$ cat hashicorp/week/2026-10-12.log
the week in review · Oct 12 – Oct 18, 2026
Terraform policy library reaches 1.0 with 546 policies
By RepoJournal · composed from the cited sources · human-reviewed weekly · methodology
The general availability cut adds 151 policies, and consul-dataplane moved to x/net v0.60.0 to close HTTP/2 issues.
v1.0.0 hashicorp/prewritten-terraform-policy-library
The first general availability release of the prewritten library adds 151 policies across AWS Foundational Security Best Practices, CIS and other standards, for 546 total. Anything you pin against pre-1.0 policy paths should be re-checked before the upgrade, since this is flagged breaking.
security: upgrade x/net to v0.60.0 and Go to 1.26.9 hashicorp/consul-dataplane
Moves golang.org/x/net from v0.59.0 to v0.60.0 and the Go toolchain to 1.26.9 in the root and integration-test modules, targeting HTTP/2 issues in both x/net/http2 and the standard library net/http. If you build consul-dataplane, the toolchain bump is the part that touches your build image.
New Resource: aws_devopsagent_agent_space hashicorp/terraform-provider-aws
Adds a Terraform resource for DevOps Agent agent spaces in the AWS provider, alongside the merge that landed the same feature. It first became usable for providers that track the AWS provider's new resources as they appear.
feat(gcp): add 29 CIS GCP v5.0.0 policies (#76) hashicorp/prewritten-terraform-policy-library
29 policies for CIS GCP Foundations Benchmark v5.0.0 land across IAM, Compute, Storage, Cloud SQL, BigQuery and Dataproc, including Cloud SQL TLS, authorized-network and database-flag checks. These were part of the run-up to the 1.0.0 release.
feat(azure): add ten IAM and monitoring policies with tests and docs (#65) hashicorp/prewritten-terraform-policy-library
Ten Azure IAM and monitoring policies arrive with tests and docs; review feedback dropped the security defaults policy because it depended on an unapproved provider. Azure coverage still trails AWS in the library.
vault_oauth_resource_server_config_profile: Add missing unique_id_claim and actor_claim parameters hashicorp/terraform-provider-vault
The oauth resource server config profile resource gains unique_id_claim and actor_claim, two parameters the /sys/config/oauth-resource-server API supports but the original implementation omitted. They ship for the 2.2.0 release.
Vault 46627/SCIM support hashicorp/terraform-provider-vault
A vault_scim_client resource so Terraform can manage Vault Enterprise SCIM clients, with docs, a sidebar entry and a changelog entry. Planned for providers tracking Vault Enterprise identity features.
ui: Update handlebars to 4.7.10. hashicorp/nomad
Nomad's UI moved handlebars to 4.7.10 under three security tickets. Alongside: consul-k8s corrected its allowed PII values in IPC to mask, block and off, and the design system fixed FormField flag-layout DOM order and CodeBlock sr-only line markers for accessibility.
$ ls hashicorp/week/ # the briefings behind this review
Keep up with HashiCorp in about 3 minutes: what actually shipped — the commits, pull requests, releases, and security advisories that matter.
fair warning: these emails are deeply technical. diffs, version numbers, CVEs, benchmark deltas. if that's not your idea of a good read, this isn't your newsletter.
Folds into your digest — weekly by default, monthly if you prefer. Unsubscribe in one click.