- Added many new features: customizable HTTP headers, KV v2 custom metadata and PATCH support, OIDC provider (tech preview), namespace API locking, GCP KMS key management, local auth mount entities, and UI enhancements for Elasticsearch, O...
- Breaking changes: removal of VAULT_16_REVOKE_PERMITPOOL and VAULT_LEASE_USE_LEGACY_REVOCATION_STRATEGY environment variables; Go runtime upgraded to 1.17.2 which may affect IP/CIDR handling.
- Security and stability updates: patched XZ library (GHSA‑25xm‑hr59‑7c27), upgraded etcd client, added entropy augmentation for key generation, plus numerous bug fixes across agents, APIs, auth methods, and UI components.
v1.9.0
Official HashiCorp Vault changelog summary with source attribution, release tags, and community reactions.
Track this HashiCorp Vault release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this HashiCorp Vault release note into a weekly digest for the tools you actually use.
Create digestMore HashiCorp Vault changelog updates
BREAKING: UBI container images no longer include gnupg, openssl, or procps; duplicate HCL attributes now always cause errors and the legacy env var is removed