Commit graph

23309 commits

Author SHA1 Message Date
hc-github-team-secure-vault-core
9ab8c872cc Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-29 21:21:41 +00:00
Vault Automation
a3adda9940
Backport Fix a test sdk bug relating to joining nodes when using autoseal into ce/main (#14427)
Co-authored-by: Nick Cabatoff <ncabatoff@hashicorp.com>
2026-04-29 20:40:42 +00:00
hc-github-team-secure-vault-core
7fec40165a Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-29 18:26:05 +00:00
Vault Automation
5905c638d3
Backport Expand docker cluster config to support more things like seals into ce/main (#14415) 2026-04-29 14:24:00 -04:00
hc-github-team-secure-vault-core
78c916f5dc Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-29 17:30:12 +00:00
Vault Automation
58656a160c
Fix MSSQL Default Revocation to use Least Privilege Metadata Query (#13528) (#14328)
* Fix mssql lease revocation

* Add changelog

* Update comments

Co-authored-by: sachin-chand01 <sachin.chand@hashicorp.com>
2026-04-29 22:41:23 +05:30
hc-github-team-secure-vault-core
0d2a2768f5 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-29 16:30:45 +00:00
Vault Automation
57d45e4981
bump go-pgmultiauth (#13895) (#14406)
* bump go-pgmultiauth

* add changelog

* add azure with backward compatibility

Co-authored-by: ajmera-naman <naman.ajmera@hashicorp.com>
2026-04-29 15:39:31 +00:00
hc-github-team-secure-vault-core
132ad9c2e0 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-29 14:41:56 +00:00
Vault Automation
0ec3e363ee
Vault-44369 return keys regardless of value inside billing endpoint (#14286) (#14371)
* create the metrics inside the response even if the value is zero

* tests

* fix a test

Co-authored-by: Amir Aslamov <amir.aslamov@hashicorp.com>
2026-04-29 14:10:39 +00:00
hc-github-team-secure-vault-core
c5812e4a43 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-29 13:32:01 +00:00
Vault Automation
684a372589
feat(enos): migrate vault_verify_undo_logs to vault_run_blackbox_test module (#14170) (#14374)
- Migrate undo logs verification from shell script to Go blackbox test
- Add session_metrics.go and session_remote.go helpers to blackbox SDK
- Create undo_logs_test.go in vault/external_tests/blackbox/verify package
- Update autopilot scenario to use vault_run_blackbox_test module
- Remove deprecated vault_verify_undo_logs module
- Update vault_run_blackbox_test module to support test environment variables

This change improves test maintainability and consistency by using the
standardized blackbox testing framework instead of custom shell scripts.

Co-authored-by: brewgator <12831681+brewgator@users.noreply.github.com>
2026-04-29 09:25:06 -04:00
hc-github-team-secure-vault-core
1e89fbf7fd Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-29 10:34:16 +00:00
Vault Automation
c9430538b3
VAULT-44064 - Add rollback support to the snowflake key pair root credentials rotation (#14046) (#14400)
* Add rollback support to the snowflake key pair root rotation flow

* Added changelog

* Updated changelog

* Updated changelog

* Updated rollback logic

* Updated rollback logic

* Updated rollback logic

* Updated rollback logic

* Updated tests

* Addressed PR comments

* Updated tests

* Addressing PR Review Comments



---------

Co-authored-by: santoshhashicorp <santosh.yelamarthi@hashicorp.com>
Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2026-04-29 15:29:02 +05:30
hc-github-team-secure-vault-core
63f4ea79a0 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-29 09:39:10 +00:00
Vault Automation
ba53e126a2
changing cloning to a bool (#14050) (#14363)
* changing cloning to a bool

