Prepare work 1.9.4

.github/workflows/pr.yml

@@ -6,6 +6,7 @@ on:
     branches:
       - main
       - "release/**"
+      - "sanikachavan**"
 
 # these should be the only settings that you will ever need to change
 env:

.release/security-scan.hcl

@@ -25,10 +25,77 @@ container {
   triage {
     suppress {
       vulnerabilities = [
-        "CVE-2024-58251",  # busybox@1.37.0-r19 - Alpine Linux security issue
-        "CVE-2025-46394",  # busybox@1.37.0-r19 - Alpine Linux security issue
-        "CVE-2025-47268",  # iputils@20240905-r0 - Alpine Linux security issue
-        "CVE-2025-48964"   # iputils@20240905-r0 - Alpine Linux security issue
+        "CVE-2000-3712",
+        "CVE-2006-1174",
+        "CVE-2010-5298",
+        "CVE-2014-3505",
+        "CVE-2014-3513",
+        "CVE-2014-3570",
+        "CVE-2014-8176",
+        "CVE-2015-0209",
+        "CVE-2015-3194",
+        "CVE-2015-3197",
+        "CVE-2015-4000",
+        "CVE-2015-7575",
+        "CVE-2016-0799",
+        "CVE-2016-2177",
+        "CVE-2016-7056",
+        "CVE-2016-8610",
+        "CVE-2017-3735",
+        "CVE-2017-3736",
+        "CVE-2018-0734",
+        "CVE-2018-0735",
+        "CVE-2019-1547",
+        "CVE-2019-1551",
+        "CVE-2020-1971",
+        "CVE-2021-23840",
+        "CVE-2021-3449",
+        "CVE-2021-3712",
+        "CVE-2021-43618",
+        "CVE-2022-0778",
+        "CVE-2022-1292",
+        "CVE-2022-3358",
+        "CVE-2022-3602",
+        "CVE-2022-4203",
+        "CVE-2022-4304",
+        "CVE-2023-0286",
+        "CVE-2023-0464",
+        "CVE-2023-2975",
+        "CVE-2023-3446",
+        "CVE-2023-4641",
+        "CVE-2023-5363",
+        "CVE-2024-12797",
+        "CVE-2024-2511",
+        "CVE-2024-4067",
+        "CVE-2024-40896",
+        "CVE-2024-52533",
+        "CVE-2024-5535",
+        "CVE-2024-56433",
+        "CVE-2024-57970",
+        "CVE-2024-6119",
+        "CVE-2025-11187",
+        "CVE-2025-13601",
+        "CVE-2025-14104",
+        "CVE-2025-15281",
+        "CVE-2025-15467",
+        "CVE-2025-25724",
+        "CVE-2025-31115",
+        "CVE-2025-32414",
+        "CVE-2025-3277",
+        "CVE-2025-3576",
+        "CVE-2025-4598",
+        "CVE-2025-5702",
+        "CVE-2025-5914",
+        "CVE-2025-6021",
+        "CVE-2025-6395",
+        "CVE-2025-68973",
+        "CVE-2025-6965",
+        "CVE-2025-8058",
+        "CVE-2025-9086",
+        "CVE-2025-9230",
+        "CVE-2025-9714",
+        "CVE-2026-0861",
+        "CVE-2026-24882"
       ]
     }
   }
@@ -44,10 +111,7 @@ binary {
 
   triage {
     suppress {
-      vulnerabilities = [
-        "GO-2022-0635",
-        "GO-2022-0646"
-      ]
+      vulnerabilities = []
     }
   }
 }

CHANGELOG.md

@@ -1,3 +1,11 @@
+## 1.9.4 (February 24, 2025)
+
+SECURITY:
+
+* Added input length validation on "consul.hashicorp.com/service-name" annotation [[GH-5107](https://github.com/hashicorp/consul-k8s/issues/5107)]
+* go: upgrade go version to 1.25.7 [[GH-5113](https://github.com/hashicorp/consul-k8s/issues/5113)]
+* docker: upgrade hashicorp/go-discover version to c9daf450621856f81604e3495af612b95db907d5 [[GH-5117](https://github.com/hashicorp/consul-k8s/issues/5117)]
+
 ## 1.9.3 (January 27, 2026)
 
