Consul

1.21.4 (August 13, 2025)

SECURITY:

• security: Update Go to 1.23.12 to address CVE-2025-47906 [GH-22547]

IMPROVEMENTS:

• ui: Replaced internal code editor with HDS (HashiCorp Design System) code editor and code block components for improved accessibility and maintainability across the Consul UI. [GH-22513]

BUG FIXES:

• cli: capture pprof when ACL is enabled and a token with operator:read is used, even if enable_debug config is not explicitly set. [GH-22552]

1.21.3 (July 18, 2025)

IMPROVEMENTS:

• ui: Improved display and handling of IPv6 addresses for better readability and usability in the Consul web interface. [GH-22468]

BUG FIXES:

• cli: validate IP address in service registration to prevent invalid IPs in service and tagged addresses. [GH-22467]
• ui: display IPv6 addresses with proper bracketed formatting [GH-22423]

1.21.2 (June 17, 2025)

SECURITY:

• security: Upgrade UBI base image version to address CVE CVE-2025-4802 CVE-2024-40896 CVE-2024-12243 CVE-2025-24528 CVE-2025-3277 CVE-2024-12133 CVE-2024-57970 CVE-2025-31115 [GH-22409]
• cli: update tls ca and cert create to reduce excessive file perms for generated public files [GH-22286]
• connect: Added non default namespace and partition checks to ConnectCA CSR requests. [GH-22376]
• security: Upgrade Go to 1.23.10. [GH-22412]

IMPROVEMENTS:

• config: Warn about invalid characters in datacenter resulting in non-generation of X.509 certificates when using external CA for agent TLS communication. [GH-22382]
• connect: Use net.JoinHostPort for host:port formatting to handle IPv6. [GH-22359]

BUG FIXES:

• http: return a clear error when both Service.Service and Service.ID are missing during catalog registration [GH-22381]
• license: (Enterprise only) Fixed issue where usage metrics are not written to the snapshot to export the license data. [GH-10668]
• wan-federation: Fixed an issue where advertised IPv6 addresses were causing WAN federation to fail. [GH-22226]

1.20.7 Enterprise (May 21, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

FEATURES:

• xds: Added a configurable option to disable XDS session load balancing, intended for scenarios where an external load balancer is used in front of Consul servers, making internal load balancing unnecessary.
• xds: Extend LUA Script support for API Gateway

IMPROVEMENTS:

• http: Add peer query param on catalog service API [GH-22189]

1.19.9 Enterprise (May 21, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

IMPROVEMENTS:

• http: Add peer query param on catalog service API [GH-22189]

1.21.1 (May 21, 2025)

FEATURES:

• xds: Extend LUA Script support for API Gateway [GH-22321]
• xds: Added a configurable option to disable XDS session load balancing, intended for scenarios where an external load balancer is used in front of Consul servers, making internal load balancing unnecessary.

IMPROVEMENTS:

• http: Add peer query param on catalog service API [GH-22189]

1.21.0 Enterprise (May 06, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

FEATURES:

• config: add UseSNI flag in remote JSONWebKeySet agent: send TLS SNI in remote JSONWebKeySet [GH-22177]
• v2: remove HCP Link integration [GH-21883]

IMPROVEMENTS:

• raft: add a configuration raft_prevote_disabled to allow disabling raft prevote [GH-21758]
• raft: update raft library to 1.7.0 which include pre-vote extension [GH-21758]
• SubMatView: Log level change from ERROR to INFO for subject materialized view as subscription creation is retryable on ACL change. [GH-22141]
• ui: Adds a copyable token accessor/secret on the settings page when signed in [GH-22105]
• xDS: Log level change from ERROR to INFO for xDS delta discovery request. Stream can be cancelled on server shutdown and other scenarios. It is retryable and error is a superfluous log. [GH-22141]

1.21.0 (May 06, 2025)

FEATURES:

