hashicorp/vault v1.18.1 on GitHub

1.18.1

CHANGES:

IMPROVEMENTS:

core: Add a mount tuneable that trims trailing slashes of request paths during POST. Needed to support CMPv2 in PKI. [GH-28752]
raft/snapshotagent (enterprise): upgrade raft-snapshotagent to v0.0.0-20241003195753-88fef418d705
ui: Add button to copy secret path in kv v1 and v2 secrets engines [GH-28629]
ui: Adds copy button to identity entity, alias and mfa method IDs [GH-28742]

BUG FIXES:

agent: Fix chown error running agent on Windows with an auto-auth file sinks. [GH-28748]
audit: Prevent users from enabling multiple audit devices of file type with the same file_path to write to. [GH-28751]
cli: Fixed a CLI precedence issue where -agent-address didn't override VAULT_AGENT_ADDR as it should [GH-28574]
core/seal (enterprise): Fix bug that caused seal generation information to be replicated, which prevented disaster recovery and performance replication clusters from using their own seal high-availability configuration.
core/seal: Fix an issue that could cause reading from sys/seal-backend-status to return stale information. [GH-28631]
core: Fixed panic seen when performing help requests without /v1/ in the URL. [GH-28669]
kmip (enterprise): Use the default KMIP port for IPv6 addresses missing a port, for the listen_addrs configuration field, in order to match the existing IPv4 behavior
namespaces (enterprise): Fix issue where namespace patch requests to a performance secondary would not patch the namespace's metadata.
proxy: Fix chown error running proxy on Windows with an auto-auth file sink. [GH-28748]
secrets/pki: Address issue with ACME HTTP-01 challenges failing for IPv6 IPs due to improperly formatted URLs [GH-28718]
ui: No longer running decodeURIComponent on KVv2 list view allowing percent encoded data-octets in path name. [GH-28698]