* fixing linting and bad error return

* adding changelog

* moving tests in to external tests, adding helper

Co-authored-by: JMGoldsmith <spartanaudio@gmail.com>
2026-04-29 11:09:16 +02:00
hc-github-team-secure-vault-core
467b31b361 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-28 23:17:41 +00:00
Kianna
cb41400bf2
Manual backport... (#14369) 2026-04-28 15:28:07 -07:00
hc-github-team-secure-vault-core
8ee02d4929 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-28 22:17:50 +00:00
Vault Automation
b2675da223
call RegisterRotationJobWithResponse from RegisterRotationJob from the grpcsystem server instead of duplicating the code (#14315) (#14383)
Co-authored-by: Robert <17119716+robmonte@users.noreply.github.com>
2026-04-28 21:37:21 +00:00
hc-github-team-secure-vault-core
cb4a687f41 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-28 21:21:27 +00:00
Vault Automation
06b3374bd5
VAULT-43442: Adding Enos SDK AWS test to add/delete Vault AWS Roles (#14248) (#14358)
* updating matrix workflow format for easier visualization

* adding test to create and delete Vault AWS Roles

* refactoring functions

* testing pipeline

* testing pipeline

* testing pipeline

* testing pipeline

* finishing up role deletion test

* finishing up role deletion test

Co-authored-by: Tin Vo <tintvo08@gmail.com>
2026-04-28 13:46:11 -07:00
hc-github-team-secure-vault-core
f8e0489905 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-28 20:26:18 +00:00
Vault Automation
3f3c29607f
[UI] Add total credential units + GCP KMS in data protection calls (#14312) (#14367)
* Add tests!

* Add gcp kms value

* Update to use enum

* Update metric helper test

Co-authored-by: Kianna <30884335+kiannaquach@users.noreply.github.com>
2026-04-28 12:57:30 -07:00
hc-github-team-secure-vault-core
79ee930e3a Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-28 17:31:57 +00:00
Vault Automation
42780fbcf2
[UI] Ember Data Migration - OIDC Clients (#14288) (#14353)
* updates oidc clients list view to use api service

* updates oidc client and client details routes to use api service

* updates form field groups component to yield out form field yields

* adds oidc client form class

* updates oidc client client and edit routes to use api service

* updates oidc client-form component to use form class and removes store/model support

* updates oidc provider client route to use api service

* updates oidc key clients route to use api service

* fixes tests

Co-authored-by: Jordan Reimer <zofskeez@gmail.com>
2026-04-28 17:22:28 +00:00
Vault Automation
38461975db
added 1.20.x back (#14294) (#14307)
Co-authored-by: kelly <69541941+kporter101@users.noreply.github.com>
2026-04-28 17:12:41 +00:00
hc-github-team-secure-vault-core
1ce6289c5e Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-28 16:33:10 +00:00
Vault Automation
ceada1d29a
Backport Provide more information around seal migrations into ce/main (#14345) 2026-04-28 15:54:15 +00:00
hc-github-team-secure-vault-core
e867b15f88 Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-28 15:46:28 +00:00
Vault Automation
1d4d9bc61c
override lodash dep (#14316) (#14317)
Co-authored-by: lane-wetmore <lane.wetmore@hashicorp.com>
2026-04-28 08:37:26 -07:00
Vault Automation
2f4fe5345a
Backport fix: add timeout context around UpdateUser to prevent static role rotation hang into ce/main (#13971)
* fix: add timeout context around UpdateUser to prevent static role rotation hang (#13697)

* fix: add timeout context around UpdateUser to prevent static role rotation hang

* changelog: add entry for static role rotation timeout fix

* fix: rename changelog file to match expected format

* fix: update changelog format to release-note style

* Bound database Initialize to prevent static rotation stalls

* add missing go doc

* pr comments: close changelog block, distinguish parent context cancellation from UpdateUser timeout

* changelog: include Initialize timeout handling

* async Close on init cancel/timeout, add test, and set PluginName in test config

* add UpdateUser timeout test coverage for static role rotation

* go doc comments fix

* Apply suggestions from code review

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* welp copilot prompt was out of date and I shouldn't have accepted it.

---------

Co-authored-by: Angel Garbarino <argarbarino@gmail.com>
Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

* fix(database): remove async UpdateUser timeout and use synchronous context to avoid race conditions

* fix(backport): restore async UpdateUser timeout behavior

---------

Co-authored-by: arslan23-push <arslan.muhammad@ibm.com>
Co-authored-by: Angel Garbarino <argarbarino@gmail.com>
Co-authored-by: Angel Garbarino <Monkeychip@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
2026-04-28 09:01:57 -06:00
hc-github-team-secure-vault-core
933d304b94 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-28 13:32:26 +00:00
Vault Automation
3b43df47ae
VAULT-43741 (enos) Convert vault_verify_version to Use Blackbox SDK (#13950) (#14323)
* Update vault version verify to use Go BB SDK test

* Add missing env vars

* more

* formatting

* typo

* formatting

* fmt

* more-fmt

* requested changes

* formatting

* Apply suggestions from code review

Co-authored-by: brewgator <ltcarbonell@pm.me>

* formatting

* remove external test access

* remove exec mode

* formtting

* Delete sdk/helper/testcluster/blackbox/session_remote.go

Co-authored-by: brewgator <lt.carbonell@hashicorp.com>
2026-04-28 08:59:34 -04:00
hc-github-team-secure-vault-core
68c5959bdb Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-27 23:16:40 +00:00
Vault Automation
f595b77c23
[UI][Automated] API Client Dependency Update (#14291) (#14313)
* auto: bumps vault-client-typescript version

* fixes sync activation flags method name that changed in client

* updates azure auth config form test

---------

Co-authored-by: Jordan Reimer <jordan.reimer@hashicorp.com>
2026-04-27 16:22:12 -06:00
hc-github-team-secure-vault-core
b03c93e824 Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-27 18:23:02 +00:00
Vault Automation
ac8286bd3c
This adds a comment which tripped up our code-reviewers. We are disabling a check that doesn't make sense for our customers. (#14268) (#14278)
Co-authored-by: Kit Haines <khaines@mit.edu>
2026-04-27 14:08:40 -04:00
hc-github-team-secure-vault-core
0ee3793e0d Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-27 16:29:55 +00:00
Vault Automation
2cf5691315
Change Policy locking so that GetPolicy always returns a locked policy (#13899) (#14277)
* change GetPolicy to return a locked policy always

* add more fixes and changelog

* remove extra unlock

* make fmt

* fix transform test

* fix write locks with cache

* address comments

Co-authored-by: Rachel Culpepper <84159930+rculpepper@users.noreply.github.com>
2026-04-27 11:34:47 -04:00
hc-github-team-secure-vault-core
db2cc6218c Merge remote-tracking branch 'remotes/from/ce/main'
Some checks failed
build / setup (push) Has been cancelled
build / hcp-setup (push) Has been cancelled
CI / setup (push) Has been cancelled
Run linters / Setup (push) Has been cancelled
Run linters / Semgrep (push) Has been cancelled
Check Copywrite Headers / copywrite (push) Has been cancelled
Security Scan / scan (push) Has been cancelled
build / Check ce/* Pull Requests (push) Has been cancelled
build / ui (push) Has been cancelled
build / artifacts-ce (push) Has been cancelled
build / artifacts-ent (push) Has been cancelled
build / hcp-image (push) Has been cancelled
build / test (push) Has been cancelled
build / test-hcp-image (push) Has been cancelled
build / completed-successfully (push) Has been cancelled
CI / Run Autopilot upgrade tool (push) Has been cancelled
CI / Run Go tests (push) Has been cancelled
CI / Run Go tests tagged with testonly (push) Has been cancelled
CI / Run Go tests with data race detection (push) Has been cancelled
CI / Run Go tests with FIPS configuration (push) Has been cancelled
CI / Test UI (push) Has been cancelled
CI / tests-completed (push) Has been cancelled
Run linters / Deprecated functions (push) Has been cancelled
Run linters / Code checks (push) Has been cancelled
Run linters / Protobuf generate delta (push) Has been cancelled
Run linters / Format (push) Has been cancelled
2026-04-24 23:12:48 +00:00
Vault Automation
d695549743
[VAULT-44363] go: resolve GHSA-j88v-2chj-qfwx by upgrading github.com/jackc/pgx/v5 (#14226) (#14272)
* [VAULT-44363] go: resolve GHSA-j88v-2chj-qfwx by upgrading github.com/jackc/pgx/v5

