| For the latest stable version, please use Spring Vault 3.2.0! | 
New & Noteworthy
What’s new in Spring Vault 3.0
- 
Upgrade to Spring Framework 6 and Java 17 baseline 
- 
Upgrade to AWS SDK 2. 
What’s new in Spring Vault 2.4
- 
Support for Username/Password authentication for Username/Password, LDAP, Okta, and RADIUS authentication. 
- 
Support of versioned Key/Value secrets engines for Vault repositories. 
- 
Optimistic locking support through Vault repositories using versioned Key/Value secrets engines. 
What’s new in Spring Vault 2.3
- 
Support for PEM-encoded certificates for keystore and truststore usage. 
- 
ReactiveVaultEndpointProviderfor non-blocking lookup ofVaultEndpoint.
- 
VaultKeyValueMetadataOperationsfor Key-Value metadata interaction.
- 
Support for transformsecrets engine (Enterprise Feature).
- 
Documentation of how to use Vault secret backends. 
- 
Login credentials for Kubernetes and PCF authentication are reloaded for each login attempt. 
- 
SecretLeaseContainerpublishesSecretLeaseRotatedEventinstead ofSecretLeaseExpiredEventandSecretLeaseCreatedEventon successful secret rotation.
- 
AbstractVaultConfiguration.threadPoolTaskScheduler()bean type changed toTaskSchedulerWrapperinstead ofThreadPoolTaskScheduler.
- 
Since 2.3.2: GcpIamCredentialsAuthentication
What’s new in Spring Vault 2.2
- 
Support for Key-Value v2 (versioned secrets engine) secrets through @VaultPropertySource.
- 
SpEL support in @Secret.
- 
Add support for Jetty as reactive HttpClient. 
- 
LifecycleAwareSessionManagerandReactiveLifecycleAwareSessionManageremit nowAuthenticationEvents.
- 
Deprecation of AppIdAuthentication. UseAppRoleAuthenticationinstead as recommended by HashiCorp Vault.
- 
CubbyholeAuthenticationand wrappedAppRoleAuthenticationnow usesys/wrapping/unwrapendpoints by default.
- 
Kotlin Coroutines support for ReactiveVaultOperations.
What’s new in Spring Vault 2.1
- 
GCP Compute, GCP IAM, and Azure authentication. 
- 
Template API support for versioned and unversioned Key/Value secrets engines and for Vault wrapping operations. 
- 
Support full pull mode in reactive AppRole authentication. 
- 
Improved Exception hierarchy for Vault login failures. 
What’s new in Spring Vault 2.0
- 
Authentication steps DSL to compose authentication flows. 
- 
Reactive Vault client via ReactiveVaultOperations.
- 
Vault repository support based on Spring Data KeyValue. 
- 
Transit batch encrypt and decrypt support. 
- 
Policy management for policies stored as JSON. 
- 
Support CSR signing, certificate revocation and CRL retrieval. 
- 
RoleId/SecretId unwrapping for AppRole authentication. 
- 
Spring Security integration with transit secrets engine-based BytesKeyGeneratorandBytesEncryptor.
What’s new in Spring Vault 1.1.0
- 
AWS IAM authentication. 
- 
Configuration of encryption/decryption versions for transit keys. 
- 
Pull mode for AppRole authentication. 
- 
Transit batch encrypt and decrypt support. 
- 
TTL-based generic secret rotation.