Repository navigation

Release list

v0.43.1 Latest

Latest

hc-github-team-es-release-engineering released this 21 Oct 12:12

8e6aee4

update: add 0.43.1 changelog entry and version bump (#2197)

* security: bump golang.org/x/crypto and golang.org/x/text to fix CVEs (#2186)

* security: bump golang.org/x/crypto and golang.org/x/text to fix CVEs

* change CVE update

* security: backport Go 1.26.8 (#2194)

* signals: add aix build constraint and SIGVTALRM

* security: bump Go to 1.26.9 and golang.org/x/net to v0.60.0 (#2196)

* update: add 0.43.1 changelog entry and version bump

* security: bump Go to v1.26.10 to fix CVE-2026-111943, CVE-2026-78663, CVE-2026-78669

---------

Co-authored-by: Mridul Gupta <[email protected]>

Assets 2

v0.43.0

hc-github-team-es-release-engineering released this 10 Sep 17:23

47984bd

security: bump golang.org/x/crypto and golang.org/x/text to fix CVEs …

Assets 2

v0.42.1

hc-github-team-es-release-engineering released this 08 Jul 15:03

ae28594

0.42.1 (July 08, 2026)

IMPROVEMENTS:

cve: fix path redirection and unintended file overwrite in writeToFile helper through symlink attack #2156
update: go version to 1.26.4 #2155
update: Bump github.com/hashicorp/consul/api v1.34.0 to 1.34.4 #2155

Assets 2

v0.42.0

hc-github-team-es-release-engineering released this 15 Apr 12:23

c1ad4f9

0.42.0 (April 15, 2026)

IMPROVEMENTS:

update: go version to 1.26.2 GH-2144
cve: fix sandbox path bypass in file helper through symlink attack GH-2143
nomadVar: return map values instead of pointers when reading map items GH-2133
update: Bump github.com/go-jose/go-jose/v4 from 4.1.1 to 4.1.4 GH-2146

BUG FIXES:

fix: Ensure initialization occurs before value assignments in Scratch methods GH-2125
fix: send err back to fetch to trigger backoff retry GH-2136

Assets 2

v0.41.4

hc-github-team-es-release-engineering released this 23 Jan 15:43

16cf7ad

0.41.4 (January 23, 2025)

IMPROVEMENTS:

Add support for Consul's imported services API via importedServices template function GH-2120

Assets 2

v0.41.3

hc-github-team-es-release-engineering released this 04 Nov 13:17

b822301

0.41.3 (November 4, 2025)

IMPROVEMENTS:

Distinguish templates with identical contents but different destinations or sources GH-2096
upgrade go version to latest patch (1.25.3) to fix CVE-2025-47910 GH-2103

BUG FIXES:

fix(config): handle empty regex matches in ParseTemplateConfig - fixes SECVULN-14566 GH-2099

Assets 2

v0.41.2

hc-github-team-es-release-engineering released this 19 Sep 11:06

950f719

Merge pull request #2095 from hashicorp/suppress-cve

Update security-scan.hcl

Assets 2

v0.41.1

hc-github-team-es-release-engineering released this 24 Jul 10:28

80a4e25

0.41.1 (July 24, 2025)

IMPROVEMENTS:

update: go version to 1.24.4 to address CVE-2025-22874

BUG FIXES:

fix: consul-template handling of secret reads when namespace equals mount path #2075

Assets 2

v0.41.0

hc-github-team-es-release-engineering released this 05 Jun 14:06

e460acc

0.41.0 (June 5, 2025)

IMPROVEMENTS:

feat: Pre-compute Sprig template functions during package init GH-2052
update: go version to 1.24.3 GH-2063
security: go-jose/v4 to v4.1.0 to fix CVE-2025-27144 GH-2063
update: github.com/hashicorp/consul/api to v1.32.1 GH-2063
update: github.com/hashicorp/vault/api to v1.16.0 GH-2063

BUG FIXES:

fix: timeout issues for list.peerings GH-2042
fix: use 3.21 instead of latest for alpine in Dockerfile GH-2064

Assets 2

v0.40.0

hc-github-team-es-release-engineering released this 14 Feb 12:07

781ce19

Update CHANGELOG and version files for release 0.40.0  (#2022)

* Update CHANGELOG and version files

* - Removing caching for post set up go step issue for CI workflow
- Increasing timeout and verbosity for workflow logs
- Fixed fail fast issue for two jobs in workflow to fail independently and avoid caching race conditions

* Change version bump from patch to minor release

Assets 2