# Nomad changelog > A simple and flexible scheduler and orchestrator for containers and non-containerized workloads. - Vendor: HashiCorp - Category: Developer Tools - Official site: https://www.nomadproject.io - Tracked by: What's New (https://whatsnew.fyi/product/nomad) - Harvested from: GitHub (hashicorp/nomad) - Entries below: 10 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### ent-changelog-1.11.8 — v1.11.8 (Enterprise) - Date: 2026-07-08 - Version: ent-changelog-1.11.8 - Original notes: https://github.com/hashicorp/nomad/releases/tag/ent-changelog-1.11.8 - Permalink: https://whatsnew.fyi/product/nomad/releases/ent-changelog-1.11.8 - **security** — Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in docker task - **security** — Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false - **security** — Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace - **changed** — Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable - **added** — Added optional `Init` function for task driver plugins - **added** — Added optional `Shutdown` function for task driver plugins - **fixed** — Allow using workload identity tokens on plan endpoint - **fixed** — Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI - **fixed** — Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted - **fixed** — Expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs - **fixed** — Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests - **fixed** — Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking - **fixed** — Keep draining batch alloc counted when node is re-enabled - **fixed** — Improve the memory management for secrets - **fixed** — Fixed a bug where jobs that share a ModifyIndex were omitted from the jobs page and the `/v1/jobs/statuses` endpoint - **fixed** — Fixed an issue where streaming task logs would error SECURITY: * docker: Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in task. This is CVE-2026-14891. [[GH-28190](https://github.com/hashicorp/nomad/issues/28190)] * docker: Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false. This is CVE-2026-14896. [[GH-28177](https://github.com/hashicorp/nomad/issues/28177)] * dynamic host volumes: Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace [[GH-28205](https://github.com/hashicorp/nomad/issues/28205)] IMPROVEMENTS: * consul: Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable [[GH-28106](https://github.com/hashicorp/nomad/issues/28106)] * driver: Added optional `Init` function for task driver plugins [[GH-28104](https://github.com/hashicorp/nomad/issues/28104)] * driver: Added optional `Shutdown` function for task driver plugins [[GH-28102](https://github.com/hashicorp/nomad/issues/28102)] BUG FIXES: * api: allow using WI tokens on plan endpoint [[GH-28139](https://github.com/hashicorp/nomad/issues/28139)] * cli: Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI [[GH-28138](https://github.com/hashicorp/nomad/issues/28138)] * dynamic host volumes: Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted [[GH-28198](https://github.com/hashicorp/nomad/issues/28198)] * metrics: expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs [[GH-28170](https://github.com/hashicorp/nomad/issues/28170)] * scheduler: Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests [[GH-28097](https://github.com/hashicorp/nomad/issues/28097)] * scheduler: Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking [[GH-28097](https://github.com/hashicorp/nomad/issues/28097)] * scheduler: keep draining batch alloc counted when node is re-enabled [[GH-28018](https://github.com/hashicorp/nomad/issues/28018)] * task runner: Improve the memory management for secrets [[GH-28140](https://github.com/hashicorp/nomad/issues/28140)] * ui: Fixed a bug where jobs that share a ModifyIndex (for example, several jobs rescheduled in a single Raft transaction after a node failure) were omitted from the jobs page and the `/v1/jobs/statuses` endpoint [[GH-28132](https://github.com/hashicorp/nomad/issues/28132)] * ui: fixes an issue where streaming task logs would error [[GH-28137](https://github.com/hashicorp/nomad/issues/28137)] ### ent-changelog-1.10.14 — v1.10.14 (Enterprise) - Date: 2026-07-08 - Version: ent-changelog-1.10.14 - Original notes: https://github.com/hashicorp/nomad/releases/tag/ent-changelog-1.10.14 - Permalink: https://whatsnew.fyi/product/nomad/releases/ent-changelog-1.10.14 - **security** — Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in docker task - **security** — Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false - **security** — Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace - **changed** — Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable - **added** — Added optional `Init` function for task driver plugins - **added** — Added optional `Shutdown` function for task driver plugins - **fixed** — Allow using WI tokens on plan endpoint - **fixed** — Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI - **fixed** — Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted - **fixed** — Expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs - **fixed** — Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests - **fixed** — Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking - **fixed** — Keep draining batch alloc counted when node is re-enabled - **fixed** — Improve the memory management for secrets - **fixed** — Fixed a bug where jobs that share a ModifyIndex were omitted from the jobs page and the `/v1/jobs/statuses` endpoint - **fixed** — Fixed an issue where streaming task logs would error SECURITY: * docker: Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in task. This is CVE-2026-14891. [[GH-28190](https://github.com/hashicorp/nomad/issues/28190)] * docker: Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false. This is CVE-2026-14896. [[GH-28177](https://github.com/hashicorp/nomad/issues/28177)] * dynamic host volumes: Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace [[GH-28205](https://github.com/hashicorp/nomad/issues/28205)] IMPROVEMENTS: * consul: Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable [[GH-28106](https://github.com/hashicorp/nomad/issues/28106)] * driver: Added optional `Init` function for task driver plugins [[GH-28104](https://github.com/hashicorp/nomad/issues/28104)] * driver: Added optional `Shutdown` function for task driver plugins [[GH-28102](https://github.com/hashicorp/nomad/issues/28102)] BUG FIXES: * api: allow using WI tokens on plan endpoint [[GH-28139](https://github.com/hashicorp/nomad/issues/28139)] * cli: Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI [[GH-28138](https://github.com/hashicorp/nomad/issues/28138)] * dynamic host volumes: Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted [[GH-28198](https://github.com/hashicorp/nomad/issues/28198)] * metrics: expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs [[GH-28170](https://github.com/hashicorp/nomad/issues/28170)] * scheduler: Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests [[GH-28097](https://github.com/hashicorp/nomad/issues/28097)] * scheduler: Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking [[GH-28097](https://github.com/hashicorp/nomad/issues/28097)] * scheduler: keep draining batch alloc counted when node is re-enabled [[GH-28018](https://github.com/hashicorp/nomad/issues/28018)] * task runner: Improve the memory management for secrets [[GH-28140](https://github.com/hashicorp/nomad/issues/28140)] * ui: Fixed a bug where jobs that share a ModifyIndex (for example, several jobs rescheduled in a single Raft transaction after a node failure) were omitted from the jobs page and the `/v1/jobs/statuses` endpoint [[GH-28132](https://github.com/hashicorp/nomad/issues/28132)] * ui: fixes an issue where streaming task logs would error [[GH-28137](https://github.com/hashicorp/nomad/issues/28137)] ### v2.0.4 - Date: 2026-07-07 - Version: v2.0.4 - Original notes: https://github.com/hashicorp/nomad/releases/tag/v2.0.4 - Permalink: https://whatsnew.fyi/product/nomad/releases/v2.0.4 - **security** — Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in docker task - **security** — Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false - **security** — Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace - **added** — Add a `-kv-path` flag to `nomad setup vault` to configure the Vault KV mount used by the generated workload policy - **added** — Add `-json` and `-t` options to the `operator autopilot get-config` command - **added** — Add tunable for Vault default lease duration on templates for paths without leases - **added** — Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable - **added** — Add optional `Init` function for task driver plugins - **added** — Add optional `Shutdown` function for task driver plugins - **changed** — Stop failed allocations first when downscaling a task group - **deprecated** — Unauthenticated server join via the CLI or API is deprecated - **fixed** — Allow using WI tokens on plan endpoint - **fixed** — Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI - **fixed** — Fixed a bug where a client could panic after an alloc is GC'd - **fixed** — Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted - **fixed** — Expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs - **fixed** — Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests - **fixed** — Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking - **fixed** — Keep draining batch alloc counted when node is re-enabled - **fixed** — Improve the memory management for secrets ##### 2.0.4 (July 07, 2026) SECURITY: * docker: Enforce `allowed_modes` or `allow_privileged` requirement to set host namespace modes in task. This is CVE-2026-14891. [[GH-28190](https://github.com/hashicorp/nomad/issues/28190)] * docker: Fixed a bug where docker tasks could use a symlink to bypass the plugin configuration for volumes.enabled=false. This is CVE-2026-14896. [[GH-28177](https://github.com/hashicorp/nomad/issues/28177)] * dynamic host volumes: Fixed a bug where users with `host-volume-delete` in one namespace could delete claims from another namespace [[GH-28205](https://github.com/hashicorp/nomad/issues/28205)] IMPROVEMENTS: * cli: Add a `-kv-path` flag to `nomad setup vault` to configure the Vault KV mount used by the generated workload policy [[GH-28183](https://github.com/hashicorp/nomad/issues/28183)] * cli: Added `-json` and `-t` options to the `operator autopilot get-config` command. [[GH-27991](https://github.com/hashicorp/nomad/issues/27991)] * client: Add tunable for Vault default lease duration on templates for paths without leases. [[GH-28199](https://github.com/hashicorp/nomad/issues/28199)] * consul: Allow service, template, and connect blocks to fallback to the Nomad client agent's Consul token if workload identity is unavailable [[GH-28106](https://github.com/hashicorp/nomad/issues/28106)] * driver: Added optional `Init` function for task driver plugins [[GH-28104](https://github.com/hashicorp/nomad/issues/28104)] * driver: Added optional `Shutdown` function for task driver plugins [[GH-28102](https://github.com/hashicorp/nomad/issues/28102)] * scheduler: Stop failed allocations first when downscaling a task group [[GH-27971](https://github.com/hashicorp/nomad/issues/27971)] DEPRECATIONS: * agent: Unauthenticated server join via the CLI or API is deprecated. [[GH-28176](https://github.com/hashicorp/nomad/issues/28176)] BUG FIXES: * api: allow using WI tokens on plan endpoint [[GH-28139](https://github.com/hashicorp/nomad/issues/28139)] * cli: Fixed a bug where complex HCL variables passed via -var flag could not be edited in the web UI [[GH-28138](https://github.com/hashicorp/nomad/issues/28138)] * client: Fixed a bug where a client could panic after an alloc is GC'd [[GH-28187](https://github.com/hashicorp/nomad/issues/28187)] * dynamic host volumes: Fixed a bug where allocations claiming host volumes with the per_alloc flag would not prevent the volume from being deleted [[GH-28198](https://github.com/hashicorp/nomad/issues/28198)] * metrics: expired metrics are now periodically cleared from the Prometheus sink even if no collection occurs [[GH-28170](https://github.com/hashicorp/nomad/issues/28170)] * scheduler: Fixed a bug where a node could be marked feasible for a task group requesting multiple host volumes when a satisfied sticky volume request short-circuited the checks for the remaining requests [[GH-28097](https://github.com/hashicorp/nomad/issues/28097)] * scheduler: Fixed a bug where setting `sticky` on a static host volume could fail the evaluation instead of being rejected during feasibility