Skip to content

chore(deps): bump github.com/hashicorp/consul/api from 1.32.0 to 1.33.2#17449

Merged
aknuds1 merged 1 commit intomainfrom
dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0
Feb 10, 2026
Merged

chore(deps): bump github.com/hashicorp/consul/api from 1.32.0 to 1.33.2#17449
aknuds1 merged 1 commit intomainfrom
dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025 •
edited by aknuds1
Loading

Bumps github.com/hashicorp/consul/api from 1.32.0 to 1.33.2.

Changelog

Sourced from github.com/hashicorp/consul/api's changelog.

1.22.0 Enterprise (October 24, 2025)

SECURITY:

  • connect: Upgrade Consul's bundled Envoy version to 1.35.3 and remove support for 1.31.10. This update also includes a fix to prevent Envoy (v1.35+) startup failures by only configuring the TLS transport socket when the CA bundle is present. [GH-22824]
  • security: Adding warning when remote/local script checks are enabled without enabling ACL's [GH-22877]
  • security: Improved validation of the Content-Length header in the Consul KV endpoint to prevent potential denial of service attacksCVE-2025-11374 [GH-22916]
  • security: adding a maximum Content-Length on the event endpoint to fix denial-of-service (DoS) attacks. This resolves CVE-2025-11375. [GH-22836]
  • security: breaking change - adding a key name validation on the key/value endpoint along side with the DisableKVKeyValidation config to disable/enable it to fix path traversal attacks on misconfigured or missing ACL policies. [GH-22850]

FEATURES:

  • Added support to register a service in consul with multiple ports [GH-22769]
  • agent: Added IsDualStack utility function to detect if the agent is configured for both IPv4 and IPv6 (dual-stack mode) based on its bind address retrieved from "agent/self" API. [GH-22741]
  • install: Updated license information displayed during post-install
  • ipv6: addtition of ip6tables changes for ipv6 and dual stack support [GH-22787]
  • oidc: add client authentication using JWT assertion and PKCE. default PKCE is enabled. [GH-22732]

IMPROVEMENTS:

  • security: Upgrade golang to 1.25.3. [GH-22926]
  • ui: Fixes computed property override issues currently occurring and in some cases pre-emptively as this has been deprecated in ember v4 [GH-22947]
  • ui: removes send action instances as part of https://deprecations.emberjs.com/id/ember-component-send-action/ [GH-22938]
  • ui: replaced ember partials with components as an incremental step to upgrade to ember v4 [GH-22888]
  • api: Added a new API (/v1/operator/utilization) to support enterprise API for Manual Snapshot Reporting [GH-22837]
  • cmd: Added new subcommand consul operator utilization [-today-only] [-message] [-y] to generate a bundle with census utilization snapshot. Main flow is implemented in consul-enterprise http: Added a new API Handler for /v1/operator/utilization. Core functionality to be implemented in consul-enterprise agent: Always enabled census metrics collection with configurable option to export it to Hashicorp Reporting [GH-22843]
  • cli: snapshot agent now supports authenticating to Azure Blob Storage using Azure Managed Service Identities (MSI). [GH-11171]
  • command: connect envoy bootstrap defaults to 127.0.0.1 in IPv4-only environment and to ::1 in IPv6/DualStack environment. [GH-22763]
  • connect: default upstream.local_bind_address to ::1 for IPv6 agent bind address [GH-22773]
  • proxy: default proxy.local_service_address to ::1 for IPv6 agent bind address [GH-22772]
  • ui: Improved accessibility features in the Consul UI to enhance usability for users with disabilities [GH-22770]
  • ui: Replace yarn with pnpm for package management [GH-22790]
  • ui: auth method config values were overflowing. This PR fixes the issue and adds word break for table elements with large content. [GH-22813]

BUG FIXES:

  • ui: Allow FQDN to be displayed in the Consul web interface. [GH-22779]
  • ui: fixes the issue where namespaces where disappearing and Welcome to Namespace screen showed up after tab switching [GH-22789]
  • ui: fixes the issue where when doing deletes of multiple tokens or policies, the three dots on the right hand side stops responding after the first delete. [GH-22752]
  • cmd: Fix consul operator utilization --help to show only available options without extra parameters. [GH-22912]

1.22.0 (October 24, 2025)

SECURITY:

  • connect: Upgrade Consul's bundled Envoy version to 1.35.3 and remove support for 1.31.10. This update also includes a fix to prevent Envoy (v1.35+) startup failures by only configuring the TLS transport socket when the CA bundle is present. [GH-22824]
  • security: Adding warning when remote/local script checks are enabled without enabling ACL's [GH-22877]
  • security: Improved validation of the Content-Length header in the Consul KV endpoint to prevent potential denial of service attacksCVE-2025-11374 [GH-22916]

... (truncated)

Commits
  • 1a47ec5 submodule version update
  • 5d2aa72 post release changes (#22950) (#22980)
  • c0922f9 Backport of [UI] replace direct use of transitionTo with router service's tra...
  • f7c80bc Backport of upgrade: logrus to v1.9.3 into release/1.22.x (#22974)
  • 5efc188 Backport of upgrade golang to latest patch into release/1.22.x (#22968)
  • 36140dc Backport of upgrades ember-collection into release/1.22.x (#22966)
  • 504ec51 [UI] deprecation this property fallback into 1.22.x(#22928) (#22964)
  • 9562c06 Backport of [UI] Remove send Action deprecation into release/1.22.x (#22957)
  • 70583a7 Backport of UI/Deprecation Computed property override into release/1.22.x (#2...
  • 0b00c01 Backport of UI/deprecation ember views partial into release/1.22.x (#22952)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 1, 2025
@dependabot dependabot bot mentioned this pull request Nov 1, 2025
Closed
@jan--f
Copy link
Copy Markdown
Contributor

jan--f commented Nov 6, 2025

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch 2 times, most recently from ba60c5a to 6c07e35 Compare November 6, 2025 12:06
@jan--f
Copy link
Copy Markdown
Contributor

jan--f commented Nov 6, 2025

This updates the go version to 1.25, pushing to after 3.8.

@aknuds1
Copy link
Copy Markdown
Contributor

aknuds1 commented Dec 21, 2025

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch from 6c07e35 to 1121439 Compare December 21, 2025 09:07
@aknuds1
Copy link
Copy Markdown
Contributor

aknuds1 commented Dec 23, 2025

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch from 1121439 to c694867 Compare December 23, 2025 10:46
@aknuds1 aknuds1 force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch from c694867 to be0601c Compare December 24, 2025 12:41
@aknuds1 aknuds1 requested a review from juliusv as a code owner December 24, 2025 12:41
@aknuds1
Copy link
Copy Markdown
Contributor

aknuds1 commented Feb 10, 2026

@dependabot rebase

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Feb 10, 2026

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

@aknuds1 aknuds1 force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch from be0601c to 127a7b0 Compare February 10, 2026 07:12
@aknuds1 aknuds1 requested a review from a team as a code owner February 10, 2026 07:12
@aknuds1 aknuds1 changed the title chore(deps): bump github.com/hashicorp/consul/api from 1.32.0 to 1.33.0 chore(deps): bump github.com/hashicorp/consul/api from 1.32.0 to 1.33.2 Feb 10, 2026
@aknuds1 aknuds1 enabled auto-merge (squash) February 10, 2026 07:13
@aknuds1 aknuds1 force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch from 127a7b0 to 702894d Compare February 10, 2026 07:14
@aknuds1
chore(deps): bump github.com/hashicorp/consul/api from 1.32.0 to 1.33.2
0576531 
Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) from 1.32.0 to 1.33.2.
- [Release notes](https://github.com/hashicorp/consul/releases)
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md)
- [Commits](hashicorp/consul@api/v1.32.0...api/v1.33.2)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
  dependency-version: 1.33.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
@aknuds1 aknuds1 force-pushed the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch from 702894d to 0576531 Compare February 10, 2026 07:55
@aknuds1 aknuds1 merged commit effa3c5 into main Feb 10, 2026
31 of 32 checks passed
@aknuds1 aknuds1 deleted the dependabot/go_modules/github.com/hashicorp/consul/api-1.33.0 branch February 10, 2026 08:24
bwplotka added a commit that referenced this pull request Feb 11, 2026
@bwplotka @codesome
@bboreham @crush-on-anechka @mohammadv184 @matt-gp @isker @SuperQ @dependabot @aknuds1 @roidelapluie @krajorama @ffgan @pr00se @sysadmind @renovate
Take latest from main (#18060)
d86068c 
* Update npm dependencies for v3.10

Signed-off-by: Ganesh Vernekar <[email protected]>

* Fix critical npm vulnerabilities with npm audit fix

Signed-off-by: Ganesh Vernekar <[email protected]>

* UI: Move HistoryCompleteStrategy into its own file and fix lint

Signed-off-by: Ganesh Vernekar <[email protected]>

* [REFACTOR] Relabel: Remove unnecessary Process() function

All uses can be replaced by ProcessBuilder, which is more efficient.

Signed-off-by: Bryan Boreham <[email protected]>

* promql: use Kahan summation for Native Histograms (#15687)

As for float samples, Kahan summation is used for the `sum` and `avg` aggregation and for the respective `_over_time` functions.

Kahan summation is not perfect. This commit also adds tests that even Kahan summation cannot reliably pass.
These tests are commented out.

Note that the behavior might be different on other hardware platforms. We have to keep an eye on test failing on other hardware platforms and adjust them accordingly.

Signed-off-by: Aleksandr Smirnov <[email protected]>

* fix(docs): typo in prometheus_agent.md doc

Signed-off-by: Mohammad Abbasi <[email protected]>

* AWS SD: ECS Standalone Tasks

The current ECS role in AWS SD assumes that a task is part of a service.
This means that tasks that are started as part of AWS Batch will get
missed and not be discovered. This changed fixes this so that standalone
tasks can be discovered as well.

