Starstruk Logo MarkStarstruk

v1.14.7

hashicorp/vaultv1.14.7Nov 30, 2023by hc-github-team-es-release-engineering

AI Summary

A standard patch release improving performance for namespace operations and fixing bugs related to ACME, OCSP, rate limiting, and PKI exports.

Key Highlights

  • Speed up unseal operations when using namespaces
  • Fixed ACME TLS validation and OCSP handling
  • Fixed rate-limit blocked client purge goroutines on seal
  • Fixed PKI export panic for RSA keys
  • Fixed UI errors when tuning token auth in namespaces

Full Release Notes

## 1.14.7
### November 30, 2023

CHANGES:

* core: Bump Go version to 1.20.11.

IMPROVEMENTS:

* core (enterprise): Speed up unseal when using namespaces
* secrets/pki: do not check TLS validity on ACME requests redirected to https [[GH-22521](https://github.com/hashicorp/vault/pull/22521)]
* ui: Sort list view of entities and aliases alphabetically using the item name [[GH-24103](https://github.com/hashicorp/vault/pull/24103)]
* ui: Update flat, shell-quote and swagger-ui-dist packages. Remove swagger-ui styling overrides. [[GH-23700](https://github.com/hashicorp/vault/pull/23700)]

BUG FIXES:

* activity log (enterprise): De-duplicate client count estimates for license utilization reporting.
* auth/cert: Handle errors related to expired OCSP server responses [[GH-24193](https://github.com/hashicorp/vault/pull/24193)]
* core/config: Use correct HCL config value when configuring `log_requests_level`. [[GH-24058](https://github.com/hashicorp/vault/pull/24058)]
* core/quotas: Close rate-limit blocked client purge goroutines when sealing [[GH-24108](https://github.com/hashicorp/vault/pull/24108)]
* replication (enterprise): disallow configuring paths filter for a mount path that does not exist
* secrets/pki: Do not set nextUpdate field in OCSP responses when ocsp_expiry is 0 [[GH-24192](https://github.com/hashicorp/vault/pull/24192)]
* secrets/transit: Fix a panic when attempting to export a public RSA key [[GH-24054](https://github.com/hashicorp/vault/pull/24054)]
* ui: Fix error when tuning token auth configuration within namespace [[GH-24147](https://github.com/hashicorp/vault/pull/24147)]