:lock: Python 3.X client for HashiCorp Vault
Client.write_data
- remove potentially dangerous default (GH-1120)Thanks to @Ousret, @briantist, @mweigel and @tot19 for their lovely contributions.
This release makes a number of breaking changes. Most notably, dropping support for Python 3.6 & 3.7, dropping support for Vault versions 1.6.x through 1.10.x, and removing previously deprecated methods and code paths. Most of the other breaking changes are fairly minor or only affect specific use cases, but please review all changes carefully.
There are also several other deprecations and announcements to be aware of. We hope to have a more rapid release schedule going forward.
In accordance with our supported Python version policy we will continue to drop Python versions as they become end-of-life. These may not be announced in advance, but will be done in major versions.
Client.write
method breaking changes 2.0.0 (GH-1089)sys.initialize
parameters secret_shares
and secret_threshold
(GH-1063)client
attributes (GH-1062)session
is user-supplied, do not overwrite session options with Client
/Adapter
options (GH-1021)pyhcl
optional again (GH-1060)Client.write
method (GH-1034)raise_on_deleted_version
will change from True
to False
in v3.0.0
(GH-955)certificate
parameter for create_ca_certificate_role
will stop accepting file paths in v3.0.0 (GH-914)sys.initialize
parameters secret_shares
and secret_threshold
(GH-1063)safety_buffer
argument in AWS auth (GH-1068)rotate_static_credentials
method, docs updates, unit tests (GH-1069)plaintext
and ciphertext
optional for batch operations (GH-1049)sys.initialize
parameters secret_shares
and secret_threshold
(GH-1063)session
is user-supplied, do not overwrite session options with Client
/Adapter
options (GH-1021)rotate_static_credentials
method, docs updates, unit tests (GH-1069)typos
linter to CI (GH-1057)Thanks to @Tylerlhess, @amiewei, @briantist, @cibinmathew and @dosisod for their lovely contributions.
This release fixes an inaccuracy in a warning message but does not otherwise change functionality.
Thanks to @briantist and @iTrooz for their lovely contributions.
This is the last expected release before v2.0.0
.
configure
params by vault api names (GH-975)Client.write
method (GH-1034)v2.0.0
(GH-877)MFA
class in v2.0.0
(GH-1026)Client.write_data
method (GH-1028)configure
params by vault api names (GH-975)disable_local_ca_jwt
in the Kubernetes auth method (GH-997)Client.write_data
method (GH-1028)sys.take_raft_snapshot
method (GH-771)__getattr__
): non-existent attribute lookup (GH-982)Thanks to @M0NsTeRRR, @amiewei, @briantist, @ceesios, @crimsonvulture, @deidax, @dekimsey, @dependabot, @dependabot[bot], @fad3t, @ferenc-hechler, @intgr, @m4dh4t, @michael-diggin, @mimato, @mweigel and @robbat2 for their lovely contributions.
auth.token.create
(GH-966)Thanks to @briantist for their lovely contributions.
v3.0.0
- The certificate
parameter for create_ca_certificate_role
will stop accepting file paths (GH-914)hvac
intends to drop support for EoL Python versions (GH-877)v3.0.0
- The default value of raise_on_deleted_version
will change from True
to False
(GH-955)generate_credentials
for STS endpoint (GH-934)auto_rotate_period
on transit key management (GH-903)wrap_ttl
(GH-782)generate_credentials
for STS endpoint (GH-934)Thanks to @BrandonHoffman, @Prividen, @WilkenSteiner, @aberenshtein, @adammike, @bendem, @briantist, @colin-pm, @dereckson, @dhuckins, @gmsantos, @jackcasey-visier, @localden, @nneul, @rhowe and @sebglon for their lovely contributions.