v1.19.2

hashicorp/vaultv1.19.2Apr 18, 2025by hc-github-team-es-release-engineering

AI Summary

Maintenance release with Go version bump and plugin updates, addressing OpenLDAP and PKI specific bugs.

Key Highlights

Bumped Go version to 1.23.8
Fixed OpenLDAP static role rotation when `NextVaultRotation` is nil
Addressed PKI parsing bug rejecting CMPv2 requests with validity field
Fixed panic when rotating on a managed key returns an error in transit

Full Release Notes

## 1.19.2 
### April 18, 2025

CHANGES:

* core: Bump Go version to 1.23.7
* core: Bump Go version to 1.23.8
* secrets/openldap: Update plugin to v0.15.4 [[GH-30279](https://github.com/hashicorp/vault/pull/30279)]

BUG FIXES:

* secrets/openldap: Prevent static role rotation on upgrade when `NextVaultRotation` is nil. Fixes an issue where static roles were unexpectedly rotated after upgrade due to a missing `NextVaultRotation` value. Now sets it to either `LastVaultRotation + RotationPeriod` or `now + RotationPeriod`. [[GH-30265](https://github.com/hashicorp/vault/pull/30265)]
* secrets/pki (enterprise): Address a parsing bug that rejected CMPv2 requests containing a validity field.
* secrets/pki: fix a bug where key_usage was ignored when generating root certificates, and signing certain intermediate certificates. [[GH-30034](https://github.com/hashicorp/vault/pull/30034)]
* secrets/transit: fix a panic when rotating on a managed key returns an error [[GH-30214](https://github.com/hashicorp/vault/pull/30214)]