NewYour coding agent can read the release notes before it upgrades.Set up the MCP server →
Go modules
Last release today
13 Oct 2026
Ships on a steady schedule
a new release about every 8 days
Rarely documented
notes for 3 of 37 stable releases
Nothing withdrawn
no release was ever pulled
7 years old
5056 releases · first in 2019
Nothing published for this version
Nothing published for this version
Nothing published for this version
One column per quarter.
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
core/identity: vault root namespace operator may elevate privileges (CVE-2025-5999). Fix string contains check in Identity APIs to be case-insensitive…
SECURITY:
CHANGES:
start_time and end_time in sys/internal/counters/activity are aligned to the corresponding billing period.end_time in sys/internal/counters/activity is now capped at the end of the last completed month. [GH-30164]Retry-After header and, if it exists, wait for the specified duration before retrying the request. [GH-30887]resource_group_name, vm_name, and vmss_name to match token claims [GH-30052]Retry-After value to the nearest second when calculating the retry delay. [GH-30887]namespace, mount_path, mount_type or number of clients for
a selected month. [GH-30678]FormError component (not used) [GH-34699]/vault/auth?with= query parameter [GH-30500]/vault/auth?with= query parameter now exclusively refers to the auth mount path and renders a simplified form [GH-30500]FEATURES:
remove_irrevocable_lease_after. When set to a non-zero value, this will automatically delete irrevocable leases after the configured duration exceeds the lease's expire time. The minimum duration allowed for this field is two days. [GH-30703]development_cluster as a field to Vault's utilization reports.
The field is configurable via HCL and indicates whether the cluster is being used in a development environment, defaults to false if not set. [GH-30659]group_by field to the rate limit quota API to support different grouping modes.IMPROVEMENTS:
/sys/utilization-report, giving a snapshot overview of Vault's utilization at a high level.vault.core.response_status_code, with two labels, code, and type, detailing the status codes of all responses to requests that Vault handles. [GH-30354]vault_index to an event's metadata if the metadata contains modified=true, to support client consistency controls when reading from Vault in response to an event where storage was modified. [GH-30725]VAULT_MYSQL_USERNAME and VAULT_MYSQL_PASSWORD. [GH-30136]listing_visibility="unauth"; all methods can be accessed via the "Sign in with other methods" link [GH-30500]DEPRECATIONS:
/sys/internal/counters/tokens endpoint. Attempting to call this endpoint will return a 403 "unsupported path" exception. [GH-30561]BUG FIXES:
plugin_tmpdir config [GH-29978]plugin_tmpdir configauto_join configurations that include escape characters [GH-29874]NextVaultRotation is nil.
Fixes an issue where static roles were unexpectedly rotated after upgrade due to a missing NextVaultRotation value.
Now sets it to either LastVaultRotation + RotationPeriod or now + RotationPeriod. [GH-30265]private_key after generating [GH-30778]config block [GH-30960]Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Nothing published for this version
Your coding agent can read these notes before it upgrades. Set up the MCP server →