- - Security: removed deprecated dynamic‑keys mode (now errors on expired leases) and added configurable user‑lockout for LDAP, userpass and approle to mitigate brute‑force attacks.
- - Breaking/core changes: auth/alicloud now requires a role field on login; plugin mounts are no longer pinned to a specific builtin version and will auto‑upgrade; SDK useragent changes and Go upgraded to 1.20.1.
- - New features: Azure Managed Identities, GCP service‑account impersonation, Kubernetes and PKI UI enhancements, cross‑cluster PKI revocation, Unix‑domain‑socket listener, transit managed keys, experimental event system, and OpenAPI Go/....
v1.13.0
Official HashiCorp Vault changelog summary with source attribution, release tags, and community reactions.
Track this HashiCorp Vault release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this HashiCorp Vault release note into a weekly digest for the tools you actually use.
Create digestMore HashiCorp Vault changelog updates
BREAKING: UBI container images no longer include gnupg, openssl, or procps; duplicate HCL attributes now always cause errors and the legacy env var is removed