Preparing for 0.9.4 patch release by paras-gupta2 · Pull Request #318 · hashicorp/consul-ecs

paras-gupta2 · 2026-03-02T11:52:22Z

Changes proposed in this PR:

Backport of following PRs in main:
Updated version add changelog as well

Checklist:

Tests added
CHANGELOG entry added

Match LICENSE file.

…quick-anteater Add artifacts manifest (automatically generated)

[SecVul] Update aws-sdk-go

* Consume latest version of consul-awsauth dependency * Update CHANGELOG.md

* Remove excess logs in health-sync * Added changelog

* Fix vulnerabiility * Added changelog * Update Dockerfile * Updated golangci-lint version to 1.60.1

--------- Co-authored-by: João Rafael <joaoraf@me.com>

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.38.0. - [Commits](golang/net@v0.33.0...v0.38.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Vikramarjuna <vkrmrjun@gmail.com>

Pin `docker/setup-qemu-action` to specific commit for stability.

[Compliance] - PR Template Changes Required

Signed-off-by: Manisha Kumari <manisha.kumari@hashicorp.com>

Test with latest consul versions

Testing test cases with latest consul version

…elog

Fix AWS SDK v1 CVE

…ase branch. (#317) * Fix the CVE's and alerts from the secvuln ticket and PR * Fix golangci-lint v2.8.0 schema validation error * Add --no-cache flag to apk upgrade for better Docker build reproducibility and update changelog

Copilot

Pull request overview

This PR prepares the 0.9.4 patch release by backporting upstream changes, including the AWS SDK v1→v2 migration, security hardening updates (base images/deps), new network partition resilience behavior (service-defaults passive health checks), and accompanying CI/release metadata updates.

Changes:

Bump product version to 0.9.4 and update changelog/release metadata.
Migrate multiple components to AWS SDK v2 and adjust tests/mocks accordingly.
Add network partition resilience configuration and mesh-init logic to register/merge Consul service-defaults with passive health checks.

