Change8

Migrating to Vault v1.21.4

Version v1.21.4 introduces 1 breaking change. This guide details how to update your code.

Released: 3/5/2026

1
Breaking Changes
1
Migration Steps
5
Affected Symbols

⚠️ Check Your Code

If you use any of these symbols, you need to read this guide:

sys/seal-backend-statusPOSTPKIOperationSCEP GetCACaps endpointX-Vault-Index response headerroot/sign-intermediate endpoint

Breaking Changes

Issue #1

The ability to bulk delete secrets engines from the list view in the UI has been removed. Users must now delete secrets engines individually.

Migration Steps

  1. 1
    If you relied on bulk deletion of secrets engines in the UI, you must now delete them individually.

Release Summary

This release focuses heavily on security updates by upgrading several dependencies to address known CVEs and Go vulnerabilities. It also includes numerous bug fixes, particularly around PKI protocols (SCEP, EST, CMPv2) and enterprise features.

Need More Details?

View the full release notes and all changes for Vault v1.21.4.

View Full Changelog