This pull request was automerged via backport-assistant

Backport of docs: improved documentation on hardening and required capabilities into release/1.3.x (#15043)

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

(manual cherry pick of a0071f42)

* deps: update hashicorp/raft to v1.3.11

Includes part of the fix for https://github.com/hashicorp/raft/issues/524



* cl: add changelog entry
Co-authored-by: Seth Hoenig <shoenig@duck.com>

This pull request was automerged via backport-assistant

manual cherry-pick

* deps: update go-memdb for goroutine leak fix

* cl: update for goroutine leak go-memdb
Co-authored-by: Seth Hoenig <shoenig@duck.com>

manual cherry-pick

And fix the one place we use them.
Co-authored-by: Seth Hoenig <shoenig@duck.com>

Backport of consul: register checks along with service on initial registration into release/1.3.x (#14960)

This pull request was automerged via backport-assistant

(manaual cherry-pick)
bugfix for SliceContainsAll and adding SliceContainsSubset
Co-authored-by: Seth Hoenig <shoenig@duck.com>

(manual cherry-pick of 381874c9ddb7edad36fcae061133a1f253329643)

This PR updates Nomad's Consul service client to do map comparisons
using maps.Equal instead of reflect.DeepEqual. The bug fix is in how
DeepEqual treats nil slices different from empty slices, when actually
they should be treated the same.
Co-authored-by: Seth Hoenig <shoenig@duck.com>

Backport of nnsd: gate registration write &  delete RPC use on v1.3.0 or greater. into release/1.3.x (#14929)

This pull request was automerged via backport-assistant

* One-time tokens are not replicated between regions, so we don't want to enforce
  that the version check across all of serf, just members in the same region.
* Scheduler: Disconnected clients handling is specific to a single region, so we
  don't want to enforce that the version check across all of serf, just members in
  the same region.
* Cleans up a bunch of legacy checks.

This changeset is specific to 1.3.x and the changes for other versions of
Nomad will be manually backported in separate PRs

This pull request was automerged via backport-assistant

* build(deps): bump github.com/prometheus/client_golang

Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.12.0 to 1.13.0.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.12.0...v1.13.0

)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump github.com/mattn/go-colorable from 0.1.12 to 0.1.13

Bumps [github.com/mattn/go-colorable](https://github.com/mattn/go-colorable) from 0.1.12 to 0.1.13.
- [Release notes](https://github.com/mattn/go-colorable/releases)
- [Commits](https://github.com/mattn/go-colorable/compare/v0.1.12...v0.1.13

)

---
updated-dependencies:
- dependency-name: github.com/mattn/go-colorable
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump github.com/google/go-cmp from 0.5.8 to 0.5.9

Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.8 to 0.5.9.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](https://github.com/google/go-cmp/compare/v0.5.8...v0.5.9

)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>

* build(deps): bump github.com/miekg/dns from 1.1.41 to 1.1.50

Bumps [github.com/miekg/dns](https://github.com/miekg/dns) from 1.1.41 to 1.1.50.
- [Release notes](https://github.com/miekg/dns/releases)
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](https://github.com/miekg/dns/compare/v1.1.41...v1.1.50

)

---
updated-dependencies:
- dependency-name: github.com/miekg/dns
  dependency-type: direct:production
  update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: Tim Gross <tgross@hashicorp.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

This pull request was automerged via backport-assistant

The `hc-install` tool we're using needed a patch for a specific bug, but that's
since been merged. We definitely want to switch to using a standard release from
that project once one is shipped with the CLI, but pinning to HEAD should keep
us for now.

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

(manual cherry-pick of #14680)

This PR updates go-set and shoenig/test, which introduced some breaking
API changes.
Co-authored-by: Seth Hoenig <shoenig@duck.com>

This pull request was automerged via backport-assistant

Backport of cli: fix a bug in operator API when setting HTTPS via address. into release/1.3.x (#14699)

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

Backport of scheduler: Fix bug where the would treat multiregion jobs as paused for job types that don't use deployments into release/1.3.x (#14663)

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

cleanup more helper updates (#14638)

* cleanup: refactor MapStringStringSliceValueSet to be cleaner

* cleanup: replace SliceStringToSet with actual set

* cleanup: replace SliceStringSubset with real set

* cleanup: replace SliceStringContains with slices.Contains

* cleanup: remove unused function SliceStringHasPrefix

* cleanup: fixup StringHasPrefixInSlice doc string

* cleanup: refactor SliceSetDisjoint to use real set

* cleanup: replace CompareSliceSetString with SliceSetEq

* cleanup: replace CompareMapStringString with maps.Equal

* cleanup: replace CopyMapStringString with CopyMap

* cleanup: replace CopyMapStringInterface with CopyMap

* cleanup: fixup more CopyMapStringString and CopyMapStringInt

* cleanup: replace CopySliceString with slices.Clone

* cleanup: remove unused CopySliceInt

* cleanup: refactor CopyMapStringSliceString to be generic as CopyMapOfSlice

* cleanup: replace CopyMap with maps.Clone

* cleanup: run go mod tidy
Co-authored-by: Seth Hoenig <shoenig@duck.com>

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

This pull request was automerged via backport-assistant

Backport of docs: Fixing heading order, adding text for links in /docs/ecosystem into release/1.3.x (#14565)

This pull request was automerged via backport-assistant