chore(deps): update dependency hashicorp/nomad to v2.0.7

[renovate]

This PR contains the following updates:

Package	Update	Change
hashicorp/nomad	patch	2.0.5 → 2.0.7

---

Release Notes

hashicorp/nomad (hashicorp/nomad)

v2.0.7

Compare Source

IMPROVEMENTS:

• dependency: Upgrade to the latest buf (1.72.0), protoc-gen-go (1.36.6), and protoc-gen-go-grpc (1.5.1) [GH-28525]
• services: the default workload identity policy now allows using wildcard namespace queries for Nomad native services [GH-28534]
• ui: fixed accessibility color contrast issues [GH-28022]

BUG FIXES:

• api: Fix job statuses error when request body is empty using HTTP2 [GH-28541]
• client: Fixed a bug where task restart skipped shutdown_delay [GH-25289]
• core: Fixed a bug where re-submitting an otherwise unchanged job with a different ACL token created a new job version and deployment [GH-26810]
• deployments: Fixed a bug where system job updates would not result in a new deployment if the prior deployment failed [GH-28545]
• docker: Fixed a bug where image_pull_timeout was not respected if more than 5min [GH-28543]
• identity: Fixed a bug where clients would not attempt to recreate expired node identities [GH-28566]
• namespaces: Fixed a bug where an invalid replication token could delete namespaces in a federated follower region [GH-28552]
• namespaces: Fixed a bug where namespaces could stop replicating between federated regions [GH-28552]
• node pools: Fixed a bug where an invalid replication token could delete node pools in a federated follower region [GH-28552]
• node pools: Fixed a bug where blocking queries would not unblock if a node pool was added automatically by registering a node [GH-28552]
• node pools: Fixed a bug where node pools could stop replicating between federated regions [GH-28552]

v2.0.6

Compare Source

SECURITY:

• dependency: Upgrade to the latests go-getter [GH-28510]

IMPROVEMENTS:

• api: Updated the Go module to require at least 1.26.0 [GH-28460]
• build: Updated Go to v1.27.1 [GH-28451]
• client: Added the unique.host_id node attribute to the host fingerprint, when available [GH-28406]
• job: Allow setting reschedule.delay to values as low as 1s [GH-28477]
• jobspec2: Decouple from Nomad core with isolated Go module named github.com/hashicorp/nomad/jobspec2 [GH-28419]
• scheduler: Improved robustness of reschedule logic for invalid states [GH-28445]
• ui: prevent stuck requests due to exceeding connection limit, enable HTTP2 [GH-28364]

BUG FIXES:

• api: Fixed a bug where a job plan diff sorted indexed fields such as args lexically, listing args[10] before args[2] [GH-4421]
• client: prevent Alloc FS API from accessing secret dir when symlinked into task [GH-28468]
• core: Fixed a bug where an artifact checksum of the form file:<url> (fetching the checksum from a remote file) was rejected during job validation [GH-9764]
• jobspec: Fixed a bug where a task group containing only lifecycle tasks and no main task was accepted during job validation [GH-17570]
• planner: Fixed a bug where valid evaluations could be unnecessarily retried, delaying workload placement under load [GH-28452]
• scheduler: Fixed a bug where task groups with per_alloc volumes could skip real feasibility checks for allocs after the first placement failure in the same task group [GH-28422]
• state: Fixed a bug where plans from older versioned followers did not have allocation resource schemas upgraded when written on the leader [GH-28447]
• vault: Fixed a bug where a task's change_mode was triggered on each Vault token renewal [GH-28409]
• vault: fixes an issue where dead tasks continued to have their tokens renewed [GH-28501]

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.