Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 1, 2025

Bumps the hashicorp group with 2 updates: github.com/hashicorp/consul/api and github.com/hashicorp/vault/api.

Updates github.com/hashicorp/consul/api from 1.32.1 to 1.32.4

Commits
  • d869c1d Backport of api: added helper types for census reporting ent api into release...
  • 0819206 Updated the changelogs and version for v1.21.5 (#22831)
  • bef5f12 Backport of ui: add copyright headers to new files into release/1.21.x (#22827)
  • d3e6767 Backport of bug - fix menu dropdown not opening after delete into release/1.2...
  • cc346fe Backport of Fix bug consul namespaces disappearing into release/1.21.x (#22819)
  • c400907 Backport of UI accessibility bugs into release/1.21.x (#22814)
  • 55e3dbf Backport: sec: perform constant time compare for sensitive values (#22537) (#...
  • d6001f2 Backport of [SECVULN-8636] Filter ACL for anonymous token along with empty to...
  • 38febd6 Consul ENT default version change (#22783)
  • 15aa895 Backport: deps: migrate mapstructure to go-viper (#22581) (#22780)
  • Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api from 1.20.0 to 1.21.0

Release notes

Sourced from github.com/hashicorp/vault/api's releases.

v1.20.4

No release notes provided.

v1.20.3

No release notes provided.

v1.20.2

August 06, 2025

SECURITY:

BUG FIXES:

  • agent/template: Fixed issue where templates would not render correctly if namespaces was provided by config, and the namespace and mount path of the secret were the same. [GH-31392]
  • identity/mfa: revert cache entry change from #31217 and document cache entry values [GH-31421]

v1.20.1

No release notes provided.

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

Previous versions

1.20.4

September 24, 2025

SECURITY:

CHANGES:

IMPROVEMENTS:

  • Raft: Auto-join will now allow you to enforce IPv4 on networks that allow IPv6 and dual-stack enablement, which is on by default in certain regions. (1fd38796)
  • auth/cert: Support RFC 9440 colon-wrapped Base64 certificates in x_forwarded_for_client_cert_header, to fix TLS certificate auth errors with Google Cloud Application Load Balancer. [GH-31501]
  • secrets/database (enterprise): Add support for reading, listing, and recovering static roles from a loaded snapshot. Also add support for reading static credentials from a loaded snapshot. (24cd1aa5)
  • secrets/ssh: Add support for recovering the SSH plugin CA from a loaded snapshot (enterprise only). (0087af9d)

BUG FIXES:

  • auth/cert: Recover from partially populated caches of trusted certificates if one or more certificates fails to load. [GH-31438]
  • core: Role based quotas now work for cert auth (fc775dea)
  • sys/mounts: enable unsetting allowed_response_headers [GH-31555]
  • ui: Fix page loading error when users navigate away from identity entities and groups list views. (81170963)

1.20.3

August 28, 2025

FEATURES:

SECURITY:

CHANGES:

  • core: Bump Go version to 1.24.6. (ce56e14e)
  • http: Add JSON configurable limits to HTTP handling for JSON payloads: max_json_depth, max_json_string_value_length, max_json_object_entry_count, max_json_array_element_count. [GH-31069]
  • sdk: Upgrade to go-secure-stdlib/plugincontainer@v0.4.2, which also bumps github.com/docker/docker to v28.3.3+incompatible (8f172169)
  • secrets/openldap (enterprise): update plugin to v0.16.1

IMPROVEMENTS:

... (truncated)

Commits
  • e40eca1 VAULT-39294: Deprecate recover_snapshot_id query param and use a header inste...
  • c9605c7 VAULT-36947: Support force unloading a snapshot (#8740) (#9036)
  • 5d632ef [VAULT-38600] Create TOTP Login MFA credential self-enrollment API endpoint (...
  • eaf949c VAULT-37633: Database static role recover operations (#8922) (#8982)
  • 3c459f7 [VAULT-39267] actions(slack): migrate to v2 action (#8964) (#8990)
  • 50af559 VAULT-38796, VAULT-38889 reformat observation schema to version 2 (#9006) (#9...
  • a820af0 Backport [VAULT-38600] Fix the name of the CE stub for mfaLoginEnterprisePath...
  • 37bd994 VAULT-38463: Fix ldap failure (#8996) (#9001)
  • 3edbb13 changelog: fix commit URL in CE generated template (#9010) (#9013)
  • bfd2e54 UI: Moving settings/mount-backend-form to secrets/mounts (#8975) (#8998)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the hashicorp group with 2 updates: [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) and [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault).


Updates `github.com/hashicorp/consul/api` from 1.32.1 to 1.32.4
- [Release notes](https://github.com/hashicorp/consul/releases)
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md)
- [Commits](hashicorp/consul@api/v1.32.1...api/v1.32.4)

Updates `github.com/hashicorp/vault/api` from 1.20.0 to 1.21.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@v1.20.0...api/v1.21.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/consul/api
  dependency-version: 1.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: hashicorp
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: hashicorp
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 1, 2025 00:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 1, 2025
@ivorisoutdoors ivorisoutdoors merged commit 7552545 into main Oct 6, 2025
4 checks passed
@ivorisoutdoors ivorisoutdoors deleted the dependabot/go_modules/hashicorp-e6dfd4deac branch October 6, 2025 19:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants