22126 Commits

Author SHA1 Message Date
hc-github-team-secure-vault-ecosystem
20950f8c76 Automated dependency upgrades 2025-11-01 00:38:54 +00:00
hc-github-team-secure-vault-core
810ec3947a Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-29 23:02:07 +00:00
Vault Automation
f96bd6ac26
UI: Replacing ember dropdown user menu with hds dropdown (#10366) (#10495)
* replacing with hds dropdown

* update and comment

* update confirm model to launch from interactive

* remove test line

* updates to hbs

* update tests

* styling and structure updates

* add settled line before click

Co-authored-by: Dan Rivera <dan.rivera@hashicorp.com>
2025-10-29 22:55:49 +00:00
hc-github-team-secure-vault-core
272d198274 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-29 22:02:02 +00:00
Vault Automation
66dad8d0fa
actions(slack): quote yaml strings that start with ':' (#10477) (#10485)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-29 14:47:33 -07:00
hc-github-team-secure-vault-core
6dec4f2e79 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-29 20:02:42 +00:00
Vault Automation
1fd1cb4536
VAULT-40297 log warning when using allowed/denied params (#10444) (#10483)
* log warning when using allowed/denied params

* add changelog

Co-authored-by: Bruno Oliveira de Souza <bruno.souza@hashicorp.com>
2025-10-29 16:46:28 -03:00
hc-github-team-secure-vault-core
74523d42c4 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-29 19:03:15 +00:00
Vault Automation
0e6dc73772
UI: fix PKI certificate key_usage parsing and add extended key flags to role form (#10416) (#10479)
* fix parsing of key_usage VAULT-40303

* VAULT-40220 add extended key usage flags and test coverage

* add test coverage

* add changelog

* fix mislabeled role parameter

* update tests

* VAULT-40219 link jira

* update changelog text

Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-10-29 18:47:57 +00:00
hc-github-team-secure-vault-core
65aa9c458e Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-29 16:02:40 +00:00
Vault Automation
e67da36b58
Allow sign-verbatim to handle CSRs with basic constraints extension where isCA=false (#10466) (#10474) 2025-10-29 15:09:28 +00:00
hc-github-team-secure-vault-core
0b32546513 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-28 20:03:58 +00:00
Vault Automation
9e979eafe7
enos: remove us-east-1 from config due to instance stuck in pending issues (#10448) (#10449)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-28 13:27:28 -06:00
Vault Automation
2c95f73ca7
[VAULT-40166] go: check go.mod drift on changes to ce/branches
When a pull request is created against a CE branch and it has changed any files in the `gotoolchain` group we'll automatically trigger the diff for every Go module file in the repo against the equivalent in the corresponding enterprise branch. If there's a delta in like configuration it will automatically fail the `build/ce-checks` job. It will also write a complete explanation of the diff to the step output and also to the `build/ce-checks` job step summary.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-28 13:26:46 -06:00
hc-github-team-secure-vault-core
8b7c995a67 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-28 17:03:27 +00:00
Vault Automation
544476d2ae
go: update version on main to 1.22.0-beta1 (#10427) (#10439)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-28 10:28:50 -06:00
hc-github-team-secure-vault-core
3c0f881b2c Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-28 00:04:19 +00:00
Vault Automation
e6c710aef4
actions: pin to latest actions (#10407) (#10417)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-27 17:46:04 -06:00
hc-github-team-secure-vault-core
0f2a3dfda1 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-27 22:01:59 +00:00
Vault Automation
80d8b45fb3
update changelog (#10408) (#10415)
Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
2025-10-27 14:40:24 -07:00
hc-github-team-secure-vault-core
eaf6603f95 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-27 21:02:31 +00:00
Vault Automation
2d2b237505
update help text url to avoid appearance of real secret usage (#10398) (#10404)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-10-27 15:34:21 -05:00
Vault Automation
0a163f449e
[VAULT-40165] pipeline(github): add check go-mod-diff command (#10369) (#10377)
* [VAULT-40165] pipeline(github): add `check go-mod-diff` command

Add `pipeline github check go-mod-diff` command that is capable of
creating a Go module diff between one-or-more go.mod files in two
different Github branches. There are flags for the owner, repo, and
branch for both the A and B sides of the diff, as well as the `--path`
or `-p` flag that can be specified any number of times with relative
paths in the repository of go.mod files to compare. We assume that the
path is the same in both repositories.

This work will be followed up with another PR that removes the
enterprise only go.mod file and enables Go module diff checking on pull
requests to CE branches that change the go toolchain.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-27 20:03:36 +00:00
hc-github-team-secure-vault-core
f259904982 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-27 17:02:32 +00:00
Vault Automation
8346f0638c
UI: update aws generate credential form inputs to rely on credentialType (#10045) (#10351)
* update aws generate credential form inputs to rely on credentialType

* update tests

* show credential type + style updates

* Update ui/app/components/generate-credentials.ts



* update test, naming and help text

* add changelog

* rename changelog

---------

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-10-27 11:41:57 -05:00
hc-github-team-secure-vault-core
ef86fe09c4 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-24 19:02:20 +00:00
Vault Automation
117beded49
UI: Clean up remaining ember-modal-dialog tooltip code (#10325) (#10368)
* remove ember-modal-dialog dep + unused calendar-widget component

