github.com/hashicorp/nomad
v1.11.3
#213 most downloaded on Go modules
hashicorp/nomad
What this package is like to depend on
Last release 2 days ago
21 Aug 2026
Ships on a steady schedule
a new release about every 8 days
Rarely documented
notes for 22 of 222 stable releases
Nothing withdrawn
no release was ever pulled
11 years old
12699 releases · first in 2015
698 releases in the last 12 months
see the full history below
Release timeline
12699 releases · Feb 2024 to Aug 2026Releases
latest 60 of 12699-
v2.0.0-20200407183145-30eb4ef407c5+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v2.0.0-20200407173207-9e26e4ad7e5f+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v2.0.0-20200407163127-5f5a708e0262+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v2.0.0-20200407145108-083a335a08e6+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v2.0.0-20200407122830-8cfbd1ddeb9c+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v2.0.0-20200407115425-a9ac774fb254+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v2.0.0-20200407032540-ecbb2fa3c5f2+incompatible07 Apr 2020 pre-releaseNothing published for this version
-
v1.11.311 Mar 2026Release notes
Open source →SECURITY:
- security: Upgrade tooling to Go 1.25.8 [GH-27653]
IMPROVEMENTS:
- acl (Enterprise): Added
sentinelpolicy block to allow managing Sentinel policies without a management token [GH-27556] - acl: Added fine-grained ACL capabilities for saving snapshots and reading the Enterprise license [GH-27525]
- acl: Added fine-grained ACL capability for rotating the keyring [GH-27526]
- agent: Added
agent.tls.cert.expiration_secondsandagent.tls.ca.expiration_secondstelemetry data points to track TLS certificate expiration. [GH-27538] - cli: Added autocompletions for ACL auth method, binding rule, policy, and token subcommands [GH-27505]
- cli: Improved options autocompletions for various commands [GH-27506]
- cli: Reduced server overhead when dispatching jobs or forcing periodic jobs from the CLI [GH-27631]
- cli: Truncate results when job commands return a large set of jobs that match the provided ID prefix [GH-27631]
- consul (enterprise): adds ability to specify cluster specific consul tokens with environment variables [GH-27574]
- events: Added a Deleted flag to JobDeregistered event type to differentiate between stopped and deleted jobs [GH-27614]
BUG FIXES:
- acl: Fixed a bug where a bearer-token authenticated request could panic the handler for checking claims [GH-27550]
- artifact: Fix artifact inspection when using
filemode [GH-27552] - config: Fixed a bug where the keyring block could only be specified a maximum of two times [GH-27579]
- config: Fixed parsing of Vault and Consul blocks as JSON that included objects such as
task_identity[GH-27595] - consul: fixes bug where clients were passing node token to connect envoy container, causing acl not found errors [GH-27574]
- core: Fixed system jobs being rescheduled after a node is drained and marked eligible again [GH-27499]
- deployments: Fixed a bug where a task group dropped from a system job could cause deployment state to be overwritten incorrectly [GH-27604]
- deployments: Fixed a bug where system job canary state could be incorrectly changed after a promotion [GH-27497]
- deployments: Fixed a bug where system job deployments would not be marked healthy even though all allocations were healthy [GH-27497]
- drivers: Pass error when included in fingerprint response [GH-27537]
- dynamic host volumes: Fixed a bug with sticky volumes where replacement allocations would not use the previous volume claim [GH-27613]
- http: Ensure the correct HTTP protocol version is set on event stream responses [GH-27586]
- job status: Fixes regression setting job status when jobs have matching prefix [GH-27516]
- keyring (Enterprise): Fixed a bug where in mixed-version clusters with pre-1.9 servers, a keyring rotation that returns an error for an unavailable KMS could prevent future server restarts [GH-27581]
- scheduler: Fix a potential panic in the system scheduler when deploying jobs with multiple task groups and infeasible nodes that become feasible [GH-27571]
- scheduler: Fixed a bug where system deployments would not complete on clusters with pre-1.11.0 nodes [GH-27605]
- state: Fixed a potential state store corruption bug in the service/batch scheduler and deployment watcher [GH-27548]
-
v1.11.211 Feb 2026Release notes
Open source →SECURITY:
IMPROVEMENTS:
- acl: Add finer grain permissions for managing job submissions [GH-27287]
- build: Add dev-static and static-release build targets that disable CGO and offer statically-linked binaries [GH-27310]
- cli: Highlight missing driver message in alloc metrics output [GH-27416]
- cli: Improve command line completion of the
sentinel applycommand [GH-27335] - cni: Added
/usr/libexec/cnias an additional default path within theclient.cni_pathconfiguration option [GH-27336] - cni: Search all paths in cni_path instead of stopping on first failure [GH-27336]
- deps: Migrate from archived dependency
github.com/mitchellh/mapstructuretogithub.com/go-viper/mapstructure/v2[GH-27444] - docker: Added support for reserved-only memory oversubscription without a hard limit [GH-27354]
- exec: Added support for reserved-only memory oversubscription without a hard limit [GH-27354]
