---
name: Boundary
slug: boundary-releases
type: github
source_url: https://github.com/hashicorp/boundary
organization: HashiCorp
organization_slug: hashicorp
total_releases: 78
latest_version: v0.21.3
latest_date: 2026-04-30
last_updated: 2026-05-08
tracking_since: 2020-10-14
canonical: https://releases.sh/hashicorp/boundary-releases
organization_url: https://releases.sh/hashicorp
---

<Release version="v0.21.3" date="April 30, 2026" published="2026-04-30T15:23:16.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.3">
## 0.21.3 (2026/04/28)

### New and Improved

* Added support for IBM Passport Advantage Online licensing. You can now use PAO to enable Boundary Enterprise.
* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))
* Updated internal dependencies.

### Security

* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))


</Release>

<Release version="v0.19.5" date="April 30, 2026" published="2026-04-30T15:21:42.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.5">
## 0.19.5 (2026/04/24)

### New and Improved
* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))

### Security

* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))


</Release>

<Release version="v0.20.3" date="April 30, 2026" published="2026-04-30T15:09:29.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.20.3">
## 0.20.3 (2026/04/24)

### New and Improved 
* Added support for new `debug` flag to expose pprof endpoints for debugging purposes. ([PR](https://github.com/hashicorp/boundary/pull/6644))

### Security

* Updated jackc/pgx/v5 dependency to v5.9.2 to address GHSA-j88v-2chj-qfwx, GO-2026-4771, GO-2026-4772, and GHSA-9jj7-4m8r-rfcm ([PR](https://github.com/hashicorp/boundary/pull/6607), [PR](https://github.com/hashicorp/boundary/pull/6617))
* Updated Azure/go-ntlmssp dependency to v0.1.1 to address GHSA-pjcq-xvwq-hhpj ([PR](https://github.com/hashicorp/boundary/pull/6625))


</Release>

<Release version="v0.21.2" date="April 7, 2026" published="2026-04-07T15:32:19.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.2">
## 0.21.2 (2026/04/06)

### New and Improved

* cli: Added optional flags `-sort-by` and `-sort-direction` to `boundary search`. These flags can be used to control sorting when searching the client cache and the resource is `sessions` or `targets`. ([PR](https://github.com/hashicorp/boundary/pull/6383))
* The client cache search API now supports the `sort_by` and `sort_direction` query parameters when searching `sessions` or `targets`. ([PR](https://github.com/hashicorp/boundary/pull/6383))


</Release>

<Release version="v0.21.1" date="February 13, 2026" published="2026-02-13T13:52:10.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.1">
## 0.21.1 (2026/02/10)

### Security

* Go version bumped to 1.25.7 to address CVE-2025-61730 ([PR](https://github.com/hashicorp/boundary/pull/6409))
* Go Cryptography dependency update to address CVE-2025-58181 and CVE-2025-47914
  ([PR](https://github.com/hashicorp/boundary/pull/6272))


</Release>

<Release version="v0.21.0" date="December 11, 2025" published="2025-12-11T17:18:44.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.0">
## 0.21.0 (2025/11/12)

### New and Improved

* ui: Optimized loading of table filters and improved table search support ([PR](https://github.com/hashicorp/boundary-ui/pull/3053))

### Bug fixes

* ui: Show username for OIDC auth method in user menu ([PR](https://github.com/hashicorp/boundary-ui/pull/2930))


</Release>

<Release version="v0.20.1" date="November 3, 2025" published="2025-11-03T18:46:15.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.20.1">
</Release>

<Release version="v0.20.0" date="September 25, 2025" published="2025-09-25T15:26:25.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.20.0">
</Release>

<Release version="v0.19.3" date="July 10, 2025" published="2025-07-10T13:03:54.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.3">
</Release>

<Release version="v0.19.2" date="May 8, 2025" published="2025-05-08T17:05:22.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.2">
## 0.19.2 (2025/04/28)

### New and Improved

* ui: Populate subject for OIDC account name displays.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2757)).
* ui: Improved performance when initially fetching large sets of resources.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2752)).
* ui: Improved search & filtering behavior when using search field.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2735)).

