Nomad

Infrastructure & DevOps

A simple and flexible scheduler and orchestrator for containers and non-containerized workloads.

Latest v2.0.7 · by HashiCorpWritten in GoWebsitehashicorp/nomadRSS

Release activity

Release activity — 13 releases across 8 days since May 12, 2026. Each cell is one day; darker means more releases that day. Nothing is recorded before May 12, 2026. Older weeks are hidden at this screen width.
JulAugSepOct
SundayNo releases on Jun 28, 2026No releases on Jul 5, 2026No releases on Jul 12, 2026No releases on Jul 19, 2026No releases on Jul 26, 2026No releases on Aug 2, 2026No releases on Aug 9, 2026No releases on Aug 16, 2026No releases on Aug 23, 2026No releases on Aug 30, 2026No releases on Sep 6, 2026No releases on Sep 13, 2026No releases on Sep 20, 2026No releases on Sep 27, 2026No releases on Oct 4, 2026No releases on Oct 11, 2026
MondayNo releases on Jun 29, 2026No releases on Jul 6, 2026No releases on Jul 13, 2026No releases on Jul 20, 2026No releases on Jul 27, 2026No releases on Aug 3, 2026No releases on Aug 10, 2026No releases on Aug 17, 2026No releases on Aug 24, 2026No releases on Aug 31, 2026No releases on Sep 7, 2026No releases on Sep 14, 2026No releases on Sep 21, 2026No releases on Sep 28, 2026No releases on Oct 5, 2026No releases on Oct 12, 2026
TuesdayNo releases on Jun 30, 20261 release on Jul 7, 2026No releases on Jul 14, 2026No releases on Jul 21, 2026No releases on Jul 28, 2026No releases on Aug 4, 2026No releases on Aug 11, 2026No releases on Aug 18, 2026No releases on Aug 25, 2026No releases on Sep 1, 2026No releases on Sep 8, 2026No releases on Sep 15, 2026No releases on Sep 22, 2026No releases on Sep 29, 2026No releases on Oct 6, 2026No releases on Oct 13, 2026
WednesdayNo releases on Jul 1, 20262 releases on Jul 8, 2026No releases on Jul 15, 2026No releases on Jul 22, 2026No releases on Jul 29, 2026No releases on Aug 5, 2026No releases on Aug 12, 2026No releases on Aug 19, 2026No releases on Aug 26, 2026No releases on Sep 2, 20261 release on Sep 9, 2026No releases on Sep 16, 2026No releases on Sep 23, 2026No releases on Sep 30, 2026No releases on Oct 7, 2026No releases on Oct 14, 2026
ThursdayNo releases on Jul 2, 2026No releases on Jul 9, 2026No releases on Jul 16, 2026No releases on Jul 23, 2026No releases on Jul 30, 2026No releases on Aug 6, 20261 release on Aug 13, 2026No releases on Aug 20, 2026No releases on Aug 27, 2026No releases on Sep 3, 2026No releases on Sep 10, 2026No releases on Sep 17, 2026No releases on Sep 24, 2026No releases on Oct 1, 2026No releases on Oct 8, 2026
FridayNo releases on Jul 3, 2026No releases on Jul 10, 2026No releases on Jul 17, 2026No releases on Jul 24, 2026No releases on Jul 31, 2026No releases on Aug 7, 2026No releases on Aug 14, 2026No releases on Aug 21, 2026No releases on Aug 28, 2026No releases on Sep 4, 2026No releases on Sep 11, 20261 release on Sep 18, 2026No releases on Sep 25, 2026No releases on Oct 2, 2026No releases on Oct 9, 2026
SaturdayNo releases on Jul 4, 2026No releases on Jul 11, 2026No releases on Jul 18, 2026No releases on Jul 25, 2026No releases on Aug 1, 2026No releases on Aug 8, 2026No releases on Aug 15, 2026No releases on Aug 22, 2026No releases on Aug 29, 2026No releases on Sep 5, 2026No releases on Sep 12, 2026No releases on Sep 19, 2026No releases on Sep 26, 2026No releases on Oct 3, 2026No releases on Oct 10, 2026

