v1.13.13

hashicorp/vaultv1.13.13Jan 30, 2024by hc-github-team-es-release-engineering

AI Summary

Focuses on performance improvements for storage/raft and fixes UI bugs related to authentication redirects and database secrets engine configuration.

Key Highlights

Upgraded bbolt storage to 1.3.8 to improve performance with large freelists
UI improvements for Chrome redirect behavior after authentication
Fixed JWT auth configuration input for JWKS CA PEM
Fixed incorrectly calculated capabilities on PKI issuer endpoints
Fixed slice out-of-bounds panic in PKCS7 helper

Full Release Notes

## 1.13.13
### January 31, 2024

CHANGES:

* core: Bump Go version to 1.20.12.
* database/snowflake: Update plugin to v0.7.4 [[GH-25059](https://github.com/hashicorp/vault/pull/25059)]

IMPROVEMENTS:

* command/server: display logs on startup immediately if disable-gated-logs flag is set [[GH-24280](https://github.com/hashicorp/vault/pull/24280)]
* storage/raft: Upgrade to bbolt 1.3.8, along with an extra patch to reduce time scanning large freelist maps. [[GH-24010](https://github.com/hashicorp/vault/pull/24010)]
* ui: latest version of chrome does not automatically redirect back to the app after authentication unless triggered by the user, hence added a link to redirect back to the app. [[GH-18513](https://github.com/hashicorp/vault/pull/18513)]

BUG FIXES:

* helper/pkcs7: Fix slice out-of-bounds panic [[GH-24891](https://github.com/hashicorp/vault/pull/24891)]
* kmip (enterprise): Only return a Server Correlation Value to clients using KMIP version 1.4.
* ui: Fixed minor bugs with database secrets engine [[GH-24947](https://github.com/hashicorp/vault/pull/24947)]
* ui: Fixes input for jwks_ca_pem when configuring a JWT auth method [[GH-24697](https://github.com/hashicorp/vault/pull/24697)]
* ui: fix incorrectly calculated capabilities on PKI issuer endpoints [[GH-24686](https://github.com/hashicorp/vault/pull/24686)]