mirrors/vault
1
0
Fork 0
mirror of https://github.com/hashicorp/vault.git synced 2026-02-08 17:31:52 +01:00
Code Issues Projects Releases Wiki Activity
22,614 Commits 2,859 Branches 464 Tags
Commit Graph

963 Commits

Author SHA1 Message Date
Vault Automation
b1fc7f3dd1
VAULT-42232: Duo API client upgrade (#12191) (#12193) 
* update duo_api_golang

* changelog

Co-authored-by: miagilepner <mia.epner@hashicorp.com>
 2026-02-05 15:17:37 +00:00
Vault Automation
fc3f525ea8
Backport remove unused TestLicenseOptions into ce/main (#11929) 
* remove unused TestLicenseOptions (#11928)

* go mod tidy

---------

Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
Co-authored-by: akshya96 <araghavan@hashicorp.com>
 2026-01-23 07:18:29 -05:00
Vault Automation
ffee73240b
Backport IBM License key integration: config file changes into ce/main (#11665) 
* IBM License key integration: config file changes (#11509)

* adding config changes for ibm license entitlement

* added ibm licensing_ent_test

* adding newlicensing test

* fix TestLicenseEntitlementConfig test

* Update vault/core_util_ent.go

Co-authored-by: Jenny Deng <jenny.deng@hashicorp.com>

* Update vault/licensing_ent.go

Co-authored-by: Jenny Deng <jenny.deng@hashicorp.com>

* fixing name GenerateHashicorpTestLicenseConfig

* remove local vscode settings

* add a func to create entitlements and a sample ibm license

---------

Co-authored-by: Jenny Deng <jenny.deng@hashicorp.com>

* go mod tidy

* adding issueroptions to ce

---------

Co-authored-by: akshya96 <87045294+akshya96@users.noreply.github.com>
Co-authored-by: Jenny Deng <jenny.deng@hashicorp.com>
Co-authored-by: akshya96 <araghavan@hashicorp.com>
 2026-01-12 10:52:01 -08:00
Ryan Cragun
1df0fa727e
go: update golang.org/x/crypto to v0.46.0 (#11590) 
* go: update golang.org/x/crypto to v0.46.0

Signed-off-by: Ryan Cragun <me@ryan.ec>
 2026-01-05 21:31:08 +00:00
Vault Automation
e7965c8bdf
[VAULT-41294] docker: build OCI container images (#11545) (#11549) 
This change does a few things that might not be obvious:

- We stop requesting the previous runner image. This will result in us
  using Docker 29 instead of 28. With this comes changes in our
  container build system, most notably that container images are now
  exported as OCI images. Every container runtime that we support also
  supports OCI images so this ought to have no meaningful impact to
  downstream users. One noticeable change is that the image layers are
  now compressed so the final image size on disk will be considerably
  smaller than before.

- Upgrade `hashicorp/action-setup-enos` to the latest version. This is not
  strictly required for this change but as we just released a new version of
  the CLI it makes sense to update it here. We should also note that recently
  we released a new version of `terraform-provider-enos` which contains
  necessary for this change as our docker and kind resources needed to be
  updated handle OCI and Docker exported images. Previously they relied on
  files that existed only in Docker images.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-12-29 10:58:02 -08:00
Vault Automation
be2cb06f8c
Backport refactor dependencies and removes disallowed vault imports from builtin Okta auth into ce/main (#11295) 
* refactor dependencies and removes disallowed vault imports from builtin Okta auth (#10965)

* move SkipUnlessEnvVarsSet from vault/helper/testhelpers/ to vault/sdk/helper/testhelpers

* use unittest framework from vault-testing-stepwise module in place of sdk/logical

* refactor SkipUnlessEnvVarsSet() and NewAssertAuthPoliciesFunc() to sdk

* bump docker API version to 1.44 matching 2f33549

---------

Co-authored-by: Thy Ton <maithytonn@gmail.com>
 2025-12-12 13:20:57 -06:00
Vault Automation
8cce47281e
[VAULT-41179] go: bump golang.org/x/crypto to v0.45.0 (#11056) (#11065) 
* [VAULT-41179] go: bump golang.org/x/crypto to v0.45.0

Bump the golang.org/x/crypto module to v0.45.0 to resolve several CVE's
with the prior version:
  - https://github.com/advisories/GHSA-f6x5-jh6r-wrfv
  - https://github.com/advisories/GHSA-j5w8-q4qc-rx2x
  - https://pkg.go.dev/vuln/GO-2025-4134
  - https://pkg.go.dev/vuln/GO-2025-4135

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-12-02 21:00:06 +00:00
Vault Automation
51ed1178e9
Update deps to match those introduced by vault-plugin-secrets-azure@v0.25.0+ent into ce/main (#10864) 
Update dependencies to match those introduced into enterprise via the vault-plugin-secrets-azure@v0.25.0+ent bump. We also synchronize a few other dependencies that had drifted.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-11-18 00:17:25 -07:00
Vault Automation
4b54a577fc
Backport VAULT-40931: update jose2go to v1.7.0 into ce/main (#10837) 
* VAULT-40931: update jose2go to v1.7.0 (#10834)

* VAULT-40931: update jose2go to v1.7.0

Bump jose2go dependency to resolve https://github.com/advisories/GHSA-9mj6-hxhv-w67j

This is a transitive dep for the Snowflake database engine. This
temporarily bumps it now until the upstream dep changes are merged and
we bump the engine pins on this side.

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-11-17 10:17:00 +00:00
Ryan Cragun
93e1879749
go: synchronize module deps with enterprise (#10192) 
Synchronize all common Go module versions with enterprise.

Signed-off-by: Ryan Cragun <me@ryan.ec>
 2025-10-17 11:13:53 -06:00
Robert
daa3fc79a0
Backport Update vault-plugin-secrets-openldap to v0.17.0 into ce/main (#9987) 
* Update vault-plugin-secrets-openldap to v0.17.0 (#9936) (#9939)

* Update vault-plugin-secrets-openldap to v0.17.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>

* go mod tidy

---------

Co-authored-by: Vault Automation <github-team-secure-vault-core@hashicorp.com>
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-08 11:46:31 -07:00
Vault Automation
461e6a73bd
Backport Update SAML auth plugin version to v0.7.0 into ce/main (#9959) 
* no-op commit

* Dependency updates

---------

Co-authored-by: Val Conklin <val@hashicorp.com>
 2025-10-08 00:10:32 +00:00
Vault Automation
dbf2aa5734
Update vault-plugin-secrets-gcp to v0.23.0 (#9946) (#9951) 
* Update vault-plugin-secrets-gcp to v0.23.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-07 13:45:18 -07:00
Vault Automation
f7cdadc610
Update vault-plugin-database-redis to v0.7.0 (#9888) (#9891) 
* Update vault-plugin-database-redis to v0.7.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-06 13:17:39 -07:00
Vault Automation
05d44c55c9
Backport Update vault-plugin-secrets-gcpkms to v0.22.0 into ce/main (#9869) 
* Update vault-plugin-secrets-gcpkms to v0.22.0 (#9868)

* Update vault-plugin-secrets-gcpkms to v0.22.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>

* Update go.mod

* Update go.sum

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Jaired Jawed <jaired.jawed@hashicorp.com>
 2025-10-06 09:29:50 -07:00
Vault Automation
3f43f96c04
Backport Update vault-plugin-database-snowflake to v0.15.0 into ce/main (#9865) 
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Kay Craig <kay.craig@hashicorp.com>
 2025-10-06 10:46:10 -04:00
Vault Automation
45e3f36c28
Update vault-plugin-secrets-azure to v0.23.0 (#9838) (#9844) 
* Update vault-plugin-secrets-azure to v0.23.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-03 17:01:57 -04:00
Vault Automation
bddc79aeaa
Update vault-plugin-auth-kubernetes to v0.23.0 (#9834) (#9842) 
* Update vault-plugin-auth-kubernetes to v0.23.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-03 19:29:33 +00:00
Vault Automation
f4a167aaf2
Backport Update vault-plugin-database-mongodbatlas to v0.16.0 into ce/main (#9830) 
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>
Co-authored-by: Kay Craig <kay.craig@hashicorp.com>
 2025-10-03 15:07:42 -04:00
Vault Automation
b5d4bc7430
Update vault-plugin-secrets-mongodbatlas to v0.16.0 (#9817) (#9831) 
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>
 2025-10-03 14:25:37 -04:00
Vault Automation
533d2b91f3
Update vault-plugin-secrets-alicloud to v0.21.0 (#9813) (#9836) 
* Update vault-plugin-secrets-alicloud to v0.21.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-03 18:18:11 +00:00
Vault Automation
483ce43496
Update vault-plugin-auth-jwt to v0.25.0 (#9821) (#9832) 
* Update vault-plugin-auth-jwt to v0.25.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Jaired Jawed <jaired.jawed@hashicorp.com>
 2025-10-03 11:16:54 -07:00
Vault Automation
e9be9875ba
Backport Update vault-plugin-auth-oci to v0.20.0 into ce/main (#9825) 
* Update vault-plugin-auth-oci to v0.20.0 (#9824)

* Update vault-plugin-auth-oci to v0.20.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>

* Update go.mod

* Update go.sum

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Jaired Jawed <jaired.jawed@hashicorp.com>
 2025-10-03 09:48:09 -07:00
Vault Automation
67d6f3816e
Update vault-plugin-secrets-kv to v0.25.0 (#9805) (#9818) 
* Update vault-plugin-secrets-kv to v0.25.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
 2025-10-03 09:47:53 -07:00
Vault Automation
62c3035a41
Update vault-plugin-auth-cf to v0.22.0 (#9797) (#9815) 
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>
 2025-10-03 12:40:30 -04:00
Vault Automation
ba70dc45c3
Update vault-plugin-database-redis-elasticache to v0.8.0 (#9789) (#9806) 
* Update vault-plugin-database-redis-elasticache to v0.8.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Zlaticanin <60530402+Zlaticanin@users.noreply.github.com>
 2025-10-03 09:40:18 -07:00
Vault Automation
1a82b8634d
Update vault-plugin-auth-kerberos to v0.16.0 (#9822) (#9823) 
* Update vault-plugin-auth-kerberos to v0.16.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-03 00:53:36 -07:00
Vault Automation
2cc9c6a773
Backport Update vault-plugin-auth-gcp to v0.22.0 into ce/main (#9819) 
* Update vault-plugin-auth-gcp to v0.22.0 (#9810)

* Update vault-plugin-auth-gcp to v0.22.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>

* fixing up merge

git fetch origin
git diff origin/ce/main -- go.mod > reverse.diff
cat reverse.diff | patch -p1 --reverse
go get github.com/hashicorp/vault-plugin-auth-gcp@v0.22.0
go mod tidy

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2025-10-03 00:09:28 +00:00
Vault Automation
8041281f3c
Backport Update vault-plugin-secrets-terraform to v0.13.0 into ce/main (#9814) 
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Vinay Gopalan <vinay@hashicorp.com>
 2025-10-02 21:57:13 +00:00
Vault Automation
dce7d8a884
Backport Update vault-plugin-secrets-kubernetes to v0.12.0 into ce/main (#9811) 
* Update vault-plugin-secrets-kubernetes to v0.12.0 (#9808)

* Update vault-plugin-secrets-kubernetes to v0.12.0

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>

* manually updating secrets/kubernetes

git diff origin/ce/main -- go.mod > reverse.diff
cat reverse.diff | patch -p1 --reverse
go get github.com/hashicorp/vault-plugin-secrets-kubernetes@v0.12.0
go mod tidy

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Theron Voran <tvoran@users.noreply.github.com>
 2025-10-02 21:35:04 +00:00
Vault Automation
0c3dcbc30e
Backport Update vault-plugin-auth-azure to v0.22.0 into ce/main (#9782) 
Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: Kay Craig <kay.craig@hashicorp.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>
 2025-10-02 14:35:32 -04:00
Vault Automation
0ad5ebc1bd
Backport Update vault-plugin-auth-alicloud to v0.22.0 into ce/main (#9767) 
* Update vault-plugin-auth-alicloud to v0.22.0 (#9763)

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>

* go mod tidy

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: kpcraig <3031348+kpcraig@users.noreply.github.com>
Co-authored-by: Kay Craig <kay.craig@hashicorp.com>
 2025-10-02 11:48:47 -05:00
Vault Automation
eadd2bde15
bump cap/ldap dependency to fix data race (#9760) (#9783) 
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
 2025-10-02 11:35:43 -05:00
Vault Automation
1b3878d14e
Update vault-plugin-database-redis to v0.6.1 (#9756) (#9765) 
* Update vault-plugin-database-redis to v0.6.1

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
 2025-10-01 10:48:33 -07:00
Vault Automation
071cd799aa
Backport Update vault-plugin-auth-alicloud to v0.21.1 into ce/main (#9663) 
* Update vault-plugin-auth-alicloud to v0.21.1 (#9648)

* Update vault-plugin-auth-alicloud to v0.21.1

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>

* go mod tidy

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: JM Faircloth <jmfaircloth@hashicorp.com>
 2025-09-26 15:37:45 +00:00
JMGoldsmith
d45a7ea88e
removing CMP properly (#9614) 2025-09-24 17:24:00 +00:00
Vault Automation
3c674ea8ae
VAULT-39383 updating go-discover (#9523) (#9534) 
* updating go-discover

* adding changelog

* adjusting changelog

---------

Co-authored-by: JMGoldsmith <spartanaudio@gmail.com>
Co-authored-by: Tony Wittinger <anwittin@users.noreply.github.com>
 2025-09-23 09:28:46 +02:00
Vault Automation
c73972ba52
Update vault-plugin-database-snowflake to v0.14.2 (#9417) (#9454) 
* Update vault-plugin-database-snowflake to v0.14.2

* Add changelog

---------

Co-authored-by: hc-github-team-secure-vault-ecosystem <hc-github-team-secure-vault-ecosystem@users.noreply.github.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
 2025-09-19 08:12:02 -05:00
Vault Automation
10855a6bcd
Update to Go 1.25.1 (#8284) (#9191) 
* Update github.com/petermattis/goid to support Go 1.25
* Update to Go 1.25.1

Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
 2025-09-09 13:21:57 +00:00
Vault Automation
4bb8810b2c
Backport [VAULT-39289] go: update github.com/ulikunitz/xz to resolve GHSA-25xm-hr59-7c27 into ce/main (#9108) 
* Update github.com/ulikunitz/xz to v0.5.15 resolve GHSA-jc7w-c686-c4v9
* Update go-getter to v1.7.10 to resolve GHSA-jc7w-c686-c4v9

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-09-04 15:56:33 -06:00
Vault Automation
50af5591de
VAULT-38796, VAULT-38889 reformat observation schema to version 2 (#9006) (#9023) 
Co-authored-by: Violet Hynes <violet.hynes@hashicorp.com>
 2025-08-29 14:25:05 +00:00
Vault Automation
3e4627137e
Backport [VAULT-38910]: upgrade docker package to resolve GO-2025-3829 into ce/main (#8875) 
* [VAULT-38910]upgrade docker package to resolve GO-2025-3829 (#8642)

* bump github.com/hashicorp/go-secure-stdlib/plugincontainer to v0.4.2
* bump github.com/docker/docker to v28.3.3+incompatible

Signed-off-by: Ryan Cragun <me@ryan.ec>

* go mod tidy

Signed-off-by: Ryan Cragun <me@ryan.ec>

---------

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-08-26 16:16:55 -06:00
Vault Automation
ea954aabaf
Backport bump go-getter to 1.7.9 into ce/main (#8926) 
* bump go-getter to 1.7.9 (#8899)

* bump go-getter to 1.7.9

* add changelog

* go mod tidy

Signed-off-by: Ryan Cragun <me@ryan.ec>

---------

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Josh Black <raskchanky@gmail.com>
Co-authored-by: Ryan Cragun <me@ryan.ec>
 2025-08-26 12:31:43 -06:00
Vault Automation
8883f32778
VAULT-39010 Adding new go-discover logic (#8884) (#8931) 
* testing new go-discover logic

* add changelog

* Delete website/content/partials/known-issues/aws-auto-join-fails.mdx

Co-authored-by: JMGoldsmith <spartanaudio@gmail.com>
 2025-08-26 12:31:14 -06:00
Vault Automation
a233f7ac1a
update vault-plugin-secrets-openldap to v0.16.1 (#8820) (#8821) 
* update vault-plugin-secrets-openldap to v0.16.1

* changelog

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
 2025-08-22 09:55:21 -04:00
Violet Hynes
dd1063b0d4
VAULT-38794 Update KV plugin to add additional version metadata for observations (#31455) 2025-08-07 15:56:50 -04:00
Violet Hynes
fc249a43b1
VAULT-37303 CE changes (#31392) 
* VAULT-37303 CE changes

* changelog
 2025-07-31 09:45:11 -04:00
Violet Hynes
584a3daf21
Dependency updates for main (#31299) 
* Dependency updates for main

* go mod tidy
 2025-07-17 11:30:11 -04:00
Rachel Culpepper
eee353e40b
update go.mod (#31184) 2025-07-02 19:08:29 +00:00
Violet Hynes
7684ac9eab
VAULT-36562 CE changes (#31054) 
* VAULT-36563 CE side

* CE changes

* Go mod changes

* I'm dumb
 2025-06-20 15:16:40 -04:00