Who contributed to HashiCorp on July 14, 2026?

8 developers shipped this update, including eshan-tripathi, dependabot, vdinesh4738, jrasell, Anurag Upadhaya, sreallymatt, jackofallops, and aayushsingh2502.

What were the notable HashiCorp updates?

`redisenterprise` - deprecate resources + data sources (#32780), Auto-delete $Default rule in `azurerm_servicebus_subscription` (#32452), and chore:upgrade go/crypto;fix:supress GO-2026-5932.

@hashicorp

Terraform, Vault, Consul — infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

TERRAFORM AZURE PROVIDER SHIPS BREAKING CHANGES, CRYPTO PATCHES ROLL ACROSS SDK

By RepoJournal · Filed 06:57 UTC on July 14, 2026 · About HashiCorp

8 people shipped this

jrasell @jrasell 2 cited

eshan-tripathi @eshan-tripathi 1 cited

dependabot @dependabot 1 cited

vdinesh4738 @vdinesh4738 1 cited

Anurag Upadhaya @anurag-hashicorp 1 cited

sreallymatt @sreallymatt 1 cited

jackofallops @jackofallops

aayushsingh2502 @aayushsingh2502

Terraform's Azure provider is deprecating Redis Enterprise resources and auto-deleting Service Bus defaults, while HashiCorp's core libraries patch Go crypto vulnerabilities across the stack.

The Azure provider [1] is deprecating the entire redisenterprise resource family, signaling the end of that API surface. Simultaneously, the provider added a critical feature flag [2] that auto-deletes the $Default Service Bus subscription rule on creation, preventing unfiltered message delivery before custom rules are applied. This is a breaking change in behavior for teams relying on that default rule. On the crypto front, packer-plugin-docker [3] suppressed the GO-2026-5932 vulnerability by upgrading Go's crypto libraries, part of a broader hardening effort across the SDK stack [4]. The go-checkpoint library [5] fixed a critical unmarshalling bug where current_release was decoded from the wrong JSON field, a bug that would have been caught with proper test fixtures. CI modernization is also rolling out [6] across libraries, bumping Go versions from unsupported branches to stable and oldstable tracks.

Action items

→ Audit Azure provider code for redisenterprise resources - deprecation incoming [ref:13] hashicorp/terraform-provider-azurerm [plan]
→ Test Service Bus subscription behavior with new auto_delete_subscription_default_rule flag [ref:12] hashicorp/terraform-provider-azurerm [plan]
→ Upgrade packer-plugin-docker to patch GO-2026-5932 [ref:1] hashicorp/packer-plugin-docker [monitor]
→ Review go-checkpoint integration if using version detection [ref:8] hashicorp/go-checkpoint [monitor]

References

[1] `redisenterprise` - deprecate resources + data sources (#32780) hashicorp/terraform-provider-azurerm
[2] Auto-delete $Default rule in `azurerm_servicebus_subscription` (#32452) hashicorp/terraform-provider-azurerm
[3] chore:upgrade go/crypto;fix:supress GO-2026-5932 ↗ hashicorp/packer-plugin-docker
[4] build(deps): bump github.com/hashicorp/packer-plugin-sdk from 0.6.9 to 0.6.10 ↗ hashicorp/packer-plugin-docker
[5] check: Fix check response current release unmarshalling. ↗ hashicorp/go-checkpoint
[6] ci: Modernize CI Go, add copywrite check, and makefile. ↗ hashicorp/go-checkpoint
[7] argocd fix ↗ hashicorp/consul-k8s

Quick answers

What shipped in HashiCorp on July 14, 2026?: Terraform's Azure provider is deprecating Redis Enterprise resources and auto-deleting Service Bus defaults, while HashiCorp's core libraries patch Go crypto vulnerabilities across the stack. In total, 17 commits and 17 pull requests landed.
Who contributed to HashiCorp on July 14, 2026?: 8 developers shipped this update, including eshan-tripathi, dependabot, vdinesh4738, jrasell, Anurag Upadhaya, sreallymatt, jackofallops, and aayushsingh2502.
What were the notable HashiCorp updates?: `redisenterprise` - deprecate resources + data sources (#32780), Auto-delete $Default rule in `azurerm_servicebus_subscription` (#32452), and chore:upgrade go/crypto;fix:supress GO-2026-5932.

GOLANG DEPENDENCIES TIGHTENED ACROSS HASHICORP STACK

Three core HashiCorp projects pulled in upstream Go library updates overnight, including a critical semaphore fix that could prevent panics in concurrent workloads.

go 3 shipped 1-min read

@hashicorp 2 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY TESTING CHANNELS ACROSS THREE CORE PROJECTS

HashiCorp is pushing development snapshots live across Nomad's driver, autoscaling, and packaging layers, giving operators early access to unreleased features before they ship.

go 3 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM PROVIDERS IN HEAVY CHURN - AZURE FIXES PALOALTO REGRESSION, GOOGLE ADDS VM EXTENSION POLICY

Terraform-provider-azurerm shipped a critical regression fix for Palo Alto while simultaneously shipping five other PRs that reshape Azure and Google Cloud resource coverage.

go 33 shipped 1-min read

@hashicorp 4 days ago

HASHICORP PATCHES MARKDOWN DOS, SHIPS API GATEWAY AUTH CONTROLS

Consul-K8s locked down a remote denial-of-service vulnerability in Markdown while simultaneously shipping external authorization support to the API Gateway.

go 25 shipped 2-min read

— or follow the whole beat:

Elsewhere on the wire

@cachyos about 4 hours ago

CACHYOS LINUX 7.2-RC3 SHIPS WITH HARDWARE FIXES AND EXPANDED LANGUAGE SUPPORT

CachyOS Linux 7.2-rc3-1 is live with Razer Blade speaker fixes and v4l2loopback updates, while the package installer now speaks Turkish and Azerbaijani.

infra 63 shipped 1-min read

Elixir & Phoenix about 4 hours ago

PHOENIX LIVE VIEW PATCHES SCHEME VALIDATION BYPASS

Phoenix LiveView 1.2.7 ships an emergency security fix for a scheme validation bypass that could let attackers inject malicious URLs into your application.

elixir 6 shipped 1-min read

@dotnet about 4 hours ago

RUNTIME FIXES DECIMAL AND BIGINTEGER ROUNDING BUGS THAT LOST PRECISION

Three critical numeric conversion bugs that silently corrupted precision in decimal, BigInteger, and floating-point math are now fixed across the stack.

dotnet 122 shipped 1-min read

@spring-projects about 4 hours ago

SPRING BOOT PLUGS FILE HANDLE LEAK IN IMAGE BUILDPACK

Spring Boot's image buildpack was leaking file handles and orphaning temp files when resolving missing builder images, but a fix just landed to clean up both the streams and the intermediate artifacts.

java 16 shipped 1-min read