* remove waitUntil

* lint fix

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-10-24 13:50:15 -05:00
hc-github-team-secure-vault-core
b6926e283f Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-24 18:02:34 +00:00
Vault Automation
bfac07958a
UI: Pull nested interactives out of labels (#10231) (#10367)
* pull nested interactives out of labels

* move label styles into new class

* update tooltip testd

* fix test

* update missed css classes + update css variable usage

* update font size

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-10-24 13:01:19 -05:00
hc-github-team-secure-vault-core
a38a42dc9c Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-23 22:01:53 +00:00
Vault Automation
22f221129e
Update CHANGELOG for version 1.21.0 (#10357) (#10364)
Updated CHANGELOG for version 1.21.0, including security fixes, changes, improvements, deprecations, and bug fixes.

Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
2025-10-23 14:42:55 -07:00
hc-github-team-secure-vault-core
be0f928f48 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-23 21:02:14 +00:00
Vault Automation
e53661ce92
license: update headers to IBM Corp. on main (#10333) (#10361)
Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2025-10-23 20:54:04 +00:00
Vault Automation
796c5fb294
[HDS-5060] UI: Align typography styles to HDS tokens (#10193) (#10360)
Co-authored-by: Dylan Hyun <dylan.hyun@hashicorp.com>
2025-10-23 16:37:36 -04:00
hc-github-team-secure-vault-core
60ba173015 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-23 20:02:02 +00:00
Vault Automation
009874e7f1
[HDS-5541] UI: Align color and border-radius styles to HDS tokens (#10182) (#10359) 2025-10-23 15:31:12 -04:00
hc-github-team-secure-vault-core
bd368cff5e Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-23 19:02:27 +00:00
Vault Automation
1131e79ed8
VAULT-40037 Updates to PKI observations (#10200) (#10358)
* WIP

* VAULT-40037 Updates to PKI observations

* review feedback

* public key size

* make fmt

* issuerId for sign self issued

* remove confusing issuer_name

* remove unused var

* whoops common name

* role -> role_name

* role name

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-10-23 18:56:41 +00:00
hc-github-team-secure-vault-core
56531e18a9 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-23 17:02:04 +00:00
Vault Automation
3a4d34f241
[UI] Set up core page header component and update secret engine header (#10274) (#10330)
* Set up dynamic page header component and update secret engine header

* Add copyright headers

* Remvoe unsused tab for now

* Add page header test

* Remove component test since we deleted component

* Address feedback..

* Add deprecation comment

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2025-10-23 09:48:02 -07:00
hc-github-team-secure-vault-core
cdc061f91f Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-23 16:02:29 +00:00
Vault Automation
d8f870d125
Refactor Identity.ActivationFunc to make room for SCIM activation (#10317) (#10349)
Co-authored-by: Bianca <48203644+biazmoreira@users.noreply.github.com>
2025-10-23 15:41:36 +00:00
hc-github-team-secure-vault-core
179217287d Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-22 21:03:37 +00:00
Vault Automation
6a9329d8a6
VAULT-39876 Add sys/reporting/scan to Vault, allowing an output of files with paths and names of Vault secrets (#10068) (#10323)
* VAULT-39876 sys/reporting/scan for KV secrets

* make fmt

* changelog

* stray t.log

* typo

* fix race probably

* Bug fix, add local mount

* remove comment

* bolster external tests

Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
2025-10-22 21:02:07 +00:00
Vault Automation
42d01ee5fe
Upgrade jsondiffpatch dependency version (#9651) (#10282)
* update jsondiffpatch dep + use webpack to convert into UMD format

* do not lint vendor files

* update test

* lint fix

* fix merge conflict error

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2025-10-22 15:02:47 -05:00
hc-github-team-secure-vault-core
c89ee7bd05 Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-22 19:02:28 +00:00
Vault Automation
0845606fe3
UI: Adopt HDS tooltip (#9967) (#10326)
* replace instances of ToolTip component with HDS tooltip

* Replace InfoTooltip component instances with HDS tooltip

* update tests

* remove remaining custom tooltip code

* remove rich tooltip with copy

* update test and update toolbar link with styling to remove extra link

* Apply suggestions from code review



* update test and remove setRunOptions now that tooltip violations are addressed

* Revert "Apply suggestions from code review"

This reverts commit 90f01c653be68f23b6dbd75f252d227e38dbe53f.

* Remove unused disabled tooltip code

* add comment and TODO explaining conditional modifier pattern

---------

Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
Co-authored-by: claire bontempo <68122737+hellobontempo@users.noreply.github.com>
2025-10-22 18:24:50 +00:00
hc-github-team-secure-vault-core
83e5244f5d Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-22 18:02:53 +00:00
Vault Automation
d5e3cd6865
Expose core's redirectAddr so that plugins can do OIDC discovery like identity (#10321) (#10324) 2025-10-22 17:19:24 +00:00
hc-github-team-secure-vault-core
602302674a Merge remote-tracking branch 'remotes/from/ce/main' 2025-10-22 16:02:35 +00:00