com/gruntwork-io/terratest from 0.56.0 to 1.0.0 in the gomod-breaking group across 1 directory ↗ hashicorp/vault-secrets-operator
  2. [2] Bump the gomod-backward-compatible group with 4 updates ↗ hashicorp/vault-secrets-operator
  3. [3] update all actions which were using deprecated node20 to node24 ↗ hashicorp/consul
  4. [4] update all actions which were using deprecated node20 to node24 (#23687) ↗ hashicorp/consul
  5. [5] TF-38688 add required gha permission to workflows ↗ hashicorp/terraform-enterprise-helm
  6. [6] fix: update mesh gateway rules for peering and partition handling ↗ hashicorp/consul-k8s

$ ls hashicorp/reviews/ # the step-back reads

the week in review Consul enables post-quantum key exchange by default the month in review Terraform providers widen AWS, Azure, and Google coverage while core clears Graph cruft
Topics: Go Infrastructure Full archive → Weekly reviews →

Quick answers

What shipped in HashiCorp on June 30, 2026?
Vault Secrets Operator moved to Terratest's first stable release while Consul and TFE Helm tightened CI security posture across the org. In total, 4 commits and 5 pull requests landed.
Who contributed to HashiCorp on June 30, 2026?
4 developers shipped this update, including dependabot[bot], suresh-hashicorp, KaushikiAnand, and nitin-sachdev-29.
What were the notable HashiCorp updates?
Bump github.com/gruntwork-io/terratest from 0.56.0 to 1.0.0 in the gomod-breaking group across 1 directory, Bump the gomod-backward-compatible group with 4 updates, and update all actions which were using deprecated node20 to node24.
♥

$ log @hashicorp --recent

HashiCorp: no material update 2 shipped Terraform policy 0.3 docs land, Nomad 2.0.7 docs publish 23 shipped Alicloud plugin clears Dependabot backlog, Packer patches M5 crash 14 shipped Consul turns on post-quantum key exchange by default 50 shipped

$ log --all # elsewhere on the wire

@openclaw Cold-start Gateway diagnostics stop crying wolf, doctor repairs plugin drift Agentic Coding Cline desktop bundles shrink, goose unblocks its own clicks

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.