- fingerprint: Added support for reloading the cpu, memory, network, CNI plugin, and cloud provider fingerprints without restarting the client agent [GH-27452]
- qemu: adds an emulator allowlist to qemu plugin config [GH-27182]
- quotas: Node pool level limits for resources
- reporting (Enterprise): Add device plugin usage to product usage metrics
- rpc: Submitting a plan no longer serializes the whole Job object [GH-27424]
- scheduler: Do not create node evals for terminal node allocs [GH-27423]
- scheduler: Do not create node evaluations for system jobs that are stopped [GH-27419]
- sentinel: Added a new
nomad_varbuilt-in import for fetching Nomad variables under thenomad/sentinelpath for use in policy evaluation - sentinel: Added opt-in support for the
httpmodule via thesentinel.additional_enabled_modulesconfiguration - state: avoid unneded allocation copy when building event payload [GH-27311]
BUG FIXES:
- acl: Fixed a bug where host-volume-delete capability was not allowed when writing a policy [GH-27434]
- api: exit EventStream.Stream on first error [GH-27141]
- api: only include running tasks in allocation resource usage [GH-27317]
- api: return proper 403 message when getting variables instead of swallowing error [GH-27269]
- artifact: Fixed a bug that prevented the sandbox from moving downloaded files to the target directory on Windows [GH-27398]
- checks: Fixed a bug where script checks with task-level interpolation would fail to heartbeat to Consul [GH-27453]
- client: Added a new
fingerprintconfiguration block which allows users to specify retry behavior for theenv_aws,env_azure,env_digitaloceanandenv_gcpfingerprinters. [GH-27161] - client: Fix unchanged devices causing extraneous node updates [GH-27363]
- client: Fixed generation of the "NOMAD_ALLOC_ADDR_" environment variable when using static port assignments [GH-27305]
- core: Fixed a bug where follow-up evals could be created for failed evaluations of garbage collected jobs [GH-27367]
- csi: Sanitize volumes correctly upon sentinel policy eval
- deployment: Fixed a bug where deploying a system job could panic the leader [GH-27262]
- deployments: Fixed a bug where system deployments can violate update.max_parallel if another eval for the job is triggered while allocs are pending [GH-27284]
- disconnect: allocations with a
disconnect.lost_after > 0andreplace = truewill now follow the reschedule block instead of immediately being replaced. [GH-27053] - dispatch: Fixed a bug where concurrent dispatch requests could ignore the idempotency token [GH-27353]
- drivers: adds hostname to NetworkCreateRequest for external drivers [GH-27273]
- event broker: fix memory leak in methods that close subscriptions [GH-27312]
- event stream: Fixed a bug where the HTTP handler can block forever and cause high memory usage if an API client reads too slowly from the stream [GH-27397]
- host volumes: Fixed a bug where allocations that request volumes with sticky=true could not be placed if previous allocations in the job claimed volumes [GH-27470]
- job: Correctly validate any constraint attributes to ensure they conform to known formats [GH-27355]
- keyring (Enterprise): Fixed a bug where servers configured with high availability keyrings with pre-1.9.0 keystores would not start if one of the external KMS was unreachable [GH-27279]
- multiregion: fixes a bug where resubmitting an unchanged job would cause server handler to hang [GH-27386]
- numa: Fixed a bug where NUMA detection would cause a panic on hosts with discontinuous node IDs [GH-27277]
- qemu: change driver filesystem isolation to "None" for proper variable interpolation in job spec [GH-27246]
- qemu: fixes graceful_shutdown to wait kill_timeout before signalling process [GH-27316]
- ui: Tagging job versions in another namespace than the default-namespace resulted in an error [GH-27282]
- ui: fix bug preventing OIDC login when
issparameter is required [GH-27248]
-
v1.11.109 Dec 2025Release notes
Open source →BREAKING CHANGES:
- docker: removed deprecated email auth config parameter [GH-27156]
SECURITY:
- build: Updated toolchain to Go 1.25.5 [GH-27186]
IMPROVEMENTS:
- connect: allow configuring identities for sidecar_task [GH-25877]
- landlock: check paths exist on setup [GH-27149]
- oidc: add support for array-based OIDC claims [GH-26958]
- qemu: Adds config parameters to modify qemu emulator binary and machine types and removes some hardcoded KVM accelerator settings. Defaults to previously used values of qemu-system-x86_64 and pc. The driver no longer forces machine type "host", or the -smp flag when using resources.cores with the KVM accelerator. [GH-27128]
- secrets: Adds nomad job ID and namespace to plugin environment [GH-27207]
BUG FIXES:
- acl: Made /agent and /recommendations endpoints workload-identity-aware [GH-27099]
- acl: include additional necessary permissions in the course-grained "scale" policy for nomad-autoscaler [GH-27061]
- api: Fixed a bug in the Go API where an event stream request without a topic filter would require a management token [GH-27065]
- cli: Fixed the
var getcommand which was incorrectly displaying the variable modify time as the create time [GH-27208] - client: return 403 when the caller doesn't have log streaming capabilities [GH-27098]
