RepoJournal
HashiCorp @hashicorp
176 wires and counting

$ follow HashiCorp

Keep up with HashiCorp in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-08-11
stories 11
GitHub RSS Archive Reviews

© 2026 RepoJournal Home Showcase How it works Privacy

$ the-wire · showcase

CONSUL-K8S PATCHES GRPC VULNERABILITY, PACKER FIXES HCL2 PLUGIN VARIABLE PASSING

By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology

binilvrgs williamdalessandro robin-norwood cloud-changelog-write-service eb4x
5 people shipped this
binilvrgs @binilvrgs 1 cited williamdalessandro @williamdalessandro 1 cited robin-norwood @robin-norwood 1 cited cloud-changelog-write-service @cloud-changelog-write-service 1 cited eb4x @eb4x 1 cited

Consul-K8s shipped critical dependency updates overnight addressing a gRPC vulnerability, while Packer fixed a template interpolation bug that broke HCL2 builds with user variables.

Consul-K8s upgraded Helm to v3.21.3 and patched two security vulnerabilities in transitive dependencies [1]. The most urgent: gRPC bumped from v1.80.0 to v1.82.1 to address GHSA-hrxh-6v49-42gf, plus oras-go updated to close GO-2026-5880 [1]. On the Packer side, HCL2 builds were silently failing when plugins tried to interpolate user variables with the `{{ user "name" }}` template function [2]. The fix passes `packer_user_variables` through to builder, provisioner, and post-processor plugins, matching the behavior of legacy JSON builds [2]. Docs got two updates: HVD (HashiCorp Validated Designs) migrated into the unified docs repository [3], and Terraform policy plugin build instructions clarified to ensure plugins compile for the correct OS and architecture [4]. A routine HCP Terraform changelog automation added 2 entries overnight [5].

$ ls hashicorp/reviews/ # the step-back reads

the week in review Consul provider patches two Go CVEs, adds 2.23.0 upgrade gate the month in review Consul patches four CVEs as Go bumps sweep repos
Full archive → Weekly reviews →

Quick answers

What shipped in HashiCorp on August 11, 2026?
Consul-K8s shipped critical dependency updates overnight addressing a gRPC vulnerability, while Packer fixed a template interpolation bug that broke HCL2 builds with user variables. In total, 6 commits and 5 pull requests landed.
Who contributed to HashiCorp on August 11, 2026?
5 developers shipped this update, including binilvrgs, williamdalessandro, robin-norwood, cloud-changelog-write-service, and eb4x.
What were the notable HashiCorp updates?
Feature/binilvrgs/upgrade helm 3 21 3, hcl2template: pass user variable values to plugins as packer_user_variables, and Hvd docs migration.
♥

$ log @hashicorp --recent

A copyright sweep is the whole day 2 shipped HashiCorp: no material update 2 shipped Application Design Center lands, workload identity pools grow two fields 46 shipped Consul CI breaks on jq 1.8 as Ubuntu 26.04 runners arrive 31 shipped

$ log --all # elsewhere on the wire

Agent Security Quiet day in agent security as guard coverage reaches four clients Alignment & Post-training verl defaults Ascend RL mode, open-instruct unblocks SFT packing

$ ls showcases/

Safety Evals AI Red Teaming Agent Security Interpretability Alignment & Post-training

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.