winget install --id Hashicorp.ConsulAbout HashiCorp Consul
Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure. Consul provides several key features: - Multi-Datacenter - Consul is built to be datacenter aware, and can support any number of regions without complex configuration. - Service Mesh - Consul Service Mesh enables secure service-to-service communication with automatic TLS encryption and identity-based authorization. Applications can use sidecar proxies in a servi...
What's new in 2.0.2
SECURITY: - Upgrade alpine base image version to 3.24 to address [CVE-2026-41989], [ALPINE-CVE-2026-2100]. [GH-23711] - dependency: Upgrade Serf and Memberlist to use the latest versions. [GH-23704] - xds: Return errors when injecting the L4 intention (RBAC) filter or the mTLS transport socket onto an inbound public listener, so the listener is not served without intention enforcement or mTLS. [GH-23686] FEATURES: - config-entry(api-gateway): (Enterprise only) Add ExtAuthzFilter to HTTPRoute Filters and gateway-wide ExtAuthz toggle to the api-gateway config entry [GH-23703] - config-entry: (Enterprise only) Addition of External Processor (ext_proc) Envoy Extension support to api-gateway and connect-proxy [GH-23705] IMPROVEMENTS: - ci: upgrade GitHub Actions that used the deprecated Node 20 runtime to Node 24, and restore GOTOOLCHAIN=auto after setup-go so backward-compatibility and integration test lanes resolve the correct Go toolchain. [GH-23687] - connect: update support for nomad and vault version to v2.0.3 [GH-23624] - deps: Migrate armon/go-metrics to hashicorp/go-metrics and update Go dependencies across all modules [GH-23635] BUG FIXES: - xds: only emit the client cert SDS block when both CertFile and KeyFile are set. [GH-23679]
Version history
| Version | Updated | Notes |
|---|---|---|
| 2.0.2 | Unknown | SECURITY: - Upgrade alpine base image version to 3.24 to address [CVE-2026-41989], [ALPINE-CVE-2026-2100]. [GH-23711] - dependency: Upgrade Serf and Memberlist to use the latest versions. [GH-23704] - xds: Return errors... |
| 2.0.1 | Unknown | SECURITY: - Upgrade go version to 1.26.4 to address GO-2026-5039, GO-2026-5038,GO-2026-5037 [GH-23637] - connect: Upgrade envoy version to 1.37.4, 1.36.8, 1.35.12; Add new version of Envoy 1.38.2 and remove 1.34.14 [GH-2... |
| 2.0.0 | Unknown | SECURITY: - connect: Upgrade envoy version to 1.37.2 and newer versions [GH-23469] - go: Upgrade go version to 1.26 [GH-23493] - agent: Increased default HTTP server timeouts to prevent breaking long-polling blocking que... |
| 1.22.7 | Unknown | SECURITY: - security: update google.golang.org/grpc to fix CVE-2026-33186 [GH-23379] - security: upgrade go.opentelemetry.io/otel to 1.42.0 to remediate CVE-2026-24051 (Path Hijacking / Untrusted Search Paths on macOS).... |
| 1.22.6 | Unknown | SECURITY: - security: upgrade envoy version to 1.35.9 and 1.34.13 [GH-23372] - security: update google.golang.org/grpc to fix CVE-2026-33186 [GH-23379] - security: upgrade go version to 1.25.8 [GH-23322] - security: bump... |
| 1.22.5 | Unknown | SECURITY: - security: upgrade go version to 1.25.7 [GH-23204] - dockerfile: the Consul build Go base image to alpine3.23 [GH-23194] - connect: Migrate to aws-sdk-go-v2 from aws-sdk-go (v1). Also updated consul-awsauth an... |
| 1.22.4 | Unknown | SECURITY: - security: upgrade go version to 1.25.7 [GH-23204] - dockerfile: the Consul build Go base image to alpine3.23 [GH-23194] - connect: Migrate to aws-sdk-go-v2 from aws-sdk-go (v1). Also updated consul-awsauth an... |
| 1.22.3 | Unknown | SECURITY: - Update the Consul Build Go base image to alpine3.23.2 [GH-23138] IMPROVEMENTS: - api: Add consul services imported-services and new api(/v1/exported-services) command to list services imported by partitions w... |
| 1.22.2 | Unknown | SECURITY: - security: Upgrade golang to 1.25.4. [GH-23029] - security: upgrade internal packages of RHEL builds to include security fixes [GH-23078] IMPROVEMENTS: - ui: upgraded Ember framework from v3.28 to v4.12, impro... |
| 1.22.1 | Unknown | SECURITY: - connect: Upgrade envoy version to 1.35.6 [GH-23056] - security: Updated golang.org/x/crypto from v0.42.0 to v0.44.0. This resolves GO-2025-4116 IMPROVEMENTS: - ui: Removed ember-route-action-helper and migrat... |
| 1.22.0 | Unknown | SECURITY: - connect: Upgrade Consul's bundled Envoy version to 1.35.3 and remove support for 1.31.10. This update also includes a fix to prevent Envoy (v1.35+) startup failures by only configuring the TLS transport socke... |
| 1.21.5 | Unknown | SECURITY: - Migrate transitive dependency from archived mitchellh/mapstructure to go-viper/mapstructure to v2 to address CVE-2025-52893. [GH-22581] - agent: Add the KV Validations to block path traversal allowing access... |
| 1.21.4 | Unknown | SECURITY: - security: Update Go to 1.23.12 to address CVE-2025-47906 [GH-22547] IMPROVEMENTS: - ui: Replaced internal code editor with HDS (HashiCorp Design System) code editor and code block components for improved acce... |
| 1.21.3 | Unknown | IMPROVEMENTS: - ui: Improved display and handling of IPv6 addresses for better readability and usability in the Consul web interface. [GH-22468] BUG FIXES: - cli: validate IP address in service registration to prevent in... |
| 1.21.2 | Unknown | SECURITY: - security: Upgrade UBI base image version to address CVE CVE-2025-4802 CVE-2024-40896 CVE-2024-12243 CVE-2025-24528 CVE-2025-3277 CVE-2024-12133 CVE-2024-57970 CVE-2025-31115 [GH-22409] - cli: update tls ca an... |
| 1.21.1 | Unknown | FEATURES: - xds: Extend LUA Script support for API Gateway [GH-22321] - xds: Added a configurable option to disable XDS session load balancing, intended for scenarios where an external load balancer is used in front of C... |
| 1.21.0 | Unknown | FEATURES: - config: add UseSNI flag in remote JSONWebKeySet agent: send TLS SNI in remote JSONWebKeySet [GH-22177] - v2: remove HCP Link integration [GH-21883] IMPROVEMENTS: - raft: add a configuration raft_prevote_disab... |
| 1.20.6 | Unknown | SECURITY: - Update golang.org/x/net to v0.38.0 to address GHSA-vvgc-356p-c3xw and GO-2025-3595. Update github.com/golang-jwt/jwt/v4 to v4.5.2 to address GO-2025-3553 and GHSA-mh63-6h87-95cp. Update Go to v1.23.8 to addre... |
| 1.20.5 | Unknown | No notes |
| 1.19.0 | Unknown | No notes |