### Bug fixes

* Fixed an issue in the worker where closing an SSH channel failed to exit a
  loop, which would cause a massive spike in CPU usage over time. This change
  only affects Enterprise.
* ui: Fix an issue where the user could not change the key_type of a
  Vault SSH Certificate credential library.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2790)).


</Release>

<Release version="v0.19.1" date="March 4, 2025" published="2025-03-04T18:32:32.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.1">
</Release>

<Release version="v0.19.0" date="February 10, 2025" published="2025-02-10T20:09:25.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.0">
## 0.19.0 (2025/01/31)
### New and Improved

* Introduces soft-delete for users within the client cache.
  ([PR](https://github.com/hashicorp/boundary/pull/5173)).
* GCP dynamic host catalog: Add dynamic host catalog support for 
  discovering GCP Compute Engine VM Instances.
  ([PR](https://github.com/hashicorp/boundary/pull/5229)).
* The worker domain has been refactored to create clear domain functions for worker operations, improve readability and 
maintainability of worker queries, and improve DB performance. ([PR](https://github.com/hashicorp/boundary/pull/5338)).
* Adds support for dual-stack networking for AWS operations.
  ([PR](https://github.com/hashicorp/boundary-plugin-aws/pull/52)) 
  * **Note**: As a consequence of updating AWS SDK dependencies to enable
    dual-stack support, this Boundary release may consume more memory. From our
    testing, the increase seems to be around 1.6x, however this
    may vary depending on your deployment architecture.
* The worker <-> controller communications have been refactored to improve performance
  and reliability at large scale. Workers older than v0.19.0 will remain supported
  until the release of v0.20.0, in accordance with
  [our worker/controller compatiblity policy](https://developer.hashicorp.com/boundary/docs/enterprise/supported-versions#control-plane-and-worker-compatibility).
* Add concurrency limit on the password hashing of all password auth methods.
  ([PR](https://github.com/hashicorp/boundary-plugin-aws/pull/5437)).

  This avoids bursty memory and CPU use during concurrent password auth method
  authentication attempts. The number of concurrent hashing operations
  can be set with the new `concurrent_password_hash_workers` configuration
  value in the controller stanza, or the new
  `BOUNDARY_CONTROLLER_CONCURRENT_PASSWORD_HASH_WORKERS` environment variable.
  The default limit is 1.
* ui: Improve worker filter workflow for targets, vault credential-stores, and storage-buckets. ([PR](https://github.com/hashicorp/boundary-ui/pull/2614)).

### Bug fixes

* Fix bug in applying BOUNDARY_MAX_RETRIES for boundary cli. Previously
  setting this environment variable would result in a max retries of 2,
  regardless of the value set.
  ([PR](https://github.com/hashicorp/boundary/pull/5385)).
* Fix bug in parsing IPv6 addresses. Previously setting a target address or the
  initial upstream address in the config file would result in a malformed value.
  ([PR](https://github.com/hashicorp/boundary/pull/5221)).
* Fix an issue where, when starting a session, the connection limit always displays 0.
  ([PR](https://github.com/hashicorp/boundary/pull/5396)).
* Fix bug which caused the `children` keyword not to apply the appropriate
  permissions for a number of resources.
    ([PR](https://github.com/hashicorp/boundary/pull/5418)).


</Release>

<Release version="v0.18.2" date="December 12, 2024" published="2024-12-12T19:06:20.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.18.2">
</Release>

<Release version="v0.18.1" date="November 21, 2024" published="2024-11-21T23:22:25.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.18.1">
## 0.18.1 (2024/11/21)
### New and Improved

* Delete terminated sessions in batches to avoid long running jobs.
  ([PR](https://github.com/hashicorp/boundary/pull/5201))

### Bug fixes

* Fix an issue where users would lose access to managed groups if
  there are more than 10,000 managed groups in the auth method used.
  ([PR](https://github.com/hashicorp/boundary/pull/5242))
* Fix an issue where only the first 10,000 members of a managed group
  are returned when getting the managed group, and a similar issue where
  only the first 10,000 managed groups an account is part of is included
  when getting the account.
  ([PR](https://github.com/hashicorp/boundary/pull/5245))


</Release>

<Release version="v0.18.0" date="October 14, 2024" published="2024-10-14T19:35:32.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.18.0">
## 0.18.0 (2024/10/01)
### New and Improved

* Add support for dynamic host catalog plugins running in Boundary workers:
  Boundary plugins that handle dynamic host catalog operations (such as the
  [AWS](https://github.com/hashicorp/boundary-plugin-aws/tree/main/plugin/service/host)
  and [Azure](https://github.com/hashicorp/boundary-plugin-azure) plugins) can
  now run on workers. ([PR](https://github.com/hashicorp/boundary/pull/5137))

* Dynamic host catalogs worker filter support (Enterprise and HCP Boundary
  only): Operators can now set a worker filter when creating a dynamic host
  catalog. When set, all of the plugin requests will be sent to the matching
  worker for processing. ([PR](https://github.com/hashicorp/boundary/pull/5137))

* AWS dynamic host catalogs `AssumeRole` authentication support: Operators can
  now set-up AWS dynamic host catalogs using Amazon's `AssumeRole`
  authentication paradigm by providing a valid Role ARN when creating the host
  catalog. ([PR](https://github.com/hashicorp/boundary/pull/5137) and
  [PR](https://github.com/hashicorp/boundary-plugin-aws/pull/49))

* Improved MinIO storage plugin compatibility with other services by dropping
  the checksum headers in `PutObject`.
  ([PR](https://github.com/hashicorp/boundary-plugin-minio/pull/23))

* ui: Add UI support for searching and pagination of aliases.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2498))

* ui: Add UI support for filtering and pagination of session recordings.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2502))

* ui: Improve multi-scope grants select/deselect process.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2435))

### Bug Fixes

* Prevented a data-race in Boundary's event logging system.
  ([PR](https://github.com/hashicorp/boundary/pull/5139))

* Update Storage Bucket type icon in Target view.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2503))

* Allow user to retry with authentication is pending with OIDC.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2512))

### Deprecations/Changes

* Remove deprecated `controllers` field from the worker config, which was deprecated in 0.9.0 for
`initial_upstreams`([PR](https://github.com/hashicorp/boundary/pull/5125))


</Release>

<Release version="v0.17.2" date="October 14, 2024" published="2024-10-14T14:03:27.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.17.2">
## 0.17.2 (2024/09/25)

### Changes

* The Go API properly uses the passed in value for `WithRecursive` and
  `WithSkipCurlOutput` instead of always setting to true regardless of the
  passed-in value. ([PR](https://github.com/hashicorp/boundary/pull/5066))


</Release>

<Release version="v0.16.3" date="August 22, 2024" published="2024-08-22T23:36:27.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.16.3">
</Release>

<Release version="v0.17.1" date="August 22, 2024" published="2024-08-22T20:50:11.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.17.1">
</Release>

<Release version="v0.17.0" date="July 31, 2024" published="2024-07-31T20:12:12.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.17.0">
## 0.17.0 (2024/07/17)


</Release>

<Release version="v0.15.5" date="July 31, 2024" published="2024-07-31T16:37:47.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.15.5">
</Release>

<Pagination cursor="2024-07-31T16:37:47.000Z|2026-04-08T00:01:12.696Z|rel_VvEaLUP73qCTr0IbnfObb" next="https://releases.sh/hashicorp/boundary-releases.md?cursor=2024-07-31T16%3A37%3A47.000Z%7C2026-04-08T00%3A01%3A12.696Z%7Crel_VvEaLUP73qCTr0IbnfObb&limit=20" />