Mirror v1.14.6
diff --git a/v1.14.6/changelog/10072.txt b/v1.14.6/changelog/10072.txt
new file mode 100644
index 0000000..c6c8b8f
--- /dev/null
+++ b/v1.14.6/changelog/10072.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+http: change max_request_size to be unlimited when the config value is less than 0
+```
diff --git a/v1.14.6/changelog/10077.txt b/v1.14.6/changelog/10077.txt
new file mode 100644
index 0000000..09b6cd5
--- /dev/null
+++ b/v1.14.6/changelog/10077.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix client.Clone() to include the address
+```
diff --git a/v1.14.6/changelog/10085.txt b/v1.14.6/changelog/10085.txt
new file mode 100644
index 0000000..6688b0f
--- /dev/null
+++ b/v1.14.6/changelog/10085.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: merge associated entity groups when merging entities
+```
diff --git a/v1.14.6/changelog/10101.txt b/v1.14.6/changelog/10101.txt
new file mode 100644
index 0000000..6f831c8
--- /dev/null
+++ b/v1.14.6/changelog/10101.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: dedup from_entity_ids when merging two entities
+```
diff --git a/v1.14.6/changelog/10131.txt b/v1.14.6/changelog/10131.txt
new file mode 100644
index 0000000..71d64df
--- /dev/null
+++ b/v1.14.6/changelog/10131.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Aerospike Storage Backend**: Add support for using Aerospike as a storage backend
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10181.txt b/v1.14.6/changelog/10181.txt
new file mode 100644
index 0000000..ccff6b8
--- /dev/null
+++ b/v1.14.6/changelog/10181.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/dynamodb: Handle throttled batch write requests by retrying, without which writes could be lost.
+```
diff --git a/v1.14.6/changelog/10231.txt b/v1.14.6/changelog/10231.txt
new file mode 100644
index 0000000..c0158e4
--- /dev/null
+++ b/v1.14.6/changelog/10231.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Agent can now run as a Windows service.
+```
diff --git a/v1.14.6/changelog/10249.txt b/v1.14.6/changelog/10249.txt
new file mode 100644
index 0000000..7be43db
--- /dev/null
+++ b/v1.14.6/changelog/10249.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow URI SAN templates in allowed_uri_sans when allowed_uri_sans_template is set to true.
+```
diff --git a/v1.14.6/changelog/10299.txt b/v1.14.6/changelog/10299.txt
new file mode 100644
index 0000000..db135b6
--- /dev/null
+++ b/v1.14.6/changelog/10299.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add algorithm-signer as a SSH Secrets Engine UI field
+```
diff --git a/v1.14.6/changelog/10365.txt b/v1.14.6/changelog/10365.txt
new file mode 100644
index 0000000..b197af5
--- /dev/null
+++ b/v1.14.6/changelog/10365.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/metrics: Added "vault operator usage" command.
+```
diff --git a/v1.14.6/changelog/10375.txt b/v1.14.6/changelog/10375.txt
new file mode 100644
index 0000000..a693af8
--- /dev/null
+++ b/v1.14.6/changelog/10375.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/metrics: New telemetry metrics reporting lease expirations by time interval and namespace 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10384.txt b/v1.14.6/changelog/10384.txt
new file mode 100644
index 0000000..0440049
--- /dev/null
+++ b/v1.14.6/changelog/10384.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database/influxdb: Fix issue where not all errors from InfluxDB were being handled
+```
diff --git a/v1.14.6/changelog/10386.txt b/v1.14.6/changelog/10386.txt
new file mode 100644
index 0000000..54c2a7b
--- /dev/null
+++ b/v1.14.6/changelog/10386.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: allow for null string to be used for optional parameters in encrypt and decrypt
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10416.txt b/v1.14.6/changelog/10416.txt
new file mode 100644
index 0000000..ac93a70
--- /dev/null
+++ b/v1.14.6/changelog/10416.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database: Sanitize `private_key` field when reading database plugin config
+```
diff --git a/v1.14.6/changelog/10417.txt b/v1.14.6/changelog/10417.txt
new file mode 100644
index 0000000..7ff4c3c
--- /dev/null
+++ b/v1.14.6/changelog/10417.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+ui: Fix bug in Transform secret engine when a new role is added and then removed from a transformation
+```
+
diff --git a/v1.14.6/changelog/10424.txt b/v1.14.6/changelog/10424.txt
new file mode 100644
index 0000000..df4d9cf
--- /dev/null
+++ b/v1.14.6/changelog/10424.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+license: Fix license caching issue that prevents new licenses to get picked up by the license manager
+```
diff --git a/v1.14.6/changelog/10433.txt b/v1.14.6/changelog/10433.txt
new file mode 100644
index 0000000..37f5f84
--- /dev/null
+++ b/v1.14.6/changelog/10433.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+secrets/database/mysql: Fixes issue where the DisplayName within generated usernames was the incorrect length
+```
+
diff --git a/v1.14.6/changelog/10444.txt b/v1.14.6/changelog/10444.txt
new file mode 100644
index 0000000..b9212a0
--- /dev/null
+++ b/v1.14.6/changelog/10444.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+api: Fixes CORS API methods that were outdated and invalid
+```
+
diff --git a/v1.14.6/changelog/10456.txt b/v1.14.6/changelog/10456.txt
new file mode 100644
index 0000000..ea1d241
--- /dev/null
+++ b/v1.14.6/changelog/10456.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Avoid deadlocks by ensuring that if grabLockOrStop returns stopped=true, the lock will not be held.
