Who contributed to HashiCorp on July 3, 2026?

4 developers shipped this update, including bharath-k1999, riya-bhatia-26, jonathanfrappier, and tanmay-hc.

What were the notable HashiCorp updates?

config-entry(api-gateway): add ext_authz filter surface (Enterprise only), Adding release hygiene workflows, and Claude VSO cleanup.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

CONSUL ADDS ENTERPRISE EXTERNAL AUTH LAYER, DOCS SHED DEPRECATED HVAULT CODE

By RepoJournal · Filed 06:01 UTC on July 3, 2026 · About HashiCorp

4 people shipped this

jonathanfrappier @jonathanfrappier 2 cited

bharath-k1999 @bharath-k1999 1 cited

riya-bhatia-26 @riya-bhatia-26 1 cited

tanmay-hc @tanmay-hc 1 cited

Consul's API Gateway now supports external authorization enforcement through a new enterprise-only surface, while the docs team systematically removes HashiVault references across the unified platform.

Consul shipped a three-layer config model for external authorization (`ext_authz`) on its API Gateway [1], with the enforcement behavior gated to enterprise customers while the shared CE surface ships in the open codebase. This keeps the feature invisible in community editions but ready for enterprise deployments without additional maintenance burden. The release is backed by fresh hygiene workflows [2] that will catch release engineering issues before they ship, though these checks run non-blocking initially to let teams adjust. On the docs front, HashiVault references are being systematically purged from the Vault Secrets Operator, API references, and supporting materials [ref:5,ref:7], with proper redirect chains already verified and HVS CLI docs moved to the deprecated directory [4]. A separate fix addresses a malformed table in the explorer API reference . Packer's plugin SDK caught up on module dependencies and fixed an unchecked error condition [5], a small but necessary hygiene win.

Action items

→ Review Consul API Gateway ext_authz config for enterprise readiness if using external authorization hashicorp/consul [plan]
→ Update any internal links pointing to HVS documentation to use redirects or deprecated paths hashicorp/web-unified-docs [monitor]
→ Upgrade packer-plugin-sdk to latest if you maintain downstream plugins hashicorp/packer-plugin-sdk [plan]

References

[1] config-entry(api-gateway): add ext_authz filter surface (Enterprise only) ↗ hashicorp/consul
[2] Adding release hygiene workflows ↗ hashicorp/consul
[3] Claude VSO cleanup ↗ hashicorp/web-unified-docs
[4] Move HVS CLI docs and remove references to use cases ↗ hashicorp/web-unified-docs
[5] Updated Go Modules ↗ hashicorp/packer-plugin-sdk

Quick answers

What shipped in HashiCorp on July 3, 2026?: Consul's API Gateway now supports external authorization enforcement through a new enterprise-only surface, while the docs team systematically removes HashiVault references across the unified platform. In total, 11 commits and 6 pull requests landed.
Who contributed to HashiCorp on July 3, 2026?: 4 developers shipped this update, including bharath-k1999, riya-bhatia-26, jonathanfrappier, and tanmay-hc.
What were the notable HashiCorp updates?: config-entry(api-gateway): add ext_authz filter surface (Enterprise only), Adding release hygiene workflows, and Claude VSO cleanup.

BOUNDARY BUMPED TO 1.6.1 AS DEPENDABOT SWEEPS CI/CD

Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.

go 6 shipped 1-min read

@hashicorp 2 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING

Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.

go 2 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 4 days ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.