Who contributed to HashiCorp on June 30, 2026?

4 developers shipped this update, including dependabot[bot], suresh-hashicorp, KaushikiAnand, and nitin-sachdev-29.

What were the notable HashiCorp updates?

Bump github.com/gruntwork-io/terratest from 0.56.0 to 1.0.0 in the gomod-breaking group across 1 directory, Bump the gomod-backward-compatible group with 4 updates, and update all actions which were using deprecated node20 to node24.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

VAULT OPERATOR ADOPTS TERRATEST 1.0, CONSUL DUMPS NODE20 RUNTIMES

By RepoJournal · Filed 06:01 UTC on June 30, 2026 · About HashiCorp

4 people shipped this

dependabot[bot] @dependabot[bot] 2 cited

suresh-hashicorp @suresh-hashicorp 1 cited

KaushikiAnand @KaushikiAnand 1 cited

nitin-sachdev-29 @nitin-sachdev-29 1 cited

Vault Secrets Operator moved to Terratest's first stable release while Consul and TFE Helm tightened CI security posture across the org.

Vault Secrets Operator cut over to Terratest 1.0.0 [1], the testing library's first stable release after years of development. Simultaneously, the same repo pulled four backward-compatible updates [2] including new versions of go-openapi/strfmt, gomega, and google.golang.org/api. Over in Consul, the team eliminated tech debt by migrating all GitHub Actions workflows from deprecated Node 20 to Node 24 [3] [4], closing out a compliance window before EOL. TFE Helm followed suit with least-privilege permissions enforcement [5], adding explicit read-only blocks to their CI workflow after the org moved to secure-by-default. Meanwhile, Consul-K8s shipped a critical ACL policy fix [6] that restores mesh gateway cross-partition permissions needed for Sameness Group failover in partitioned deployments. The fix expands test coverage across peering and namespace combinations to catch regressions.

Action items

→ Verify Vault Secrets Operator integration tests pass with Terratest 1.0.0 before next deployment hashicorp/vault-secrets-operator [plan]
→ Audit your fork's CI workflows for deprecated Node 20 runtimes and upgrade to Node 24 hashicorp/consul [plan]
→ Review mesh gateway ACL policies if running Consul-K8s with Admin Partitions and Sameness Groups hashicorp/consul-k8s [monitor]

References

[1] Bump github.com/gruntwork-io/terratest from 0.56.0 to 1.0.0 in the gomod-breaking group across 1 directory ↗ hashicorp/vault-secrets-operator
[2] Bump the gomod-backward-compatible group with 4 updates ↗ hashicorp/vault-secrets-operator
[3] update all actions which were using deprecated node20 to node24 ↗ hashicorp/consul
[4] update all actions which were using deprecated node20 to node24 (#23687) hashicorp/consul
[5] TF-38688 add required gha permission to workflows ↗ hashicorp/terraform-enterprise-helm
[6] fix: update mesh gateway rules for peering and partition handling ↗ hashicorp/consul-k8s

Quick answers

What shipped in HashiCorp on June 30, 2026?: Vault Secrets Operator moved to Terratest's first stable release while Consul and TFE Helm tightened CI security posture across the org. In total, 4 commits and 5 pull requests landed.
Who contributed to HashiCorp on June 30, 2026?: 4 developers shipped this update, including dependabot[bot], suresh-hashicorp, KaushikiAnand, and nitin-sachdev-29.
What were the notable HashiCorp updates?: Bump github.com/gruntwork-io/terratest from 0.56.0 to 1.0.0 in the gomod-breaking group across 1 directory, Bump the gomod-backward-compatible group with 4 updates, and update all actions which were using deprecated node20 to node24.

BOUNDARY BUMPED TO 1.6.1 AS DEPENDABOT SWEEPS CI/CD

Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.

go 6 shipped 1-min read

@hashicorp 2 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING

Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.

go 2 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 4 days ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.