●Change8

Migrating to Vault v1.20.0

Version v1.20.0 introduces 1 breaking change. This guide details how to update your code.

Released: 6/25/2025

1
Breaking Changes
1
Migration Steps
49
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

sys/internal/counters/activityX-Forwarded-For headerRetry-After headerauth/alicloud plugin v0.21.0auth/azure plugin v0.20.2auth/azure plugin v0.20.3auth/azure plugin v0.20.4auth/azure plugin v0.21.0auth/azure plugin v0.21.1auth/cf plugin v0.20.1auth/cf plugin v0.21.0auth/gcp plugin v0.20.2auth/jwt plugin v0.23.2auth/jwt plugin v0.24.1auth/kerberos plugin v0.15.0auth/kubernetes plugin v0.22.1auth/oci plugin v0.19.0auth/saml plugin v0.6.0database/couchbase plugin v0.14.0database/elasticsearch plugin v0.18.0database/mongodbatlas plugin v0.15.0database/redis-elasticache plugin v0.7.0database/redis plugin v0.6.0database/snowflake plugin v0.14.0database/snowflake plugin v0.14.1logical/system plugin catalog handlingquotas/rate-limitsecrets/ad plugin v0.21.0secrets/alicloud plugin v0.20.0secrets/azure plugin v0.21.2secrets/azure plugin v0.21.3secrets/azure plugin v0.22.0secrets/gcp plugin v0.21.2secrets/gcp plugin v0.21.3secrets/gcp plugin v0.22.0secrets/gcpkms plugin v0.21.0secrets/kubernetes plugin v0.11.0secrets/kv plugin v0.24.0secrets/mongodbatlas plugin v0.15.0secrets/openldap plugin v0.15.2secrets/openldap plugin v0.15.4secrets/openldap plugin v0.16.0secrets/terraform plugin v0.12.0disable_mlock configuration optionui/activity chartsui/Client count side nav link 'Vault Usage Metrics'ui/Client counting "running total" chartsui/FormError componentui/login form /vault/auth?with= query parameter

Breaking Changes

●Issue #1

The `disable_mlock` configuration option is now required for integrated storage and no longer has a default.

✓Solution

If you are using the default value with integrated storage, you must now explicitly set `disable_mlock` to either `true` or `false` in your configuration, or Vault server will fail to start.

Migration Steps

  1. 1
    If using integrated storage, you must explicitly set the `disable_mlock` configuration option to `true` or `false` to prevent Vault server startup failure.

Release Summary

This release focuses heavily on updating numerous authentication, database, and secret engine plugins to newer versions, alongside security hardening for rekey operations and critical configuration changes for integrated storage startup.

Need More Details?

View the full release notes and all changes for Vault v1.20.0.

View Full Changelog