---
name: Boundary
slug: boundary
type: github
source_url: https://github.com/hashicorp/boundary
organization: HashiCorp
organization_slug: hashicorp
total_releases: 75
latest_version: v0.21.2
latest_date: 2026-04-07
last_updated: 2026-04-08
tracking_since: 2020-10-14
canonical: https://releases.sh/hashicorp/boundary
organization_url: https://releases.sh/hashicorp
---

<Release version="v0.21.2" date="April 7, 2026" published="2026-04-07T15:32:19.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.2">
## 0.21.2 (2026/04/06)

### New and Improved

* cli: Added optional flags `-sort-by` and `-sort-direction` to `boundary search`. These flags can be used to control sorting when searching the client cache and the resource is `sessions` or `targets`. ([PR](https://github.com/hashicorp/boundary/pull/6383))
* The client cache search API now supports the `sort_by` and `sort_direction` query parameters when searching `sessions` or `targets`. ([PR](https://github.com/hashicorp/boundary/pull/6383))


</Release>

<Release version="v0.21.1" date="February 13, 2026" published="2026-02-13T13:52:10.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.1">
## 0.21.1 (2026/02/10)

### Security

* Go version bumped to 1.25.7 to address CVE-2025-61730 ([PR](https://github.com/hashicorp/boundary/pull/6409))
* Go Cryptography dependency update to address CVE-2025-58181 and CVE-2025-47914
  ([PR](https://github.com/hashicorp/boundary/pull/6272))


</Release>

<Release version="v0.21.0" date="December 11, 2025" published="2025-12-11T17:18:44.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.21.0">
## 0.21.0 (2025/11/12)

### New and Improved

* ui: Optimized loading of table filters and improved table search support ([PR](https://github.com/hashicorp/boundary-ui/pull/3053))

### Bug fixes

* ui: Show username for OIDC auth method in user menu ([PR](https://github.com/hashicorp/boundary-ui/pull/2930))


</Release>

<Release version="v0.20.1" date="November 3, 2025" published="2025-11-03T18:46:15.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.20.1">
</Release>

<Release version="v0.20.0" date="September 25, 2025" published="2025-09-25T15:26:25.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.20.0">
</Release>

<Release version="v0.19.3" date="July 10, 2025" published="2025-07-10T13:03:54.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.3">
</Release>

<Release version="v0.19.2" date="May 8, 2025" published="2025-05-08T17:05:22.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.2">
## 0.19.2 (2025/04/28)

### New and Improved

* ui: Populate subject for OIDC account name displays.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2757)).
* ui: Improved performance when initially fetching large sets of resources.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2752)).
* ui: Improved search & filtering behavior when using search field.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2735)).

### Bug fixes

* Fixed an issue in the worker where closing an SSH channel failed to exit a
  loop, which would cause a massive spike in CPU usage over time. This change
  only affects Enterprise.
* ui: Fix an issue where the user could not change the key_type of a
  Vault SSH Certificate credential library.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2790)).


</Release>

<Release version="v0.19.1" date="March 4, 2025" published="2025-03-04T18:32:32.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.1">
</Release>

<Release version="v0.19.0" date="February 10, 2025" published="2025-02-10T20:09:25.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.19.0">
## 0.19.0 (2025/01/31)
### New and Improved

* Introduces soft-delete for users within the client cache.
  ([PR](https://github.com/hashicorp/boundary/pull/5173)).
* GCP dynamic host catalog: Add dynamic host catalog support for 
  discovering GCP Compute Engine VM Instances.
  ([PR](https://github.com/hashicorp/boundary/pull/5229)).
* The worker domain has been refactored to create clear domain functions for worker operations, improve readability and 
maintainability of worker queries, and improve DB performance. ([PR](https://github.com/hashicorp/boundary/pull/5338)).
* Adds support for dual-stack networking for AWS operations.
  ([PR](https://github.com/hashicorp/boundary-plugin-aws/pull/52)) 
  * **Note**: As a consequence of updating AWS SDK dependencies to enable
    dual-stack support, this Boundary release may consume more memory. From our
    testing, the increase seems to be around 1.6x, however this
    may vary depending on your deployment architecture.
* The worker <-> controller communications have been refactored to improve performance
  and reliability at large scale. Workers older than v0.19.0 will remain supported
  until the release of v0.20.0, in accordance with
  [our worker/controller compatiblity policy](https://developer.hashicorp.com/boundary/docs/enterprise/supported-versions#control-plane-and-worker-compatibility).
* Add concurrency limit on the password hashing of all password auth methods.
  ([PR](https://github.com/hashicorp/boundary-plugin-aws/pull/5437)).

