$ the-wire · showcase
consul-esm bumps Consul to v2.0.4 for three CVEs
By RepoJournal · Filed · About HashiCorp · Composed from the cited sources · methodology
consul-esm pulled in Consul v2.0.4 to clear three CVEs, the Boundary provider landed app token support, and Vault 2.2.0's new agent registry mount now has a documented breaking-change writeup.
Bump hashicorp/consul to v2.0.4 (a3eb721c21d4) to fix CVE-2026-87090,… hashicorp/consul-esm
The dependency bump moves consul-esm onto hashicorp/consul v2.0.4 (a3eb721c21d4) to clear CVE-2026-87090, CVE-2026-88021, and CVE-2026-15972. Anyone building consul-esm from source picks up the patched Consul with this change.
feat(AppTokens): Implement app token support hashicorp/terraform-provider-boundary
terraform-provider-boundary gains app token support, with TTL and TTS validation, a label field on app token permissions, and dependencies moved to reference boundary-sdk. The tests run against a real Boundary instance with a suffixed org name and a named test app token.
Document breaking change for agent registry mount (#3818) hashicorp/web-unified-docs
The docs now carry a section on the new per-namespace agent registry mount in Vault 2.2.0+, covering its effect on upgrade times and the cleanup required before downgrading. That is the one thing on the stack today with a concrete migration consequence.
Update security scan workflow hashicorp/consul-k8s
The consul-k8s security scanner workflow now fails the build when any CVE is detected, honours suppressed vulnerabilities via the security-scan.hcl config, and lists CVEs in a readable format. Expect the pipeline to go red on findings it previously passed through.
[TF-41848] Document provider setup for queries created in the UI hashicorp/web-unified-docs
Elsewhere in the docs, the build query UI is documented as generating its own configuration that runs without a VCS connection, uploaded config, or user-authored provider and list blocks, and the lingering HCP Vault Secrets files are finally gone from the HCPTF product directory.
Action items
- → Upgrade consul-esm to the release containing hashicorp/consul v2.0.4 (a3eb721c21d4) to pick up fixes for CVE-2026-870... hashicorp/consul-esm [immediate]
- → Read the Vault 2.2.0+ agent registry mount docs before upgrading, and plan the cleanup before any downgrade hashicorp/web-unified-docs [plan]
