$ the-wire · showcase
Consul-dataplane moves to x/net v0.60.0 for HTTP/2 fixes
By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology
The day's real work is in consul-dataplane: an HTTP/2 security bump to golang.org/x/net v0.60.0 and Go 1.26.9, plus a DNS resolution fix, alongside the first Terraform support for Vault Enterprise SCIM clients.
security: upgrade x/net to v0.60.0 and Go to 1.26.9 hashicorp/consul-dataplane
The release notes say the update picks up "releases that fix several HTTP/2 issues present in both golang.org/x/net/http2 and the standard library net/http package," moving the toolchain from 1.26.7 to 1.26.9 and x/net from v0.59.0 to v0.60.0 in the root and integration-test modules.
Vault 46627/SCIM support hashicorp/terraform-provider-vault
Adds a vault_scim_client resource so Terraform can manage Vault Enterprise SCIM clients, which shipped in beta with no Terraform support. Acceptance tests ran against a local Vault Enterprise 2.2.0-beta dev server; docs, a sidebar entry, and a changelog entry come with it.
bug fix hashicorp/consul-dataplane
DNS resolution defaults change: the cluster tap is removed and the downstream service's namespace, partition, and dc become the default for lookups, with Consul queried when the egress listener response is not successful. The service suffix also drops out of FQDN expansion to match Consul's own logic.
vault_oauth_resource_server_config_profile: Add missing unique_id_claim and actor_claim parameters hashicorp/terraform-provider-vault
vault_oauth_resource_server_config_profile gains the unique_id_claim and actor_claim parameters the /sys/config/oauth-resource-server API supports but the original implementation omitted, bringing the resource in line with the API for the 2.2.0 release.
ui: Update handlebars to 4.7.10. hashicorp/nomad
Nomad's UI moves to handlebars 4.7.10, closing out the linked SECVULN advisories. The rest of the wire is dependency bumps: the gomod-backward-compatible group in terraform-provider-vault advances aws-sdk-go-v2 to 1.47.3 and config to 1.33.9.
Action items
- → Upgrade consul-dataplane to the build with golang.org/x/net v0.60.0 and Go 1.26.9 hashicorp/consul-dataplane [plan]