 SECURITY:

acceptance/go.mod

@@ -10,8 +10,8 @@ require (
 	github.com/google/uuid v1.6.0
 	github.com/gruntwork-io/terratest v0.46.7
 	github.com/hashicorp/consul-k8s/control-plane v0.0.0-20240821160356-557f7c37e108
-	github.com/hashicorp/consul/api v1.33.2
-	github.com/hashicorp/consul/sdk v0.17.1
+	github.com/hashicorp/consul/api v1.33.3
+	github.com/hashicorp/consul/sdk v0.17.2
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/hashicorp/go-uuid v1.0.3
 	github.com/hashicorp/go-version v1.6.0

acceptance/go.sum

@@ -294,12 +294,12 @@ github.com/gruntwork-io/terratest v0.46.7 h1:oqGPBBO87SEsvBYaA0R5xOq+Lm2Xc5dmFVf
 github.com/gruntwork-io/terratest v0.46.7/go.mod h1:6gI5MlLeyF+SLwqocA5GBzcTix+XiuxCy1BPwKuT+WM=
 github.com/hashicorp/consul-k8s/control-plane v0.0.0-20240821160356-557f7c37e108 h1:5jSMtMGeY//hvkAefiomxP1Jqb5MtnKgsnlsZpEwiJE=
 github.com/hashicorp/consul-k8s/control-plane v0.0.0-20240821160356-557f7c37e108/go.mod h1:SY22WR9TJmlcK18Et2MAqy+kqAFJzbWFElN89vMTSiM=
-github.com/hashicorp/consul/api v1.33.2 h1:Q6mE0WZsUTJerlnl9TuXzqrtZ0cKdOCsxcZhj5mKbMs=
-github.com/hashicorp/consul/api v1.33.2/go.mod h1:K3yoL/vnIBcQV/25NeMZVokRvPPERiqp2Udtr4xAfhs=
+github.com/hashicorp/consul/api v1.33.3 h1:6ttDO8Os/lqwaus7nJxJaeiUw2o7GWKoQ1jexAFPdEQ=
+github.com/hashicorp/consul/api v1.33.3/go.mod h1:1HoAkxkKpC8A9lsUYs7QCMfSSKiz6+vlfrI1J3PUEeI=
 github.com/hashicorp/consul/proto-public v0.7.0 h1:eHnDLHh8kBDxJZS1fYHNoh/JPjLN7FAwu1vLXOa8QxE=
 github.com/hashicorp/consul/proto-public v0.7.0/go.mod h1:0EVZbKUi8/w5l6gTi4GZdcvGMG9k/CCkPmZVxJEBRpA=
-github.com/hashicorp/consul/sdk v0.17.1 h1:LumAh8larSXmXw2wvw/lK5ZALkJ2wK8VRwWMLVV5M5c=
-github.com/hashicorp/consul/sdk v0.17.1/go.mod h1:EngiixMhmw9T7wApycq6rDRFXXVUwjjf7HuLiGMH/Sw=
+github.com/hashicorp/consul/sdk v0.17.2 h1:sC0jgNhJkZX3wo1DCrkG12r+1JlZQpWvk3AoL3yZE4Q=
+github.com/hashicorp/consul/sdk v0.17.2/go.mod h1:VjccKcw6YhMhjH84/ZhTXZ0OG4SUq+K25P6DiCV/Hvg=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=

acceptance/tests/partitions/partitions_gateway_test.go

@@ -213,6 +213,25 @@ func TestPartitions_Gateway(t *testing.T) {
 		k8s.KubectlDeleteK(t, secondaryPartitionClusterContext.KubectlOptions(t), kustomizeDir)
 	})
 