- csi: Fixed a bug where reading a volume from the API or event stream could erase its secrets [GH-27176]
- drain: Fixed a bug where clients configured with
leave_on_terminateorleave_on_interruptanddrain_on_shutdownwould receive a permission denied error when attempting to leave the cluster and drain themselves [GH-27115] - dynamic host volumes: Ensure requested directory permission is correctly applied [GH-27068]
- dynamic host volumes: fix Windows compatibility [GH-27147]
- fingerprint: simplify storage fingerprint calculation to just (total disk space - reserved disk) [GH-27019]
- keyring: Do not mark the key as inactive until all follow-up rekey evals have completed. [GH-27193]
- keyring: Ensure follow-up rekey evals can be successfully created. [GH-27193]
- oidc: Add support for RFC9207, requiring an issuer param in authorization response if the provider requires it [GH-27168]
- reconciler: fixes a bug where stopping a job does not stop all allocations [GH-27175]
- scheduler (Enterprise): Fixed a bug where tasks were not placed on same numa node as reserved device [GH-27177]
- scheduler: Fixed a bug that was previously patched incorrectly where rescheduled allocations that could not be placed would later ignore their reschedule policy limits [GH-27129]
- server: Fixed a bug where a large backlog of unblocking evals could cause backpressure on Raft writes [GH-27184]
- ui: Fixed the error message presented for invalid Variables definitions [GH-26235]
-
v1.11.1-0.20260126185444-a41d4689765226 Jan 2026 pre-releaseNothing published for this version
-
v1.11.011 Nov 2025Release notes
Open source →FEATURES:
- Client Identity: Nomad clients use identities for authenticating and authorizing itself when performing RPC calls. The identities are generated and rotated automatically by Nomad servers with configurable TTLs. [GH-26291]
- Client Introduction: Nomad clients can now be introduced to the cluster using a token-based approach. Nomad servers can be configured with introduction enforcement levels which dictate how clients can join the cluster resulting in logs and metrics to detail introduction violations. [GH-26430]
- scheduler: Enable deployments for system jobs [GH-26708]
- secrets: Adds secret block for fetching and interpolating secrets in job spec [GH-26681]
BREAKING CHANGES:
- metrics: Eval broker metrics that previously used the job ID as a label will now use the parent ID of dispatch and periodic jobs [GH-26737]
- sysbatch: Submitting a sysbatch job with a
rescheduleblock will now return an error instead of being silently ignored [GH-26279]
SECURITY:
- build: Update go-getter to 1.8.3 that prevents a partially written file from remaining on disk with permissions that didn't include the umask. [GH-27034]
- build: Update toolchain to Go 1.25.2 to address Go stdlib CVE-2025-61724, CVE-2025-61725, CVE-2025-58187, CVE-2025-61723, CVE-2025-47912, CVE-2025-58185, CVE-2025-58186, CVE-2025-58188, and CVE-2025-58183 [GH-26909]
- job: Disallow tasks using the name "alloc" which breaks inter-task filesystem isolation [GH-27001]
IMPROVEMENTS:
- api: The
Evaluations.Infomethod of the Go API now populates theRelatedEvalsfield. [GH-26156] - build: Add tzdata to Docker container final image [GH-26794]
- build: Updated Go to 1.25.1 [GH-26823]
- cli: Add -preserve-resources flag for keeping resource block when updating jobs [GH-26841]
- cli: Added related evals and placed allocations tables to the eval status command, and exposed more fields without requiring the
-verboseflag. [GH-26156] - config: Added job_max_count option to limit number of allocs for a single job [GH-26858]
- consul connect: Allow cni/* network mode; use at your own risk [GH-26449]
- install (Enterprise): Updated license information displayed during post-install [GH-26791]
- metrics: Reduce memory usage on the Nomad leader for collecting eval broker metrics. [GH-26737]
- reporting (Enterprise): Include product usage metrics with license utilization reports [GH-27005]
- scheduler: Add reconciler annotations to the output of the
eval statuscommand [GH-26188] - scheduler: Debug-level logs emitted by the scheduler are now single-line structured logs [GH-26169]
- scheduler: For service and batch jobs, the scheduler no longer includes stops for already-stopped canaries in plans it submits. [GH-26292]
- scheduler: For service and batch jobs, the scheduler treats a group.count=0 identically to removing the task group from the job, and will stop all non-terminal allocations. [GH-26292]
DEPRECATIONS:
- api: the
ResourcesandReservedfields on theNodestruct in the Go API are deprecated and will be removed in Nomad 1.12.0. Use theNodeResourcesandReservedResourcesfields instead [GH-26951]
BUG FIXES:
- acl: Fixed a bug where ACL policies would silently accept invalid or duplicate blocks [GH-26836]
- auth: Fixed a bug where workload identity tokens could not be used to list or get policies from the ACL API [GH-26772]
- build: Updated toolchain to Go 1.25.3 to address bug in TLS certificate validation [GH-26949]
- client: Fix unique identifiers for templates with same content [GH-26880]
- client: restore task network status on client restart so restarted tasks receive proper networking environment variables, hosts file, and resolv.conf. [GH-26699]
