v2.0.0

This release makes a number of breaking changes. Most notably, dropping support for Python 3.6 & 3.7, dropping support for Vault versions 1.6.x through 1.10.x, and removing previously deprecated methods and code paths. Most of the other breaking changes are fairly minor or only affect specific use cases, but please review all changes carefully.

There are also several other deprecations and announcements to be aware of. We hope to have a more rapid release schedule going forward.

In accordance with our supported Python version policy we will continue to drop Python versions as they become end-of-life. These may not be announced in advance, but will be done in major versions.

💥 Breaking Changes

• Client.write method breaking changes 2.0.0 (GH-1089)
• Drop support for Vault 1.6-1.10 (GH-1074)
• Changing default values for sys.initialize parameters secret_shares and secret_threshold (GH-1063)
• Remove old deprecated client attributes (GH-1062)
• Remove MFA class (GH-1056)
• adapters: if session is user-supplied, do not overwrite session options with Client/Adapter options (GH-1021)
• Make pyhcl optional again (GH-1060)
• Drop Python 3.6 & 3.7, Add Python 3.11, bump some dependencies (GH-1048)

📢 Deprecations / Announcements

• Breaking changes coming to Adapters’ use of custom sessions (GH-1040)
• Breaking changes coming to Client.write method (GH-1034)
• The default value of raise_on_deleted_version will change from True to False in v3.0.0 (GH-955)
• The certificate parameter for create_ca_certificate_role will stop accepting file paths in v3.0.0 (GH-914)
• Drop support for Vault 1.6-1.10 (GH-1074)
• Changing default values for sys.initialize parameters secret_shares and secret_threshold (GH-1063)
• Fix typo in safety_buffer argument in AWS auth (GH-1068)

🚀 Features

• Add support for Python 3.12 (GH-1073)
• Database Secrets Engine – add rotate_static_credentials method, docs updates, unit tests (GH-1069)
• Make plaintext and ciphertext optional for batch operations (GH-1049)

🐛 Bug Fixes

• Changing default values for sys.initialize parameters secret_shares and secret_threshold (GH-1063)
• adapters: if session is user-supplied, do not overwrite session options with Client/Adapter options (GH-1021)

📚 Documentation

• update docstring for sys step-down (GH-1086)
• Database Secrets Engine – add rotate_static_credentials method, docs updates, unit tests (GH-1069)
• Fix invalid build and test status (GH-1072)

🧰 Miscellaneous

• add .git-blame-ignore-revs (GH-1087)
• Fix typos, add typos linter to CI (GH-1057)
• drop python-jwt dev dependency (GH-1084)

Thanks to @Tylerlhess, @amiewei, @briantist, @cibinmathew and @dosisod for their lovely contributions.

Check it out on GitHub!