Skip to content

Bump github.com/hashicorp/vault from 1.19.3 to 1.19.4 #6224

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 19, 2025

Bumps github.com/hashicorp/vault from 1.19.3 to 1.19.4.

Release notes

Sourced from github.com/hashicorp/vault's releases.

v1.19.4

1.19.4

May 16, 2025

CHANGES:

  • Update vault-plugin-auth-cf to v0.20.1 [GH-30586]
  • auth/azure: Update plugin to v0.20.4 [GH-30543]
  • core: Bump Go version to 1.24.3.

IMPROVEMENTS:

  • Namespaces (enterprise): allow a root token to relock a namespace
  • core (enterprise): update to FIPS 140-3 cryptographic module in the FIPS builds.
  • core: Updated code and documentation to support FIPS 140-3 compliant algorithms. [GH-30576]
  • core: support for X25519MLKEM768 (post quantum key agreement) in the Go TLS stack. [GH-30603]
  • ui: Replaces all instances of the deprecated event.keyCode with event.key [GH-30493]

BUG FIXES:

  • core (enterprise): fix a bug where plugin automated root rotations would stop after seal/unseal operations
  • plugins (enterprise): Fix an issue where Enterprise plugins can't run on a standby node when it becomes active because standby nodes don't extract the artifact when the plugin is registered. Remove extracting from Vault and require the operator to place the extracted artifact in the plugin directory before registration.
Changelog

Sourced from github.com/hashicorp/vault's changelog.

1.19.4

May 16, 2025

Enterprise LTS: Vault Enterprise 1.19 is a Long-Term Support (LTS) release.

CHANGES:

  • Update vault-plugin-auth-cf to v0.20.1 [GH-30586]
  • auth/azure: Update plugin to v0.20.4 [GH-30543]
  • core: Bump Go version to 1.24.3.

IMPROVEMENTS:

  • Namespaces (enterprise): allow a root token to relock a namespace
  • core (enterprise): update to FIPS 140-3 cryptographic module in the FIPS builds.
  • core: Updated code and documentation to support FIPS 140-3 compliant algorithms. [GH-30576]
  • core: support for X25519MLKEM768 (post quantum key agreement) in the Go TLS stack. [GH-30603]
  • ui: Replaces all instances of the deprecated event.keyCode with event.key [GH-30493]

BUG FIXES:

  • core (enterprise): fix a bug where plugin automated root rotations would stop after seal/unseal operations
  • plugins (enterprise): Fix an issue where Enterprise plugins can't run on a standby node when it becomes active because standby nodes don't extract the artifact when the plugin is registered. Remove extracting from Vault and require the operator to place the extracted artifact in the plugin directory before registration.
Commits
  • 322786e [VAULT-36181] This is an automated pull request to build all artifacts for a ...
  • 81267ec backport of commit 72958878161444007f108a7f939879851bcc5582 (#30602)
  • 4a0d13f backport of commit a82d6192aa621fa583e40340cf417b7d5cc78c9f (#30605)
  • 8eb9e9b Backport of Upgrade FIPS 1402 -> 1403 into release/1.19.x (#30582)
  • 612ac9e Update go version to 1.24.3 (#30596)
  • a5dc77c backport: 1.19.x: Update vault-plugin-auth-cf to v0.20.1 (#30586)
  • 6fb78a2 backport of commit 6852fc4e6041e0b6b5ef4ace9d94a23ccdd6fb8d (#30581)
  • be7c446 backport of commit 87f1d18e5142b451b2e8c9471065e916dffcf1ae (#30579)
  • 348dbf1 backport of commit 3e171f4318883568c3db602e1e10918d604496a4 (#30568)
  • 34a5941 backport of commit 83534ec583118256c04e4e770fd6e44f9f4a9633 (#30569)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 19, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 19, 2025 00:18
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label May 19, 2025
@dependabot dependabot bot requested a review from a team as a code owner May 19, 2025 00:18
@dependabot dependabot bot added the go Pull requests that update Go code label May 19, 2025
Copy link

codecov bot commented May 19, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 44.82%. Comparing base (d3fc24b) to head (b78aafb).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #6224      +/-   ##
==========================================
- Coverage   44.84%   44.82%   -0.03%     
==========================================
  Files         390      390              
  Lines       26983    26983              
==========================================
- Hits        12100    12094       -6     
- Misses      14013    14017       +4     
- Partials      870      872       +2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/hashicorp/vault-1.19.4 branch 2 times, most recently from 16b727f to 4e7fee9 Compare May 21, 2025 15:40
@crobert-1
Copy link
Contributor

Error: can't load config: the Go language version (go1.23) used to build golangci-lint is lower than the targeted Go version (1.24.0)
Failed executing command with error: can't load config: the Go language version (go1.23) used to build golangci-lint is lower than the targeted Go version (1.24.0)

From the changelog:

core: Bump Go version to 1.24.3.

Moving to draft as go 1.24 is required.

@crobert-1 crobert-1 marked this pull request as draft May 21, 2025 15:59
Bumps [github.com/hashicorp/vault](https://github.com/hashicorp/vault) from 1.19.3 to 1.19.4.
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@v1.19.3...v1.19.4)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault
  dependency-version: 1.19.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/hashicorp/vault-1.19.4 branch from 4e7fee9 to b78aafb Compare May 27, 2025 17:28
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 2, 2025

Superseded by #6276.

@dependabot dependabot bot closed this Jun 2, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/github.com/hashicorp/vault-1.19.4 branch June 2, 2025 00:23
@github-actions github-actions bot locked and limited conversation to collaborators Jun 2, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant