- Removed etcd v2 support and switched default lease TTL values from nanoseconds to seconds in the /sys/config/state/sanitized endpoint, making those API responses breaking changes.
- Introduced numerous features: database plugin multiplexing, MFA login (including CLI support), mount migration across namespaces, server‑side consistent tokens with longer prefixes, SHA‑3 in Transit, time‑based key rotation, Postgres UI ...
- Applied security updates: patched Prometheus client for CVE‑2022‑21698, updated token prefixes, added PKCE support for OIDC and JWT flows, and fixed various auth and audit issues.
v1.10.0
Official HashiCorp Vault changelog summary with source attribution, release tags, and community reactions.
Track this HashiCorp Vault release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this HashiCorp Vault release note into a weekly digest for the tools you actually use.
Create digestMore HashiCorp Vault changelog updates
BREAKING: UBI container images no longer include gnupg, openssl, or procps; duplicate HCL attributes now always cause errors and the legacy env var is removed