Who contributed to HashiCorp on July 18, 2026?

3 developers shipped this update, including github-actions[bot], hc-github-team-nomad-ecosystem, and modular-magician.

What were the notable HashiCorp updates?

cloudrunv2: promote start_execution_token and run_execution_token to GA, Promoting QuotaAdjusterSettings resource to GA, and `container`: set default timeout for `google_container_node_pool` to 2 hours.

@hashicorp

Terraform, Vault, Consul — infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

TERRAFORM GOOGLE PROVIDER SHIPS GA PROMOTIONS FOR CLOUD RUN AND QUOTA MANAGEMENT

By RepoJournal · Filed 06:57 UTC on July 18, 2026 · About HashiCorp

3 people shipped this

modular-magician @modular-magician 3 cited

github-actions[bot] @github-actions[bot] 2 cited

hc-github-team-nomad-ecosystem @hc-github-team-nomad-ecosystem 1 cited

HashiCorp's Terraform Google provider graduated two major Cloud Run features and the QuotaAdjusterSettings resource to GA, signaling stability for production workloads.

In brief

Terraform Google provider: start_execution_token and run_execution_token for Cloud Run are now GA. you can authenticate workload invocations directly from your infra code instead of bolting it on later.
QuotaAdjusterSettings resource hit GA in the Google provider. rate limiting quotas just got a first-class citizen in Terraform. no more manual GCP console tweaks for quota adjustments.
google_container_node_pool now defaults to a 2 hour timeout instead of the old 4. if your GKE node pools have been mysteriously timing out, this might be the reset you needed.

The terraform-provider-google-beta landed three significant promotions overnight. Cloud Run's start_execution_token and run_execution_token fields move to GA [1] after extended beta testing, giving you native token handling for job execution without workarounds. QuotaAdjusterSettings joins GA [2], letting teams manage quota adjustments at production scale. On the infrastructure side, the provider now sets a 2-hour default timeout for google_container_node_pool operations [3], eliminating the silent failures teams have been debugging when cluster provisioning exceeded the old defaults. This is the stability push you've been waiting for if you're running multi-region GCP infrastructure through Terraform. Across the Nomad ecosystem, nightly snapshots hit for Autoscaler [4], Pack [5], and the Podman driver [6], tracking the latest development work if you need to test against unreleased features.

Action items

→ Plan terraform-provider-google-beta upgrade to capture GA promotions in your next release cycle hashicorp/terraform-provider-google-beta [plan]
→ Update any Cloud Run job configurations to use the new GA token fields instead of beta equivalents hashicorp/terraform-provider-google-beta [plan]
→ Verify container_node_pool timeout behavior in dev after upgrade to ensure 2-hour default fits your provisioning patterns hashicorp/terraform-provider-google-beta [monitor]

References

[1] cloudrunv2: promote start_execution_token and run_execution_token to GA ↗ hashicorp/terraform-provider-google-beta
[2] Promoting QuotaAdjusterSettings resource to GA ↗ hashicorp/terraform-provider-google-beta
[3] `container`: set default timeout for `google_container_node_pool` to 2 hours ↗ hashicorp/terraform-provider-google-beta
[4] nightly ↗ hashicorp/nomad-autoscaler
[5] nightly ↗ hashicorp/nomad-pack
[6] nightly ↗ hashicorp/nomad-driver-podman

Quick answers

What shipped in HashiCorp on July 18, 2026?: HashiCorp's Terraform Google provider graduated two major Cloud Run features and the QuotaAdjusterSettings resource to GA, signaling stability for production workloads. In total, 3 commits, 3 pull requests, and 3 releases landed.
Who contributed to HashiCorp on July 18, 2026?: 3 developers shipped this update, including github-actions[bot], hc-github-team-nomad-ecosystem, and modular-magician.
What were the notable HashiCorp updates?: cloudrunv2: promote start_execution_token and run_execution_token to GA, Promoting QuotaAdjusterSettings resource to GA, and `container`: set default timeout for `google_container_node_pool` to 2 hours.

CONSUL PLUGS TOKEN LEAK, AWS PROVIDER EXPANDS AI AND BEDROCK SUPPORT

Consul's debug logs were exposing ACL tokens in plaintext, a critical flaw now patched before it reaches production.

go 29 shipped 1-min read

@hashicorp 2 days ago

CONSUL CLOSES PRs SLOWER, GITHUB ACTIONS ALIGN ACROSS HASHICORP

Consul's stale PR automation just got a lot less aggressive, giving maintainers 90 days before a PR starts gathering dust instead of 60.

go 4 shipped 1-min read

@hashicorp 3 days ago

TERRAFORM AWS PROVIDER GETS SMARTER LIST OPERATIONS, PACKER AZURE FIXES DATA DISK COLLISIONS

The Terraform AWS provider is shedding redundant Read calls from List operations, while Packer Azure solves a long-standing limitation around mixed data disk deployments.

go 80 shipped 1-min read

@hashicorp 4 days ago

TERRAFORM AZURE PROVIDER SHIPS BREAKING CHANGES, CRYPTO PATCHES ROLL ACROSS SDK

Terraform's Azure provider is deprecating Redis Enterprise resources and auto-deleting Service Bus defaults, while HashiCorp's core libraries patch Go crypto vulnerabilities across the stack.

go 34 shipped 1-min read

— or follow the whole beat:

Elsewhere on the wire

@cachyos about 6 hours ago

PACKAGE UPDATES ROLL ACROSS AUR DERIVED AND PROTON CACHYOS

Claude Desktop jumped to 1.22209.0, Zen Browser patched to 1.21.8b, and documentation fixes landed across the stack overnight.

infra 43 shipped 1-min read

Elixir & Phoenix about 6 hours ago

ELIXIR CUTS EXPONENTIAL GROWTH IN BDD INTERSECTIONS, PHOENIX LIVE VIEW SKIPS CLONES ON STABLE LISTS

The compiler just got smarter about preventing exponential blowup in type intersection logic, while Phoenix Live View stops wastefully copying keyed comprehensions that aren't moving.

elixir 16 shipped 1-min read

@dotnet about 6 hours ago

ASPNETCORE TIGHTENS AUTHORIZATION METADATA EVERYWHERE, BLAZOR DEBUGGING EXITS

Authorization policies now work consistently across all routing paths, not just endpoint middleware, while Blazor templates drop their deprecated WebAssembly debugging hook.

dotnet 58 shipped 2-min read

@spring-projects about 6 hours ago

SPRING FRAMEWORK TIGHTENS RESOURCE SECURITY, NEO4J FIXES CONVERSION LOGIC

Spring Framework reinstated critical resource location validation checks that prevent unauthorized static resource resolution in sensitive directories.

java 4 shipped 1-min read