hashicorp/vault v1.19.1 on GitHub

1.19.1

Enterprise LTS: Vault Enterprise 1.19 is a Long-Term Support (LTS) release.

CHANGES:

UI: remove outdated and unneeded js string extensions [GH-29834]
auth/azure: Update plugin to v0.20.2. Login requires resource_group_name, vm_name, and vmss_name to match token claims [GH-30052]
auth/azure: Update plugin to v0.20.3 [GH-30082]
auth/gcp: Update plugin to v0.20.2 [GH-30081]
core: Verify that the client IP address extracted from an X-Forwarded-For header is a valid IPv4 or IPv6 address [GH-29774]
secrets/azure: Update plugin to v0.21.2 [GH-30037]
secrets/azure: Update plugin to v0.21.3 [GH-30083]
secrets/gcp: Update plugin to v0.21.2 [GH-29970]
secrets/gcp: Update plugin to v0.21.3 [GH-30080]
secrets/openldap: Update plugin to v0.15.2 [GH-30079]

IMPROVEMENTS:

activity: mount_type was added to the API response of sys/internal/counters/activity [GH-30071]
activity: mount_type was added to the API response of sys/internal/counters/activity
core (enterprise): report errors from the underlying seal when getting entropy.
storage/raft: Upgrade hashicorp/raft library to v1.7.3 which includes additional logging on the leader when opening and sending a snapshot to a follower. [GH-29976]

BUG FIXES:

auth/aws: fix a panic when a performance standby node attempts to write/update config. [GH-30039]
auth/ldap: Fix a bug that does not properly delete users and groups by first converting their names to lowercase when case senstivity option is off. [GH-29922]
auth/ldap: fix a panic when a performance standby node attempts to write/update config. [GH-30039]
aws/secrets: Prevent vault from rejecting secret role configurations where no regions or endpoints are set [GH-29996]
core (enterprise): add nil check before attempting to use Rotation Manager operations.
core: Fix a bug that prevents certain loggers from writing to a log file. [GH-29917]
identity: reintroduce RPC functionality for group creates, allowing performance standbys to handle external group changes during login and token renewal [GH-30069]
plugins (enterprise): Fix plugin registration with artifact when a binary for the same plugin is already present in the plugin directory.
secrets/aws: fix a bug where environment and shared credential providers were overriding the WIF configuration [GH-29982]
secrets/aws: fix a panic when a performance standby node attempts to write/update config. [GH-30039]
secrets/db: fix a panic when a performance standby node attempts to write/update config. [GH-30039]
secrets/pki: Fix a bug that prevents enabling automatic tidying of the CMPv2 nonce store. [GH-29852]