ui (enterprise): Migrate charts from Lineal to Carbon Charts in the Client usage overview and Vault usage dashboard.
v2.0.2
2026-06-05
⚠ Potential breaking changes
BREAKING CHANGES:
v2.0.1
2026-05-19
⚠ Potential breaking changes
BREAKING CHANGES:
api: Add migration_done_at_epoch to sys/seal-status response.
scim: The SCIM Group PATCH handler now supports the path field in the form members[value eq "id"] on remove operations.
secrets/pki (enterprise): Include root CA in chain for CIEPS endpoints when root is the direct issuer, unless remove_roots_from_chain is true.
secrets/pki: Remove invalid value from the supported list of ACME algorithms.
v2.0.0
2026-04-14
⚠ Potential breaking changes
BREAKING CHANGES:
secrets/pki: sign-verbatim endpoints no longer ignore basic constraints extension in CSRs, using them in generated certificates if isCA=false or returning an error if isCA=true
ui/secrets: Secrets engines url paths renamed from '/secrets' to '/secrets-engines'
ui: Remove ability to bulk delete secrets engines from the list view.
secret-sync (enterprise): Added telemetry counters for sync/unsync operations with status breakdown by destination type, and exposed operation counters in the destinations list API response.
core (enterprise): Avoid duplicate seal rewrapping, and ensure that cluster secondaries rewrap after a seal migration.
ldap auth (enterprise): Fix root password rotation for Active Directory by implementing UTF-16LE encoding and schema-specific handling. Adds new 'schema' config field (defaults to 'openldap' for backward compatibility).
logging: Fixed an issue where the `log_requests_level` configuration was not respected on a SIGHUP reload when set to "off" or removed from the config file.
secret-sync (enterprise): Fix race condition in secretsSetRemoveHandler by serializing MemDB transaction access.
secret-sync (enterprise): Improved unsync error handling by treating cases where the destination no longer exists as successful.
v2.0.0-rc1
2026-04-03
No breaking-change keywords detected in release notes.
v1.21.4
2026-03-05
⚠ Potential breaking changes
ui: Remove ability to bulk delete secrets engines from the list view.
v1.21.3
2026-03-04
⚠ Potential breaking changes
secret-sync (enterprise): Added telemetry counters for sync/unsync operations with status breakdown by destination type, and exposed operation counters in the destinations list API response.
v1.21.2
2026-01-07
⚠ Potential breaking changes
secret-sync (enterprise): Improved unsync error handling by treating cases where the destination no longer exists as successful.