Signed-off-by: matt-gp <[email protected]>

* AWS SD: Optmise MSK Role

Signed-off-by: matt-gp <[email protected]>

* promtool: support missing promql syntax features (#17926)

Namely promql-duration-expr and promql-extended-range-selectors. This
allows promtool to e.g. check rules files using syntax gated by these
features.

Signed-off-by: Ian Kerins <[email protected]>

* Also run CI on release tags

Make sure we also run the main CI workflow `v*` release tags
so `publish_release` job is run.

Signed-off-by: SuperQ <[email protected]>

* chore(deps): bump github.com/hashicorp/consul/api from 1.32.0 to 1.33.2 (#17449)

Bumps [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) from 1.32.0 to 1.33.2.
- [Release notes](https://github.com/hashicorp/consul/releases)
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md)
- [Commits](hashicorp/consul@api/v1.32.0...api/v1.33.2)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
  dependency-version: 1.33.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
Co-authored-by: Arve Knudsen <[email protected]>

* AWS SD: Load Region Fallback (#18019)

* AWS SD: Load Region Fallback

---------

Signed-off-by: matt-gp <[email protected]>

* Build riscv64 docker image by default (#17508)

* Allow building riscv64 docker  image

Co-authored by: [email protected];

Signed-off-by: ffgan <[email protected]>

* Update Makefile

Co-authored-by: Ben Kochie <[email protected]>
Signed-off-by: ffgan <[email protected]>

---------

Signed-off-by: ffgan <[email protected]>
Co-authored-by: Ben Kochie <[email protected]>

* Increase Renovate speed (#18052)

* Allow Renovate to run all day on the monthly day.
* Increase the max PRs from 10 to 20.
* Incresae the PR open rate from 2 to 5.

Signed-off-by: SuperQ <[email protected]>

* docs(api): clarify metadata vs remote protocols (#17481)

Signed-off-by: György Krajcsovits <[email protected]>

* tsdb/index: export sentinel error for symbol table size exceeded

Signed-off-by: Patryk Prus <[email protected]>

* Update Go dependencies for v3.10 release

Signed-off-by: Ganesh Vernekar <[email protected]>

* Kubernetes SD: Disable WatchListClient in tests

Signed-off-by: Ganesh Vernekar <[email protected]>

* Replace deprecated google.CredentialsFromJSON with option.WithAuthCredentialsFile

Signed-off-by: Ganesh Vernekar <[email protected]>

* chore(deps): update actions/checkout action to v4.3.1 (#18054)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update actions/cache action to v5.0.3 (#18053)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

* chore(deps): update actions/setup-go action to v6.2.0 (#18055)

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

---------

Signed-off-by: Ganesh Vernekar <[email protected]>
Signed-off-by: Bryan Boreham <[email protected]>
Signed-off-by: Aleksandr Smirnov <[email protected]>
Signed-off-by: Mohammad Abbasi <[email protected]>
Signed-off-by: matt-gp <[email protected]>
Signed-off-by: Ian Kerins <[email protected]>
Signed-off-by: SuperQ <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Arve Knudsen <[email protected]>
Signed-off-by: ffgan <[email protected]>
Signed-off-by: György Krajcsovits <[email protected]>
Signed-off-by: Patryk Prus <[email protected]>
Co-authored-by: Ganesh Vernekar <[email protected]>
Co-authored-by: Bryan Boreham <[email protected]>
Co-authored-by: Sasha <[email protected]>
Co-authored-by: Mohammad Abbasi <[email protected]>
Co-authored-by: matt-gp <[email protected]>
Co-authored-by: Ian Kerins <[email protected]>
Co-authored-by: SuperQ <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Arve Knudsen <[email protected]>
Co-authored-by: Julien <[email protected]>
Co-authored-by: George Krajcsovits <[email protected]>
Co-authored-by: ffgan <[email protected]>
Co-authored-by: Patryk Prus <[email protected]>
Co-authored-by: Ganesh Vernekar <[email protected]>
Co-authored-by: Joe Adams <[email protected]>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@SuperQ SuperQ mentioned this pull request Feb 11, 2026
Merged
@bboreham
Copy link
Copy Markdown
Member

bboreham commented Feb 12, 2026

How would I find out the changes in github.com/hashicorp/consul/api between 1.32.0 and 1.33.2?

@jan--f
Copy link
Copy Markdown
Contributor

jan--f commented Feb 12, 2026 •
edited
Loading

Dependabot adds some links to the description. They vary in quality tbh, but this link is in the description:
hashicorp/consul@api/v1.32.0...api/v1.33.0

also https://github.com/hashicorp/consul/blob/main/CHANGELOG.md is linked

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@aknuds1 aknuds1 aknuds1 approved these changes

@juliusv juliusv Awaiting requested review from juliusv juliusv is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@jan--f @aknuds1 @bboreham