- consul (Enterprise): Fixed a bug where Consul fingerprinting would generate warning logs if there was no default cluster [GH-26787]
- core: Fixed a bug where GC batch sizes for jobs resulted in excessively large Raft logs [GH-26974]
- csi: Fixed a bug where multiple node plugin RPCs could be in-flight for a single volume [GH-26832]
- csi: Fixed a bug where volumes could be unmounted while in use by a task that was shutting down [GH-26831]
- docker: Fixed a bug where cpu usage percentage was incorrectly measured when container was stopped [GH-26902]
- keyring: fixes an issue with Vault transit configuration where tls_skip_verify was not defaulting to false [GH-26664]
- networking: Fixed network interface detection failure with bridge or CNI mode on IPv6-only interfaces [GH-26910]
- scheduler: Fixed scheduling behavior of batch job allocations [GH-26961]
- scheduler: allow use of different vendor/models when checking for device counts while filtering feasible nodes [GH-26649]
- scheduler: fixes a bug selecting nodes for updated jobs with ephemeral disks when nodepool changes [GH-26662]
- state: Fixed a bug where the server could panic when attempting to remove unneeded evals from the eval broker [GH-26872]
- ui: Fixed a bug where action fly-outs would fail to open due to a missing module [GH-26833]
- windows: Fixed a bug where agents would not gracefully shut down on Ctrl-C [GH-26780]
-
v1.11.0-rc.1.0.20260821123358-aa026cc99cfb21 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260821064653-0b2dc38e8b1821 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260820140024-61b96c52b9b720 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260820054602-13f0b616ecd420 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260819113752-969b2474051619 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260819095656-f07ebf693caf19 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260818191428-a194c5f4e4e318 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260818124922-37515d85c11b18 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260818073343-0a1d840fcc7c18 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260818061459-78bae2c2e84f18 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260817081626-cd56ea897c2417 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260814142628-f3fe893c53d214 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260814134416-e9a0e365db8514 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260814124838-d45dd6d8404914 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260813190408-613ee332591613 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260813185229-b4db8b13da3213 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260813124048-6832f99bc28313 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260813020247-84a74d9e92e313 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260812182241-5c8612bba6eb12 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260812163453-b20d50f9109612 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260812073324-3aadd992761012 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260810202907-8a59a3339ad410 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260807203101-d78b9b59529a07 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260807134657-42e8dce1a46207 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260806172658-eb56f01620cb06 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260805143546-1ced350e998805 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260804144404-aeca0c707e5304 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260804113810-0073b57e778204 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260803162006-4b3baa0ee9c603 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260803141802-17f3666b776303 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260803125929-54d98d6572d703 Aug 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260731161218-a8b881ca082931 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260731151933-906508a67fc831 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260731130008-983bab077de031 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260731123432-6724555d4aa531 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260730080045-c3018272781e30 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260729150152-34110d02227929 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260729123513-b8e77321b4cc29 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260729063142-7b6885e7ef8029 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260728195407-6901ee25dff128 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260728181731-12efdd86a9a528 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260728163625-6b4b412d924828 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260728154555-f862369f215828 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260728140910-1f26000e94c428 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260727170555-0f9ab40732a227 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260724112153-37c73b2918bd24 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260724091159-fd6c08925bd924 Jul 2026 pre-releaseNothing published for this version
-
v1.11.0-rc.1.0.20260724080842-1ef3f45068af24 Jul 2026 pre-releaseNothing published for this version