v2.0.2
karpathy/nn-zero-to-herov2.0.2Jun 5, 2026by ryancragun
AI Summary
A security and compatibility update that removes container capabilities and fixes plugin signature verification issues to support modern container runtimes.
Key Highlights
- Removed `cap_ipc_lock` capability for container runtime compatibility
- Limited RSA key sizes to 8192 bits for security (CVE fix)
- Fixed plugin signature verification failure with expired PGP keys
Breaking Changes
- Removed `cap_ipc_lock` capability; operators must set `disable_mlock = true`
- RSA key sizes now limited to a maximum of 8192 bits
New Features
- Security upgrade for RSA keys
- Container runtime compatibility
- Fixed plugin signature verification
- UI fixes for transit key version dropdown
Full Release Notes
BREAKING CHANGES: * containers: Remove `cap_ipc_lock` capability on `vault` at build time to allow running Vault in common container runtimes. Vault in containers will no longer be able to call `mlock()` to lock memory. Operators should set `disable_mlock = true` in Vault's configuration. Runtime operators are advised to disable swapping to guarantee data safety. * secrets/ssh: RSA key sizes are now limited to a maximum size of 8192 bits addressing CVE-2026-39829 CHANGES: * core: Bump Go version to 1.26.4 * secrets/azure (enterprise): Update plugin to [v0.26.4+ent](https://github.com/hashicorp/vault-plugin-secrets-azure-enterprise/releases/tag/v0.26.4+ent) BUG FIXES: * plugins: Fix plugin signature verification failure with expired pgp key when registering a plugin. * ui/transit: Fix key version dropdown selected state when editing a transit key.