13 releases since May 12, 2026, busiest day 3

Changelog

v2.0.7

Latest
Changed 2
  • Upgrade to the latest buf (1.72.0), protoc-gen-go (1.36.6), and protoc-gen-go-grpc (1.5.1)
  • Default workload identity policy now allows using wildcard namespace queries for Nomad native services
Fixed 12
  • Fixed accessibility color contrast issues in the UI
  • Fix job statuses error when request body is empty using HTTP2
  • Fixed a bug where task restart skipped shutdown_delay
  • Fixed a bug where re-submitting an otherwise unchanged job with a different ACL token created a new job version and deployment
  • Fixed a bug where system job updates would not result in a new deployment if the prior deployment failed
  • Fixed a bug where image_pull_timeout was not respected if more than 5min

From Nomad

IMPROVEMENTS:

  • dependency: Upgrade to the latest buf (1.72.0), protoc-gen-go (1.36.6), and protoc-gen-go-grpc (1.5.1) [GH-28525]
  • services: the default workload identity policy now allows using wildcard namespace queries for Nomad native services [GH-28534]
  • ui: fixed accessibility color contrast issues [GH-28022]

BUG FIXES:

  • api: Fix job statuses error when request body is empty using HTTP2 [GH-28541]
  • client: Fixed a bug where task restart skipped shutdown_delay [GH-25289]
  • core: Fixed a bug where re-submitting an otherwise unchanged job with a different ACL token created a new job version and deployment [GH-26810]
  • deployments: Fixed a bug where system job updates would not result in a new deployment if the prior deployment failed [GH-28545]
  • docker: Fixed a bug where image_pull_timeout was not respected if more than 5min [GH-28543]
  • identity: Fixed a bug where clients would not attempt to recreate expired node identities [GH-28566]
  • namespaces: Fixed a bug where an invalid replication token could delete namespaces in a federated follower region [GH-28552]
  • namespaces: Fixed a bug where namespaces could stop replicating between federated regions [GH-28552]
  • node pools: Fixed a bug where an invalid replication token could delete node pools in a federated follower region [GH-28552]
  • node pools: Fixed a bug where blocking queries would not unblock if a node pool was added automatically by registering a node [GH-28552]
  • node pools: Fixed a bug where node pools could stop replicating between federated regions [GH-28552]
View originalPermalink
How v2.0.7 went

v2.0.6

Added 2
  • Added the unique.host_id node attribute to the host fingerprint, when available
  • Decouple jobspec2 from Nomad core with isolated Go module named github.com/hashicorp/nomad/jobspec2
Changed 5
  • Updated the Go module to require at least 1.26.0
  • Updated Go to v1.27.1
  • Allow setting reschedule.delay to values as low as 1s
  • Improved robustness of reschedule logic for invalid states
  • Prevent stuck requests due to exceeding connection limit, enable HTTP2
Fixed 9
  • Fixed a bug where a job plan diff sorted indexed fields such as args lexically, listing args[10] before args[2]
  • Prevent Alloc FS API from accessing secret dir when symlinked into task
  • Fixed a bug where an artifact checksum of the form file:<url> (fetching the checksum from a remote file) was rejected during job validation
  • Fixed a bug where a task group containing only lifecycle tasks and no main task was accepted during job validation
  • Fixed a bug where valid evaluations could be unnecessarily retried, delaying workload placement under load
  • Fixed a bug where task groups with per_alloc volumes could skip real feasibility checks for allocs after the first placement failure in the same task group
Security 1
  • Upgrade to the latest go-getter
View originalRead the notes
How v2.0.6 went

