# Boundary changelog

> Identity-based access to hosts and services without distributing credentials.

- Vendor: HashiCorp
- Category: Developer Tools
- Official site: https://www.boundaryproject.io
- Tracked by: What's New (https://whatsnew.fyi/product/boundary)
- Harvested from: GitHub (hashicorp/boundary)
- Entries below: 10 (newest first)

What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog.

Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'.

## Releases

### v0.21.3

- Date: 2026-04-30
- Version: v0.21.3
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.21.3
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.21.3

- **added** — Added support for IBM Passport Advantage Online licensing to enable Boundary Enterprise
- **added** — Added support for new debug flag to expose pprof endpoints for debugging purposes
- **changed** — Updated internal dependencies
- **security** — Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm
- **security** — Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj

##### 0.21.3 (2026/04/28)

###### New and Improved

* Added support for IBM Passport Advantage Online licensing. You can now use PAO to enable Boundary Enterprise.
* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))
* Updated internal dependencies.

###### Security

* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))

### v0.19.5

- Date: 2026-04-30
- Version: v0.19.5
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.19.5
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.19.5

- **added** — Added support for new debug flag to expose pprof endpoints for debugging purposes
- **security** — Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm
- **security** — Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj

##### 0.19.5 (2026/04/24)

###### New and Improved
* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))

###### Security

* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))

### v0.20.3

- Date: 2026-04-30
- Version: v0.20.3
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.20.3
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.20.3

- **added** — Added support for new debug flag to expose pprof endpoints for debugging purposes
- **security** — Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm
- **security** — Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj

##### 0.20.3 (2026/04/24)

###### New and Improved 
* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))

###### Security

* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))

### v0.21.2

- Date: 2026-04-07
- Version: v0.21.2
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.21.2
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.21.2

- **added** — Added optional flags -sort-by and -sort-direction to boundary search command to control sorting when searching client cache for sessions or targets
- **added** — Client cache search API now supports sort_by and sort_direction query parameters when searching sessions or targets

##### 0.21.2 (2026/04/06)

###### New and Improved

* cli: Added optional flags `-sort-by` and `-sort-direction` to `boundary search`. These flags can be used to control sorting when searching the client cache and the resource is `sessions` or `targets`. ([PR](https://github.com/hashicorp/boundary/pull/6383))
* The client cache search API now supports the `sort_by` and `sort_direction` query parameters when searching `sessions` or `targets`. ([PR](https://github.com/hashicorp/boundary/pull/6383))

### v0.21.1

- Date: 2026-02-13
- Version: v0.21.1
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.21.1
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.21.1

- **security** — Go version bumped to 1.25.7 to address CVE-2025-61730
- **security** — Go Cryptography dependency updated to address CVE-2025-58181 and CVE-2025-47914

##### 0.21.1 (2026/02/10)

###### Security

* Go version bumped to 1.25.7 to address CVE-2025-61730 ([PR](https://github.com/hashicorp/boundary/pull/6409))
* Go Cryptography dependency update to address CVE-2025-58181 and CVE-2025-47914
  ([PR](https://github.com/hashicorp/boundary/pull/6272))

### v0.21.0

- Date: 2025-12-11
- Version: v0.21.0
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.21.0
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.21.0

- **changed** — Optimize loading of table filters and improve table search support in the UI
- **fixed** — Show username for OIDC auth method in user menu

##### 0.21.0 (2025/11/12)

###### New and Improved

* ui: Optimized loading of table filters and improved table search support ([PR](https://github.com/hashicorp/boundary-ui/pull/3053))

###### Bug fixes

* ui: Show username for OIDC auth method in user menu ([PR](https://github.com/hashicorp/boundary-ui/pull/2930))

### v0.20.1

- Date: 2025-11-03
- Version: v0.20.1
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.20.1
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.20.1

### v0.20.0

- Date: 2025-09-25
- Version: v0.20.0
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.20.0
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.20.0

### v0.19.3

- Date: 2025-07-10
- Version: v0.19.3
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.19.3
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.19.3

### v0.19.2

- Date: 2025-05-08
- Version: v0.19.2
- Original notes: https://github.com/hashicorp/boundary/releases/tag/v0.19.2
- Permalink: https://whatsnew.fyi/product/boundary/releases/v0.19.2

- **changed** — Populate subject for OIDC account name displays in the UI
- **changed** — Improve performance when initially fetching large sets of resources in the UI
- **changed** — Improve search and filtering behavior when using search field in the UI
- **fixed** — Fix an issue in the worker where closing an SSH channel failed to exit a loop, causing massive CPU usage spikes over time
- **fixed** — Fix an issue where the user could not change the key_type of a Vault SSH Certificate credential library in the UI

##### 0.19.2 (2025/04/28)

###### New and Improved

* ui: Populate subject for OIDC account name displays.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2757)).
* ui: Improved performance when initially fetching large sets of resources.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2752)).
* ui: Improved search & filtering behavior when using search field.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2735)).

###### Bug fixes

* Fixed an issue in the worker where closing an SSH channel failed to exit a
  loop, which would cause a massive spike in CPU usage over time. This change
  only affects Enterprise.
* ui: Fix an issue where the user could not change the key_type of a
  Vault SSH Certificate credential library.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2790)).