+	// Ensure proxy-defaults config entries are created in Consul before proceeding.
+	// This is critical for mesh gateways to be properly configured for TLS.
+	logger.Log(t, "waiting for proxy-defaults config entries to be created in Consul")
+	retry.Run(t, func(r *retry.R) {
+		ceDefault, _, err := consulClient.ConfigEntries().Get(api.ProxyDefaults, api.ProxyConfigGlobal, serverQueryServerOpts)
+		require.NoError(r, err)
+		configEntryDefault, ok := ceDefault.(*api.ProxyConfigEntry)
+		require.True(r, ok)
+		require.Equal(r, configEntryDefault.GetName(), api.ProxyConfigGlobal)
+		logger.Log(t, "proxy-defaults config entry verified on default partition")
+
+		ceSecondary, _, err := consulClient.ConfigEntries().Get(api.ProxyDefaults, api.ProxyConfigGlobal, serverQueryClientOpts)
+		require.NoError(r, err)
+		configEntrySecondary, ok := ceSecondary.(*api.ProxyConfigEntry)
+		require.True(r, ok)
+		require.Equal(r, configEntrySecondary.GetName(), api.ProxyConfigGlobal)
+		logger.Log(t, "proxy-defaults config entry verified on secondary partition")
+	})
+
 	// We use the static-client pod so that we can make calls to the api gateway
 	// via kubectl exec without needing a route into the cluster from the test machine.
 	// Since we're deploying the gateway in the secondary cluster, we create the static client

acceptance/tests/sameness/sameness_test.go

@@ -349,6 +349,23 @@ func TestFailover_Connect(t *testing.T) {
 				}
 			}
 
+			// Ensure mesh config entries are created in Consul before proceeding with peering.
+			// This is critical for mesh gateways to be properly configured for TLS.
+			logger.Log(t, "waiting for mesh config entries to be created in Consul")
+			timer := &retry.Timer{Timeout: retryTimeout, Wait: 5 * time.Second}
+			for _, v := range testClusters {
+				if v.hasServer {
+					retry.RunWith(timer, t, func(r *retry.R) {
+						ce, _, err := v.client.ConfigEntries().Get(api.MeshConfig, "mesh", &api.QueryOptions{})
+						require.NoError(r, err)
+						configEntry, ok := ce.(*api.MeshConfigEntry)
+						require.True(r, ok)
+						require.Equal(r, configEntry.GetName(), "mesh")
+						logger.Logf(t, "mesh config entry verified on cluster %s", v.name)
+					})
+				}
+			}
+
 			// Apply locality to clusters
 			for _, v := range testClusters {
 				setK8sNodeLocality(t, v.context, v)

charts/consul/Chart.yaml

@@ -3,8 +3,8 @@
 
 apiVersion: v2
 name: consul
-version: 1.9.1-dev
-appVersion: 1.22-dev
+version: 1.9.4
+appVersion: 1.22.4
 kubeVersion: ">=1.22.0-0"
 description: Official HashiCorp Consul Chart
 home: https://www.consul.io
@@ -15,11 +15,11 @@ sources:
 annotations:
   artifacthub.io/images: |
     - name: consul
-      image: docker.mirror.hashicorp.services/hashicorppreview/consul:1.22-dev
+      image: hashicorp/consul:1.22.4
     - name: consul-k8s-control-plane
-      image: docker.mirror.hashicorp.services/hashicorppreview/consul-k8s-control-plane:1.9-dev
+      image: hashicorp/consul-k8s-control-plane:1.9.4
     - name: consul-dataplane
-      image: docker.mirror.hashicorp.services/hashicorppreview/consul-dataplane:1.9-dev
+      image: hashicorp/consul-dataplane:1.9.4
     - name: envoy
       image: envoyproxy/envoy:v1.25.11
   artifacthub.io/license: MPL-2.0

charts/consul/values.yaml

@@ -66,7 +66,7 @@ global:
   # image: "hashicorp/consul-enterprise:1.10.0-ent"
   # ```
   # @default: hashicorp/consul:<latest version>
-  image: docker.mirror.hashicorp.services/hashicorppreview/consul:1.22-dev
+  image: hashicorp/consul:1.22.4
 
   # Array of objects containing image pull secret names that will be applied to each service account.
   # This can be used to reference image pull secrets if using a custom consul or consul-k8s-control-plane Docker image.
@@ -86,7 +86,7 @@ global:
   # image that is used for functionality such as catalog sync.
   # This can be overridden per component.
   # @default: hashicorp/consul-k8s-control-plane:<latest version>
-  imageK8S: docker.mirror.hashicorp.services/hashicorppreview/consul-k8s-control-plane:1.9-dev
+  imageK8S: hashicorp/consul-k8s-control-plane:1.9.4
 