+```
diff --git a/v1.14.6/changelog/10467.txt b/v1.14.6/changelog/10467.txt
new file mode 100644
index 0000000..411bbf7
--- /dev/null
+++ b/v1.14.6/changelog/10467.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/cassandra: tuning parameters for clustered environments `connection_timeout`, `initial_connection_timeout`, `simple_retry_policy_retries`.
+```
diff --git a/v1.14.6/changelog/10487.txt b/v1.14.6/changelog/10487.txt
new file mode 100644
index 0000000..266b2f7
--- /dev/null
+++ b/v1.14.6/changelog/10487.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Limit entropy augmentation during token generation to root tokens.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10489.txt b/v1.14.6/changelog/10489.txt
new file mode 100644
index 0000000..c86cb8a
--- /dev/null
+++ b/v1.14.6/changelog/10489.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Added active since timestamp to the status output of active nodes.
+```
diff --git a/v1.14.6/changelog/10490.txt b/v1.14.6/changelog/10490.txt
new file mode 100644
index 0000000..81aadcd
--- /dev/null
+++ b/v1.14.6/changelog/10490.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api/sys/config/ui: Fixes issue where multiple UI custom header values are ignored and only the first given value is used
+```
diff --git a/v1.14.6/changelog/10491.txt b/v1.14.6/changelog/10491.txt
new file mode 100644
index 0000000..14b33bf
--- /dev/null
+++ b/v1.14.6/changelog/10491.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix footer URL linking to the correct version changelog.
+```
diff --git a/v1.14.6/changelog/10498.txt b/v1.14.6/changelog/10498.txt
new file mode 100644
index 0000000..15cd8a8
--- /dev/null
+++ b/v1.14.6/changelog/10498.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: Make all APIs that report init status consistent, and make them report
+initialized=true when a Raft join is in progress.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10505.txt b/v1.14.6/changelog/10505.txt
new file mode 100644
index 0000000..3c52855
--- /dev/null
+++ b/v1.14.6/changelog/10505.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk: Add helper for decoding root tokens
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10514.txt b/v1.14.6/changelog/10514.txt
new file mode 100644
index 0000000..60c2eb3
--- /dev/null
+++ b/v1.14.6/changelog/10514.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: add metrics for active entity count
+```
diff --git a/v1.14.6/changelog/10520.txt b/v1.14.6/changelog/10520.txt
new file mode 100644
index 0000000..a8caf77
--- /dev/null
+++ b/v1.14.6/changelog/10520.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Check audit device with a test message before adding it. 
+```
diff --git a/v1.14.6/changelog/10536.txt b/v1.14.6/changelog/10536.txt
new file mode 100644
index 0000000..483b823
--- /dev/null
+++ b/v1.14.6/changelog/10536.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: Fix rate limit resource quota migration from 1.5.x to 1.6.x by ensuring `purgeInterval` and
+`staleAge` are set appropriately.
+```
diff --git a/v1.14.6/changelog/10537.txt b/v1.14.6/changelog/10537.txt
new file mode 100644
index 0000000..f32399a
--- /dev/null
+++ b/v1.14.6/changelog/10537.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: Improve consistency in error messages
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10546.txt b/v1.14.6/changelog/10546.txt
new file mode 100644
index 0000000..3cf83ff
--- /dev/null
+++ b/v1.14.6/changelog/10546.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/jwt: Fixes `bound_claims` validation for provider-specific group and user info fetching.
