0.21.3 (2026/04/28)

New and Improved

• Added support for IBM Passport Advantage Online licensing. You can now use PAO to enable Boundary Enterprise.
• Added support for new debug flag to expose pprof endpoints for debugging purposes. (PR)
• Updated internal dependencies.

Security

• Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm (PR, PR)
• Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj (PR)

0.20.3 (2026/04/24)

New and Improved

• Added support for new debug flag to expose pprof endpoints for debugging purposes. (PR)

Security

• Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm (PR, PR)
• Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj (PR)

0.19.5 (2026/04/24)

New and Improved

• Added support for new debug flag to expose pprof endpoints for debugging purposes. (PR)

Security

• Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm (PR, PR)
• Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj (PR)

0.21.2 (2026/04/06)

New and Improved

• cli: Added optional flags -sort-by and -sort-direction to boundary search. These flags can be used to control sorting when searching the client cache and the resource is sessions or targets. (PR)
• The client cache search API now supports the sort_by and sort_direction query parameters when searching sessions or targets. (PR)

0.21.1 (2026/02/10)

Security

• Go version bumped to 1.25.7 to address CVE-2025-61730 (PR)
• Go Cryptography dependency update to address CVE-2025-58181 and CVE-2025-47914
  (PR)

0.21.0 (2025/11/12)

New and Improved

• ui: Optimized loading of table filters and improved table search support (PR)

Bug fixes

• ui: Show username for OIDC auth method in user menu (PR)

0.19.2 (2025/04/28)

New and Improved

• ui: Populate subject for OIDC account name displays.
  (PR).
• ui: Improved performance when initially fetching large sets of resources.
  (PR).
• ui: Improved search & filtering behavior when using search field.
  (PR).

Bug fixes

• Fixed an issue in the worker where closing an SSH channel failed to exit a
  loop, which would cause a massive spike in CPU usage over time. This change
  only affects Enterprise.
• ui: Fix an issue where the user could not change the key_type of a
  Vault SSH Certificate credential library.
  (PR).