  This avoids bursty memory and CPU use during concurrent password auth method
  authentication attempts. The number of concurrent hashing operations
  can be set with the new `concurrent_password_hash_workers` configuration
  value in the controller stanza, or the new
  `BOUNDARY_CONTROLLER_CONCURRENT_PASSWORD_HASH_WORKERS` environment variable.
  The default limit is 1.
* ui: Improve worker filter workflow for targets, vault credential-stores, and storage-buckets. ([PR](https://github.com/hashicorp/boundary-ui/pull/2614)).

### Bug fixes

* Fix bug in applying BOUNDARY_MAX_RETRIES for boundary cli. Previously
  setting this environment variable would result in a max retries of 2,
  regardless of the value set.
  ([PR](https://github.com/hashicorp/boundary/pull/5385)).
* Fix bug in parsing IPv6 addresses. Previously setting a target address or the
  initial upstream address in the config file would result in a malformed value.
  ([PR](https://github.com/hashicorp/boundary/pull/5221)).
* Fix an issue where, when starting a session, the connection limit always displays 0.
  ([PR](https://github.com/hashicorp/boundary/pull/5396)).
* Fix bug which caused the `children` keyword not to apply the appropriate
  permissions for a number of resources.
    ([PR](https://github.com/hashicorp/boundary/pull/5418)).


</Release>

<Release version="v0.18.2" date="December 12, 2024" published="2024-12-12T19:06:20.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.18.2">
</Release>

<Release version="v0.18.1" date="November 21, 2024" published="2024-11-21T23:22:25.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.18.1">
## 0.18.1 (2024/11/21)
### New and Improved

* Delete terminated sessions in batches to avoid long running jobs.
  ([PR](https://github.com/hashicorp/boundary/pull/5201))

### Bug fixes

* Fix an issue where users would lose access to managed groups if
  there are more than 10,000 managed groups in the auth method used.
  ([PR](https://github.com/hashicorp/boundary/pull/5242))
* Fix an issue where only the first 10,000 members of a managed group
  are returned when getting the managed group, and a similar issue where
  only the first 10,000 managed groups an account is part of is included
  when getting the account.
  ([PR](https://github.com/hashicorp/boundary/pull/5245))


</Release>

<Release version="v0.18.0" date="October 14, 2024" published="2024-10-14T19:35:32.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.18.0">
## 0.18.0 (2024/10/01)
### New and Improved

* Add support for dynamic host catalog plugins running in Boundary workers:
  Boundary plugins that handle dynamic host catalog operations (such as the
  [AWS](https://github.com/hashicorp/boundary-plugin-aws/tree/main/plugin/service/host)
  and [Azure](https://github.com/hashicorp/boundary-plugin-azure) plugins) can
  now run on workers. ([PR](https://github.com/hashicorp/boundary/pull/5137))

* Dynamic host catalogs worker filter support (Enterprise and HCP Boundary
  only): Operators can now set a worker filter when creating a dynamic host
  catalog. When set, all of the plugin requests will be sent to the matching
  worker for processing. ([PR](https://github.com/hashicorp/boundary/pull/5137))

* AWS dynamic host catalogs `AssumeRole` authentication support: Operators can
  now set-up AWS dynamic host catalogs using Amazon's `AssumeRole`
  authentication paradigm by providing a valid Role ARN when creating the host
  catalog. ([PR](https://github.com/hashicorp/boundary/pull/5137) and
  [PR](https://github.com/hashicorp/boundary-plugin-aws/pull/49))

* Improved MinIO storage plugin compatibility with other services by dropping
  the checksum headers in `PutObject`.
  ([PR](https://github.com/hashicorp/boundary-plugin-minio/pull/23))

* ui: Add UI support for searching and pagination of aliases.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2498))

* ui: Add UI support for filtering and pagination of session recordings.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2502))

* ui: Improve multi-scope grants select/deselect process.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2435))

### Bug Fixes

* Prevented a data-race in Boundary's event logging system.
  ([PR](https://github.com/hashicorp/boundary/pull/5139))

* Update Storage Bucket type icon in Target view.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2503))

* Allow user to retry with authentication is pending with OIDC.
  ([PR](https://github.com/hashicorp/boundary-ui/pull/2512))

### Deprecations/Changes

* Remove deprecated `controllers` field from the worker config, which was deprecated in 0.9.0 for
`initial_upstreams`([PR](https://github.com/hashicorp/boundary/pull/5125))


</Release>

<Release version="v0.17.2" date="October 14, 2024" published="2024-10-14T14:03:27.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.17.2">
## 0.17.2 (2024/09/25)

### Changes

* The Go API properly uses the passed in value for `WithRecursive` and
  `WithSkipCurlOutput` instead of always setting to true regardless of the
  passed-in value. ([PR](https://github.com/hashicorp/boundary/pull/5066))


</Release>

<Release version="v0.16.3" date="August 22, 2024" published="2024-08-22T23:36:27.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.16.3">
</Release>

<Release version="v0.17.1" date="August 22, 2024" published="2024-08-22T20:50:11.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.17.1">
</Release>

<Release version="v0.17.0" date="July 31, 2024" published="2024-07-31T20:12:12.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.17.0">
## 0.17.0 (2024/07/17)


</Release>

<Release version="v0.15.5" date="July 31, 2024" published="2024-07-31T16:37:47.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.15.5">
</Release>

<Release version="v0.16.2" date="June 18, 2024" published="2024-06-18T15:44:07.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.16.2">
## 0.16.2 (2024/06/10)

### New and Improved

* Updated Minio plugin to allow for potential use with other S3-compatible storage providers.
([PR](https://github.com/hashicorp/boundary-plugin-minio/pull/16)) and ([PR](https://github.com/hashicorp/boundary-plugin-minio/pull/17))

### Bug Fixes
* Fixed a bug where a worker credential rotation request suceeded on the controller but the response to the worker was lost.
This resulted in the controller using a separate set of credentials than the worker, causing the worker to be unable to connect 
to the controller. The fix implements the new nodeenrollment library NodeIdLoader interface, which ensures that on store, 
if worker NodeInformation has a previous key set, the worker will check and correct its stored credential set to match. 
LodeNodeInformation was also updated to fix a bug where in this split credential scenario, the current credential key was
assumed to be the incoming worker key, which caused the wrong key information to be populated for the key id.
([PR](https://github.com/hashicorp/boundary/pull/4870))


</Release>

<Release version="v0.16.1" date="May 30, 2024" published="2024-05-30T18:32:53.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.16.1">
</Release>

<Release version="v0.16.0" date="April 30, 2024" published="2024-04-30T17:15:47.000Z" url="https://github.com/hashicorp/boundary/releases/tag/v0.16.0">
## 0.16.0 (2024/04/15)

### New and Improved

* Target aliases have been added: You can now create an alias for a target.
  In most situations where you would use a target id, you can now instead use
  the alias value. Crate an alias with 
  `boundary aliases create target -value example.boundary -destination-id ttcp_1234567890`
  and connect to a target using an alias using `boundary connect example.boundary`
 * Worker local storage state: Self managed workers that are configured to be used for
  session recordings will report the state of the its disk space. To learn more about this
  new feature, refer to the [documentation](http://developer.hashicorp.com/boundary/docs/configuration/session-recording/create-storage-bucket#local-storage).
* MinIO storage plugin: You can now create a storage bucket that allows Boundary to interoperate
  with a MinIO cluster for Session Recording storage. This includes some added functionality such
  as credential rotation and credential management. To learn more about the plugin, refer to the [readme](https://github.com/hashicorp/boundary-plugin-minio?tab=readme-ov-file#minio-plugin-for-hashicorp-boundary). *Note:* Due to a library incompatibility, this release is not yet compatible with the `netbsd` operating system. Please refer to the following [documentation](http://developer.hashicorp.com/boundary/docs/configuration/session-recording/create-storage-bucket) to learn how to create a storage bucket.
* ui: Add UI support for filtering and pagination ([PR](https://github.com/hashicorp/boundary-ui/pull/2237))
* ui: Add UI support for MinIO (Enterprise and HCP Boundary only) ([PR](https://github.com/hashicorp/boundary-ui/pull/2248))

### Added dependency

* postgres `citext` dependency added to enable aliases to be globally unique in
  a case insensitive way.


</Release>

<Pagination page="1" total-pages="4" total-items="75" next="https://releases.sh/hashicorp/boundary.md?page=2" />