What hashicorp/consul shipped
Written by FoxPlug from public releases; not affiliated with Consul. An automatic summary of the public release, pull request and commit data of github.com/hashicorp/consul. Consul did not write it and does not use or endorse FoxPlug. Every line links to the public change it describes.
Get a weekly update like this for your product, free
Week of September 21, 2026
What shipped
- Migration from iptables to nftables: the sdk/iptables package is replaced with sdk/nftables and all consul core callers are migrated to use the new implementation. Pull request #23785
- SDK v0.19.0-rc1 released with backported inference gateway type surface for consul-k8s compatibility. Release
- Terminating gateway credential injection structs backported to CE so consul-k8s can build against the type surface. Pull request #23939
- Inference gateway type surface backported from Enterprise to CE, including ServiceKindInferenceGateway service kind and config entry kinds. Pull request #23925
- API v1.35.0-rc1 released with updated SDK version. Release
- Envoyextensions v0.11.0-rc1 released with updated api and sdk. Release
- Troubleshoot v0.10.0-rc1 released with updated api, sdk, and envoyextensions. Release
- Peering refactor adds multiport enterprise extension points with shared data shapes and xDS extension points. Pull request #23877
- Feature gating for localized DNS added. Pull request #23934
- Non-consul generated VIP removed from inline table. Pull request #23928
Why it matters
This week includes a significant infrastructure change migrating from iptables to nftables for modern Linux distributions, alongside multiple RC releases of core components. Type surface backports enable consul-k8s to build against Enterprise features while maintaining Community Edition compatibility.
Changelog entry
- sdk/iptables package replaced with sdk/nftables; all callers migrated to nftables implementation Pull request #23785
- sdk/v0.19.0-rc1: inference gateway and terminating gateway credential injection type surface added Release
- api/v1.35.0-rc1: SDK version updated Release
- envoyextensions/v0.11.0-rc1: api and sdk updated Release
- troubleshoot/v0.10.0-rc1: api, sdk, and envoyextensions updated Release
- peering: added multiport enterprise extension points with CE no-op implementations Pull request #23877
- feature gate added for localized DNS Pull request #23934
- removed non-consul generated VIP from inline table Pull request #23928
Consul updates: nftables migration, SDK v0.19.0-rc1, API v1.35.0-rc1, and inference gateway type backports for CE.
This week's Consul updates include a major infrastructure shift from iptables to nftables, RC releases for SDK, API, and troubleshoot components, and backports of inference gateway and terminating gateway credential injection type surfaces to Community Edition for consul-k8s compatibility.
Week of September 14, 2026
What shipped
- Consul UI migrated to Helios Design System (HDS) as a combined 16-PR stack rebased onto main. Pull request #23911
- Post-Quantum Cryptography hybrid key exchange support added to Consul Connect Envoy service mesh sidecars and Consul Agent TLS communication. Pull request #23884
- HDS migration regressions fixed in filter bars, health indicators, navigation, service views, and intentions list. Pull request #23924
- HDS design system migration backported to release/2.0.x branch. Pull request #23927
- Release hygiene workflow added to scan PR descriptions and source files for internal Jira ticket IDs. Pull request #23829
- Client-side check implemented to prevent internal Jira issue IDs from entering the community-edition repository. Pull request #23870
Why it matters
The UI migration to HDS modernizes the user interface across the project, while post-quantum cryptography support addresses emerging security requirements for service mesh communication. Infrastructure improvements around release hygiene help maintain code quality and prevent accidental internal metadata leakage.
Changelog entry
- ui: Migrated Consul UI to Helios Design System (HDS) Pull request #23911
- connect: Added Post-Quantum Cryptography hybrid key exchange support (X25519MLKEM768 / NIST FIPS 203) for Envoy service mesh sidecars and Agent TLS Pull request #23884
- ui: Fixed HDS migration regressions in filter bars, health indicators, navigation, and service views Pull request #23924
- build: Added release hygiene workflow to scan for internal Jira ticket IDs in PR descriptions and source files Pull request #23829
- build: Added client-side check to prevent internal Jira issue IDs from entering community-edition repository Pull request #23870
Consul now features a modernized UI with Helios Design System, post-quantum cryptography support for Connect sidecars, and improved release hygiene workflows.
This week's Consul updates bring significant improvements: the UI migrates to Helios Design System for a modernized interface, post-quantum cryptography hybrid key exchange is enabled across Connect Envoy sidecars and TLS communication, and new release hygiene workflows prevent internal metadata from entering the community repository.