Who contributed to HashiCorp on July 7, 2026?

4 developers shipped this update, including shashankNandigama, vishnuedavarath, dependabot[bot], and vijayavelsekar.

What were the notable HashiCorp updates?

upgrade alpine base image to 3.24, resource/nomad_job: add preserve_resources argument, and build(deps): bump the aws-sdk-go group with 5 updates.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

CONSUL PATCHES CRITICAL ALPINE VULNERABILITIES, NOMAD PROVIDER ADDS RESOURCE PRESERVATION

By RepoJournal · Filed 06:02 UTC on July 7, 2026 · About HashiCorp

4 people shipped this

shashankNandigama @shashankNandigama 1 cited

vishnuedavarath @vishnuedavarath 1 cited

dependabot[bot] @dependabot[bot] 1 cited

vijayavelsekar @vijayavelsekar 1 cited

Consul is shipping an emergency base image upgrade to patch two known vulnerabilities, while the Nomad Terraform provider gains a critical feature for preserving task resources during job updates.

Consul pulled forward an Alpine base image upgrade to v3.24 to resolve CVE-2026-41989 and ALPINE-CVE-2026-2100 [1], closing a security gap that could affect every deployment running Consul in containers. This is the kind of base image patch that should ship immediately across your infrastructure. Meanwhile, the Nomad Terraform provider is landing preserve_resources support [2], a feature operators have been waiting for: when enabled, it prevents the provider from resetting task CPU and memory allocations during job updates, letting already-running tasks keep their resources intact. This solves a real operational headache for teams managing long-running workloads. The terraform-provider-awscc team bumped the AWS SDK Go modules across the board [3], keeping pace with upstream security and stability patches. Documentation is also in motion across the board: Vault Helm docs are being updated for the v0.34.0 release [4], and TFE pre-upgrade checks now correctly exit 0 on warning-only results instead of failing orchestrated upgrade runs [5].

Action items

→ Upgrade Consul containers to Alpine 3.24 before your next deploy hashicorp/consul [immediate]
→ Review Nomad provider v1.0+ for preserve_resources in job configurations hashicorp/terraform-provider-nomad [plan]
→ Validate TFE pre-upgrade checks in your environment after the exit 0 change hashicorp/web-unified-docs [monitor]

References

[1] upgrade alpine base image to 3.24 ↗ hashicorp/consul
[2] resource/nomad_job: add preserve_resources argument ↗ hashicorp/terraform-provider-nomad
[3] build(deps): bump the aws-sdk-go group with 5 updates ↗ hashicorp/terraform-provider-awscc
[4] Update Vault Helm documentation for v0.34.0 release ↗ hashicorp/web-unified-docs
[5] TFE: pre-upgrade check warning-only results exit 0 hashicorp/web-unified-docs

Quick answers

What shipped in HashiCorp on July 7, 2026?: Consul is shipping an emergency base image upgrade to patch two known vulnerabilities, while the Nomad Terraform provider gains a critical feature for preserving task resources during job updates. In total, 19 commits and 8 pull requests landed.
Who contributed to HashiCorp on July 7, 2026?: 4 developers shipped this update, including shashankNandigama, vishnuedavarath, dependabot[bot], and vijayavelsekar.
What were the notable HashiCorp updates?: upgrade alpine base image to 3.24, resource/nomad_job: add preserve_resources argument, and build(deps): bump the aws-sdk-go group with 5 updates.

BOUNDARY BUMPED TO 1.6.1 AS DEPENDABOT SWEEPS CI/CD

Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.

go 6 shipped 1-min read

@hashicorp 2 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING

Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.

go 2 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

@hashicorp 4 days ago

VAULT LDAP GETS ON-DEMAND PASSWORD ROTATION, PACKER CUTS v1.16.0

Terraform provider for Vault now supports rotate-on-read for LDAP secrets, letting teams rotate credentials at read time instead of waiting for scheduled intervals.

go 8 shipped 1-min read

Elsewhere on the wire

AI Agents about 21 hours ago

CLINE SHIPS FIVE CRITICAL AGENT FIXES AFTER END-TO-END TESTING BLITZ

Saoudrizwan just landed a cascade of fixes that prevent the agent loop from running wild, stop file reads from resolving to the wrong directory, and plug the compaction pipeline.

ai-agents 16 shipped 2-min read

Local LLMs about 21 hours ago

LLAMA.CPP SHIPS MINIMAX-M3 SPARSE ATTENTION, VLLM UNLOCKS HETEROGENEOUS PREFILL-DECODE

The inference stack gets a new model architecture and a fundamental shift in how prefill and decode can run on different hardware configurations.

+10

llms 125 shipped 1-min read

@CachyOS about 21 hours ago

GLIBC 2.43 REBUILD SHIPS, INSTALLER JUMPS TO C++26

CachyOS pushed glibc 2.43 through the pipeline while the CLI installer upgraded its C++ standard to C++26, signaling a major refresh across core infrastructure.

infra 97 shipped 1-min read

Elixir & Phoenix about 21 hours ago

ECTO FIXES SUBQUERY PLANNING IN JOINS, ELIXIR PATCHES IEX PARSING

Ecto's query planner now handles subqueries correctly in interpolated join filters, while Elixir fixes a syntax error that broke 'not in' as a continuation operator in IEx.