RepoJournal
HashiCorp @hashicorp
176 wires and counting

$ follow HashiCorp

Keep up with HashiCorp in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-07-07
stories 27
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

CONSUL PATCHES CRITICAL ALPINE VULNERABILITIES, NOMAD PROVIDER ADDS RESOURCE PRESERVATION

By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology

shashankNandigama vishnuedavarath dependabot[bot] vijayavelsekar
4 people shipped this
shashankNandigama @shashankNandigama 1 cited vishnuedavarath @vishnuedavarath 1 cited dependabot[bot] @dependabot[bot] 1 cited vijayavelsekar @vijayavelsekar 1 cited

Consul is shipping an emergency base image upgrade to patch two known vulnerabilities, while the Nomad Terraform provider gains a critical feature for preserving task resources during job updates.

Consul pulled forward an Alpine base image upgrade to v3.24 to resolve CVE-2026-41989 and ALPINE-CVE-2026-2100 [1], closing a security gap that could affect every deployment running Consul in containers. This is the kind of base image patch that should ship immediately across your infrastructure. Meanwhile, the Nomad Terraform provider is landing preserve_resources support [2], a feature operators have been waiting for: when enabled, it prevents the provider from resetting task CPU and memory allocations during job updates, letting already-running tasks keep their resources intact. This solves a real operational headache for teams managing long-running workloads. The terraform-provider-awscc team bumped the AWS SDK Go modules across the board [3], keeping pace with upstream security and stability patches. Documentation is also in motion across the board: Vault Helm docs are being updated for the v0.34.0 release [4], and TFE pre-upgrade checks now correctly exit 0 on warning-only results instead of failing orchestrated upgrade runs [5].

Action items

References

  1. [1] upgrade alpine base image to 3.24 ↗ hashicorp/consul
  2. [2] resource/nomad_job: add preserve_resources argument ↗ hashicorp/terraform-provider-nomad
  3. [3] build(deps): bump the aws-sdk-go group with 5 updates ↗ hashicorp/terraform-provider-awscc
  4. [4] Update Vault Helm documentation for v0.34.0 release ↗ hashicorp/web-unified-docs
  5. [5] TFE: pre-upgrade check warning-only results exit 0 hashicorp/web-unified-docs ↗

$ ls hashicorp/reviews/ # the step-back reads

the week in review Consul provider patches two Go CVEs, adds 2.23.0 upgrade gate the month in review Consul patches four CVEs as Go bumps sweep repos
Full archive → Weekly reviews →

Quick answers

What shipped in HashiCorp on July 7, 2026?
Consul is shipping an emergency base image upgrade to patch two known vulnerabilities, while the Nomad Terraform provider gains a critical feature for preserving task resources during job updates. In total, 19 commits and 8 pull requests landed.
Who contributed to HashiCorp on July 7, 2026?
4 developers shipped this update, including shashankNandigama, vishnuedavarath, dependabot[bot], and vijayavelsekar.
What were the notable HashiCorp updates?
upgrade alpine base image to 3.24, resource/nomad_job: add preserve_resources argument, and build(deps): bump the aws-sdk-go group with 5 updates.
♥

$ log @hashicorp --recent

A copyright sweep is the whole day 2 shipped HashiCorp: no material update 2 shipped Application Design Center lands, workload identity pools grow two fields 46 shipped Consul CI breaks on jq 1.8 as Ubuntu 26.04 runners arrive 31 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.