Who contributed to HashiCorp on August 11, 2026?

5 developers shipped this update, including binilvrgs, williamdalessandro, robin-norwood, cloud-changelog-write-service, and eb4x.

What were the notable HashiCorp updates?

Feature/binilvrgs/upgrade helm 3 21 3, hcl2template: pass user variable values to plugins as packer_user_variables, and Hvd docs migration.

@hashicorp

Terraform, Vault, Consul - infra-as-code for ops teams

github ↗

Pick a date

Topics: Go Infrastructure Full archive →

The Wire · Showcase

CONSUL-K8S PATCHES GRPC VULNERABILITY, PACKER FIXES HCL2 PLUGIN VARIABLE PASSING

By RepoJournal · Filed 06:57 UTC on August 11, 2026 · About HashiCorp

5 people shipped this

binilvrgs @binilvrgs 1 cited

williamdalessandro @williamdalessandro 1 cited

robin-norwood @robin-norwood 1 cited

cloud-changelog-write-service @cloud-changelog-write-service 1 cited

eb4x @eb4x 1 cited

Consul-K8s shipped critical dependency updates overnight addressing a gRPC vulnerability, while Packer fixed a template interpolation bug that broke HCL2 builds with user variables.

Consul-K8s upgraded Helm to v3.21.3 and patched two security vulnerabilities in transitive dependencies [1]. The most urgent: gRPC bumped from v1.80.0 to v1.82.1 to address GHSA-hrxh-6v49-42gf, plus oras-go updated to close GO-2026-5880 [1]. On the Packer side, HCL2 builds were silently failing when plugins tried to interpolate user variables with the `{{ user "name" }}` template function [2]. The fix passes `packer_user_variables` through to builder, provisioner, and post-processor plugins, matching the behavior of legacy JSON builds [2]. Docs got two updates: HVD (HashiCorp Validated Designs) migrated into the unified docs repository [3], and Terraform policy plugin build instructions clarified to ensure plugins compile for the correct OS and architecture [4]. A routine HCP Terraform changelog automation added 2 entries overnight [5].

Action items

→ Upgrade consul-k8s to pick up gRPC and oras-go security patches hashicorp/consul-k8s [immediate]
→ Test Packer HCL2 builds using user variable interpolation before next release hashicorp/packer [plan]
→ Review updated Terraform policy plugin build docs for your build pipeline hashicorp/web-unified-docs [monitor]

References

[1] Feature/binilvrgs/upgrade helm 3 21 3 ↗ hashicorp/consul-k8s
[2] hcl2template: pass user variable values to plugins as packer_user_variables ↗ hashicorp/packer
[3] Hvd docs migration ↗ hashicorp/web-unified-docs
[4] Terraform policy: build plugins for correct OS/arch ↗ hashicorp/web-unified-docs
[5] Update HCP Terraform changelog: 2026-08-06 ↗ hashicorp/web-unified-docs

Quick answers

What shipped in HashiCorp on August 11, 2026?: Consul-K8s shipped critical dependency updates overnight addressing a gRPC vulnerability, while Packer fixed a template interpolation bug that broke HCL2 builds with user variables. In total, 6 commits and 5 pull requests landed.
Who contributed to HashiCorp on August 11, 2026?: 5 developers shipped this update, including binilvrgs, williamdalessandro, robin-norwood, cloud-changelog-write-service, and eb4x.
What were the notable HashiCorp updates?: Feature/binilvrgs/upgrade helm 3 21 3, hcl2template: pass user variable values to plugins as packer_user_variables, and Hvd docs migration.

VAULT PROVIDER UNLOCKS LDAP AUTO-MANAGEMENT FOR ENTERPRISE

HashiCorp shipped auto_unlock support for LDAP static roles across Terraform Vault provider and docs, gating the feature behind Vault Enterprise 2.1+.

go 32 shipped

@hashicorp Aug 10

TERRAFORM AZURE PROVIDER CUTS DEPENDENCY BLOAT

The Azure provider just shed unused dependencies, tightening its supply chain ahead of the next release cycle.

go 2 shipped

@hashicorp Aug 9

TERRAFORM AZURE PROVIDER CLEARS 5.0 DEPRECATION GATES

Terraform's Azure provider is ripping out feature flag gates across postgres and storage resources, a sign the 5.0 migration is hitting its stride.

go 9 shipped

@hashicorp Aug 8

AZURE PROVIDER TIGHTENS TEST DISCIPLINE, LINT RULES EXPAND 39 TO 70

Terraform's Azure provider is shipping stricter acceptance test guards and a major linting overhaul that caught two real bugs in the codebase.

go 41 shipped

Elsewhere on the wire

AI Agents Aug 12

LANGCHAIN SHIPS THREE CRITICAL RELEASES IN 12 HOURS, CLOSES SETUPTOOLS VULNERABILITY

LangChain pushed langchain-core 1.5.4, langchain 1.3.15, and langchain-anthropic 1.5.5 overnight while patching a setuptools supply-chain risk that gated the Hugging Face integration.

ai-agents 59 shipped

Local LLMs Aug 12

OLLAMA CUTS REPEAT PENALTY BLOAT, LLAMA.CPP SHIPS POCKET-TTS SUPPORT

Ollama kills a decade of default penalty cruft that was drowning every model, while llama.cpp gains multimodal audio chops and vLLM fixes ROCm speculative decoding corruption.