   # The image pull policy used globally for images controlled by Consul (consul, consul-dataplane, consul-k8s, consul-telemetry-collector).
   # One of "IfNotPresent", "Always", "Never", and "". Refer to https://kubernetes.io/docs/concepts/containers/images/#image-pull-policy
@@ -793,7 +793,7 @@ global:
   # The name (and tag) of the consul-dataplane Docker image used for the
   # connect-injected sidecar proxies and mesh, terminating, and ingress gateways.
   # @default: hashicorp/consul-dataplane:<latest supported version>
-  imageConsulDataplane: docker.mirror.hashicorp.services/hashicorppreview/consul-dataplane:1.9-dev
+  imageConsulDataplane: hashicorp/consul-dataplane:1.9.4
 
   # Configuration for running this Helm chart on the Red Hat OpenShift platform.
   # This Helm chart currently supports OpenShift v4.x+.

cli/go.mod

@@ -14,7 +14,7 @@ require (
 	github.com/google/go-cmp v0.7.0
 	github.com/hashicorp/consul-k8s/charts v0.0.0-00010101000000-000000000000
 	github.com/hashicorp/consul-k8s/version v0.0.0
-	github.com/hashicorp/consul/troubleshoot v0.8.3
+	github.com/hashicorp/consul/troubleshoot v0.8.4
 	github.com/hashicorp/go-hclog v1.6.3
 	github.com/hashicorp/go-multierror v1.1.1
 	github.com/hashicorp/hcp-sdk-go v0.62.1-0.20230913154003-cf69c0370c54
@@ -97,8 +97,8 @@ require (
 	github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674 // indirect
 	github.com/gosuri/uitable v0.0.4 // indirect
 	github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79 // indirect
-	github.com/hashicorp/consul/api v1.33.2 // indirect
-	github.com/hashicorp/consul/envoyextensions v0.9.2 // indirect
+	github.com/hashicorp/consul/api v1.33.3 // indirect
+	github.com/hashicorp/consul/envoyextensions v0.9.3 // indirect
 	github.com/hashicorp/errwrap v1.1.0 // indirect
 	github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
 	github.com/hashicorp/go-immutable-radix v1.3.1 // indirect

cli/go.sum

@@ -262,14 +262,14 @@ github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79/go.mod h1:Fecb
 github.com/grpc-ecosystem/grpc-gateway v1.16.0 h1:gmcG1KaJ57LophUzW0Hy8NmPhnMZb4M0+kPpLofRdBo=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.24.0 h1:TmHmbvxPmaegwhDubVz0lICL0J5Ka2vwTzhoePEXsGE=
 github.com/grpc-ecosystem/grpc-gateway/v2 v2.24.0/go.mod h1:qztMSjm835F2bXf+5HKAPIS5qsmQDqZna/PgVt4rWtI=
-github.com/hashicorp/consul/api v1.33.2 h1:Q6mE0WZsUTJerlnl9TuXzqrtZ0cKdOCsxcZhj5mKbMs=
-github.com/hashicorp/consul/api v1.33.2/go.mod h1:K3yoL/vnIBcQV/25NeMZVokRvPPERiqp2Udtr4xAfhs=
-github.com/hashicorp/consul/envoyextensions v0.9.2 h1:78/i3IM72MEV0UBFrMdzQ9agQtNWU8Bk6gigjnH6xY8=
-github.com/hashicorp/consul/envoyextensions v0.9.2/go.mod h1:aZrZ4yZ6RCLuaRJYDvG77vtT9J7xGTPqodqkd8klNz8=
-github.com/hashicorp/consul/sdk v0.17.1 h1:LumAh8larSXmXw2wvw/lK5ZALkJ2wK8VRwWMLVV5M5c=
-github.com/hashicorp/consul/sdk v0.17.1/go.mod h1:EngiixMhmw9T7wApycq6rDRFXXVUwjjf7HuLiGMH/Sw=
-github.com/hashicorp/consul/troubleshoot v0.8.3 h1:OrKpxp+SoZEu4srfUayZjJpruNUf8CvEe2JGD3bMVnQ=
-github.com/hashicorp/consul/troubleshoot v0.8.3/go.mod h1:3cb7Pgcs478IEGlxpJIKB/KASxj3GdmszqW7QbKdbcI=
+github.com/hashicorp/consul/api v1.33.3 h1:6ttDO8Os/lqwaus7nJxJaeiUw2o7GWKoQ1jexAFPdEQ=
+github.com/hashicorp/consul/api v1.33.3/go.mod h1:1HoAkxkKpC8A9lsUYs7QCMfSSKiz6+vlfrI1J3PUEeI=
+github.com/hashicorp/consul/envoyextensions v0.9.3 h1:wGcvE0icGmq3tDy6Yf93Gap/SpU1NTNKblg8CWkp8Ok=
+github.com/hashicorp/consul/envoyextensions v0.9.3/go.mod h1:HM7zYUvOSEKxObLEBq5OTYZRelOGs6QKnMkGFqX0yqw=
+github.com/hashicorp/consul/sdk v0.17.2 h1:sC0jgNhJkZX3wo1DCrkG12r+1JlZQpWvk3AoL3yZE4Q=
+github.com/hashicorp/consul/sdk v0.17.2/go.mod h1:VjccKcw6YhMhjH84/ZhTXZ0OG4SUq+K25P6DiCV/Hvg=
+github.com/hashicorp/consul/troubleshoot v0.8.4 h1:MH6f0EzocjG87a49J7YhwplyUrjYVXOQdf1StL3Dt/E=
+github.com/hashicorp/consul/troubleshoot v0.8.4/go.mod h1:hZAwXTIW2keBPNT8VAVhgtaWrbgzf4KYqW5/aEjn6O8=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=

