The Wire · Showcase
Nomad strips multierror for stdlib, nvidia plugin jumps to Go 1.27
By RepoJournal · Filed · About HashiCorp
HashiCorp's Nomad stack is shedding legacy dependencies and patching known vulnerabilities, with the nvidia device plugin forced up to Go 1.27.
Nomad's API package dropped its multierror dependency in favor of stdlib errors, a clean modernization move that simplifies the codebase [1]. The same effort continues in the client package, which is being modernized across its sub-pkgs [2]. More urgent: the nvidia device plugin jumped to Go 1.27.0 because "the application was using an old version which had known vulnerbilities," a change that also dragged golangci-lint along [3]. That plugin also picks up a gRPC bump to 1.82.1, which includes a server-side fix for HTTP/2 frame flooding [4]. Meanwhile, Terraform provider for AWS quietly fixed a failing performance CI script and added a shellcheck target to keep shell scripts honest [5][6]. Setup-copywrite gets routine dependency bumps including esbuild to 0.28.2, which fixes a tree shaking bug with TypeScript import aliases [7]. The multierror and Go version moves are the ones with real teeth; the rest is housekeeping.
One email a day. Unsubscribe in one click.
Keep up with HashiCorp in about 3 minutes a day: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
One email a day. Unsubscribe in one click. Read a past issue →
Action items
- → Upgrade nomad-device-nvidia to Go 1.27.0 and rebuild before your next release hashicorp/nomad-device-nvidia [immediate]
- → Review the gRPC bump to 1.82.1 for the HTTP/2 flood protection hashicorp/nomad-device-nvidia [plan]
- → Monitor the Nomad API multierror removal for any breaking API changes hashicorp/nomad [monitor]
References
- [1] api: Remove multierror dep for stdlib errors. (#28442) hashicorp/nomad
- [2] client: Modernize the client package and sub-pkgs. ↗ hashicorp/nomad
- [3] build: Update Go to 1.27.0. (#112) hashicorp/nomad-device-nvidia
- [4] build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 ↗ hashicorp/nomad-device-nvidia
- [5] CI: Performance script is failing silently ↗ hashicorp/terraform-provider-aws
- [6] Adds `shellcheck` make target and GHA ↗ hashicorp/terraform-provider-aws
- [7] Bump the build-and-test group with 2 updates ↗ hashicorp/setup-copywrite