HashiConf 2025 Don't miss the live stream of HashiConf Day 2 happening now View live stream
Vault Home

Release notes: Oracle plugin

October 22, 2026

EditionVersionArchitectureVault requirement
Enterprise0.15.1linux_amd641.21.12+
Enterprise0.15.1linux_s390x2.2.0+

Oracle Instant Client Compatibility

  • Updated compatibility testing matrix for the Oracle Instant Client with the Oracle Plugin on October 27, 2026. Please refer to the Oracle plugin compatibility matrix for details.
Current
version		EditionRuntimeCode source
0.15.1EnterpriseExternalBinary: vault-plugin-database-oracle*

Features and bug fixes

  • Addressed CVE-2026-111943 by distrusting eMudhra intermediate chains.

Technical updates

  • Bumped go version from 1.27.2 to 1.27.3.

Direct dependency updates

  • None.

Indirect dependency updates

  • None.

October 16, 2026

EditionVersion
Enterprise0.15.0

Features and bug fixes

  • Added support for rotating self-managed static role passwords without the ALTER USER privilege. Use the REPLACE clause with the new {{current_password}} template variable in rotation_statements.
  • Redacted passwords from password rotation error messages.
  • Updated golang.org/x/crypto and other modules to resolve reported CVEs.

Technical updates

  • Bumped go version from 1.26.1 to 1.27.2.
  • Bumped Oracle Instant Client from 19.26 to 19.31.
  • Added a linux/s390x build.
  • Included the EULA and Terms of Evaluation in the release archive.

Direct dependency updates

?DependencyOldNew
+github.com/ory/dockertest/v4N/A4.0.0
↑github.com/hashicorp/vault-licensing1.10.51.10.11-0.20260807165551-9209f41bd66a
↑github.com/hashicorp/vault/api1.22.01.23.0
↑github.com/hashicorp/vault/sdk0.24.00.25.1
−github.com/ory/dockertest/v33.12.0N/A