• Simplified external service discovery (Agentless/Gossipless)
• Google Cloud Storage support for K8s snapshots
• OpenShift 4.17 support
• Pod Security Admissions compatibility
• Refreshed documentation structure
• Support for TLS SNI in remote JSONWebKeySet [GH-22177]

🔗 Link to full release details

IMPROVEMENTS:

• raft: add a configuration raft_prevote_disabled to allow disabling raft prevote [GH-21758]
• raft: update raft library to 1.7.0 which include pre-vote extension [GH-21758]
• SubMatView: Log level change from ERROR to INFO for subject materialized view as subscription creation is retryable on ACL change. [GH-22141]
• ui: Adds a copyable token accessor/secret on the settings page when signed in [GH-22105]
• xDS: Log level change from ERROR to INFO for xDS delta discovery request. Stream can be cancelled on server shutdown and other scenarios. It is retryable and error is a superfluous log. [GH-22141]

1.19.8 Enterprise(April 25, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

SECURITY:

• Update golang.org/x/net to v0.38.0 to address GHSA-vvgc-356p-c3xw and GO-2025-3595.
• Update github.com/golang-jwt/jwt/v4 to v4.5.2 to address GO-2025-3553 and GHSA-mh63-6h87-95cp.
• Update Go to v1.23.8 to address GO-2025-3563.
• Update github.com/golang-jwt/jwt/v5 to v5.2.2 to address GO-2025-3553 and GHSA-mh63-6h87-95cp.
• Update golang.org/x/crypto to v0.36.0 to address GO-2025-3487. [GH-10516]

BUG FIXES:

• agent: Add the missing Service TaggedAddresses and Check Type fields to Txn API. [GH-22220]

1.19.7 Enterprise (March 11, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

SECURITY:

• Update golang.org/x/crypto to v0.35.0 to address GO-2025-3487.
• Update golang.org/x/oauth2 to v0.27.0 to address GO-2025-3488.
• Update github.com/go-jose/go-jose/v3 to v3.0.4 to address GO-2025-3485. [GH-22207]
• Upgrade Go to 1.23.6. [GH-22204]

BUG FIXES:

• logging: Fixed compilation error for OS NetBSD. [GH-22184]

1.19.6 Enterprise (February 20, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

IMPROVEMENTS:

• dependency: upgrade consul/api to use Go 1.31.2 [GH-22174]

BUG FIXES:

• api: Fixed api submodule checksum mismatch issue by retracted 1.31.1 version [GH-22172] [GH-22172]

1.18.11 (April 25, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

SECURITY:

• Update golang.org/x/net to v0.38.0 to address GHSA-vvgc-356p-c3xw and GO-2025-3595.
• Update github.com/golang-jwt/jwt/v4 to v4.5.2 to address GO-2025-3553 and GHSA-mh63-6h87-95cp.
• Update Go to v1.23.8 to address GO-2025-3563.
• Update github.com/golang-jwt/jwt/v5 to v5.2.2 to address GO-2025-3553 and GHSA-mh63-6h87-95cp.
• Update golang.org/x/crypto to v0.36.0 to address GO-2025-3487. [GH-10517]

1.18.10 Enterprise (March 11, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

SECURITY:

• Update golang.org/x/crypto to v0.35.0 to address GO-2025-3487.
• Update golang.org/x/oauth2 to v0.27.0 to address GO-2025-3488.
• Update github.com/go-jose/go-jose/v3 to v3.0.4 to address GO-2025-3485. [GH-22207]
• Upgrade Go to 1.23.6. [GH-22204]

BUG FIXES:

• logging: Fixed compilation error for OS NetBSD. [GH-22184]

1.18.9 Enterprise (February 20, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

IMPROVEMENTS:

• dependency: upgrade consul/api to use Go 1.31.2 [GH-22174]

BUG FIXES:

• api: Fixed api submodule checksum mismatch issue by retracted 1.31.1 version [GH-22172] [GH-22172]

1.20.6 (April 25, 2025)

SECURITY:

