secrets/pki: Maintaining running count of certificates will be turned off by default.
To re-enable keeping these metrics available on the tidy status endpoint, enable
maintain_stored_certificate_counts on tidy-config, to also publish them to the
metrics consumer, enable publish_stored_certificate_count_metrics . [GH-18186]
CHANGES:
auth/alicloud: Updated plugin from v0.14.0 to v0.15.0 [GH-20758]
auth/azure: Updated plugin from v0.13.0 to v0.15.0 [GH-20816]
auth/centrify: Updated plugin from v0.14.0 to v0.15.1 [GH-20745]
auth/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20725]
auth/jwt: Updated plugin from v0.15.0 to v0.16.0 [GH-20799]
auth/kubernetes: Update plugin to v0.16.0 [GH-20802]
core: Bump Go version to 1.20.5.
core: Remove feature toggle for SSCTs, i.e. the env var VAULT_DISABLE_SERVER_SIDE_CONSISTENT_TOKENS. [GH-20834]
core: Revert #19676 (VAULT_GRPC_MIN_CONNECT_TIMEOUT env var) as we decided it was unnecessary. [GH-20826]
database/couchbase: Updated plugin from v0.9.0 to v0.9.2 [GH-20764]
database/redis-elasticache: Updated plugin from v0.2.0 to v0.2.1 [GH-20751]
replication (enterprise): Add a new parameter for the update-primary API call
that allows for setting of the primary cluster addresses directly, instead of
via a token.
secrets/ad: Updated plugin from v0.10.1-0.20230329210417-0b2cdb26cf5d to v0.16.0 [GH-20750]
secrets/alicloud: Updated plugin from v0.5.4-beta1.0.20230330124709-3fcfc5914a22 to v0.15.0 [GH-20787]
secrets/aure: Updated plugin from v0.15.0 to v0.16.0 [GH-20777]
secrets/database/mongodbatlas: Updated plugin from v0.9.0 to v0.10.0 [GH-20882]
secrets/database/snowflake: Updated plugin from v0.7.0 to v0.8.0 [GH-20807]
secrets/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20818]
secrets/keymgmt: Updated plugin to v0.9.1
secrets/kubernetes: Update plugin to v0.5.0 [GH-20802]
secrets/mongodbatlas: Updated plugin from v0.9.1 to v0.10.0 [GH-20742]
secrets/pki: Allow issuance of root CAs without AIA, when templated AIA information includes issuer_id. [GH-21209]
secrets/pki: Warning when issuing leafs from CSRs with basic constraints. In the future, issuance of non-CA leaf certs from CSRs with asserted IsCA Basic Constraints will be prohibited. [GH-20654]
FEATURES:
AWS Static Roles: The AWS Secrets Engine can manage static roles configured by users. [GH-20536]
Automated License Utilization Reporting: Added automated license
utilization reporting, which sends minimal product-license metering
data
to HashiCorp without requiring you to manually collect and report them.
Environment Variables through Vault Agent: Introducing a new process-supervisor mode for Vault Agent which allows injecting secrets as environment variables into a child process using a new env_template configuration stanza. The process-supervisor configuration can be generated with a new vault agent generate-config helper tool. [GH-20530]
MongoDB Atlas Database Secrets: Adds support for client certificate credentials [GH-20425]
MongoDB Atlas Database Secrets: Adds support for generating X.509 certificates on dynamic roles for user authentication [GH-20882]
NEW PKI Workflow in UI: Completes generally available rollout of new PKI UI that provides smoother mount configuration and a more guided user experience [GH-pki-ui-improvements]
ui: key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11. [HSEC-2023-17]
BREAKING CHANGES:
secrets/pki: Maintaining running count of certificates will be turned off by default.
To re-enable keeping these metrics available on the tidy status endpoint, enable
maintain_stored_certificate_counts on tidy-config, to also publish them to the
metrics consumer, enable publish_stored_certificate_count_metrics . [GH-18186]
CHANGES:
auth/alicloud: Updated plugin from v0.14.0 to v0.15.0 [GH-20758]
auth/azure: Updated plugin from v0.13.0 to v0.15.0 [GH-20816]
auth/centrify: Updated plugin from v0.14.0 to v0.15.1 [GH-20745]
auth/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20725]
auth/jwt: Updated plugin from v0.15.0 to v0.16.0 [GH-20799]
auth/kubernetes: Update plugin to v0.16.0 [GH-20802]
core: Bump Go version to 1.20.5.
core: Remove feature toggle for SSCTs, i.e. the env var VAULT_DISABLE_SERVER_SIDE_CONSISTENT_TOKENS. [GH-20834]
core: Revert #19676 (VAULT_GRPC_MIN_CONNECT_TIMEOUT env var) as we decided it was unnecessary. [GH-20826]
database/couchbase: Updated plugin from v0.9.0 to v0.9.2 [GH-20764]
database/redis-elasticache: Updated plugin from v0.2.0 to v0.2.1 [GH-20751]
replication (enterprise): Add a new parameter for the update-primary API call
that allows for setting of the primary cluster addresses directly, instead of
via a token.