Indirect dependency updates

?DependencyOldNew
+github.com/cenkalti/backoff/v5N/A5.0.3
+github.com/hashicorp/go-metricsN/A0.5.4
+github.com/jackc/pgx/v5N/A5.10.0
+github.com/jackc/puddle/v2N/A2.2.2
+github.com/moby/moby/apiN/A1.55.0
+github.com/moby/moby/clientN/A0.5.1
+golang.org/x/syncN/A0.24.0
↑cloud.google.com/go/auth0.13.00.22.0
↑cloud.google.com/go/auth/oauth2adapt0.2.60.2.8
↑cloud.google.com/go/cloudsqlconn1.4.31.23.0
↑dario.cat/mergo1.0.11.0.2
↑github.com/bgentry/speakeasy0.1.00.2.0
↑github.com/coreos/go-oidc/v33.11.03.20.0
↑github.com/docker/go-connections0.5.00.8.1
↑github.com/fatih/color1.18.01.19.0
↑github.com/felixge/httpsnoop1.0.41.1.0
↑github.com/go-jose/go-jose/v33.0.43.0.5
↑github.com/go-jose/go-jose/v44.1.34.1.4
↑github.com/go-logr/logr1.4.31.4.4
↑github.com/golang/groupcache0.0.0-20210331224755-41bb18bfe9da0.0.0-20241129210726-2c02b8208cf8
↑github.com/google/certificate-transparency-go1.3.11.3.3
↑github.com/google/s2a-go0.1.80.1.9
↑github.com/googleapis/enterprise-certificate-proxy0.3.40.3.20
↑github.com/googleapis/gax-go/v22.14.02.23.0
↑github.com/hashicorp/cap0.10.00.13.0
↑github.com/hashicorp/cli1.1.61.1.7
↑github.com/hashicorp/go-kms-wrapping/v22.0.182.0.23
↑github.com/hashicorp/go-licensing/v44.0.0-alpha.24.0.1
↑github.com/hashicorp/go-plugin1.6.11.8.0
↑github.com/hashicorp/go-secure-stdlib/plugincontainer0.4.20.5.0
↑github.com/huandu/xstrings1.3.31.5.0
↑github.com/Masterminds/semver/v33.3.13.5.0
↑github.com/Masterminds/sprig/v33.2.33.3.0
↑github.com/mattn/go-colorable0.1.140.1.15
↑github.com/mattn/go-isatty0.0.200.0.24
↑github.com/oklog/run1.1.01.2.0
↑github.com/opencontainers/image-spec1.1.01.1.1
↑github.com/spf13/cast1.5.01.10.0
↑go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp0.58.00.70.0
↑go.opentelemetry.io/otel1.39.01.45.0
↑go.opentelemetry.io/otel/metric1.39.01.45.0
↑go.opentelemetry.io/otel/trace1.39.01.45.0
↑golang.org/x/crypto0.47.00.58.0
↑golang.org/x/net0.48.00.61.0
↑golang.org/x/oauth20.34.00.36.0
↑golang.org/x/sys0.40.00.49.0
↑golang.org/x/text0.33.00.43.0
↑golang.org/x/time0.12.00.15.0
↑google.golang.org/api0.214.00.292.0
↑google.golang.org/genproto/googleapis/rpc0.0.0-20251202230838-ff82c1b0f2170.0.0-20260911204522-f61a6ca850bd
↑google.golang.org/grpc1.79.31.83.2
↑google.golang.org/protobuf1.36.101.36.12
−github.com/Azure/go-ansiterm0.0.0-20250102033503-faa5f7b0171cN/A
−github.com/containerd/continuity0.4.5N/A
−github.com/docker/cli27.4.1+incompatibleN/A
−github.com/docker/docker28.3.3+incompatibleN/A
−github.com/go-viper/mapstructure/v22.1.0N/A
−github.com/gogo/protobuf1.3.2N/A
−github.com/google/shlex0.0.0-20191202100458-e7afc7fbc510N/A
−github.com/imdario/mergo0.3.16N/A
−github.com/jackc/chunkreader/v22.0.1N/A
−github.com/jackc/pgconn1.14.3N/A
−github.com/jackc/pgio1.0.0N/A
−github.com/jackc/pgproto3/v22.3.3N/A
−github.com/jackc/pgtype1.14.3N/A
−github.com/jackc/pgx/v44.18.3N/A
−github.com/mitchellh/go-testing-interface1.14.1N/A
−github.com/moby/sys/sequential0.6.0N/A
−github.com/moby/sys/user0.3.0N/A
−github.com/moby/term0.5.0N/A
−github.com/Nvveen/Gotty0.0.0-20120604004816-cd527374f1e5N/A
−github.com/opencontainers/runc1.2.3N/A
−github.com/pkg/errors0.9.1N/A
−github.com/sirupsen/logrus1.9.3N/A
−github.com/xeipuuv/gojsonpointer0.0.0-20190905194746-02993c407bfbN/A
−github.com/xeipuuv/gojsonreference0.0.0-20180127040603-bd5ef7bd5415N/A
−github.com/xeipuuv/gojsonschema1.2.0N/A
−gopkg.in/yaml.v22.4.0N/A

March 20, 2026

EditionVersion
Enterprise0.14.1

Features and bug fixes

  • None.

Technical updates

  • None.

Direct dependency updates

?DependencyOldNew
↑github.com/hashicorp/vault/sdk0.23.00.24.0

Indirect dependency updates

?DependencyOldNew
+github.com/cespare/xxhash/v2N/A2.3.0
↑cloud.google.com/go/compute/metadata0.6.00.9.0
↑github.com/go-logr/logr1.4.21.4.3
↑github.com/stretchr/testify1.10.01.11.1
↑go.opentelemetry.io/auto/sdk1.1.01.2.1
↑go.opentelemetry.io/otel1.35.01.39.0
↑go.opentelemetry.io/otel/metric1.35.01.39.0
↑go.opentelemetry.io/otel/trace1.35.01.39.0
↑golang.org/x/oauth20.28.00.34.0
↑google.golang.org/genproto/googleapis/rpc0.0.0-20250207221924-e9438ea467c60.0.0-20251202230838-ff82c1b0f217
↑google.golang.org/grpc1.70.01.79.3
↑google.golang.org/protobuf1.36.51.36.10
−google.golang.org/genproto/googleapis/api0.0.0-20241219192143-6b3ec007d9bbN/A

March 18, 2026

EditionVersion
Enterprise0.14.0

Features and bug fixes

  • None.

Technical updates

  • Bumped go version from 1.25.1 to 1.26.1.

