Consul v2.0.1

v2.0.1
Changed 4
  • Reduce Dockerfile layers by merging RUN commands and following best practices
  • Product usage reporting now preserves export cadence across restarts and leader re-elections by resuming from the last successful export time
  • Auth method TokenNameFormat field accepts OIDC and JWT claim mapping values
  • Remove block-slot addon dependency from UI
Fixed 2
  • Strip the x-forwarded-client-cert header from inbound HTTP requests before forwarding them to local service instances
  • Fix a bug where renaming a server or wiping and rejoining it with the same IP and Raft node ID could cause an out-of-order serf event to evict the live leader from the internal server lookup, resulting in Raft leader not found errors
Security 2
  • Upgrade Go version to 1.26.4 to address GO-2026-5039, GO-2026-5038, GO-2026-5037
  • Upgrade Envoy version to 1.37.4, 1.36.8, 1.35.12 and add new version 1.38.2, remove 1.34.14
2.0.1 (June 18, 2026)

SECURITY:

IMPROVEMENTS:

  • dockerfile: layer reduction by merging RUN commands and minor changes following best practices. [GH-23650]
  • product-telemetry: product usage reporting now preserves export cadence across restarts and leader re-elections by resuming from the last successful export time, preventing delays
  • server: Auth method TokenNameFormat field accepts OIDC and JWT claim mapping values [GH-23616]
  • ui: Removed block-slot addon dependency [GH-23481]

BUG FIXES:

  • connect: Strip the x-forwarded-client-cert header from inbound HTTP requests before forwarding them to local service instances. [GH-23544]
  • server: Fixed a bug where renaming a server (or wiping and rejoining it with the same IP and Raft node ID) could cause an out-of-order serf event to evict the live leader from the internal server lookup, resulting in Raft leader not found in server lookup mapping (HTTP 500) errors on follower RPCs until the next member event resynced the mapping. [GH-23533]
View original

Upgraded? How did it go?

Discussion