auth/github: Allow for an optional Github auth token environment variable to make authenticated requests when fetching org id
website/docs: Add docs for VAULT_AUTH_CONFIG_GITHUB_TOKEN environment variable when writing Github config [GH-19244]
core: Allow overriding gRPC connect timeout via VAULT_GRPC_MIN_CONNECT_TIMEOUT. This is an env var rather than a config setting because we don't expect this to ever be needed. It's being added as a last-ditch
option in case all else fails for some replication issues we may not have fully reproduced. [GH-19676]
core: validate name identifiers in mssql physical storage backend prior use [GH-19591]
BUG FIXES:
auth/kubernetes: Ensure a consistent TLS configuration for all k8s API requests [#190] [GH-19720]
cli: Fix vault read handling to return raw data as secret.Data when there is no top-level data object from api response. [GH-17913]
core (enterprise): Attempt to reconnect to a PKCS#11 HSM if we retrieve a CKR_FUNCTION_FAILED error.
core: Fixed issue with remounting mounts that have a non-trailing space in the 'to' or 'from' paths. [GH-19585]
openapi: Fix logic for labeling unauthenticated/sudo paths. [GH-19600]
secrets/transform (enterprise): Fix persistence problem with rotated tokenization key versions
ui: fixes issue navigating back a level using the breadcrumb from secret metadata view [GH-19703]
ui: pass encodeBase64 param to HMAC transit-key-actions. [GH-19429]
ui: use URLSearchParams interface to capture namespace param from SSOs (ex. ADFS) with decoded state param in callback url [GH-19460]
auth/github: Allow for an optional Github auth token environment variable to make authenticated requests when fetching org id
website/docs: Add docs for VAULT_AUTH_CONFIG_GITHUB_TOKEN environment variable when writing Github config [GH-19244]
core: Allow overriding gRPC connect timeout via VAULT_GRPC_MIN_CONNECT_TIMEOUT. This is an env var rather than a config setting because we don't expect this to ever be needed. It's being added as a last-ditch
option in case all else fails for some replication issues we may not have fully reproduced. [GH-19676]
core: validate name identifiers in mssql physical storage backend prior use [GH-19591]
BUG FIXES:
auth/kubernetes: Ensure a consistent TLS configuration for all k8s API requests [#190] [GH-19720]
cli: Fix vault read handling to return raw data as secret.Data when there is no top-level data object from api response. [GH-17913]
core (enterprise): Attempt to reconnect to a PKCS#11 HSM if we retrieve a CKR_FUNCTION_FAILED error.
core: Fixed issue with remounting mounts that have a non-trailing space in the 'to' or 'from' paths. [GH-19585]
openapi: Fix logic for labeling unauthenticated/sudo paths. [GH-19600]
secrets/transform (enterprise): Fix persistence problem with rotated tokenization key versions
ui: fixes issue navigating back a level using the breadcrumb from secret metadata view [GH-19703]
ui: pass encodeBase64 param to HMAC transit-key-actions. [GH-19429]
ui: use URLSearchParams interface to capture namespace param from SSOs (ex. ADFS) with decoded state param in callback url [GH-19460]
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Venafi/vault-pki-monitor-venafi/network/alerts).
Bumps github.com/hashicorp/vault from 1.5.5 to 1.11.9.
Release notes
Sourced from github.com/hashicorp/vault's releases.
... (truncated)
Changelog
Sourced from github.com/hashicorp/vault's changelog.
... (truncated)
Commits
3eed40f
auth/kubernetes: upgrade to v0.13.3 (#19720)030a41b
backport of commit 85c3eab989de0c90d82b0cb39cabb79fb3911943 (#19714)36709b9
Backport of Add tests for PKI endpoint authentication via OpenAPI into releas...ab7cb07
backport of commit 0c69cf10488c1b36ea112a98a2ea156e7eec8d74 (#19709)947beba
Backport of Allow overriding gRPC's connection timeout with VAULT_GRPC_MIN_CO...85fcea4
Regression bug fix OIDC namespace (#19460) (#19694)87b77ff
Backport of openapi: Fix logic for labeling unauthenticated/sudo paths into r...e9bc68f
backport of commit e9d6dbce23d5cca2afbccf656a5056d226580149 (#19652)96bcc7c
Document the 'convergent' tokenization transform option (#19249) (#19255)6d2bd44
backport of commit 3e72c764433b4ea15c822377a33ed073098c4568 (#19621)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/Venafi/vault-pki-monitor-venafi/network/alerts).