- Security: added nonce requirement for cancelling recent rekey operations and API client now respects Retry-After header.
- Enterprise features: auto irrevocable lease removal, development cluster flag, entity‑based rate‑limit quotas, login form customization, automatic plugin downloads, SSH managed‑key signing, snapshot secret recovery, PKI SCEP support, UI ...
- Core changes: integrated storage now mandates an explicit disable‑mlock setting (breaking), Go upgraded to 1.24.4, added FIPS‑140‑3 and post‑quantum TLS support, plus numerous plugin version bumps.
v1.20.0
Official HashiCorp Vault changelog summary with source attribution, release tags, and community reactions.
Track this HashiCorp Vault release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this HashiCorp Vault release note into a weekly digest for the tools you actually use.
Create digestMore HashiCorp Vault changelog updates
BREAKING: UBI container images no longer include gnupg, openssl, or procps; duplicate HCL attributes now always cause errors and the legacy env var is removed