Who contributed to HashiCorp on July 14, 2026?

8 developers shipped this update, including eshan-tripathi, dependabot, vdinesh4738, jrasell, Anurag Upadhaya, sreallymatt, jackofallops, and aayushsingh2502.

What were the notable HashiCorp updates?

`redisenterprise` - deprecate resources + data sources (#32780), Auto-delete $Default rule in `azurerm_servicebus_subscription` (#32452), and chore:upgrade go/crypto;fix:supress GO-2026-5932.

Jul 14, 2026

$ the-wire · showcase

TERRAFORM AZURE PROVIDER SHIPS BREAKING CHANGES, CRYPTO PATCHES ROLL ACROSS SDK

By RepoJournal · Filed 06:57 UTC on July 14, 2026 · About HashiCorp · Composed from the cited sources · methodology

8 people shipped this

jrasell @jrasell 2 cited

eshan-tripathi @eshan-tripathi 1 cited

dependabot @dependabot 1 cited

vdinesh4738 @vdinesh4738 1 cited

Anurag Upadhaya @anurag-hashicorp 1 cited

sreallymatt @sreallymatt 1 cited

jackofallops @jackofallops

aayushsingh2502 @aayushsingh2502

Terraform's Azure provider is deprecating Redis Enterprise resources and auto-deleting Service Bus defaults, while HashiCorp's core libraries patch Go crypto vulnerabilities across the stack.

In brief

Azure provider deprecating redisenterprise resources & data sources. If you're managing Redis through Terraform on Azure, migration time is here.
Service Bus subscriptions now auto-delete $Default rule. Sounds like a fix, but it changes existing behavior.
Packer Docker plugin upgraded Go crypto libs, patching GO-2026-5932. Small version bump, real security win.
go-checkpoint fixed response unmarshalling for current release checks. Subtle bug, but it means more accurate version detection across HashiCorp tooling.
go-checkpoint modernized CI, added copywrite checks, refreshed Go versions. Infrastructure maintenance often ships silently—this is how it's done.

The Azure provider [1] is deprecating the entire redisenterprise resource family, signaling the end of that API surface. Simultaneously, the provider added a critical feature flag [2] that auto-deletes the $Default Service Bus subscription rule on creation, preventing unfiltered message delivery before custom rules are applied. This is a breaking change in behavior for teams relying on that default rule. On the crypto front, packer-plugin-docker [3] suppressed the GO-2026-5932 vulnerability by upgrading Go's crypto libraries, part of a broader hardening effort across the SDK stack [4]. The go-checkpoint library [5] fixed a critical unmarshalling bug where current_release was decoded from the wrong JSON field, a bug that would have been caught with proper test fixtures. CI modernization is also rolling out [6] across libraries, bumping Go versions from unsupported branches to stable and oldstable tracks.

Action items

→ Audit Azure provider code for redisenterprise resources - deprecation incoming [ref:13] hashicorp/terraform-provider-azurerm [plan]
→ Test Service Bus subscription behavior with new auto_delete_subscription_default_rule flag [ref:12] hashicorp/terraform-provider-azurerm [plan]
→ Upgrade packer-plugin-docker to patch GO-2026-5932 [ref:1] hashicorp/packer-plugin-docker [monitor]
→ Review go-checkpoint integration if using version detection [ref:8] hashicorp/go-checkpoint [monitor]

References

[1] `redisenterprise` - deprecate resources + data sources (#32780) ↗ hashicorp/terraform-provider-azurerm
[2] Auto-delete $Default rule in `azurerm_servicebus_subscription` (#32452) ↗ hashicorp/terraform-provider-azurerm
[3] chore:upgrade go/crypto;fix:supress GO-2026-5932 ↗ hashicorp/packer-plugin-docker
[4] build(deps): bump github.com/hashicorp/packer-plugin-sdk from 0.6.9 to 0.6.10 ↗ hashicorp/packer-plugin-docker
[5] check: Fix check response current release unmarshalling. ↗ hashicorp/go-checkpoint
[6] ci: Modernize CI Go, add copywrite check, and makefile. ↗ hashicorp/go-checkpoint
[7] argocd fix ↗ hashicorp/consul-k8s