Introduces soft-delete for users within the client cache. (PR).
GCP dynamic host catalog: Add dynamic host catalog support for discovering GCP Compute Engine VM Instances. (PR).
The worker domain has been refactored to create clear domain functions for worker operations, improve readability and maintainability of worker queries, and improve DB performance. (PR).
Adds support for dual-stack networking for AWS operations. (PR)
The worker <-> controller communications have been refactored to improve performance and reliability at large scale. Workers older than v0.19.0 will remain supported until the release of v0.20.0, in accordance with our worker/controller compatiblity policy.
Add concurrency limit on the password hashing of all password auth methods. (PR).
This avoids bursty memory and CPU use during concurrent password auth method
authentication attempts. The number of concurrent hashing operations
can be set with the new concurrent_password_hash_workers configuration
value in the controller stanza, or the new
BOUNDARY_CONTROLLER_CONCURRENT_PASSWORD_HASH_WORKERS environment variable.
The default limit is 1.
ui: Improve worker filter workflow for targets, vault credential-stores, and storage-buckets. (PR).
children keyword not to apply the appropriate
permissions for a number of resources.
(PR).Fetched April 8, 2026