HashiCorp Consul v2.1.0: Nftables Migration, Stricter ACLs, and Security Patches
Consul v2.1.0 replaces iptables with nftables for transparent proxy, tightens Enterprise API/ACL checks, and patches several CVEs. Upgrade notes inside.
42 articles
Consul v2.1.0 replaces iptables with nftables for transparent proxy, tightens Enterprise API/ACL checks, and patches several CVEs. Upgrade notes inside.
Nomad v2.0.7 brings wildcard namespace workload identity for native services, federation replication fixes, and more bug fixes.
TFLint v0.65.0 ships a Go 1.26.10 security bump, deterministic file iteration, unique JUnit testcase names, and drops the auto install script.
Terraform 1.17.0 brings Policy GA, -minimal-refresh planning, variables/locals in provider requirements, and key bug fixes. Upgrade notes inside.
Terraform Kubernetes provider v3.4.0 moves kubernetes_role_v1 to Plugin Framework, rejects name+generate_name, fixes CVEs. Upgrade notes inside.
Terragrunt v1.2.1 patches a Go CVE, speeds up discovery and shared config parsing, and dedupes run_cmd calls. Upgrade notes inside.
Vault v2.2.0 brings container cap_ipc_lock changes, PostgreSQL auth breaking change, PKI ACME tightening, and major ACL bypass security fixes.
Terraform Helm provider v3.3.0 bumps Helm to 3.20.2, updates k8s.io deps, and triggers a one-time manifest diff for experiments.manifest users.
Terraform Kubernetes provider v3.3.0 adds stricter kubernetes_namespace_v1 validation, bug fixes, and SDKv2-to-Framework migrations. Upgrade notes inside.
Trivy v0.76.0 is out. Release notes are thin on specifics; here's how to upgrade safely and verify Terraform misconfiguration scanning still works.
Terraform AWS provider v6.69.0 adds list resources, CloudWatch alarm evaluation windows, RDS publicly_accessible, and OpenSearch delete-timeout/bug fixes.
AzureRM provider v5.9.0 adds list resources for App Service, EventHub, AKS node pools, plus App Gateway and Monitor DCR updates.