control-plane/cni/go.mod

@@ -15,7 +15,7 @@ require (
 	k8s.io/client-go v0.29.8
 )
 
-require github.com/hashicorp/consul/sdk v0.17.1
+require github.com/hashicorp/consul/sdk v0.17.2
 
 require (
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect

control-plane/cni/go.sum

@@ -60,8 +60,8 @@ github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 h1:K6RDEckDVWvDI9JAJY
 github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE=
 github.com/google/uuid v1.3.0 h1:t6JiXgmwXMjEs8VusXIJk2BXHsn+wx8BZdTaoZ5fu7I=
 github.com/google/uuid v1.3.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
-github.com/hashicorp/consul/sdk v0.17.1 h1:LumAh8larSXmXw2wvw/lK5ZALkJ2wK8VRwWMLVV5M5c=
-github.com/hashicorp/consul/sdk v0.17.1/go.mod h1:EngiixMhmw9T7wApycq6rDRFXXVUwjjf7HuLiGMH/Sw=
+github.com/hashicorp/consul/sdk v0.17.2 h1:sC0jgNhJkZX3wo1DCrkG12r+1JlZQpWvk3AoL3yZE4Q=
+github.com/hashicorp/consul/sdk v0.17.2/go.mod h1:VjccKcw6YhMhjH84/ZhTXZ0OG4SUq+K25P6DiCV/Hvg=
 github.com/hashicorp/go-hclog v1.5.0 h1:bI2ocEMgcVlz55Oj1xZNBsVi900c7II+fWDyV9o+13c=
 github.com/hashicorp/go-hclog v1.5.0/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M=
 github.com/hpcloud/tail v1.0.0/go.mod h1:ab1qPbhIpdTxEkNHXyeSf5vhxWSCs/tWer42PpOxQnU=

control-plane/go.mod

@@ -6,9 +6,9 @@ replace github.com/hashicorp/consul-k8s/version => ../version
 
 replace github.com/hashicorp/consul-k8s/control-plane/cni => ./cni
 
-replace github.com/hashicorp/consul/api => github.com/hashicorp/consul/api v1.33.2
+replace github.com/hashicorp/consul/api => github.com/hashicorp/consul/api v1.33.3
 
-replace github.com/hashicorp/consul/sdk => github.com/hashicorp/consul/sdk v0.17.1
+replace github.com/hashicorp/consul/sdk => github.com/hashicorp/consul/sdk v0.17.2
 
 replace github.com/hashicorp/consul => github.com/hashicorp/consul v1.11.0-alpha.0.20260112121053-7ee7c79b61f0
 