Direct dependency updates

?DependencyOldNew
↑github.com/hashicorp/vault-licensing1.7.31.10.5
↑github.com/hashicorp/vault/sdk0.20.00.23.0

Indirect dependency updates

?DependencyOldNew
+github.com/coreos/go-oidc/v3N/A3.11.0
+github.com/go-jose/go-jose/v3N/A3.0.4
+github.com/hashicorp/capN/A0.10.0
+github.com/hashicorp/go-licensing/v4N/A4.0.0-alpha.2
+github.com/moby/sys/sequentialN/A0.6.0
+go.opentelemetry.io/auto/sdkN/A1.1.0
↑github.com/go-jose/go-jose/v44.1.14.1.3
↑github.com/hashicorp/go-secure-stdlib/plugincontainer0.4.10.4.2
↑github.com/hashicorp/yamux0.1.10.1.2
↑github.com/imdario/mergo0.3.120.3.16
↑github.com/petermattis/goid0.0.0-20240813172612-4fcff4a6cae70.0.0-20250721140440-ea1c0173183e
↑github.com/spf13/cast1.3.11.5.0
↑go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp0.54.00.58.0
↑go.opentelemetry.io/otel1.31.01.35.0
↑go.opentelemetry.io/otel/metric1.31.01.35.0
↑go.opentelemetry.io/otel/trace1.31.01.35.0
↑golang.org/x/crypto0.40.00.47.0
↑golang.org/x/net0.42.00.48.0
↑golang.org/x/oauth20.27.00.28.0
↑golang.org/x/sys0.34.00.40.0
↑golang.org/x/text0.27.00.33.0
↑google.golang.org/genproto/googleapis/rpc0.0.0-20241219192143-6b3ec007d9bb0.0.0-20250207221924-e9438ea467c6
↑google.golang.org/grpc1.69.41.70.0
↑google.golang.org/protobuf1.36.31.36.5
−github.com/hashicorp/go-licensing/v33.2.0N/A
−github.com/kr/text0.2.0N/A
−github.com/moby/sys/atomicwriter0.1.0N/A
−go.opentelemetry.io/otel/exporters/otlp/otlptrace1.30.0N/A
−go.opentelemetry.io/proto/otlp1.3.1N/A

October 6, 2025

EditionVersionVault requirement
Enterprise0.13.01.21.0+

Features and bug fixes

  • None.

Technical updates

  • Bumped go version to 1.25.1.

Direct dependency updates

?DependencyOldNew
↑github.com/hashicorp/vault/api1.16.01.22.0
↑github.com/hashicorp/vault/sdk0.17.00.20.0

Indirect dependency updates

?DependencyOldNew
+github.com/containerd/errdefsN/A1.0.0
+github.com/containerd/errdefs/pkgN/A0.3.0
+github.com/moby/sys/atomicwriterN/A0.1.0
↑github.com/docker/docker27.2.128.3.3
↑github.com/go-jose/go-jose/v44.0.54.1.1
↑github.com/hashicorp/go-retryablehttp0.7.70.7.8
↑github.com/hashicorp/go-secure-stdlib/parseutil0.1.90.2.0
↑github.com/hashicorp/go-sockaddr1.0.61.0.7
↑github.com/hashicorp/hcl1.0.1-vault-51.0.1-vault-7
↑github.com/mattn/go-colorable0.1.130.1.14
↑golang.org/x/crypto0.38.00.40.0
↑golang.org/x/net0.40.00.42.0
↑golang.org/x/sys0.33.00.34.0
↑golang.org/x/text0.25.00.27.0
↑golang.org/x/time0.9.00.12.0

June 13, 2025

EditionVersion
Enterprise0.12.3

Features and bug fixes

  • None

Technical updates

  • Bumped go version to 1.24.4.

Direct dependency updates

?DependencyOldNew
↑github.com/hashicorp/vault-licensing1.7.21.7.3
↑github.com/hashicorp/vault/sdk0.15.20.17.0
↑github.com/ory/dockertest/v33.11.03.12.0

Indirect dependency updates

?DependencyOldNew
↑golang.org/x/crypto0.35.00.38.0
↑golang.org/x/net0.34.00.40.0
↑golang.org/x/sys0.30.00.33.0
↑golang.org/x/text0.22.00.25.0

March 5, 2025

EditionVersion
Enterprise0.11.0

Features and bug fixes

  • Add support for self-managed static roles.
  • Installed license checking.

Technical updates

  • Bumped go version to 1.23.6.
  • Bumped Oracle Instant Client from 19.23 to 19.26.

Direct dependency updates

?DependencyOldNew
↑github.com/hashicorp/vault/api1.15.01.16.0
↑github.com/hashicorp/vault/sdk0.14.10.15.2
↑github.com/ory/dockertest/v33.10.03.11.0

Indirect dependency updates

?DependencyOldNew
↑golang.org/x/crypto0.31.00.35.0
↑golang.org/x/oauth20.24.00.27.0
↑github.com/go-jose/go-jose/v44.0.44.0.5
Edit this page on GitHub