checking [[GH-28097](https://github.com/hashicorp/nomad/issues/28097)] * scheduler: keep draining batch alloc counted when node is re-enabled [[GH-28018](https://github.com/hashicorp/nomad/issues/28018)] * task runner: Improve the memory management for secrets [[GH-28140](https://github.com/hashicorp/nomad/issues/28140)] * ui: Fixed a bug where jobs that share a ModifyIndex (for example, several jobs rescheduled in a single Raft transaction after a node failure) were omitted from the jobs page and the `/v1/jobs/statuses` endpoint [[GH-28132](https://github.com/hashicorp/nomad/issues/28132)] * ui: fixes an issue where streaming task logs would error [[GH-28137](https://github.com/hashicorp/nomad/issues/28137)] ### ent-changelog-1.10.13 — v1.10.13 (Enterprise) - Date: 2026-06-09 - Version: ent-changelog-1.10.13 - Original notes: https://github.com/hashicorp/nomad/releases/tag/ent-changelog-1.10.13 - Permalink: https://whatsnew.fyi/product/nomad/releases/ent-changelog-1.10.13 - **security** — Redact token and certificate key CLI flags and environment variables when writing debug bundle - **changed** — Update Go to 1.26.4 - **changed** — Add token renewal retries to Vault - **fixed** — Fixed a bug where alloc exec and job actions requests from the web browser would be marked as anonymous in audit logs - **fixed** — Fixed a bug where tasks could accidentally get killed mid-restart on template re-render - **fixed** — Fixed a bug where task states could accidentally be overwritten - **fixed** — Re-write Consul service identity token when reattaching to task - **fixed** — Re-enabled use of multiple Vault namespaces in a single job - **fixed** — Store verified and canonicalised plugin configuration in the agent - **fixed** — Fixed a bug where templates with change_mode=noop would stop monitoring templates that fatally fail after initial rendering - **fixed** — Fixed a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI - **fixed** — Fixed service detail page not rendering in the UI - **fixed** — Fixed a bug where the evaluation detail panel would render improperly in the UI - **fixed** — Fixed flickering on the log streaming pop out when viewing them from job overview page in the UI - **fixed** — Fixed the client drain popover form to provide an accessible name for assistive technologies - **fixed** — Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility - **fixed** — Fixed the namespace list being continually fetched when on the job overview page in the UI SECURITY: * cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [[GH-28063](https://github.com/hashicorp/nomad/issues/28063)] IMPROVEMENTS: * build: Updated Go to 1.26.4 [[GH-28080](https://github.com/hashicorp/nomad/issues/28080)] * vault: adds token renewal retries [[GH-27947](https://github.com/hashicorp/nomad/issues/27947)] BUG FIXES: * audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [[GH-28025](https://github.com/hashicorp/nomad/issues/28025)] * client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [[GH-27960](https://github.com/hashicorp/nomad/issues/27960)] * client: fix a bug where we could accidentally overwrite task states [[GH-27944](https://github.com/hashicorp/nomad/issues/27944)] * consul: re-write consul service identity token when reattaching to task [[GH-27936](https://github.com/hashicorp/nomad/issues/27936)] * job (Enterprise): Renabled use of multiple vault namespaces in a single job * plugins: store verified and canonicalised plugin configuration in the agent [[GH-28083](https://github.com/hashicorp/nomad/issues/28083)] * template: Fixed a bug where templates with `change_mode=noop` would stop monitoring templates that fatally fail after initial rendering [[GH-28016](https://github.com/hashicorp/nomad/issues/28016)] * ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [[GH-28095](https://github.com/hashicorp/nomad/issues/28095)] * ui: Fix service detail page not rendering [[GH-28005](https://github.com/hashicorp/nomad/issues/28005)] * ui: Fixed a bug where the evaluation detail panel would render improperly [[GH-27987](https://github.com/hashicorp/nomad/issues/27987)] * ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [[GH-28074](https://github.com/hashicorp/nomad/issues/28074)] * ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [[GH-28047](https://github.com/hashicorp/nomad/issues/28047)] * ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [[GH-28029](https://github.com/hashicorp/nomad/issues/28029)] * ui: Fixed the namespace list being continually fetched when on the job overview page [[GH-28074](https://github.com/hashicorp/nomad/issues/28074)] ### ent-changelog-1.11.7 — v1.11.7 (Enterprise) - Date: 2026-06-09 - Version: ent-changelog-1.11.7 - Original notes: https://github.com/hashicorp/nomad/releases/tag/ent-changelog-1.11.7 - Permalink: https://whatsnew.fyi/product/nomad/releases/ent-changelog-1.11.7 - **security** — Redact token and certificate key CLI flags and environment variables when writing debug bundle - **changed** — Updated Go to 1.26.4 - **changed** — Add token renewal retries to Vault integration - **fixed** — Fixed a bug where alloc exec and job actions requests from the web browser would be marked as anonymous in audit logs - **fixed** — Fixed a bug where tasks could accidentally get killed mid-restart on template re-render - **fixed** — Fixed a bug where task states could accidentally get overwritten - **fixed** — Re-write Consul service identity token when reattaching to task - **fixed** — Re-enable use of multiple Vault namespaces in a single job - **fixed** — Store verified and canonicalised plugin configuration in the agent - **fixed** — Fixed a bug where templates with change_mode=noop would stop monitoring templates that fatally fail after initial rendering - **fixed** — Fixed a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI - **fixed** — Fixed service detail page not rendering - **fixed** — Fixed a bug where the evaluation detail panel would render improperly - **fixed** — Fixed flickering on the log streaming pop out when viewing them from job overview page - **fixed** — Fixed the client drain popover form to provide an accessible name for assistive technologies - **fixed** — Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility - **fixed** — Fixed the namespace list being continually fetched when on the job overview page SECURITY: * cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [[GH-28063](https://github.com/hashicorp/nomad/issues/28063)] IMPROVEMENTS: * build: Updated Go to 1.26.4 [[GH-28080](https://github.com/hashicorp/nomad/issues/28080)] * vault: adds token renewal retries [[GH-27947](https://github.com/hashicorp/nomad/issues/27947)] BUG FIXES: * audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [[GH-28025](https://github.com/hashicorp/nomad/issues/28025)] * client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [[GH-27960](https://github.com/hashicorp/nomad/issues/27960)] * client: fix a bug where we could accidentally overwrite task states [[GH-27944](https://github.com/hashicorp/nomad/issues/27944)] * consul: re-write consul service identity token when reattaching to task [[GH-27936](https://github.com/hashicorp/nomad/issues/27936)] * job (Enterprise): Renabled use of multiple vault namespaces in a single job * plugins: store verified and canonicalised plugin configuration in the agent [[GH-28083](https://github.com/hashicorp/nomad/issues/28083)] * template: Fixed a bug where templates with `change_mode=noop` would stop monitoring templates that fatally fail after initial rendering [[GH-28016](https://github.com/hashicorp/nomad/issues/28016)] * ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [[GH-28095](https://github.com/hashicorp/nomad/issues/28095)] * ui: Fix service detail page not rendering [[GH-28005](https://github.com/hashicorp/nomad/issues/28005)] * ui: Fixed a bug where the evaluation detail panel would render improperly [[GH-27987](https://github.com/hashicorp/nomad/issues/27987)] * ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [[GH-28074](https://github.com/hashicorp/nomad/issues/28074)] * ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [[GH-28047](https://github.com/hashicorp/nomad/issues/28047)] * ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [[GH-28029](https://github.com/hashicorp/nomad/issues/28029)] * ui: Fixed the namespace list being continually fetched when on the job overview page [[GH-28074](https://github.com/hashicorp/nomad/issues/28074)] ### v2.0.3 - Date: 2026-06-09 - Version: v2.0.3 - Original notes: https://github.com/hashicorp/nomad/releases/tag/v2.0.3 - Permalink: https://whatsnew.fyi/product/nomad/releases/v2.0.3 - **added** — Add timeouts for batch jobs - **added** — Add agent reload endpoint - **security** — Redact token and certificate key CLI flags and environment variables when writing debug bundle - **changed** — Support uploading client ACL tokens - **changed** — Don't restore when allocDir is inaccessible - **changed** — Add default_ineligible configuration option - **changed** — Allow additional claims to be added to workload identities - **changed** — Add token renewal retries for Vault - **changed** — Update Go to 1.26.4 - **fixed** — Fix audit logs marking alloc exec and job actions requests from web browser as anonymous - **fixed** — Fix job dispatch and job periodic force failing with paginator error against older servers - **fixed** — Fix tasks accidentally getting killed mid-restart on template re-render - **fixed** — Re-write Consul service identity token when reattaching to task - **fixed** — Re-enable use of multiple Vault namespaces in a single job - **fixed** — Store verified and canonicalised plugin configuration in the agent - **fixed** — Fix templates with change_mode=noop stopping to monitor templates that fatally fail after initial rendering - **fixed** — Fix jobs with HCL variables submitted via Terraform not being able to start or stop in the web UI - **fixed** — Fix service detail page not rendering - **fixed** — Fix flickering on the log streaming pop out when viewing from job overview page - **fixed** — Fix client drain popover form to provide an accessible name for assistive technologies FEATURES: * core: timeouts for batch jobs [[GH-27803](https://github.com/hashicorp/nomad/issues/27803)] SECURITY: * cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [[GH-28063](https://github.com/hashicorp/nomad/issues/28063)] IMPROVEMENTS: * acl: Support uploading client ACL tokens [[GH-27741](https://github.com/hashicorp/nomad/issues/27741)] * alloc: don't restore when allocDir is inaccessible [[GH-27933](https://github.com/hashicorp/nomad/issues/27933)] * api: added agent reload endpoint [[GH-27106](https://github.com/hashicorp/nomad/issues/27106)] * build: Updated Go to 1.26.4 [[GH-28080](https://github.com/hashicorp/nomad/issues/28080)] * client: Adds default_ineligible configuration option [[GH-27965](https://github.com/hashicorp/nomad/issues/27965)] * identity: allow additional claims to be added to workload identities [[GH-27786](https://github.com/hashicorp/nomad/issues/27786)] * vault: adds token renewal retries [[GH-27947](https://github.com/hashicorp/nomad/issues/27947)] BUG FIXES: * audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [[GH-28025](https://github.com/hashicorp/nomad/issues/28025)] * cli: Fixed `job dispatch` and `job periodic force` failing with a paginator error against servers older than the CLI [[GH-27680](https://github.com/hashicorp/nomad/issues/27680)] * client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [[GH-27960](https://github.com/hashicorp/nomad/issues/27960)] * consul: re-write consul service identity token when reattaching to task [[GH-27936](https://github.com/hashicorp/nomad/issues/27936)] * job (Enterprise): Renabled use of multiple vault namespaces in a single job * plugins: store verified and canonicalised plugin configuration in the agent [[GH-28083](https://github.com/hashicorp/nomad/issues/28083)] * template: Fixed a bug where templates with `change_mode=noop` would stop monitoring templates that fatally fail after initial rendering [[GH-28016](https://github.com/hashicorp/nomad/issues/28016)] * ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [[GH-28095](https://github.com/hashicorp/nomad/issues/28095)] * ui: Fix service detail page not rendering [[GH-28005](https://github.com/hashicorp/nomad/issues/28005)] * ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [[GH-28074](https://github.com/hashicorp/nomad/issues/28074)] * ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [[GH-28047](https://github.com/hashicorp/nomad/issues/28047)] * ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [[GH-28029](https://github.com/hashicorp/nomad/issues/28029)] * ui: Fixed the namespace list being continually fetched when on the job overview page [[GH-28074](https://github.com/hashicorp/nomad/issues/28074)] ### ent-changelog-1.10.12 — v1.10.12 (Enterprise) - Date: 2026-05-22 - Version: ent-changelog-1.10.12 - Original notes: https://github.com/hashicorp/nomad/releases/tag/ent-changelog-1.10.12 - Permalink: https://whatsnew.fyi/product/nomad/releases/ent-changelog-1.10.12 - **fixed** — Fixed a bug where the client detail page would fail to render - **fixed** — Fixed a bug where the topology page would fail to render - **fixed** — Fixed a bug where the evaluation detail panel would render improperly ##### 1.10.12 Enterprise (May 22, 2026) BUG FIXES: * ui: Fixed a bug where the client detail page would fail to render [[GH-27958](https://github.com/hashicorp/nomad/issues/27958)] * ui: Fixed a bug where the topology page would fail to render [[GH-27958](https://github.com/hashicorp/nomad/issues/27958)] * ui: Fixed a bug where the evaluation detail panel would render improperly [[GH-27987](https://github.com/hashicorp/nomad/issues/27987)] ### ent-changelog-1.11.6 — v1.11.6 (Enterprise) - Date: 2026-05-22 - Version: ent-changelog-1.11.6 - Original notes: https://github.com/hashicorp/nomad/releases/tag/ent-changelog-1.11.6 - Permalink: https://whatsnew.fyi/product/nomad/releases/ent-changelog-1.11.6 - **fixed** — Fixed a bug where the client detail page would fail to render - **fixed** — Fixed a bug where the topology page would fail to render - **fixed** — Fixed a bug where the evaluation detail panel would render improperly ##### 1.11.6 Enterprise (May 22, 2026) BUG FIXES: * ui: Fixed a bug where the client detail page would fail to render [[GH-27958](https://github.com/hashicorp/nomad/issues/27958)] * ui: Fixed a bug where the topology page would fail to render [[GH-27958](https://github.com/hashicorp/nomad/issues/27958)] * ui: Fixed a bug where the evaluation detail panel would render improperly [[GH-27987](https://github.com/hashicorp/nomad/issues/27987)] ### v2.0.2 - Date: 2026-05-22 - Version: v2.0.2 - Original notes: https://github.com/hashicorp/nomad/releases/tag/v2.0.2 - Permalink: https://whatsnew.fyi/product/nomad/releases/v2.0.2 - **fixed** — fix rpc permission denied error when using node_pool="all" - **fixed** — Fixed a bug where the client detail page would fail to render - **fixed** — Fixed a bug where the topology page would fail to render - **fixed** — Fixed a bug where the evaluation detail panel would render improperly ##### 2.0.2 (May 22, 2026) BUG FIXES: * acl: fix rpc permission denied error when using node_pool="all" [[GH-27973](https://github.com/hashicorp/nomad/issues/27973)] * ui: Fixed a bug where the client detail page would fail to render [[GH-27958](https://github.com/hashicorp/nomad/issues/27958)] * ui: Fixed a bug where the topology page would fail to render [[GH-27958](https://github.com/hashicorp/nomad/issues/27958)] * ui: Fixed a bug where the evaluation detail panel would render improperly [[GH-27987](https://github.com/hashicorp/nomad/issues/27987)] ### v2.0.1 - Date: 2026-05-12 - Version: v2.0.1 - Original notes: https://github.com/hashicorp/nomad/releases/tag/v2.0.1 - Permalink: https://whatsnew.fyi/product/nomad/releases/v2.0.1 - **removed** — Allocation logs directory is now bind-mounted read-only for task drivers that support filesystem isolation - **security** — Prevent unintended code execution outside the plugin directory in dynamic host volumes (CVE-2026-7474) - **security** — Protect logging FIFO from symlink swap attacks (CVE-2026-6959) - **security** — Require sentinel-override ACL capability for overriding soft-mandatory policies on volumes - **changed** — Upgraded Ember to 6.10 - **added** — Add "latest" flag for tagging the latest version of a job - **changed** — Update Go toolchain to 1.26.3 - **added** — Add retry for nomad job run monitoring - **changed** — Automatically expand `nomad exec -it` to `-i -t` - **changed** — Job plan now propagates `-hcl2-strict=false` into the suggested `nomad job run -check-index` invocation when the user