1.20.13+ent (November 17, 2025)

This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.

SECURITY:

• security: Upgrade golang to 1.25.4. [GH-23029]

IMPROVEMENTS:

• ui: Removed ember-route-action-helper and migrated all {{route-action}} usages to explicit route/controller logic. [GH-23004]
• ui: resolved multiple Ember deprecations:

• Removed mutation-after-consumption warnings in Outlet by staging state updates outside the render pass
• Replaced deprecated Route#replaceWith/transitionTo usage with RouterService in affected routes
• Avoided mutating objects produced by {{hash}} (setting-on-hash) by switching to tracked POJOs [GH-23010]

BUG FIXES:

• acl: fixed a bug where ACL policy replication in WANfed is impacted when primaryDC is inconsistent [GH-22954]
• xds: fix RBAC failure in upstream service when there are more than one downstream exported service with same name but different peer [GH-23049]
• xds: fix bug where Using replacePrefixMatch: "/" results in double slashes (//path) and Using replacePrefixMatch: "" does not strip the prefix at all (e.g., mapping /v1/dashboard → /dashboard) resulting in 301 and 404 errors respectively [GH-23035]