v2.0.5

Added 3
  • Add -json-output and -t flags to nomad job plan for structured plan output
  • Add plan_apply_pipeline configuration to allow the leader to have more outstanding Raft writes when evaluating plans
  • Add run_on_first_render option to change_script to execute scripts on the initial template render via the task Poststart lifecycle hook
Changed 6
  • Update Go to v1.26.5
  • Change Nomad native service check IDs to use SHA256
  • Add the issuing Nomad client's node ID to the metadata of Consul tokens created via workload identity
  • Derive Consul check IDs from SHA256 instead of SHA1
  • Remove the requirement that a variable validation error_message be a full English sentence
  • Change rendezvous hashes to use SHA256
Fixed 10
  • Fix a bug where the startup banner would display the wrong node ID for servers after restart
  • Fix a bug where the client allocation endpoints returned a 500 error instead of a 404 when the allocation's node could not be found
  • Fix a bug where nodes could not sync allocations placed on them after being moved to a different node pool
  • Fix a bug where nomad operator root keyring remove would not accept an abbreviated key ID
  • Fix issue where deleted allocations may remain running
  • Fix a bug where a client could panic after an alloc is GC'd
Removed 1
  • Remove the DriverNetwork.Hash method from the plugin/drivers package
View originalRead the notes
How v2.0.5 went
ent-changelog-1.11.8

v1.11.8 (Enterprise)

Added 2
  • Added optional `Init` function for task driver plugins
  • Added optional `Shutdown` function for task driver plugins
Changed 1
  • Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable
Fixed 10
  • Allow using workload identity tokens on plan endpoint
  • Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI
  • Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted
  • Expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs
  • Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests
  • Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking
Security 3
  • Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in docker task
  • Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false
  • Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace
View originalRead the notes
How ent-changelog-1.11.8 went
ent-changelog-1.10.14

v1.10.14 (Enterprise)

Added 2
  • Added optional `Init` function for task driver plugins
  • Added optional `Shutdown` function for task driver plugins
Changed 1
  • Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable
Fixed 10
  • Allow using WI tokens on plan endpoint
  • Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI
  • Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted
  • Expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs
  • Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests
  • Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking
Security 3
  • Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in docker task
  • Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false
  • Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace
View originalRead the notes
How ent-changelog-1.10.14 went

v2.0.4

Added 6
  • Add a `-kv-path` flag to `nomad setup vault` to configure the Vault KV mount used by the generated workload policy
  • Add `-json` and `-t` options to the `operator autopilot get-config` command
  • Add tunable for Vault default lease duration on templates for paths without leases
  • Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable
  • Add optional `Init` function for task driver plugins
  • Add optional `Shutdown` function for task driver plugins
Changed 1
  • Stop failed allocations first when downscaling a task group
Fixed 9
  • Allow using WI tokens on plan endpoint
  • Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI
  • Fixed a bug where a client could panic after an alloc is GC'd
  • Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted
  • Expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs
  • Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests
Deprecated 1
  • Unauthenticated server join via the CLI or API is deprecated
Security 3
  • Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in docker task
  • Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false
  • Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace
View originalRead the notes
How v2.0.4 went
ent-changelog-1.10.13

v1.10.13 (Enterprise)

Changed 2
  • Update Go to 1.26.4
  • Add token renewal retries to Vault
Fixed 14
  • Fixed a bug where alloc exec and job actions requests from the web browser would be marked as anonymous in audit logs
  • Fixed a bug where tasks could accidentally get killed mid-restart on template re-render
  • Fixed a bug where task states could accidentally be overwritten
  • Re-write Consul service identity token when reattaching to task
  • Re-enabled use of multiple Vault namespaces in a single job
  • Store verified and canonicalised plugin configuration in the agent
Security 1
  • Redact token and certificate key CLI flags and environment variables when writing debug bundle
View originalRead the notes
How ent-changelog-1.10.13 went
ent-changelog-1.11.7

v1.11.7 (Enterprise)

