v1.22.0 (Enterprise)
1.22.0+ent (October 24, 2025)
This release is created to share the Consul Enterprise changelog and notify consumers of availability. The attached source and assets do not include Consul Enterprise code and should not be used in place of official Docker images or binaries.
SECURITY:
- connect: Upgrade Consul's bundled Envoy version to 1.35.3 and remove support for 1.31.10. This update also includes a fix to prevent Envoy (v1.35+) startup failures by only configuring the TLS transport socket when the CA bundle is present. [GH-22824]
- security: Adding warning when remote/local script checks are enabled without enabling ACL's [GH-22877]
- security: Improved validation of the Content-Length header in the Consul KV endpoint to prevent potential denial of service attacks []