SECURITY:
IMPROVEMENTS:
- build: Add dev-static and static-release build targets that disable CGO and offer statically-linked binaries [GH-27310]
- deps: Migrate from archived dependency
github.com/mitchellh/mapstructuretogithub.com/go-viper/mapstructure/v2[GH-27444] - reporting (Enterprise): Add device plugin usage to product usage metrics
- state: avoid unneded allocation copy when building event payload [GH-27311]
BUG FIXES:
- api: only include running tasks in allocation resource usage [GH-27317]
- api: return proper 403 message when getting variables instead of swallowing error [GH-27269]
- artifact: Fixed a bug that prevented the sandbox from moving downloaded files to the target directory on Windows [GH-27398]
- checks: Fixed a bug where script checks with task-level interpolation would fail to heartbeat to Consul [GH-27453]
- client: Fix unchanged devices causing extraneous node updates [GH-27363]
- client: Fixed generation of the "NOMAD_ALLOC_ADDR_" environment variable when using static port assignments [GH-27305]
- core: Fixed a bug where follow-up evals could be created for failed evaluations of garbage collected jobs [GH-27367]
- dispatch: Fixed a bug where concurrent dispatch requests could ignore the idempotency token [GH-27353]
- drivers: adds hostname to NetworkCreateRequest for external drivers [GH-27273]
- event broker: fix memory leak in methods that close subscriptions [GH-27312]
- event stream: Fixed a bug where the HTTP handler can block forever and cause high memory usage if an API client reads too slowly from the stream [GH-27397]
- job: Correctly validate any constraint attributes to ensure they conform to known formats [GH-27355]
- keyring (Enterprise): Fixed a bug where servers configured with high availability keyrings with pre-1.9.0 keystores would not start if one of the external KMS was unreachable [GH-27279]
- multiregion: fixes a bug where resubmitting an unchanged job would cause server handler to hang [GH-27386]
- numa: Fixed a bug where NUMA detection would cause a panic on hosts with discontinuous node IDs [GH-27277]
- qemu: fixes graceful_shutdown to wait kill_timeout before signalling process [GH-27316]
- ui: fix bug preventing OIDC login when
issparameter is required [GH-27248]