May 2026 monthly summary for hashicorp/vault-secrets-operator: Focused on release readiness and container security hardening for Release 1.4.0. By suppressing known container CVEs in the security scan and updating the changelog, the team reduced release risk and maintained compliance while delivering targeted security improvements.

April 2026 highlights: Delivered vault-related capabilities across two repositories, elevating credential hygiene, secret rotation, platform readiness, and governance. In opentofu/terraform-provider-vault, implemented Azure Static Secrets import with a minimum credential TTL of one month and a defer_initial_creds option, and added an OS Secrets Engine with SSH-based credential rotation, new backend/host/account resources, and automated rotation (commit references included below). In hashicorp/vault-secrets-operator, upgraded kube-rbac-proxy for OpenShift with configurability and tests, added governance by updating CODEOWNERS, fixed TTL rollover rotation bugs in the dynamic secret controller, and enhanced release readiness and Kubernetes compatibility for the operator release. These efforts reduce credential risk, accelerate secure deployments, improve platform operability, and strengthen cross-team collaboration.

March 2026 monthly summary for opentofu/terraform-provider-vault: Delivered Google Cloud KMS support for managed keys, enhanced test coverage, updated documentation, and strengthened credential validation to expand secure KMS usage across cloud providers.

February 2026: Release readiness for opentofu/terraform-provider-vault 5.7.0 focusing on networking and database connectivity improvements. Bumped provider version to 1.25.7 and prepared for release (commit 0a2bf0516e89f92cf8509068c26b50b771b41f5b; PR #2764). Major bugs fixed: none reported. This work enhances reliability and upgrade readiness for Vault integrations and enables smoother adoption of 5.7.0.

Month: 2026-01. This period focused on strengthening security and reliability of the Terraform Vault provider by hardening multiple backends, enabling ephemeral credentials, and adding robust SAML authentication controls. These changes reduce the risk of sensitive data exposure in Terraform state, improve credential rotation, and enhance compliance posture for Kubernetes, LDAP, and GCP backends, while maintaining compatibility with existing configurations.

December 2025 — Delivered two major feature bets in opentofu/terraform-provider-vault with a focus on security, configurability, and developer experience. Implemented self-managed workflows for rootless static roles in the Oracle Secret Engine, enabling credential management without root access, including new configuration options, validation logic, deprecation of older methods, and updated usage documentation. Added networking, encryption, and replication configuration for the GCP secret-sync destination to enhance security controls and performance. These efforts included concise migration guidance and documentation updates to reduce onboarding friction and support smooth adoption.

Concise monthly summary for 2025-10 focusing on the opentofu/terraform-provider-vault work. Delivered feature enabling finer AWS STS header control and updated provider artifacts; no major bugs fixed this month for this repo.