passed it on the plan command line - **added** — Add monitoring and verbose option to job dispatch - **changed** — Include volume RequestName within mount config information if available - **added** — Add a configuration field for the number of nodes that the scheduler considers when spread or affinity is in use - **changed** — RPC dial timeout is configurable - **added** — Warn on job submit when job has services but no shutdown_delay - **fixed** — Fix a bug where the Create Job, Update Job, and Scale Job APIs could fail to respect EnforceIndex under concurrent requests - **fixed** — Avoid setting job to dead while waiting for allocations to reschedule - **fixed** — Improve check of StagePublishBaseDir being subdirectory of MountDir - **fixed** — Reset ProgressDeadline after pausing deployments and do not fail while paused - **fixed** — Kill plugin instance on dispense failure BREAKING CHANGES: * logging: The allocation logs directory is bind-mounted read-only for task drivers that support with filesystem isolation [[GH-27918](https://github.com/hashicorp/nomad/issues/27918)] SECURITY: * dynamic host volumes: Prevent unintended code execution outside the plugin directory (CVE-2026-7474) [[GH-27919](https://github.com/hashicorp/nomad/issues/27919)] * logging: Protect logging FIFO from symlink swap attacks (CVE-2026-6959) [[GH-27918](https://github.com/hashicorp/nomad/issues/27918)] * sentinel: require sentinel-override ACL capability for overriding soft-mandatory policies on volumes * ui: Upgraded Ember to 6.10 [[GH-27674](https://github.com/hashicorp/nomad/issues/27674)] IMPROVEMENTS: * api: Add "latest" flag for tagging the latest version of a job [[GH-27764](https://github.com/hashicorp/nomad/issues/27764)] * build: Update Go toolchain to 1.26.3 [[GH-27924](https://github.com/hashicorp/nomad/issues/27924)] * cli: Added retry for nomad job run monitoring [[GH-27887](https://github.com/hashicorp/nomad/issues/27887)] * cli: Automatically expand `nomad exec -it` to `-i -t` [[GH-27906](https://github.com/hashicorp/nomad/issues/27906)] * cli: `job plan` now propagates `-hcl2-strict=false` into the suggested `nomad job run -check-index` invocation when the user passed it on the plan command line [[GH-23656](https://github.com/hashicorp/nomad/issues/23656)] * cli: add monitoring and verbose option to job dispatch [[GH-27541](https://github.com/hashicorp/nomad/issues/27541)] * drivers: include volume RequestName within mount config information if available [[GH-27710](https://github.com/hashicorp/nomad/issues/27710)] * scheduler: Add a configuration field for the number of nodes that the scheduler considers when spread or affinity is in use. This can improve scheduler performance for some cluster shapes. [[GH-27650](https://github.com/hashicorp/nomad/issues/27650)] * server: RPC dial timeout is configurable [[GH-27862](https://github.com/hashicorp/nomad/issues/27862)] * services: warn on job submit when job has services but no shutdown_delay [[GH-27782](https://github.com/hashicorp/nomad/issues/27782)] BUG FIXES: * api: Fix a bug where the Create Job, Update Job, and Scale Job APIs could fail to respect EnforceIndex under concurrent requests [[GH-27832](https://github.com/hashicorp/nomad/issues/27832)] * core: avoid setting job to dead while waiting for allocations to reschedule [[GH-27852](https://github.com/hashicorp/nomad/issues/27852)] * csi: improve check of StagePublishBaseDir being subdirectory of MountDir [[GH-27717](https://github.com/hashicorp/nomad/issues/27717)] * deployments: reset ProgressDeadline after pausing and do not fail while paused [[GH-27804](https://github.com/hashicorp/nomad/issues/27804)] * drivers: kill plugin instance on dispense failure [[GH-27711](https://github.com/hashicorp/nomad/issues/27711)] * job (Enterprise): Renabled use of multiple vault namespaces in a single job * plugins: Fixed a bug where plugin clients would continuously leak file descriptors when the agent was restarted [[GH-27885](https://github.com/hashicorp/nomad/issues/27885)] * scheduler: Fixed a bug where preemption of allocations by tasks that require devices could incorrectly fail placement [[GH-27880](https://github.com/hashicorp/nomad/issues/27880)]