NOMAD-1.10.13 release notes and known issues

Summary

SECURITY: cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [ GH-28063 ] IMPROVEMENTS: build: Updated Go to 1.26.4 [ GH-28080 ] vault: adds token renewal retries [ GH-27947 ] BUG FIXES: audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [ GH-28025 ] client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [ GH-27960 ] client: fix a bug where we could accidentally overwrite task states [ GH-27944 ] consul: re-write consul service identity token when reattaching to task [ GH-27936 ] job (Enterprise): Renabled use of multiple vault namespaces in a single job plugins: store verified and canonicalised plugin configuration in the agent [ GH-28083 ] template: Fixed a bug where templates with change_mode=noop would stop monitoring templates that fatally fail after initial rendering [ GH-28016 ] ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [ GH-28095 ] ui: Fix service detail page not rendering [ GH-28005 ] ui: Fixed a bug where the evaluation detail panel would render improperly [ GH-27987 ] ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [ GH-28074 ] ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [ GH-28047 ] ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [ GH-28029 ] ui: Fixed the namespace list being continually fetched when on the job overview page [ GH-28074 ]

Improvements and security content

• SECURITY: cli: Redact token and certificate key CLI flags and environment variables when writing debug bundle [ GH-28063 ] IMPROVEMENTS: build: Updated Go to 1.26.4 [ GH-28080 ] vault: adds token renewal retries [ GH-27947 ] BUG FIXES: audit (Enterprise): Fixed a bug where alloc exec and job actions requests from the webbrowser would be marked as anonymous in audit logs [ GH-28025 ] client: Fixed a bug where tasks could accidentally get killed mid-restart on template re-render [ GH-27960 ] client: fix a bug where we could accidentally overwrite task states [ GH-27944 ] consul: re-write consul service identity token when reattaching to task [ GH-27936 ] job (Enterprise): Renabled use of multiple vault namespaces in a single job plugins: store verified and canonicalised plugin configuration in the agent [ GH-28083 ] template: Fixed a bug where templates with change_mode=noop would stop monitoring templates that fatally fail after initial rendering [ GH-28016 ] ui: Fix a bug where jobs with HCL variables submitted via Terraform could not be started or stopped in the web UI [ GH-28095 ] ui: Fix service detail page not rendering [ GH-28005 ] ui: Fixed a bug where the evaluation detail panel would render improperly [ GH-27987 ] ui: Fixed flickering on the log streaming pop out when viewing them from job overview page [ GH-28074 ] ui: Fixed the client drain popover form to provide an accessible name for assistive technologies [ GH-28047 ] ui: Fixed the drain popover deadline field so its label is properly associated with the input for improved accessibility [ GH-28029 ] ui: Fixed the namespace list being continually fetched when on the job overview page [ GH-28074 ]

Affected products and versions

Recommended action

Review the official publisher document before deployment.

Official publisher evidence