vault

Update docker.io/hashicorp/vault Docker tag to v1.20.4

Michi Kofler-Häusler

25 Sep 2025 — 1 min read

This MR contains the following updates:

Package	Update	Change
docker.io/hashicorp/vault	patch	`1.20.3` -> `1.20.4`

Release Notes

hashicorp/vault (docker.io/hashicorp/vault)

`v1.20.4`

Compare Source

September 24, 2025

SECURITY:

core: Update github.com/ulikunitz/xz to fix security vulnerability GHSA-25xm-hr59-7c27. (ce4b4264)

CHANGES:

database/snowflake: Update plugin to v0.14.2 (9f06df77)

IMPROVEMENTS:

Raft: Auto-join will now allow you to enforce IPv4 on networks that allow IPv6 and dual-stack enablement, which is on by default in certain regions. (1fd38796)
auth/cert: Support RFC 9440 colon-wrapped Base64 certificates in x_forwarded_for_client_cert_header, to fix TLS certificate auth errors with Google Cloud Application Load Balancer. [GH-31501]
secrets/database (enterprise): Add support for reading, listing, and recovering static roles from a loaded snapshot. Also add support for reading static credentials from a loaded snapshot. (24cd1aa5)
secrets/ssh: Add support for recovering the SSH plugin CA from a loaded snapshot (enterprise only). (0087af9d)

BUG FIXES:

auth/cert: Recover from partially populated caches of trusted certificates if one or more certificates fails to load. [GH-31438]
core: Role based quotas now work for cert auth (fc775dea)
sys/mounts: enable unsetting allowed_response_headers [GH-31555]
ui: Fix page loading error when users navigate away from identity entities and groups list views. (81170963)

Update docker.io/b4bz/homer Docker tag to v25.10.1

No problems automatically updating the Docker image and run the container by Watchtower for website Bierochs with dependency update facilitated by Mend's Renovate Bot. v25.10.1

Update docker.io/portainer/portainer-ce Docker tag to v2.35.0

No problems deploying to Proxmox VE K3s Kubernetes cluster via Helm Chart and Flux V2 reconciliation in a GitOps approach with dependency update facilitated by Mend's Renovate Bot. Also the corresponding agents were automatically rolled out via Watchtower infrastructure on the Docker-only nodes including arm node with dependency

Update docker.io/hashicorp/vault Docker tag to v1.21.0

No problems upgrading the Hashicorp Vault Docker container with a Docker compose yaml file within Portainer and by means of Portainer DevOps resp. GitOps with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/hashicorp/vault minor 1.20.

Update docker.io/ghost Docker tag to v6.5.1

On both domains I upgraded Ghost successfully by means of Watchtower Docker container update with dependency update facilitated by Mend's Renovate Bot. This MR contains the following updates: Package Update Change docker.io/ghost minor 6.4.0 -> 6.5.1 Release Notes TryGhost/Ghost (docker.