RepoJournal
HashiCorp @hashicorp

HashiCorp — full archive

176 daily briefings · 14 reviews.

$ ls hashicorp/reviews/ # the step-back reads

  1. week Consul provider patches two Go CVEs, adds 2.23.0 upgrade gate
  2. week CVE-2026-5006 mitigation documented; Consul scanner turns failing
  3. week Consul closes cross-namespace ACL binding hole
  4. week Terraform policy library reaches 1.0 with 546 policies
  5. week Consul and consul-ecs patch CVEs across the week
  6. month Consul patches four CVEs as Go bumps sweep repos
  7. week Terraform Kubernetes provider 3.3.0 rejects null namespace labels
  8. week Vault Secrets Operator 1.6.0 removes HVS support
  9. week Consul enables post-quantum key exchange by default
  10. week Consul patches six security flaws
  11. month Consul 2.1 rc1 ships post-quantum key exchange by default
  12. week Consul patches js-yaml, nanoid vulnerabilities
  13. week Azurerm burns linter violations, Nomad command overhaul leads quiet week
  14. month Terraform providers widen AWS, Azure, and Google coverage while core clears Graph cruft
  1. A copyright sweep is the whole day
  2. HashiCorp: no material update
  3. Application Design Center lands, workload identity pools grow two fields
  4. Consul CI breaks on jq 1.8 as Ubuntu 26.04 runners arrive
  5. Kubernetes provider moves RBAC resources to the Plugin Framework
  6. consul-ecs drops QEMU from its arm image builds
  7. HashiCorp: no material update
  8. Consul provider patches two Go CVEs and adds a 2.23.0 upgrade gate
  9. HashiCorp: no material update
  10. Router updates stop eating peer MD5 keys, and Cloud SQL blue/green ordering gets fixed
  11. CVE-2026-5006 mitigation lands in the docs changelog
  12. consul-esm bumps Consul to v2.0.4 for three CVEs
  13. Design system fixes icon and CodeEditor test flakiness
  14. Consul security scans fail on any CVE, vagrant-registry-export ships v0.1.0
  15. Packer's Amazon plugin learns to survive an SSM reboot
  16. HashiCorp: no material update
  17. Terraform policy for Stacks goes GA, GKE clusters go 0-node
  18. Snowflake and MongoDB Atlas plugins patch Go CVEs
  19. Packer SDK redaction made deterministic, Go 1.26.10 lands across Consul repos
  20. Consul serializes ACL-vetted catalog writes; Vault Secrets Operator preps v1.6.2
  21. Consul tightens ACL binding, reverts Envoy max to 1.39.1
  22. x/net bumps in mdns, a doc correction in the AWS provider
  23. HashiCorp: no material update
  24. BigQuery reservation scheduling_policy lands, org security policy tests trimmed to fit quota
  25. Policy library hits 1.0 with 546 policies
  26. 29 CIS GCP v5.0.0 policies land, Azure phase two follows
  27. Consul-dataplane moves to x/net v0.60.0 for HTTP/2 fixes
  28. consul-k8s corrects the allowed PII value set
  29. Terraform AWS provider adds a DevOps Agent resource as dependency bumps roll through Nomad
  30. Envoy concurrency override for Consul API Gateway pods
  31. Azurerm docs sweep, security policy request_body goes GA, HDS 7.0 version switcher
  32. TFE provider 0.82.0 lands registry artifact tags as Consul seals its UI
  33. Consul patches four CVEs, consul-k8s fixes a silently broken ACL role update
  34. consul-ecs patches Go and x/crypto CVEs, nomad unblocks task startup
  35. Consul k8s keeps gateways up through Vault Agent restarts
  36. Nomad's release image moves to busybox 1.38.0
  37. HashiCorp: no material update
  38. HashiCorp: no material update
  39. Vault confines plugin binaries to plugin_directory, Terraform Kubernetes provider tightens namespace labels
  40. Kubernetes gateways get Vault credential injection, morgan gets its escape fix
  41. consul-k8s patches CVEs, actions-go-build bumps x/crypto
  42. Azurerm lands a storage container list resource and a MySQL diff fix
  43. consul-template builds on aix, consul-dataplane drops iptables from tests
  44. HashiCorp: no material update
  45. Google beta provider fixes a perpetual diff, opens four backup resources to list
  46. Consul gates localized DNS behind a feature flag, metadata action learns multi-product repos
  47. Consul moves to nftables, Vault Secrets Operator 1.6.0 drops HVS
  48. Consul-k8s adopts pre-configured k8s auth methods, GCP CIS policies land
  49. Consul dataplane drops a mutex on DNS backoff, packer-plugin-alicloud ships v1.2.0
  50. HashiCorp: no material update
  51. HashiCorp: no material update
  52. Terraform policy 0.3 docs land, Nomad 2.0.7 docs publish
  53. Alicloud plugin clears Dependabot backlog, Packer patches M5 crash
  54. Consul turns on post-quantum key exchange by default
  55. Three Vault secrets plugins cut release changelogs
  56. Boundary Helm charts add OpenShift support, provider maintenance continues
  57. HashiCorp: no material update
  58. HashiCorp: no material update
  59. go-tfe 2.11.0 ships stack notifications, clearing TagSelectorMatchingLogic
  60. Vault auth plugins ship security dependency updates

Never miss a HashiCorp briefing.

Get HashiCorp's week in review every Monday - and security advisories the day they land. Free, unsubscribe in one click.

One click. Every Monday: what mattered across the projects you've been reading (or our AI picks) — security news same-day. You refine anytime. Choose specific journals · Read a sample issue →