v4.0.4

Summary

This release includes security fixes, bug fixes, and dependency updates for the Vault provider.

Highlights

• Security: Remediated multiple CVE vulnerabilities:

  • Updated google.golang.org/grpc to v1.83.2 (fixes GHSA-vp52-pcj8-j9qc, GHSA-2v4p-qf9q-27wj)
  • Updated golang.org/x/crypto to v0.56.0 (fixes GO-2026-6355, GO-2026-6354)

• Bug Fixes:

  • Fixed Terraform plugin framework provider wiring to client setup
  • Fixed external name configuration for vault_password_policy resource
  • Fixed provider configuration boolean fields (skip_child_token, skip_tls_verify, etc.) to be properly respected

• Enhancements:

  • Bumped terraform-provider-vault to v5.9.0-upjet.2 for improved batch token handling
  • Added example manifests for Policy.password managed resources