Dueling-breaking-queries rework of the jobs index page

.changelog/15473.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+networking: Inject constraints on CNI plugins when using bridge networking
+```

.changelog/16753.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+consul/connect: Added support for TLS configuration, headers configuration, and request limit configuration to ingress service block
+```

.changelog/20029.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+server: Add new options for reconcilation in case of disconnected nodes
+```

.changelog/20126.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+artifact: Added support for downloading artifacts without validating the TLS certificate
+```

.changelog/20153.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+autopilot: add Enterprise health information to autopilot API
+```

.changelog/20156.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+autopilot: Added `operator autopilot health` command to review Autopilot health data
+```

.changelog/20165.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+template: Fixed a bug where a partial `client.template` block would cause defaults for unspecified fields to be ignored
+```

.changelog/20166.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+agent: allow configuration of in-memory telemetry sink
+```

.changelog/20167.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+consul/connect: Added support for destination partition in `upstream` block
+```

.changelog/20173.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+deps: Update msgpack to v2
+```

.changelog/20189.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+cni: Fixed a regression where default DNS set by `dockerd` or other task drivers was not respected
+```

.changelog/20206.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fixed a bug where `operator debug` did not respect the `-pprof-interval` flag and would take only one profile
+```

.changelog/20218.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Show the namespace in the web UI exec command hint
+```

.changelog/20219.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Collect only one heap profile per `operator debug` interval
+```

.changelog/20220.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+namespace/node pool: Fixed a bug where the `-region` flag would not be respected for namespace and node pool updates if ACLs were disabled
+```

.changelog/20234.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+deps: Updated consul-template dependency to 0.37.4 to fix a resource leak
+```

.changelog/20235.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: When you re-bind keyboard shortcuts they now correctly show up in shift-held hints
+```

.changelog/20261.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+api: Fixed a bug where `AllocDirStats` field was missing from Read Stats client API
+```

.changelog/20276.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+docker: Fixed a bug where cpuset would not be updated on cgroup v2 systems using cgroupfs
+```

.changelog/20294.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+docker: Fixed a bug where cpuset cgroup would not be updated on cgroup v1 systems
+```

.changelog/20315.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+func: Allow custom paths to be added the the getter landlock
+```

.changelog/20317.txt

@@ -0,0 +1,7 @@
+```release-note:bug
+drain: Fixed a bug where Workload Identity tokens could not be used to drain a node
+```
+
+```release-note:bug
+state: Fixed a bug where restarting a server could fail if the Raft logs include a drain update that used a now-expired token
+```

.changelog/20324.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+config: Fixed a bug where IPv6 addresses were not accepted without ports for `client.servers` blocks
+```

.changelog/20329.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+metrics: Added tracking of enqueue and dequeue times of evaluations to the broker
+```

.changelog/20344.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+consul: Fixed a bug where services with interpolation would not get correctly signed Workload Identities
+```

.changelog/20346.txt

@@ -0,0 +1,3 @@
+```release-note:improvement
+scheduler: Record exhausted node metrics for devices when preemption fails to find an allocation to evict
+```

.changelog/20348.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+deployments: Fixed a goroutine leak when jobs are purged
+```

.changelog/20383.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix an issue where the job status box would error if an allocation had no task events
+```

.changelog/20391.txt

@@ -0,0 +1,3 @@
+```release-note:security
+artifact: Updated `go-getter` dependency to v1.7.4 to address CVE-2024-3817
+```

.changelog/20408.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix a bug where the UI would prompt a user to promote a deployment with unplaced canaries
+```

.github/workflows/build.yml

@@ -198,6 +198,13 @@ jobs:
           name: ${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
           path: ${{ env.PKG_NAME }}_${{ needs.get-product-version.outputs.product-version }}_${{ matrix.goos }}_${{ matrix.goarch }}.zip
 
+      - name: Copy license file
+        env:
+          LICENSE_DIR: ".release/linux/package/usr/share/doc/${{ env.PKG_NAME }}"
+        run: |
+          mkdir -p "$LICENSE_DIR"
+          cp LICENSE "$LICENSE_DIR/LICENSE.txt"
+
       - name: Package
         uses: hashicorp/actions-packaging-linux@v1
         with:

.release/linux/package/usr/lib/systemd/system/nomad.service

@@ -37,6 +37,12 @@ Restart=on-failure
 RestartSec=2
 
 TasksMax=infinity
+
+# Nomad Server agents should never be force killed,
+# so here we disable OOM (out of memory) killing for this unit.
+# However, you may wish to change this for Client agents, since
+# the workloads that Nomad places may be more important
+# than the Nomad agent itself.
 OOMScoreAdjust=-1000
 
 [Install]

.semgrep/imports.yml

@@ -12,6 +12,7 @@ rules:
       - pattern: '"github.com/hashicorp/go-set"'
       - pattern: '"golang.org/x/exp/slices"'
       - pattern: '"golang.org/x/exp/maps"'
+      - pattern: '"golang.org/x/exp/constraints"'
     message: "Import of this package has been disallowed"
     languages:
       - "generic"

Dockerfile

@@ -11,9 +11,22 @@ ARG PRODUCT_REVISION
 # TARGETARCH and TARGETOS are set automatically when --platform is provided.
 ARG TARGETOS TARGETARCH
 
-LABEL maintainer="Nomad Team <nomad@hashicorp.com>"
-LABEL version=${PRODUCT_VERSION}
-LABEL revision=${PRODUCT_REVISION}
+LABEL maintainer="Nomad Team <nomad@hashicorp.com>" \
+      version=${PRODUCT_VERSION} \
+      revision=${PRODUCT_REVISION} \
+      org.opencontainers.image.title="nomad" \
+      org.opencontainers.image.description="Nomad is a lightweight and flexible orchestrator for heterogenous workloads" \
+      org.opencontainers.image.authors="Nomad Team <nomad@hashicorp.com>" \
+      org.opencontainers.image.url="https://www.nomadproject.io/" \
+      org.opencontainers.image.documentation="https://www.nomadproject.io/docs" \
+      org.opencontainers.image.source="https://github.com/hashicorp/nomad" \
+      org.opencontainers.image.version=${PRODUCT_VERSION} \
+      org.opencontainers.image.revision=${PRODUCT_REVISION} \
+      org.opencontainers.image.vendor="HashiCorp" \
+      org.opencontainers.image.licenses="BUSL-1.1"
+
+RUN mkdir -p /usr/share/doc/nomad
+COPY LICENSE /usr/share/doc/nomad/LICENSE.txt
 
 COPY dist/$TARGETOS/$TARGETARCH/nomad /bin/
 COPY ./scripts/docker-entrypoint.sh /

GNUmakefile

@@ -114,7 +114,10 @@ pkg/windows_%/nomad: GO_TAGS += timetzdata
 # Define package targets for each of the build targets we actually have on this system
 define makePackageTarget
 
-pkg/$(1).zip: pkg/$(1)/nomad
+pkg/$(1)/LICENSE.txt:
+	@cp LICENSE pkg/$(1)/LICENSE.txt
+
+pkg/$(1).zip: pkg/$(1)/nomad pkg/$(1)/LICENSE.txt
 	@echo "==> Packaging for $(1)..."
 	@zip -j pkg/$(1).zip pkg/$(1)/*
 
@@ -135,7 +138,7 @@ deps:  ## Install build and development dependencies
 	go install gotest.tools/gotestsum@v1.10.0
 	go install github.com/hashicorp/hcl/v2/cmd/hclfmt@d0c4fa8b0bbc2e4eeccd1ed2a32c2089ed8c5cf1
 	go install github.com/golang/protobuf/protoc-gen-go@v1.3.4
-	go install github.com/hashicorp/go-msgpack/codec/codecgen@v1.1.5+base32
+	go install github.com/hashicorp/go-msgpack/v2/codec/codecgen@v2.1.2
 	go install github.com/bufbuild/buf/cmd/buf@v0.36.0
 	go install github.com/hashicorp/go-changelog/cmd/changelog-build@latest
 	go install golang.org/x/tools/cmd/stringer@v0.18.0