@@ -27,8 +27,8 @@ require (
 	github.com/hashicorp/consul-k8s/control-plane/cni v0.0.0-20240226161840-f3842c41cb2b
 	github.com/hashicorp/consul-k8s/version v0.0.0
 	github.com/hashicorp/consul-server-connection-manager v0.1.12
-	github.com/hashicorp/consul/api v1.33.2
-	github.com/hashicorp/consul/sdk v0.17.1
+	github.com/hashicorp/consul/api v1.33.3
+	github.com/hashicorp/consul/sdk v0.17.2
 	github.com/hashicorp/go-bexpr v0.1.11
 	github.com/hashicorp/go-discover v1.1.0
 	github.com/hashicorp/go-hclog v1.6.3

control-plane/go.sum

@@ -272,12 +272,12 @@ github.com/hashicorp/consul v1.11.0-alpha.0.20260112121053-7ee7c79b61f0 h1:a14sO
 github.com/hashicorp/consul v1.11.0-alpha.0.20260112121053-7ee7c79b61f0/go.mod h1:Q+SsUkHg8Gu+xuMku4nq+VHFYIT581yf8jOBBAW4bvc=
 github.com/hashicorp/consul-server-connection-manager v0.1.12 h1:c/7LIghSdVqQKu4v9SPzxeHot0pphQ/FtRzzDlN3Vrg=
 github.com/hashicorp/consul-server-connection-manager v0.1.12/go.mod h1:f1x48hfZMLUTqdwBVPTezV43COWTixtnLmSbxjD0SHg=
-github.com/hashicorp/consul/api v1.33.2 h1:Q6mE0WZsUTJerlnl9TuXzqrtZ0cKdOCsxcZhj5mKbMs=
-github.com/hashicorp/consul/api v1.33.2/go.mod h1:K3yoL/vnIBcQV/25NeMZVokRvPPERiqp2Udtr4xAfhs=
+github.com/hashicorp/consul/api v1.33.3 h1:6ttDO8Os/lqwaus7nJxJaeiUw2o7GWKoQ1jexAFPdEQ=
+github.com/hashicorp/consul/api v1.33.3/go.mod h1:1HoAkxkKpC8A9lsUYs7QCMfSSKiz6+vlfrI1J3PUEeI=
 github.com/hashicorp/consul/proto-public v0.7.0 h1:eHnDLHh8kBDxJZS1fYHNoh/JPjLN7FAwu1vLXOa8QxE=
 github.com/hashicorp/consul/proto-public v0.7.0/go.mod h1:0EVZbKUi8/w5l6gTi4GZdcvGMG9k/CCkPmZVxJEBRpA=
-github.com/hashicorp/consul/sdk v0.17.1 h1:LumAh8larSXmXw2wvw/lK5ZALkJ2wK8VRwWMLVV5M5c=
-github.com/hashicorp/consul/sdk v0.17.1/go.mod h1:EngiixMhmw9T7wApycq6rDRFXXVUwjjf7HuLiGMH/Sw=
+github.com/hashicorp/consul/sdk v0.17.2 h1:sC0jgNhJkZX3wo1DCrkG12r+1JlZQpWvk3AoL3yZE4Q=
+github.com/hashicorp/consul/sdk v0.17.2/go.mod h1:VjccKcw6YhMhjH84/ZhTXZ0OG4SUq+K25P6DiCV/Hvg=
 github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=
 github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I=
 github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4=

version/version.go

@@ -17,12 +17,12 @@ var (
 	//
 	// Version must conform to the format expected by
 	// github.com/hashicorp/go-version for tests to work.
-	Version = "1.9.0"
+	Version = "1.9.4"
 
 	// A pre-release marker for the version. If this is "" (empty string)
 	// then it means that it is a final release. Otherwise, this is a pre-release
 	// such as "dev" (in development), "beta", "rc1", etc.
-	VersionPrerelease = "dev"
+	VersionPrerelease = ""
 )
 
 // GetHumanVersion composes the parts of the version in a way that's suitable