$ the-wire · showcase
Packer SDK redaction made deterministic, Go 1.26.10 lands across Consul repos
By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology
10 people shipped this
Brian Shumate
@brianshumate
1 cited
mattschouten
@mattschouten
1 cited
Surabhi-1605
@Surabhi-1605
1 cited
apoorva-01
@apoorva-01
1 cited
binilvrgs
@binilvrgs
1 cited
ritik-hashi
@ritik-hashi
Jonathan Frappier
@jonathanfrappier
Heramba Limaye
@HerambLimaye
Tanmay Jain
@tanmay-hc
Manoj Srinivasamurthy
@ksmanoj
A secret-redaction bug in packer-plugin-sdk that leaked the tail of long secrets into logs is fixed, and the Go 1.26.10 upgrade for GO-2026-6809 has propagated from consul-dataplane into consul-k8s.
Sort secrets longest-first when redacting hashicorp/packer-plugin-sdk
Redaction iterated a map, so replacement order was random; when one sensitive value was a substring of another, the short one could win and leave the rest of the longer secret in the log. Secrets are now sorted longest-first, and the author reports the FilterString and Write tests fail on the old code. The follow-up makes it race-free as well: the snapshot is built under the lock in Set and the...
security: upgrade Go to 1.26.10 to address GO-2026-6809 (#1353) hashicorp/consul-dataplane
consul-dataplane moved to Go 1.26.10 specifically to address GO-2026-6809, with a changelog fragment added alongside. A duplicate fragment for the same bump was later dropped, so 1353 carries the entry.
Feature/binilvrgs/upgrade go version hashicorp/consul-k8s
consul-k8s follows the same toolchain move, taking Go to 1.26.10 and bumping consul/envoyextensions to v0.11.1 and consul/troubleshoot to v0.10.1, with a changelog entry included. No tests or review notes are recorded in the PR body yet.
Vault: Temporarily remove PKCE refs (#3762) hashicorp/web-unified-docs
PKCE references are stripped from the Vault JWT/OIDC/Azure AD docs until the feature is live, so the published docs no longer describe flow options the product does not yet ship. Expect the references to return when the feature lands.
Make README more contributor quick-start focused. Dev info to DEVELOPMENT hashicorp/web-unified-docs
web-unified-docs split the old README into DEVELOPMENT.md (a straight rename) and a new contributor-facing README linking CONTRIBUTING and DEVELOPMENT with a quick start, structure overview, style guide, and preview instructions. Also in the long tail: a fix for broken HVD changelog links and an unreleased minor-version upgrade page gated on approval.