• Update golang.org/x/net to v0.38.0 to address GHSA-vvgc-356p-c3xw and GO-2025-3595. Update github.com/golang-jwt/jwt/v4 to v4.5.2 to address GO-2025-3553 and GHSA-mh63-6h87-95cp. Update Go to v1.23.8 to address GO-2025-3563. [GH-22268]

IMPROVEMENTS:

• Added support for Consul Session to update the state of a Health Check, allowing for more dynamic and responsive health monitoring within the Consul ecosystem. This feature enables sessions to directly influence health check statuses, improving the overall reliability and accuracy of service health assessments. [GH-22227]

BUG FIXES:

• agent: Add the missing Service TaggedAddresses and Check Type fields to Txn API. [GH-22220]

1.21.0-rc2 (April 17, 2025)

• Enhancement: Added support for Consul Session to update the state of a Health Check, allowing for more dynamic and responsive health monitoring within the Consul ecosystem. This feature enables sessions to directly influence health check statuses, improving the overall reliability and accuracy of service health assessments.

1.20.5 (March 11, 2025)

SECURITY:

• Update golang.org/x/crypto to v0.35.0 to address GO-2025-3487. Update golang.org/x/oauth2 to v0.27.0 to address GO-2025-3488. Update github.com/go-jose/go-jose/v3 to v3.0.4 to address GO-2025-3485. [GH-22207]
• Upgrade Go to 1.23.6. [GH-22204]

BUG FIXES:

• logging: Fixed compilation error for OS NetBSD. [GH-22184]

1.21.0-rc1 (March 06, 2025)

SECURITY:

• Update golang.org/x/crypto to v0.35.0 to address GO-2025-3487. Update golang.org/x/oauth2 to v0.27.0 to address GO-2025-3488. Update github.com/go-jose/go-jose/v3 to v3.0.4 to address GO-2025-3485. [GH-22207]
• Upgrade Go to 1.23.6. [GH-22204]

FEATURES:

• config: add UseSNI flag in remote JSONWebKeySet agent: send TLS SNI in remote JSONWebKeySet [GH-22177]
• v2: remove HCP Link integration [GH-21883]

IMPROVEMENTS:

• raft: add a configuration raft_prevote_disabled to allow disabling raft prevote [GH-21758]
• raft: update raft library to 1.7.0 which include pre-vote extension [GH-21758]
• SubMatView: Log level change from ERROR to INFO for subject materialized view as subscription creation is retryable on ACL change. [GH-22141]
• ui: Adds a copyable token accessor/secret on the settings page when signed in [GH-22105]
• xDS: Log level change from ERROR to INFO for xDS delta discovery request. Stream can be cancelled on server shutdown and other scenarios. It is retryable and error is a superfluous log. [GH-22141]

BUG FIXES:

• logging: Fixed compilation error for OS NetBSD. [GH-22184]

1.20.4 (February 20, 2025)

IMPROVEMENTS:

• dependency: upgrade consul/api to use Go 1.31.2 [GH-22174]

BUG FIXES:

• api: Fixed api submodule checksum mismatch issue by retracted 1.31.1 version [GH-22172] [GH-22172]

1.19.5 Enterprise (February 13, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

SECURITY:

• Upgrade Go to use v1.22.11 and bump Go X-Repositories to latest. This addresses CVE CVE-2024-45341 and CVE-2024-45336 [GH-22084]
• Upgrade Go to use v1.22.12 and bump Go X-Repositories to latest. This addresses CVE CVE-2025-22866 [GH-22132]

IMPROVEMENTS:

• metadata: memoize the parsed build versions [GH-22113]

BUG FIXES:

• Fixed logging error while building for OpenBSD OS [GH-22120] [GH-22120]
• api-gateway: Fixed TLS configuration to properly enforce listener TLS versions and cipher suites [GH-21984]
• aws-auth: Fix bug where calls to AWS IAM and STS services error out due to URL with multiple trailing slashes. [GH-22109]