Reviewed changes

Copilot reviewed 83 out of 84 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
version/version_test.go	Update copyright header.
version/version.go	Bump version; use ReplaceAll.
version/non_fips_build.go	Update copyright header.
version/fips_build.go	Update copyright header.
testutil/iamauthtest/testing.go	Escape request values; handle write errors.
testutil/iamauthtest/responses.go	Update copyright header.
testutil/iamauthtest/arn.go	Update copyright header.
testutil/fake-command.go	Update copyright header.
testutil/consul.go	Update copyright header.
testutil/config.go	Update copyright header.
testutil/aws.go	Harden env set/unset handling in tests.
subcommand/version/command.go	Update copyright header.
subcommand/net-dial/command_test.go	Check listener close errors in tests.
subcommand/net-dial/command.go	Warn on connection close error.
subcommand/mesh-init/command_test.go	Add tests for service-defaults registration helpers.
subcommand/mesh-init/command.go	Register service-defaults for resilience mode.
subcommand/mesh-init/checks_test.go	Update copyright header.
subcommand/mesh-init/checks.go	Update copyright header.
subcommand/health-sync/dataplane_monitor.go	Update copyright header.
subcommand/health-sync/command_test.go	Switch to SDK v2 types; new stability assertion.
subcommand/health-sync/command.go	Prevent syncing after SIGTERM begins.
subcommand/health-sync/checks_test.go	Switch to SDK v2 types in tests.
subcommand/health-sync/checks.go	Switch to SDK v2 types; adjust logging.
subcommand/envoy-entrypoint/task-monitor.go	Update copyright header.
subcommand/envoy-entrypoint/command_windows.go	Update copyright header.
subcommand/envoy-entrypoint/command_unix_test.go	Switch to SDK v2 types in tests.
subcommand/envoy-entrypoint/command_unix.go	Switch to `c.Flags()` for logging flags merge.
subcommand/envoy-entrypoint/command_common.go	Update copyright header.
subcommand/controller/command_test.go	Move ent policy const out of OSS test.
subcommand/controller/command_ent_test.go	Define ent anon policy const here.
subcommand/controller/command.go	Switch controller to SDK v2 ECS client/config.
subcommand/app-entrypoint/command_windows.go	Update copyright header.
subcommand/app-entrypoint/command_unix_test.go	Remove legacy build tag line.
subcommand/app-entrypoint/command_unix.go	Remove legacy build tag line; use `c.Flags()`.
subcommand/app-entrypoint/command_common.go	Update copyright header.
scan.hcl	Update copyright header.
main.go	Update copyright header.
logging/logger_test.go	Update copyright header.
logging/logger.go	Update copyright header.
internal/redirecttraffic/redirect_traffic_test.go	Update copyright header.
internal/redirecttraffic/redirect_traffic.go	Update copyright header.
internal/dns/dns_test.go	Update copyright header.
internal/dns/dns.go	Update copyright header.
internal/dataplane/dataplane_json.go	Update copyright header.
internal/dataplane/dataplane_config_test.go	Update copyright header.
internal/dataplane/dataplane_config.go	Update copyright header.
hack/generate-config-reference/schema.go	Update copyright header.
hack/generate-config-reference/main.go	Update copyright header.
go.sum	Update dependency checksums for SDK v2 + bumps.
go.mod	Switch dependencies to SDK v2; bump Go version.
entrypoint/cmd.go	Use promoted Start/Wait on embedded exec.Cmd.
controller/resource_test.go	Update tests for ECS SDK v2 task/tag types.
controller/resource.go	Migrate ECS listing/describing to SDK v2.
controller/policy.go	Update copyright header.
controller/mocks/sm_client.go	Update Secrets Manager mock for SDK v2.
controller/mocks/ecs_client.go	Update ECS mock for SDK v2 + pagination.
controller/controller_test.go	Update copyright header.
controller/controller.go	Update copyright header.
config/validate_test.go	Update copyright header.
config/validate.go	Update copyright header.
config/types_test.go	Update copyright header.
config/types.go	Add resilience/outlier detection config types + defaults.
config/schema.json	Add networkResilienceConfig schema and reformat.
config/schema.go	Update copyright header.
config/config_test.go	Update copyright header.
config/config.go	Migrate AWS config/credentials loading to SDK v2.
commands.go	Update copyright header.
build-scripts/version.sh	Update copyright header.
awsutil/awsutil_test.go	Update tests for NewAWSConfig and SDK v2 types.
awsutil/awsutil.go	Replace session with SDK v2 config + middleware UA.
Makefile	Allow ARCH override (use `?=`).
LICENSE	Update copyright line.
Dockerfile	Bump Go/Alpine; run apk upgrade; update go-discover ref.
CHANGELOG.md	Add unreleased notes for backported changes.
.release/security-scan.hcl	Add empty triage suppress block.
.release/release-metadata.hcl	Update copyright header.
.release/consul-ecs-artifacts.hcl	Add artifacts manifest for release outputs.
.release/ci.hcl	Update copyright header.
.golangci.yml	Update config format; move gofmt to formatters.
.go-version	Bump Go toolchain version.
.github/workflows/test.yml	Update triggers, runners, lint action/version, Consul test matrix.
.github/workflows/security-scan.yml	Pin runner to ubuntu-22.04.
.github/workflows/reusable-get-go-version.yml	Pin runner to ubuntu-22.04.
.github/workflows/build.yml	Add PR trigger; refactor builds; Docker-based FIPS build.
.github/pull_request_template.md	Add PCI checklist section.
.github/containers/ubuntu/fips-build-Dockerfile	Add Ubuntu-based FIPS build container.
.github/CODEOWNERS	Add team-consul-platform and widen release ownership.
.dockerignore	Allowlist source for Docker/FIPS builds.

Comments suppressed due to low confidence (1)

subcommand/health-sync/command_test.go:723

This adds a hard-coded 5s polling loop (plus sleeps) to every non-missing-dataplane gateway test case, which will noticeably slow the unit test suite and can increase flakiness on slower CI runners. Consider basing the wait duration on syncChecksInterval (e.g., a small multiple) or using require.Never/require.Eventually with a shorter timeout and tighter assertions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

…k update

kswap

LGTM

jeanneryan and others added 30 commits August 1, 2024 10:29

Add artifacts manifest (automatically generated)

4f3938b

add copyright header

26810d6

Update artifact manifest license header

788f8e3

Match LICENSE file.

Merge branch 'main' into artifact-manifest/main/yearly-quick-anteater

55e05b3

Merge branch 'main' into artifact-manifest/main/yearly-quick-anteater

f6fb1ed

Merge pull request #261 from hashicorp/artifact-manifest/main/yearly-…

ae4ca6f

…quick-anteater Add artifacts manifest (automatically generated)

Update aws-sdk-go

cee6eca

Merge pull request #272 from hashicorp/abhishek/fix-sec-scan-aws

f618946

[SecVul] Update aws-sdk-go

Consume latest version of consul-awsauth dependency (#274)

46744af

* Consume latest version of consul-awsauth dependency * Update CHANGELOG.md

Update CHANGELOG.md after 0.9.0 release (#276)