Signed-off-by: Ryan Cragun <me@ryan.ec>
Co-authored-by: Ryan Cragun <me@ryan.ec>
2026-04-24 15:52:27 -07:00
hc-github-team-secure-vault-core
173d4af70b Merge remote-tracking branch 'remotes/from/ce/main'
Some checks are pending
build / setup (push) Waiting to run
build / Check ce/* Pull Requests (push) Blocked by required conditions
build / ui (push) Blocked by required conditions
build / artifacts-ce (push) Blocked by required conditions
build / artifacts-ent (push) Blocked by required conditions
build / hcp-setup (push) Waiting to run
build / hcp-image (push) Blocked by required conditions
build / test (push) Blocked by required conditions
build / test-hcp-image (push) Blocked by required conditions
build / completed-successfully (push) Blocked by required conditions
CI / setup (push) Waiting to run
CI / Run Autopilot upgrade tool (push) Blocked by required conditions
CI / Run Go tests (push) Blocked by required conditions
CI / Run Go tests tagged with testonly (push) Blocked by required conditions
CI / Run Go tests with data race detection (push) Blocked by required conditions
CI / Run Go tests with FIPS configuration (push) Blocked by required conditions
CI / Test UI (push) Blocked by required conditions
CI / tests-completed (push) Blocked by required conditions
Run linters / Setup (push) Waiting to run
Run linters / Deprecated functions (push) Blocked by required conditions
Run linters / Code checks (push) Blocked by required conditions
Run linters / Protobuf generate delta (push) Blocked by required conditions
Run linters / Format (push) Blocked by required conditions
Run linters / Semgrep (push) Waiting to run
Check Copywrite Headers / copywrite (push) Waiting to run
Security Scan / scan (push) Waiting to run
2026-04-24 19:17:42 +00:00
Vault Automation
6ecb3ad2bf
Backport VAULT-43313 change months stored and displayed in billing to 37 months into ce/main (#14235)
* no-op commit

* cherry pick

---------

Co-authored-by: Amir Aslamov <amir.aslamov@hashicorp.com>
2026-04-24 12:04:52 -07:00
hc-github-team-secure-vault-core
da9646486e Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-24 18:12:18 +00:00
Vault Automation
dcea542a3a
Upload-Issuer Compliance with Common Criteria. (#12101) (#12501)
* Upload-Issuer Compliance with Common Criteria.

* Add Changelog.

* Update changelog/_12101.txt



* Update builtin/logical/pki/storage_validate_imports_ent.go



* PR-Review, add trap for deletion errors.

* Add test-doc referencing NIAP requirement.

---------

Co-authored-by: Kit Haines <khaines@mit.edu>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2026-04-24 14:06:07 -04:00
Vault Automation
40c5f44a6d
Add error-logs on invalid x_forwarded_for configuration. (#11823) (#11899)
* Add error-logs on invalid x_forwarded_for configuration.

* Add Error-Logging on Invalid X-Forwarded-For configuration on startup.

* PR Feedback.

* Update changelog/_11823.txt



---------

Co-authored-by: Kit Haines <khaines@mit.edu>
Co-authored-by: Steven Clark <steven.clark@hashicorp.com>
2026-04-24 14:03:43 -04:00
hc-github-team-secure-vault-core
73f291790b Merge remote-tracking branch 'remotes/from/ce/main' 2026-04-24 17:18:31 +00:00
Vault Automation
72fe26b141
tests: fix failing dev server command test (#14255) (#14264)
Test was failing because the global prometheus registry doesn't allow
duplicate registrations. We don't need prometheus in server command tests,
so we disable it.

Co-authored-by: John-Michael Faircloth <fairclothjm@users.noreply.github.com>
2026-04-24 11:57:49 -05:00
Vault Automation
25cb017310
Include root CA in chain for CIEPS issue/sign endpoints when root is the direct issuer (#14249) (#14257)
* add test coverage before fixing

* add changelog

* fix ca chain generation

Co-authored-by: claire b <68122737+hellobontempo@users.noreply.github.com>
2026-04-24 09:51:02 -07:00