NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Go modules
Last release today
13 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Rarely documented
notes for 3 of 37 stable releases
Nothing withdrawn
no release was ever pulled
7 years old
5056 releases · first in 2019
Nothing published for this version
Nothing published for this version
Nothing published for this version
One column per quarter.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
core: Update github.com/hashicorp/go-getter to fix security vulnerability GHSA-wjrx-6529-hcj3.
SECURITY:
CHANGES:
recover_snapshot_id query parameter to pass the snapshot ID for recover operations, in favor of a X-Vault-Recover-Snapshot-Id header. Vault will still accept the query parameter for backward compatibility. Also support setting the HTTP method to RECOVER for recover operations, in addition to POST and PUT.timestamp in export API response to token_creation_time.max_json_depth, max_json_string_value_length, max_json_object_entry_count, max_json_array_element_count.FEATURES:
enable_self_enrollment parameter in the API.IMPROVEMENTS:
-download option for plugin register (beta)vault recover command with a -from flag, users can specify the path of the item in the snapshot.enterprise_url field to enable support for self-hosted GitHub Enterprise Server instances.sys/internal/counters/activity/cumulative. For each namespace in the response it returns the sum of its own client counts and that of all its child namespaces.alias_metadata.alias_metadata.alias_metadata.x_forwarded_for_client_cert_header, to fix TLS certificate auth errors with Google Cloud Application Load Balancer.alias_metadata.alias_metadata.alias_metadata.alias_metadata.alias_metadata.alias_metadata.-force flag to vault operator raft snapshot unload command to force deletion of a loaded snapshot.vault.route.read-snapshot.{mount_point} and vault.route.list-snapshot.{mount_point} metrics.force query parameter to the DELETE sys/storage/raft/snapshot-load/{snapshot_id} endpoint to allow for forced deletion of snapshots. This is useful when the snapshot is in a state that prevents normal deletion, such as being in the process of loading.sys/internal/counters/activity/* endpoints.autoload_enabled option to raft automated snapshot configurations. When enabled, this option will automatically load raft snapshots into Vault, which can then be used for recovery operations.role URL query string parameterrole URL query string parameternamespace_path, mount_path and mount_type filters to attribution tableDEPRECATIONS:
BUG FIXES:
development_cluster setting being overwritten on performance secondaries upon cluster reload.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.alias_metadata now populates alias custom metadata field instead of alias metadata.+) paths with existing prefix rules in glob_paths, so clients receive a complete view of glob-style permissions. This unblocks UI sidebar navigation checks and namespace access banners.rotation_statements field.sys/internal/ui/mounts so mount paths match serve value+, *Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →