The Wire · Showcase
CONSUL PATCHES CRITICAL ALPINE VULNERABILITIES, NOMAD PROVIDER ADDS RESOURCE PRESERVATION
By RepoJournal · Filed · About HashiCorp
Consul is shipping an emergency base image upgrade to patch two known vulnerabilities, while the Nomad Terraform provider gains a critical feature for preserving task resources during job updates.
Consul pulled forward an Alpine base image upgrade to v3.24 to resolve CVE-2026-41989 and ALPINE-CVE-2026-2100 [1], closing a security gap that could affect every deployment running Consul in containers. This is the kind of base image patch that should ship immediately across your infrastructure. Meanwhile, the Nomad Terraform provider is landing preserve_resources support [2], a feature operators have been waiting for: when enabled, it prevents the provider from resetting task CPU and memory allocations during job updates, letting already-running tasks keep their resources intact. This solves a real operational headache for teams managing long-running workloads. The terraform-provider-awscc team bumped the AWS SDK Go modules across the board [3], keeping pace with upstream security and stability patches. Documentation is also in motion across the board: Vault Helm docs are being updated for the v0.34.0 release [4], and TFE pre-upgrade checks now correctly exit 0 on warning-only results instead of failing orchestrated upgrade runs [5].
Action items
- → Upgrade Consul containers to Alpine 3.24 before your next deploy hashicorp/consul [immediate]
- → Review Nomad provider v1.0+ for preserve_resources in job configurations hashicorp/terraform-provider-nomad [plan]
- → Validate TFE pre-upgrade checks in your environment after the exit 0 change hashicorp/web-unified-docs [monitor]
References
- [1] upgrade alpine base image to 3.24 ↗ hashicorp/consul
- [2] resource/nomad_job: add preserve_resources argument ↗ hashicorp/terraform-provider-nomad
- [3] build(deps): bump the aws-sdk-go group with 5 updates ↗ hashicorp/terraform-provider-awscc
- [4] Update Vault Helm documentation for v0.34.0 release ↗ hashicorp/web-unified-docs
- [5] TFE: pre-upgrade check warning-only results exit 0 hashicorp/web-unified-docs
FAQ
- What changed in HashiCorp on July 7, 2026?
- Consul is shipping an emergency base image upgrade to patch two known vulnerabilities, while the Nomad Terraform provider gains a critical feature for preserving task resources during job updates.
- What should HashiCorp teams do about it?
- Upgrade Consul containers to Alpine 3.24 before your next deploy • Review Nomad provider v1.0+ for preserve_resources in job configurations • Validate TFE pre-upgrade checks in your environment after the exit 0 change
- Which HashiCorp repositories shipped on July 7, 2026?
- hashicorp/consul, hashicorp/terraform-provider-nomad, hashicorp/terraform-provider-awscc, hashicorp/web-unified-docs