Who contributed to HashiCorp on July 6, 2026?

1 developer shipped this update, including dependabot[bot].

What were the notable HashiCorp updates?

[chore] : Bump golang.org/x/net from 0.51.0 to 0.55.0 in the go-security group across 1 directory.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

GO-PLUGIN PULLS CRITICAL NET SECURITY UPDATES

By RepoJournal · Filed 06:01 UTC on July 6, 2026 · About HashiCorp

1 person shipped this

dependabot[bot] @dependabot[bot] 1 cited

golang.org/x/net jumped four minor versions in go-plugin's security group, patching network stack vulnerabilities that could affect any HashiCorp plugin built on this foundation.

HashiCorp's go-plugin bumped golang.org/x/net from 0.51.0 to 0.55.0 [1], a jump that spans multiple security fixes in Go's core networking library. The update lands across the entire go-security dependency group, meaning any service depending on go-plugin automatically inherits these patches. This isn't a routine chore PR - the four-version gap suggests material security work landed in the upstream net library between releases. If you're running go-plugin in production, this upgrade tightens your attack surface against network-level exploits.

Action items

→ Review and merge go-plugin PR 393 to pull golang.org/x/net 0.55.0 into your builds hashicorp/go-plugin [plan]

References

[1] [chore] : Bump golang.org/x/net from 0.51.0 to 0.55.0 in the go-security group across 1 directory ↗ hashicorp/go-plugin

Quick answers

What shipped in HashiCorp on July 6, 2026?: golang.org/x/net jumped four minor versions in go-plugin's security group, patching network stack vulnerabilities that could affect any HashiCorp plugin built on this foundation. In total, 1 pull requests landed.
Who contributed to HashiCorp on July 6, 2026?: 1 developer shipped this update, including dependabot[bot].
What were the notable HashiCorp updates?: [chore] : Bump golang.org/x/net from 0.51.0 to 0.55.0 in the go-security group across 1 directory.

BOUNDARY BUMPED TO 1.6.1 AS DEPENDABOT SWEEPS CI/CD

Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.

go 6 shipped 1-min read

@hashicorp 2 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING

Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.

go 2 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 4 days ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.