secrets/ad: Updated plugin from v0.10.1-0.20230329210417-0b2cdb26cf5d to v0.16.0 [GH-20750]
secrets/alicloud: Updated plugin from v0.5.4-beta1.0.20230330124709-3fcfc5914a22 to v0.15.0 [GH-20787]
secrets/aure: Updated plugin from v0.15.0 to v0.16.0 [GH-20777]
secrets/database/mongodbatlas: Updated plugin from v0.9.0 to v0.10.0 [GH-20882]
secrets/database/snowflake: Updated plugin from v0.7.0 to v0.8.0 [GH-20807]
secrets/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20818]
secrets/keymgmt: Updated plugin to v0.9.1
secrets/kubernetes: Update plugin to v0.5.0 [GH-20802]
secrets/mongodbatlas: Updated plugin from v0.9.1 to v0.10.0 [GH-20742]
secrets/pki: Allow issuance of root CAs without AIA, when templated AIA information includes issuer_id. [GH-21209]
secrets/pki: Warning when issuing leafs from CSRs with basic constraints. In the future, issuance of non-CA leaf certs from CSRs with asserted IsCA Basic Constraints will be prohibited. [GH-20654]
FEATURES:
AWS Static Roles: The AWS Secrets Engine can manage static roles configured by users. [GH-20536]
Automated License Utilization Reporting: Added automated license
utilization reporting, which sends minimal product-license metering
data
to HashiCorp without requiring you to manually collect and report them.
Environment Variables through Vault Agent: Introducing a new process-supervisor mode for Vault Agent which allows injecting secrets as environment variables into a child process using a new env_template configuration stanza. The process-supervisor configuration can be generated with a new vault agent generate-config helper tool. [GH-20530]
... (truncated)
Commits
13a649f backport of commit f12c1285599a1519273bfa68472c598b1fd635bf (#21348)
dd62be3 backport of commit 3908ec9dc44352548e08f4c86f9ad76c255ce493 (#21331)
0fc55a2 backport of commit d76424cb53c730da5410ec55bff3274a01212843 (#21328)
7733b6a backport of commit 3347e5d56b363e58e7be556cfd0875a210c2a2ec (#21326)
1990a8c backport of commit 30aac443d0037852b0a5e4b50d59a9bedc5e4445 (#21324)
15631d2 backport of commit a1fdf105b3cc2e88483f3fca27729fa06bfbfa7f (#21312)
a14ff6e backport of commit 41f392c43ff4c9077deb1d1640349b8ba867d139 (#21307)
0610df0 backport of commit 042dd57811c900c9f6e2c85b5460d50560f79105 (#21295)
2fd24b1 backport of commit 8cc7be234ac34ff0f703ab092a7314ba9e65b277 (#21293)
9e85fef backport of commit c5549cdac681676ae52ea173d737ee1c5d1949a2 (#21272)
Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]
v1.33.0
1.33.0
Features
Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.
Maintenance
Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]
Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]
1.33.0
Features
Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.
Maintenance
Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]
The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.
[CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445#1449
[FEATURE] collectors: Add version collector. #1422#1427
The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.
[CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445#1449
[FEATURE] collectors: Add version collector. #1422#1427
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
- `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
- `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency
- `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Bumps the github-dependencies group with 8 updates in the / directory:
0.12.2
0.14.0
1.51.12
1.53.10
1.28.1
1.28.10
1.12.0
1.14.0
0.17.0
0.18.0
2.17.1
2.19.0
1.18.0
1.19.1
1.5.1
1.5.2
Updates
github.com/IBM/keyprotect-go-client
from 0.12.2 to 0.14.0Release notes
Sourced from github.com/IBM/keyprotect-go-client's releases.
Commits
55b541c
Allow instance policy attributes to be optionally specified (#126)9d7123f
instpol attrib enabled only (#125)ef8a971
add info to contributing about the semantic release (#124)406a0f3
feat(build): Update travis distribution in CI file (#123)d81a8cc
feat(build): Add KMIP Management APIs to Go SDK (#122)866c8c2
retractions (#119)Updates
github.com/aws/aws-sdk-go
from 1.51.12 to 1.53.10Release notes
Sourced from github.com/aws/aws-sdk-go's releases.
... (truncated)
Commits
2e099e6
Release v1.53.10 (2024-05-24) (#5271)4861f8f
Merge pull request #5182 from dswarbrick/fix-unaligned-atomica49c26d
add changelogb3e1d80
Release v1.53.9 (2024-05-23) (#5269)cb0e3f4
Release v1.53.8 (2024-05-22) (#5267)bc144f9
Merge pull request #5265 from aws/fix-ec2querylist1256577
Release v1.53.7 (2024-05-21) (#5266)5e331e3
don't serialize empty lists in ec2query4c997a5
Release v1.53.6 (2024-05-20) (#5264)7a0e753
Release v1.53.5 (2024-05-17) (#5263)Updates
github.com/aws/aws-sdk-go-v2/service/sts
from 1.28.1 to 1.28.10Commits
b83b305
Release 2023-04-14cdcc36a
Regenerated Clients41e6ecf
Update endpoints model66426a6
Update API model34d00f4
Release 2023-04-1344686f2
Regenerated Clientsa748e72
Update endpoints model2402019
Update API model636b2e4
fix APIGW exports nullability exceptions (#2094)8d65580
Release 2023-04-12Updates
github.com/hashicorp/vault/api
from 1.12.0 to 1.14.0Release notes
Sourced from github.com/hashicorp/vault/api's releases.
... (truncated)
Changelog
Sourced from github.com/hashicorp/vault/api's changelog.
... (truncated)
Commits
13a649f
backport of commit f12c1285599a1519273bfa68472c598b1fd635bf (#21348)dd62be3
backport of commit 3908ec9dc44352548e08f4c86f9ad76c255ce493 (#21331)0fc55a2
backport of commit d76424cb53c730da5410ec55bff3274a01212843 (#21328)7733b6a
backport of commit 3347e5d56b363e58e7be556cfd0875a210c2a2ec (#21326)1990a8c
backport of commit 30aac443d0037852b0a5e4b50d59a9bedc5e4445 (#21324)15631d2
backport of commit a1fdf105b3cc2e88483f3fca27729fa06bfbfa7f (#21312)a14ff6e
backport of commit 41f392c43ff4c9077deb1d1640349b8ba867d139 (#21307)0610df0
backport of commit 042dd57811c900c9f6e2c85b5460d50560f79105 (#21295)2fd24b1
backport of commit 8cc7be234ac34ff0f703ab092a7314ba9e65b277 (#21293)9e85fef
backport of commit c5549cdac681676ae52ea173d737ee1c5d1949a2 (#21272)Updates
github.com/kubernetes-csi/csi-lib-utils
from 0.17.0 to 0.18.0Release notes
Sourced from github.com/kubernetes-csi/csi-lib-utils's releases.
Commits
daff2f9
Merge pull request #173 from jsafrane/changelog-1.30f4ea36a
Add changelog for v0.18f827970
Merge pull request #172 from jsafrane/release-tools-1.30f6380ed
Use test-logcheck from release-toolseee07e3
Merge commit '8676fb59c178afef41300d569bbec1ec7f492199' into release-tools-1.308676fb5
Squashed 'release-tools/' changes from b54c1ba4..edd89ad51601922
Merge pull request #165 from xing-yang/new_update_k8s_1.30a0e2d0f
Merge pull request #170 from jsafrane/bump-logcheck-082e207312
Merge pull request #171 from pohly/logtools-updateb9949f3
Bump logcheck to 0.8.2Updates
github.com/onsi/ginkgo/v2
from 2.17.1 to 2.19.0Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
Commits
28fb5d6
v2.19.0e31f03a
fix another typo966a28c
Fix typos in label sets docscd231fd
Label sets allow for more expressive label filteringeb27ca8
v2.18.0f010b65
Add --slience-skips and --force-newlines42013d6
Fix table entry context edge case9e234ea
always rebuild and run ginkgo in makefile5ce8355
add --fail-on-empty to recommended CI flags in docs3ffbf8b
add makefileUpdates
github.com/onsi/gomega
from 1.32.0 to 1.33.1Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
8a658bb
v1.33.1e9bc35a
Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.23a66379
fix confusing eventually docsf2e65fc
v1.33.002e8706
docs: Receive(POINTER, MATCHER)ec1f186
feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests9999deb
Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)cb5ff21
Bump github-pages from 229 to 230 in /docs (#735)bac6596
Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)Updates
github.com/prometheus/client_golang
from 1.18.0 to 1.19.1Release notes
Sourced from github.com/prometheus/client_golang's releases.
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
Commits
6e3f4b1
Cut 1.19.1 (#1494)cad1bfa
Merge pull request #1454 from prometheus/small-nits0aa8c9f
Rephrase incompatibility with common v0.48.077d4003
Add 1.19.0 changelog (#1451)14259fa
Merge pull request #1448 from ywwg/owilliams/content-negotiation6d03920
deps: bump prometheus/common version353395b
Remove support for go 1.19 (#1449)9dd5d2a
Merge pull request #1445 from kavu/add_go122_metrics_testc906a5e
Add support for Go 1.227ac9036
Merge pull request #1440 from prometheus/dependabot/github_actions/github-act...Updates
github.com/Azure/azure-sdk-for-go/sdk/azidentity
from 1.5.1 to 1.5.2Release notes
Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.
Commits
299ebfe
Prepare internal for release (#22339)d00123d
Update packages (#22338)0a332e3
Fix issue in Verify-Link.ps1 after PS 7.4 update (#22336)c8ae7ed
Sync eng/common directory with azure-sdk-tools for PR 7615 (#22335)9ae828c
Replace ErrAuthenticationRequired with AuthenticationRequiredError (#22317)7c50f09
[Release] sdk/resourcemanager/springappdiscovery/armspringappdiscovery/0.1.0 ...b36de61
Added spec location verification to the release pipeline (#22301)00f2b8b
Go SDK for Azure Web PubSub Data plane (#21929)0aa2409
Sync eng/common directory with azure-sdk-tools for PR 7585 (#22312)572ba1f
JSON marshaling helpers will preserve Content-Type (#22309)You can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show