Who contributed to HashiCorp on July 28, 2026?

7 developers shipped this update, including Matt Schouten, Robert Main, Ken Keller, Mark DeCrane, allisonlarson, rishabh-gupta-hashicorp, and LordAbhishek.

What were the notable HashiCorp updates?

Remove team-docs-packer-and-terraform from codeowners (#2944), Populate Vercel with Instana environment vars from HCP Terraform (#2924), and secrets_hook: don't set hook response to done to allow re-fetch (#28237).

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

HASHICORP TIGHTENS DOCS INFRASTRUCTURE AND PLUGS SECURITY GAPS ACROSS NOMAD, CONSUL

By RepoJournal · Filed 06:57 UTC on July 28, 2026 · About HashiCorp

7 people shipped this

Matt Schouten @mattschouten 1 cited

Robert Main @rmainwork 1 cited

allisonlarson @allisonlarson 1 cited

rishabh-gupta-hashicorp @rishabh-gupta-hashicorp 1 cited

LordAbhishek @LordAbhishek 1 cited

Ken Keller @mister-ken

Mark DeCrane @Maed223

Documentation infrastructure gets a major refresh with Terraform-automated environment management, while Nomad and Consul push fixes for secrets handling and supply chain vulnerabilities.

The unified docs repo is locking down its deployment pipeline. Robert Main automated Vercel environment variable population from HCP Terraform [2], splitting sensitive and non-sensitive vars to prevent Terraform from over-marking outputs. This removes manual config drift and makes the docs deployment surface more auditable. Separately, Matt Schouten stripped deprecated team ownership from the codeowners file [1], cleaning up orphaned access rules. Over in Nomad, Allison Larson fixed a critical secrets hook behavior where allocations were marking secrets as fetched on first run, preventing re-fetch after client recovery or reboot [3]. The change mirrors existing vault and identity hook patterns to ensure secrets always refresh during prestart. Consul is closing out part 11 of a security vulnerability fix addressing postcss and brace-expansion surface [4]. Consul-k8s documentation got updated API Gateway scaling references to align with public docs format [5]. Across all desks, 16 commits and 10 PRs landed in the last 24 hours.

Action items

→ Review and merge the Vercel/Instana Terraform automation [ref:2] - this is the foundation for environment management hashicorp/web-unified-docs [plan]
→ Deploy the Nomad secrets hook fix [ref:7] before next release - allocations depend on re-fetch behavior after recovery hashicorp/nomad [immediate]
→ Verify Consul's security fix part 11 [ref:9] is included in your next supply chain scan hashicorp/consul [monitor]

References

[1] Remove team-docs-packer-and-terraform from codeowners (#2944) hashicorp/web-unified-docs
[2] Populate Vercel with Instana environment vars from HCP Terraform (#2924) hashicorp/web-unified-docs
[3] secrets_hook: don't set hook response to done to allow re-fetch (#28237) hashicorp/nomad
[4] fix sec vuln part 11 (#23762) hashicorp/consul
[5] helm docs: update api gw scaling reference url (#5517) hashicorp/consul-k8s

Quick answers

What shipped in HashiCorp on July 28, 2026?: Documentation infrastructure gets a major refresh with Terraform-automated environment management, while Nomad and Consul push fixes for secrets handling and supply chain vulnerabilities. In total, 16 commits and 10 pull requests landed.
Who contributed to HashiCorp on July 28, 2026?: 7 developers shipped this update, including Matt Schouten, Robert Main, Ken Keller, Mark DeCrane, allisonlarson, rishabh-gupta-hashicorp, and LordAbhishek.
What were the notable HashiCorp updates?: Remove team-docs-packer-and-terraform from codeowners (#2944), Populate Vercel with Instana environment vars from HCP Terraform (#2924), and secrets_hook: don't set hook response to done to allow re-fetch (#28237).

CONSUL UI DITCHES YADDA FOR NATIVE QUNIT, AWS PROVIDER TIGHTENS BEDROCK AND ADDS LOG TIERING

Consul's test suite just got a rewrite engine that lets both old and new tests run together while the UI team methodically converts acceptance tests feature-by-feature.

go 65 shipped 1-min read

@hashicorp 2 days ago

BOUNDARY BUMPED TO 1.6.1 AS DEPENDABOT SWEEPS CI/CD

Terraform Provider Boundary ships version 1.6.1 with project alias and RDP recording updates while dependabot rolls out actions/checkout 7.0.1 across the stack.

go 6 shipped 1-min read

@hashicorp 3 days ago

NOMAD ECOSYSTEM OPENS NIGHTLY BUILDS FOR EARLY TESTING

Both the Podman driver and Autoscaler shipped nightly snapshots overnight, signaling active development cycles and giving operators a chance to validate upcoming changes before stable release.

go 2 shipped 1-min read

@hashicorp 4 days ago

TERRAFORM PROVIDERS EXPAND GOOGLE CLOUD COVERAGE AND IN-PLACE UPDATES

HashiCorp shipped in-place VCS connection updates for registry modules while Google provider gains traffic config for Vertex AI and promotes NCC gateway resources to GA.

go 19 shipped 1-min read

Elsewhere on the wire

AI Agents about 3 hours ago

LANGCHAIN CORES SHIP, ANTHROPIC THINKING BLOCKS FIXED, OPENHANDS TIGHTENS WEBSOCKET AUTH

LangChain released two core packages with critical fixes for streaming stability and environment variable handling, while OpenHands closed a security gap that left WebSocket connections unprotected.

ai-agents 119 shipped 1-min read

Local LLMs about 3 hours ago

OLLAMA RIPS OUT IMAGE GENERATION, LLAMA.CPP SHIPS SPECULATIVE DECODING

Ollama removed its entire MLX image generation pipeline overnight, while llama.cpp landed DSpark speculative decoding and fixed a critical SYCL memory bug affecting Arc GPUs.

+11

llms 239 shipped 2-min read

@CachyOS about 3 hours ago

KERNEL SCHEDULER UPDATES ACROSS BORE AND SCX TOOLING

CachyOS shipped BORE 6.8.0 patches across two kernel series while upgrading its sched-ext ecosystem in parallel, signaling major tuning work ahead.

infra 83 shipped 1-min read

Elixir & Phoenix about 3 hours ago

ELIXIR TIGHTENS ERROR HANDLING ACROSS DATE, ECTO, AND IEXHELPERS

Date.range now surfaces ArgumentError instead of Protocol.UndefinedError when passed invalid step values, catching a class of bugs that silently fail in production code.