Change8

v1.21.3

📦 vaultView on GitHub →
1 features🐛 7 fixes🔧 2 symbols

Summary

This release introduces support for Hashi-built external plugins and includes several security and stability fixes across core, agent, and enterprise features, alongside telemetry enhancements for secret synchronization.

✨ New Features

  • Recognize and support Hashi-built plugins when run as external binaries (UI).

🐛 Bug Fixes

  • Vault Agent was discarding cached tokens on transient server errors instead of retrying (agent).
  • Fixed crash when seal HSM is disconnected (core enterprise).
  • Fixed issue when specifying "root" explicitly in Default Auth UI.
  • Fixed issue where Vault may consume more memory than intended under heavy authentication load (identity).
  • Fixed SCEP related digest errors when requests contained compound octet strings (secrets/pki enterprise).
  • Fixed login form so ?with=<path> query param correctly displays only the specified mount when multiple mounts of the same auth type are configured with listing_visibility="unauth" (ui).
  • Reverted Kubernetes CA Certificate auth method configuration form field type to file selector (ui).

Affected Symbols