Vault - Package Updates

[girish]

You can use this thread to track updates to the Vault package.

Please open issues in a separate topic instead of replying here.

[girish]

[0.2.0]

• Add tests
• Update postinstall
• Fixup ldap setup script
• Do not save root token in data directory

[girish]

[0.3.0]

• Update Vault to 1.4.3
• Full changelog

[girish]

[1.0.0]

• Update Vault to 1.5.0
• Full changelog

[girish]

[1.0.1]

• Update Vault to 1.5.2
• Full changelog

[girish]

[1.0.2]

• Update Vault to 1.5.3
• Full changelog

[girish]

[1.0.3]

• Update Vault to 1.5.4
• Full changelog

[girish]

[1.0.4]

• Update Vault to 1.5.5
• Full changelog

[girish]

[1.1.0]

• Update Vault to 1.6.0
• Full changelog

[girish]

[1.1.1]

• Update Vault to 1.6.1
• Full changelog

[girish]

[1.1.2]

• Update Vault to 1.6.2
• Full changelog
• Security - CVE-2021-3024, CVE-2021-3282 and CVE-2020-25594
• Adds check for feature flag on application, and updates namespace toolbar on login if present

[girish]

[1.2.0]

• Update base image to v3

[girish]

[1.2.1]

• Update Vault to 1.6.3
• Full changelog
• Security: Limited Unauthenticated License Read (CVE-2021-27668)

[girish]

[1.3.0]

• Update Vault to 1.7.0
• Full changelog
• ui: Adds check for feature flag on application, and updates namespace toolbar on login if present [GH-10588]
• ui: Adds the wizard to the Database Secret Engine [GH-10982]
• ui: Database secrets engine, supporting MongoDB only [GH-10655]

[girish]

[1.3.1]

• Update Vault to 1.7.1
• Full changelog

[girish]

[1.3.2]

• Update Vault to 1.7.2
• Full changelog
• Security: CVE-2021-32923

[girish]

[1.3.3]

• Update Vault to 1.7.3
• Full changelog

[girish]

[1.4.0]

• Update Vault to 1.8.0
• Full changelog

[girish]

[1.4.1]

• Update Vault to 1.8.1

[girish]

[1.4.2]

• Update Vault to 1.8.2
• Full changelog
• auth/aws: Fixes ec2 login no longer supporting DSA signature verification [GH-12340]
• cli: vault debug now puts newlines after every captured log line. [GH-12175]
• database/couchbase: change default template to truncate username at 128 characters [GH-12300]
• identity: Fix a panic on arm64 platform when doing identity I/O. [GH-12371]
• physical/raft: Fix safeio.Rename error when restoring snapshots on windows [GH-12377]

[girish]

[1.4.3]

• Update Vault to 1.8.3
• Full changelog

[girish]

[1.4.4]

• Update Vault to 1.8.4
• Full changelog
• pki: Fix regression preventing email addresses being used as a common name within certificates [GH-12716]
• storage/postgres: Update postgres library (github.com/lib/pq) to properly remove terminated TLS connections from the connection pool. [GH-12413]
• ui: Fix bug where edit role form on auth method is invalid by default [GH-12646]

[girish]

[1.4.5]

• Update Vault to 1.8.5
• Full changelog

[girish]

[1.5.0]

• Update Vault to 1.9.0
• Full changelog

[girish]

[1.5.1]

• Update Vault to 1.9.1
• Full changelog

[nebulon]

[1.5.2]

• Update Vault to 1.9.2
• Full changelog
• Update base image to 3.2.0

[nebulon]

[1.5.3]

• Update Vault to 1.9.3
• Full changelog

[nebulon]

[1.5.4]

• Update Vault to 1.9.4
• Full changelog

[nebulon]

[1.6.0]

• Update Vault to 1.10.0
• Full changelog
• core: Changes the unit of default_lease_ttl and max_lease_ttl values returned by the /sys/config/state/sanitized endpoint from nanoseconds to seconds. [GH-14206]
• core: Bump Go version to 1.17.7. [GH-14232]
• plugin/database: The return value from POST /database/config/:name has been updated to "204 No Content" [GH-14033]
• secrets/azure: Changes the configuration parameter use_microsoft_graph_api to use the Microsoft Graph API by default. [GH-14130]
• storage/etcd: Remove support for v2. [GH-14193]
• ui: Upgrade Ember to version 3.24 [GH-13443]

[girish]

[1.6.1]

• Update Vault to 1.10.1
• Full changelog

[girish]

[1.6.2]

• Update Vault to 1.10.2
• Full changelog

[girish]

[1.6.3]

• Update Vault to 1.10.3
• Full changelog

[girish]

[1.6.4]

• Update Vault to 1.10.4
• Full changelog
• Correct handling of "unspecified" log level

[girish]

[1.7.0]

• Update Vault to 1.11.0
• Full changelog
• Non-Disruptive Intermediate/Root Certificate Rotation: This allows import, generation and configuration of any number of keys and/or issuers within a PKI mount, providing operators the ability to rotate certificates in place without affecting existing client configurations. [GH-15277]
• api/command: Global -output-policy flag to determine minimum required policy HCL for a given operation [GH-14899]
• storage/dynamodb: Added AWS_DYNAMODB_REGION environment variable. [GH-15054]