RepoJournal
HashiCorp @hashicorp
113 wires and counting

$ follow HashiCorp

Keep up with HashiCorp in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.

or

fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.

Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.

$ status

wire 2026-09-05
stories 10
GitHub RSS Archive Topics

© 2026 RepoJournal Home Showcase Explore How it works Privacy

$ the-wire · showcase

Exec2 reports real RSS, fixes mountinfo permissions

By RepoJournal · Filed · About HashiCorp

ritesh-harihar tanushreegorai zamoore
3 people shipped this
ritesh-harihar @ritesh-harihar 2 cited tanushreegorai @tanushreegorai 1 cited zamoore @zamoore 1 cited

The exec2 driver now reports actual RSS memory usage and fixes a sandboxing bug that silently blocked reads of /proc/self/mountinfo for approved workloads.

Nomad exec2 tasks finally report RSS in memory stats [1]. The driver read cgroup v2 `memory.stat` but only extracted the file field (page cache) and never the anon field, the cgroups v2 equivalent of RSS, so RSS was always zero and the Nomad UI/API showed no Memory Stats section for exec2 tasks. It now extracts the anon value and reports real RSS.

The same contributor fixed a permission bug where workloads under exec2 received `Permission denied` reading `/proc/self/mountinfo` even when the path was listed in the task's unveil config [2]. No Landlock violations appeared in the audit log; the access was blocked from within the sandboxing layer itself. The fix merges that path into the allowed set, unblocking applications like Cassandra and DSE on RHEL 9 and Ubuntu.

The TFE provider adds the Site Auditor SCIM group mapping and migrates `tfe_scim_settings` to go-tfe/v2 [3]. The resource and data source now run on the v2 client, and new `site_auditor_group_scim_id` and `site_auditor_group_display_name` attributes mirror the existing `site_admin_group_*` pattern, so operators can link a SCIM group to the Site Auditor role released in Terraform Enterprise 2.1.0.

Helios Design System is adding two MCP tools to expose its documentation to AI assistants [4]. `search_docs` provides full-text search (BM25 ranked) across the bundled docs, and a second read tool retrieves content, letting AI clients answer questions against the HDS website directly.

$ ls hashicorp/reviews/ # the step-back reads

the week in review Consul patches js-yaml, nanoid vulnerabilities the month in review Terraform providers widen AWS, Azure, and Google coverage while core clears Graph cruft
Topics: Go Infrastructure Full archive →

Quick answers

What shipped in HashiCorp on September 5, 2026?
The exec2 driver now reports actual RSS memory usage and fixes a sandboxing bug that silently blocked reads of /proc/self/mountinfo for approved workloads. In total, 4 commits, 4 pull requests, and 2 releases landed.
Who contributed to HashiCorp on September 5, 2026?
3 developers shipped this update, including tanushreegorai, ritesh-harihar, and zamoore.
What were the notable HashiCorp updates?
extract RSS value from cgroup data, fix: permission denied error for /proc/self/mountinfo, and Add Site Auditor SCIM group mapping and migrate tfe_scim_settings to go-tfe/v2.
♥

$ log @hashicorp --recent

Copyright compliance sweep lands across HashiCorp repos 8 shipped HashiCorp: no material update 2 shipped Provider SAML Site Auditor support, Consul vulnerability patches 22 shipped Consul fixes front-end security vulnerabilities and provider adds S3 Object Lock support 55 shipped

$ log --all # elsewhere on the wire

Meta React Native adds Stable API guards to renderer attributed string FastAPI & Pydantic Pydantic fixes Mypy plugin crash, tightens datetime constraints

$ ls showcases/

Rails Django Laravel Node.js Go Vercel Vue.js Kubernetes Arch Linux Linux Anthropic OpenAI

$ init your-desk

RepoJournal can write one of these for any repo you care about. Sign in with GitHub, pick your repos and sources, and your desk gets a wire like this one every morning.