4719bed

Remove info log from health-sync checks (#277)

43cf580

* Remove excess logs in health-sync * Added changelog

Fix vulnerabilities (#278)

12205e1

* Fix vulnerabiility * Added changelog * Update Dockerfile * Updated golangci-lint version to 1.60.1

update codeowners (#288)

5a4867e

build: updated the runner to ubuntu-22.04 (#287)

28ea956

build: update build workflow to run on pull request to main (#289)

dc3ecc7

fix: add shuttingDown flag to prevent syncChecks after SIGTERM (#290)

c25125b

--------- Co-authored-by: João Rafael <joaoraf@me.com>

Pin docker/setup-qemu-action to specific commit for stability.

34b4fcd

Merge pull request #296 from hashicorp/nitin/sec-vuln-fix

5995ec5

Pin `docker/setup-qemu-action` to specific commit for stability.

[Compliance] - PR Template Changes Required

37eb146

Merge pull request #297 from hashicorp/compliance-template

90d2388

[Compliance] - PR Template Changes Required

updated Codeowners file

1a74e68

Signed-off-by: Manisha Kumari <manisha.kumari@hashicorp.com>

[COMPLIANCE] Update Copyright and License Headers (Batch 1 of 1)

061a3af

Test with latest consul versions

536ff4f

Update consul CE version

02fc18b

Merge pull request #304 from hashicorp/upgrade_consul_version

c601a4f

Test with latest consul versions

Add Security vulnerabilities fix

a3e66d3

Update go version for CI

49d2491

Update golangci-lint version

7f77a9e

Upgrade go version to 1.25.5

8c960be

paras-gupta2 added 13 commits February 25, 2026 14:50

Merge pull request #312 from hashicorp/check/0.9.4

02a9c0d

Testing test cases with latest consul version

Update Dockerfile to fix curl and gnupg vulnerabilities; update chang…

1fe3949

…elog

Upgrading the aws sdk v1 to v2 to resolve lint issue

7c637ac

Upgrading the aws sdk v1 to v2 to resolve lint issue

13a1bbf

fix lint issue

ada86b5

fix issue in awsutil file

ef5110d

fix issues and optimise the sdk v2 changes

4d31c86

Add changelog

07d8cee

Remove commented code

03935db

Upgrade the alpine version of docker to latest

356af4e

Add error handling

fce3387

Merge pull request #314 from hashicorp/prepare/0.9.4

b40e18f

Fix AWS SDK v1 CVE

Copilot AI review requested due to automatic review settings March 2, 2026 11:52

paras-gupta2 requested review from a team as code owners March 2, 2026 11:52

paras-gupta2 requested a review from ashconnor March 2, 2026 11:52

Copilot started reviewing on behalf of paras-gupta2 March 2, 2026 11:52 View session

Copilot AI reviewed Mar 2, 2026

View reviewed changes

Comment thread Dockerfile Outdated

Comment thread subcommand/mesh-init/command.go

Comment thread controller/resource.go Outdated

Comment thread go.mod

paras-gupta2 temporarily deployed to dockerhub/hashicorpdev March 2, 2026 12:17 — with GitHub Actions Inactive

Fix AWS context cancellation in fetchECSTasks and remove redundant ap…

b6ebd4f

…k update

paras-gupta2 force-pushed the backport-0.9.4 branch from b0174a7 to b6ebd4f Compare March 2, 2026 15:25

Merge branch 'release/0.9.x' into backport-0.9.4

303b2b1

paras-gupta2 temporarily deployed to dockerhub/hashicorpdev March 2, 2026 15:50 — with GitHub Actions Inactive

kswap reviewed Mar 5, 2026

View reviewed changes

Comment thread .github/workflows/test.yml

kswap approved these changes Mar 12, 2026

View reviewed changes

paras-gupta2 merged commit 84b1c33 into release/0.9.x Mar 12, 2026
29 checks passed

paras-gupta2 deleted the backport-0.9.4 branch March 12, 2026 06:31

paras-gupta2 restored the backport-0.9.4 branch March 13, 2026 08:32

paras-gupta2 temporarily deployed to dockerhub/hashicorpdev March 13, 2026 08:54 — with GitHub Actions Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Preparing for 0.9.4 patch release#318

Preparing for 0.9.4 patch release#318
paras-gupta2 merged 63 commits intorelease/0.9.xfrom
backport-0.9.4

paras-gupta2 commented Mar 2, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kswap left a comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants

Conversation

paras-gupta2 commented Mar 2, 2026

Changes proposed in this PR:

Checklist:

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

kswap left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

11 participants