+```
diff --git a/v1.14.6/changelog/10556.txt b/v1.14.6/changelog/10556.txt
new file mode 100644
index 0000000..26c5474
--- /dev/null
+++ b/v1.14.6/changelog/10556.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Only set the namespace if the VAULT_NAMESPACE env var isn't present
+```
diff --git a/v1.14.6/changelog/10558.txt b/v1.14.6/changelog/10558.txt
new file mode 100644
index 0000000..b3acedb
--- /dev/null
+++ b/v1.14.6/changelog/10558.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/gcp: Truncate ServiceAccount display names longer than 100 characters.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10579.txt b/v1.14.6/changelog/10579.txt
new file mode 100644
index 0000000..718ba3b
--- /dev/null
+++ b/v1.14.6/changelog/10579.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Avoid disclosing IP addresses in the errors of unauthenticated requests
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10588.txt b/v1.14.6/changelog/10588.txt
new file mode 100644
index 0000000..0e363b4
--- /dev/null
+++ b/v1.14.6/changelog/10588.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Adds check for feature flag on application, and updates namespace toolbar on login if present
+```
diff --git a/v1.14.6/changelog/10596.txt b/v1.14.6/changelog/10596.txt
new file mode 100644
index 0000000..492f972
--- /dev/null
+++ b/v1.14.6/changelog/10596.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+ui: Fix bug that double encodes secret route when there are spaces in the path and makes you unable to view the version history.
+```
+
diff --git a/v1.14.6/changelog/10603.txt b/v1.14.6/changelog/10603.txt
new file mode 100644
index 0000000..1c93ed7
--- /dev/null
+++ b/v1.14.6/changelog/10603.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/db/snowflake: Added support for Snowflake to the Database Secret Engine
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10609.txt b/v1.14.6/changelog/10609.txt
new file mode 100644
index 0000000..77ca658
--- /dev/null
+++ b/v1.14.6/changelog/10609.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command/debug: Now collects logs (at level `trace`) as a periodic output.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10613.txt b/v1.14.6/changelog/10613.txt
new file mode 100644
index 0000000..276b329
--- /dev/null
+++ b/v1.14.6/changelog/10613.txt
@@ -0,0 +1,3 @@
+```release-node:improvement
+core: Added an internal endpoint that lists feature flags.
+```
diff --git a/v1.14.6/changelog/10650.txt b/v1.14.6/changelog/10650.txt
new file mode 100644
index 0000000..49c8298
--- /dev/null
+++ b/v1.14.6/changelog/10650.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: Make the response to an unauthenticated request to sys/internal endpoints consistent regardless of mount existence.
+```
+
diff --git a/v1.14.6/changelog/10653.txt b/v1.14.6/changelog/10653.txt
new file mode 100644
index 0000000..16bf22d
--- /dev/null
+++ b/v1.14.6/changelog/10653.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+sdk: Private key generation in the certutil package now allows custom io.Readers to be used. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10655.txt b/v1.14.6/changelog/10655.txt
new file mode 100644
index 0000000..83ed769
--- /dev/null
+++ b/v1.14.6/changelog/10655.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Database secrets engine, supporting MongoDB only
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10677.txt b/v1.14.6/changelog/10677.txt
new file mode 100644
index 0000000..cdc1992
--- /dev/null
+++ b/v1.14.6/changelog/10677.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Upgrade dependencies to resolve potential JS vulnerabilities
+```
diff --git a/v1.14.6/changelog/10684.txt b/v1.14.6/changelog/10684.txt
new file mode 100644
index 0000000..3798d2e
--- /dev/null
+++ b/v1.14.6/changelog/10684.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix expected response from feature-flags endpoint
+```
diff --git a/v1.14.6/changelog/10689.txt b/v1.14.6/changelog/10689.txt
new file mode 100644
index 0000000..6d2ff85
--- /dev/null
+++ b/v1.14.6/changelog/10689.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+quotas/rate-limit: Fix quotas enforcing old rate limit quota paths
+```
diff --git a/v1.14.6/changelog/10705.txt b/v1.14.6/changelog/10705.txt
new file mode 100644
index 0000000..324cd90
--- /dev/null
+++ b/v1.14.6/changelog/10705.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Better concurrent request handling on identical requests proxied through Agent.
+```
diff --git a/v1.14.6/changelog/10708.txt b/v1.14.6/changelog/10708.txt
new file mode 100644
index 0000000..a33bfb0
--- /dev/null
+++ b/v1.14.6/changelog/10708.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+metrics: Protect emitMetrics from panicking during post-seal
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10725.txt b/v1.14.6/changelog/10725.txt
new file mode 100644
index 0000000..e7bb8fb
--- /dev/null
+++ b/v1.14.6/changelog/10725.txt
@@ -0,0 +1,3 @@
+```release-note: improvement
+core (enterprise): "vault status" command works when a namespace is set.