Changed 2
  • Updated Go to 1.26.4
  • Add token renewal retries to Vault integration
Fixed 14
  • Fixed a bug where alloc exec and job actions requests from the web browser would be marked as anonymous in audit logs
  • Fixed a bug where tasks could accidentally get killed mid-restart on template re-render
  • Fixed a bug where task states could accidentally get overwritten
  • Re-write Consul service identity token when reattaching to task
  • Re-enable use of multiple Vault namespaces in a single job
  • Store verified and canonicalised plugin configuration in the agent
Security 1
  • Redact token and certificate key CLI flags and environment variables when writing debug bundle
View originalRead the notes
How ent-changelog-1.11.7 went

v2.0.3

Added 2
  • Add timeouts for batch jobs
  • Add agent reload endpoint
Changed 6
  • Support uploading client ACL tokens
  • Don't restore when allocDir is inaccessible
  • Add default_ineligible configuration option
  • Allow additional claims to be added to workload identities
  • Add token renewal retries for Vault
  • Update Go to 1.26.4
Fixed 11
  • Fix audit logs marking alloc exec and job actions requests from web browser as anonymous
  • Fix job dispatch and job periodic force failing with paginator error against older servers
  • Fix tasks accidentally getting killed mid-restart on template re-render
  • Re-write Consul service identity token when reattaching to task
  • Re-enable use of multiple Vault namespaces in a single job
  • Store verified and canonicalised plugin configuration in the agent
Security 1
  • Redact token and certificate key CLI flags and environment variables when writing debug bundle
View originalRead the notes
How v2.0.3 went
ent-changelog-1.10.12

v1.10.12 (Enterprise)

Fixed 3
  • Fixed a bug where the client detail page would fail to render
  • Fixed a bug where the topology page would fail to render
  • Fixed a bug where the evaluation detail panel would render improperly
View originalRead the notes
How ent-changelog-1.10.12 went
ent-changelog-1.11.6

v1.11.6 (Enterprise)

Fixed 3
  • Fixed a bug where the client detail page would fail to render
  • Fixed a bug where the topology page would fail to render
  • Fixed a bug where the evaluation detail panel would render improperly
View originalRead the notes
How ent-changelog-1.11.6 went

v2.0.2

Fixed 4
  • fix rpc permission denied error when using node_pool="all"
  • Fixed a bug where the client detail page would fail to render
  • Fixed a bug where the topology page would fail to render
  • Fixed a bug where the evaluation detail panel would render improperly
View originalRead the notes
How v2.0.2 went

v2.0.1

Added 5
  • Add "latest" flag for tagging the latest version of a job
  • Add retry for nomad job run monitoring
  • Add monitoring and verbose option to job dispatch
  • Add a configuration field for the number of nodes that the scheduler considers when spread or affinity is in use
  • Warn on job submit when job has services but no shutdown_delay
Changed 6
  • Upgraded Ember to 6.10
  • Update Go toolchain to 1.26.3
  • Automatically expand `nomad exec -it` to `-i -t`
  • Job plan now propagates `-hcl2-strict=false` into the suggested `nomad job run -check-index` invocation when the user passed it on the plan command line
  • Include volume RequestName within mount config information if available
  • RPC dial timeout is configurable
Fixed 5
  • Fix a bug where the Create Job, Update Job, and Scale Job APIs could fail to respect EnforceIndex under concurrent requests
  • Avoid setting job to dead while waiting for allocations to reschedule
  • Improve check of StagePublishBaseDir being subdirectory of MountDir
  • Reset ProgressDeadline after pausing deployments and do not fail while paused
  • Kill plugin instance on dispense failure
Removed 1
  • Allocation logs directory is now bind-mounted read-only for task drivers that support filesystem isolation
Security 3
  • Prevent unintended code execution outside the plugin directory in dynamic host volumes (CVE-2026-7474)
  • Protect logging FIFO from symlink swap attacks (CVE-2026-6959)
  • Require sentinel-override ACL capability for overriding soft-mandatory policies on volumes
View originalRead the notes
How v2.0.1 went

More in Infrastructure & DevOps

View all
n8n

Fair-code workflow automation, self-hosted or cloud.

n8n-io
Kubernetes

Production-grade container orchestration for automated deployment and scaling.

CNCF
frp

A fast reverse proxy that exposes a local server behind NAT or a firewall to the internet.

fatedier
Docker Engine

The container runtime that packages software into portable images.

Docker
Home Assistant

Open-source home automation that puts local control first.

Open Home Foundation
Ansible

A radically simple IT automation platform.

Red Hat

Discussion

If you publish Nomad, you can claim this product by proving you administer its repository.