- Breaking: PKI secrets engine stops maintaining stored certificate counts by default and the SSCT feature toggle is removed.
- New features include AWS static roles, Vault PKI ACME server, OCI auto‑auth method, Vault Proxy subcommand, environment‑variable injection via Vault Agent, and refreshed UI with a sidebar and PKI workflow.
- Core upgraded to Go 1.20.5 and numerous auth/secret plugins were updated to their latest versions.