+```
diff --git a/v1.14.6/changelog/10726.txt b/v1.14.6/changelog/10726.txt
new file mode 100644
index 0000000..e8de077
--- /dev/null
+++ b/v1.14.6/changelog/10726.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: reduce memory used by leases
+```
diff --git a/v1.14.6/changelog/10730.txt b/v1.14.6/changelog/10730.txt
new file mode 100644
index 0000000..e62c1d1
--- /dev/null
+++ b/v1.14.6/changelog/10730.txt
@@ -0,0 +1,3 @@
+```release-note:change
+go: Update go version to 1.15.7
+```
diff --git a/v1.14.6/changelog/10743.txt b/v1.14.6/changelog/10743.txt
new file mode 100644
index 0000000..b0a86e0
--- /dev/null
+++ b/v1.14.6/changelog/10743.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Turn off case sensitivity for allowed entity alias check during token create operation.
+```
diff --git a/v1.14.6/changelog/10744.txt b/v1.14.6/changelog/10744.txt
new file mode 100644
index 0000000..e447cbf
--- /dev/null
+++ b/v1.14.6/changelog/10744.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Track barrier encryption count and automatically rotate after a large number of operations or on a schedule
+```
diff --git a/v1.14.6/changelog/10751.txt b/v1.14.6/changelog/10751.txt
new file mode 100644
index 0000000..6fb7c31
--- /dev/null
+++ b/v1.14.6/changelog/10751.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/consul: Vault is now able to automatically bootstrap the Consul ACL system.
+```
diff --git a/v1.14.6/changelog/10756.txt b/v1.14.6/changelog/10756.txt
new file mode 100644
index 0000000..ab9ce93
--- /dev/null
+++ b/v1.14.6/changelog/10756.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+consul-template: Update consul-template vendor version and associated dependencies to master, 
+pulling in https://github.com/hashicorp/consul-template/pull/1447
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10757.txt b/v1.14.6/changelog/10757.txt
new file mode 100644
index 0000000..23fec64
--- /dev/null
+++ b/v1.14.6/changelog/10757.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Set namespace for template server in agent.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10758.txt b/v1.14.6/changelog/10758.txt
new file mode 100644
index 0000000..54fb69b
--- /dev/null
+++ b/v1.14.6/changelog/10758.txt
@@ -0,0 +1,3 @@
+```release-note:security
+replication (enterprise): On DR secondaries, use DR operation token to authenticate raft remove-peer.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10759.txt b/v1.14.6/changelog/10759.txt
new file mode 100644
index 0000000..81027d0
--- /dev/null
+++ b/v1.14.6/changelog/10759.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/gcp: Fix issue with account and iam_policy roleset WALs not being removed after attempts when GCP project no longer exists
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10766.txt b/v1.14.6/changelog/10766.txt
new file mode 100644
index 0000000..566add0
--- /dev/null
+++ b/v1.14.6/changelog/10766.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/postgresql: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/10767.txt b/v1.14.6/changelog/10767.txt
new file mode 100644
index 0000000..1b8fb49
--- /dev/null
+++ b/v1.14.6/changelog/10767.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/mssql: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/10812.txt b/v1.14.6/changelog/10812.txt
new file mode 100644
index 0000000..749dc23
--- /dev/null
+++ b/v1.14.6/changelog/10812.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: When the identity/group endpoint is used to modify a group by name, correctly update its policy and member entities.
+```
diff --git a/v1.14.6/changelog/10826.txt b/v1.14.6/changelog/10826.txt
new file mode 100644
index 0000000..24a5c0a
--- /dev/null
+++ b/v1.14.6/changelog/10826.txt
@@ -0,0 +1,3 @@
+```release-note:changes
+auth/approle: Secrets ID generation endpoint now returns `secret_id_ttl` as part of its response.
+```
diff --git a/v1.14.6/changelog/10833.txt b/v1.14.6/changelog/10833.txt
new file mode 100644
index 0000000..588c782
--- /dev/null
+++ b/v1.14.6/changelog/10833.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Set TokenParent correctly in the Index to be cached.
+```
diff --git a/v1.14.6/changelog/10834.txt b/v1.14.6/changelog/10834.txt
new file mode 100644
index 0000000..ad2e57e
--- /dev/null
+++ b/v1.14.6/changelog/10834.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/mysql: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/10848.txt b/v1.14.6/changelog/10848.txt
new file mode 100644
index 0000000..9b3c659
--- /dev/null
+++ b/v1.14.6/changelog/10848.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Upgrade date-fns from 1.3.0 to 2.16.1.
