Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 28, 2022

Bumps github.com/hashicorp/vault/api from 1.3.1 to 1.4.1.

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

1.4.1 (April 30th, 2020)

CHANGES:

  • auth/aws: The default set of metadata fields added in 1.4.1 has been changed to account_id and auth_type [GH-8783]
  • storage/raft: Disallow ha_storage to be specified if raft is set as the storage type. [GH-8707]

IMPROVEMENTS:

  • auth/aws: The set of metadata stored during login is now configurable [GH-8783]
  • auth/aws: Improve region selection to avoid errors seen if the account hasn't enabled some newer AWS regions [GH-8679]
  • auth/azure: Enable login from Azure VMs with user-assigned identities [GH-33]
  • auth/gcp: The set of metadata stored during login is now configurable [GH-92]
  • auth/gcp: The type of alias name used during login is now configurable [GH-95]
  • auth/ldap: Improve error messages during LDAP operation failures [GH-8740]
  • identity: Add a batch delete API for identity entities [GH-8785](hashicorp/vault#8785)
  • identity: Improve performance of logins when no group updates are needed [GH-8795](hashicorp/vault#8795)
  • metrics: Add vault.identity.num_entities metric [GH-8816](hashicorp/vault#8816)
  • secrets/kv: Allow delete-version-after to be reset to 0 via the CLI [GH-8635]
  • secrets/rabbitmq: Improve error handling and reporting [GH-8619]
  • ui: Provide One Time Password during Operation Token generation process [GH-8630](hashicorp/vault#8630)

BUG FIXES:

  • auth/okta: Fix MFA regression (introduced in GH-8143) from 1.4.0 [GH-8807]
  • auth/userpass: Fix upgrade value for token_bound_cidrs being ignored due to incorrect key provided [GH-8826]
  • config/seal: Fix segfault when seal block is removed [GH-8517]
  • core: Fix an issue where users attempting to build Vault could receive Go module checksum errors [GH-8770]
  • core: Fix blocked requests if a SIGHUP is issued during a long-running request has the state lock held. Also fixes deadlock that can happen if vault debug with the config target is ran during this time. [GH-8755]
  • core: Always rewrite the .vault-token file as part of a vault login to ensure permissions and ownership are set correctly [GH-8867]
  • database/mongodb: Fix context deadline error that may result due to retry attempts on failed commands [GH-8863]
  • http: Fix superflous call messages from the http package on logs caused by missing returns after respondError calls [GH-8796]
  • namespace (enterprise): Fix namespace listing to return key_info when a scoping namespace is also provided.
  • seal/gcpkms: Fix panic that could occur if all seal parameters were provided via environment variables [GH-8840]
  • storage/raft: Fix memory allocation and incorrect metadata tracking issues with snapshots [GH-8793]
  • storage/raft: Fix panic that could occur if disable_clustering was set to true on Raft storage cluster [GH-8784]
  • storage/raft: Handle errors returned from the API during snapshot operations [GH-8861]
  • sys/wrapping: Allow unwrapping of wrapping tokens which contain nil data [GH-8714]

1.4.0 (April 7th, 2020)

CHANGES:

  • cli: The raft configuration command has been renamed to list-peers to avoid confusion.

... (truncated)

Commits
  • b2b4ab9 release: stage v1.4.1
  • cb1f373 Merge branch 'release/1.4.x' into rel-1.4.1
  • b4bcaae Fix Makefile
  • 5f0fff3 Merge branch 'release/1.4.x' into rel-1.4.1
  • 51ac267 Makefile: add goimports to CI tools
  • a550fab update GO_VERSION to 1.13.10
  • 123e142 release: stage v1.4.1
  • 216a826 go mod vendor
  • cf1a1cd update go.mod to use sdk version 1.4.1
  • 29fce8f update sdk version to 1.4.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) from 1.3.1 to 1.4.1.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@v1.3.1...v1.4.1)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from Zenithar as a code owner February 28, 2022 04:39
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 28, 2022
@Zenithar Zenithar merged commit 34910af into main Feb 28, 2022
@Zenithar Zenithar deleted the dependabot/go_modules/github.com/hashicorp/vault/api-1.4.1 branch February 28, 2022 07:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant