v1.19.3

hashicorp/vaultv1.19.3Apr 30, 2025by hc-github-team-es-release-engineering

AI Summary

Bug fix release focusing on authentication, database, and identity issues, including HSM login errors and static role rotation.

Key Highlights

Fixed errors being swallowed on failed HSM logins
Prevented static roles created prior to 1.15.0 from rotating on backend restart
Fixed non-deterministic merge behavior for entities with conflicting aliases
Plugin registration now honors the `plugin_tmpdir` config

Full Release Notes

## 1.19.3
### April 30, 2025

CHANGES:

* auth/jwt: Update plugin to v0.23.2 [[GH-30434](https://github.com/hashicorp/vault/pull/30434)]

BUG FIXES:

* core (enterprise): fix issue with errors being swallowed on failed HSM logins.
* database: Prevent static roles created in versions prior to 1.15.0 from rotating on backend restart. [[GH-30320](https://github.com/hashicorp/vault/pull/30320)]
* database: no longer incorrectly add an "unrecognized parameters" warning for certain SQL database secrets config operations when another warning is returned [[GH-30327](https://github.com/hashicorp/vault/pull/30327)]
* identity: Fix non-deterministic merge behavior when two entities have conflicting local aliases. [[GH-30390](https://github.com/hashicorp/vault/pull/30390)]
* plugins: plugin registration should honor the `plugin_tmpdir` config [[GH-29978](https://github.com/hashicorp/vault/pull/29978)]
* secrets/aws: fix a case where GovCloud wasn't taken into account; fix a case where the region setting wasn't respected [[GH-30312](https://github.com/hashicorp/vault/pull/30312)]