BREAKING CHANGES:
- node: The node attribute
consul.addr.dns
has been changed tounique.consul.addr.dns
. The node attributenomad.advertise.address
has been changed tounique.advertise.address
. [GH-24942]
SECURITY:
- auth: Redact OIDC client secret from API responses and event stream (CVE-2025-1296) [GH-25328]
IMPROVEMENTS:
- build: Updated Go to 1.24.1 [GH-25249]
- metrics: Fix the process lookup for raw_exec when running rootless [GH-25198]
BUG FIXES:
- cli: Add node_prefix read when setting up the task workload identity Consul policy [GH-25310]
- cni: Fixed a bug where CNI state was not migrated after upgrade, resulting in IP collisions [GH-25093]
- csi: Fixed a bug where plugins that failed initial fingerprints would not be restarted [GH-25307]
- rpc: Fixed a bug that would cause the reader side of RPC connections to hang indefinitely [GH-25201]
- scheduler: Fixed a bug where node class hashes included unique attributes, making scheduling more costly [GH-24942]
- template: Fixed a bug where unset client.template retry blocks ignored defaults [GH-25113]
- template: Updated the consul-template dependency to v0.40.0 which included a bug fix in the quiescence timers. This bug could cause increased Nomad client CPU usage for tasks which use two or more template blocks. [GH-25140]