+```
diff --git a/v1.14.6/changelog/10850.txt b/v1.14.6/changelog/10850.txt
new file mode 100644
index 0000000..211b9a1
--- /dev/null
+++ b/v1.14.6/changelog/10850.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: change auto-auth to preload an existing token on start
+```
diff --git a/v1.14.6/changelog/10855.txt b/v1.14.6/changelog/10855.txt
new file mode 100644
index 0000000..19d4ba5
--- /dev/null
+++ b/v1.14.6/changelog/10855.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix duplicate quotas on performance standby nodes.
+```
diff --git a/v1.14.6/changelog/10858.txt b/v1.14.6/changelog/10858.txt
new file mode 100644
index 0000000..0288316
--- /dev/null
+++ b/v1.14.6/changelog/10858.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/mongodb: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/10877.txt b/v1.14.6/changelog/10877.txt
new file mode 100644
index 0000000..59f3983
--- /dev/null
+++ b/v1.14.6/changelog/10877.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Fix deadlock in entity merge endpoint.
+```
diff --git a/v1.14.6/changelog/10886.txt b/v1.14.6/changelog/10886.txt
new file mode 100644
index 0000000..8545369
--- /dev/null
+++ b/v1.14.6/changelog/10886.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Let allowed_users template mix templated and non-templated parts.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10901.txt b/v1.14.6/changelog/10901.txt
new file mode 100644
index 0000000..456ccb2
--- /dev/null
+++ b/v1.14.6/changelog/10901.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+serviceregistration: Fix race during shutdown of Consul service registration.
+```
diff --git a/v1.14.6/changelog/10904.txt b/v1.14.6/changelog/10904.txt
new file mode 100644
index 0000000..92c80cd
--- /dev/null
+++ b/v1.14.6/changelog/10904.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Upgrade Storybook from 5.3.19 to 6.1.17.
+```
diff --git a/v1.14.6/changelog/10906.txt b/v1.14.6/changelog/10906.txt
new file mode 100644
index 0000000..0b48505
--- /dev/null
+++ b/v1.14.6/changelog/10906.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/cassandra: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/10919.txt b/v1.14.6/changelog/10919.txt
new file mode 100644
index 0000000..7d6f3df
--- /dev/null
+++ b/v1.14.6/changelog/10919.txt
@@ -0,0 +1,10 @@
+```release-note:feature
+auth/jwt: Adds `max_age` role parameter and `auth_time` claim validation.
+```
+```release-note:bug
+auth/jwt: Fixes an issue where JWT verification keys weren't updated after a `jwks_url` change.
+```
+```release-note:bug
+auth/jwt: Fixes an issue where `jwt_supported_algs` were not being validated for JWT auth using
+`jwks_url` and `jwt_validation_pubkeys`.
+```
diff --git a/v1.14.6/changelog/10927.txt b/v1.14.6/changelog/10927.txt
new file mode 100644
index 0000000..67ac038
--- /dev/null
+++ b/v1.14.6/changelog/10927.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Route templating server through cache when persistent cache is enabled.
+```
diff --git a/v1.14.6/changelog/10931.txt b/v1.14.6/changelog/10931.txt
new file mode 100644
index 0000000..e51642b
--- /dev/null
+++ b/v1.14.6/changelog/10931.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/terraform: New secret engine for managing Terraform Cloud API tokens
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10938.txt b/v1.14.6/changelog/10938.txt
new file mode 100644
index 0000000..841c37a
--- /dev/null
+++ b/v1.14.6/changelog/10938.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+agent: Support for persisting the agent cache to disk
+```
diff --git a/v1.14.6/changelog/10942.txt b/v1.14.6/changelog/10942.txt
new file mode 100644
index 0000000..fda073a
--- /dev/null
+++ b/v1.14.6/changelog/10942.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/okta: Adds support for Okta Verify TOTP MFA.
+```
diff --git a/v1.14.6/changelog/10948.txt b/v1.14.6/changelog/10948.txt
new file mode 100644
index 0000000..fdf33e8
--- /dev/null
+++ b/v1.14.6/changelog/10948.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add ability to fetch individual certificate as DER or PEM
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/10949.txt b/v1.14.6/changelog/10949.txt
new file mode 100644
index 0000000..6613c48
--- /dev/null
+++ b/v1.14.6/changelog/10949.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Customize MongoDB input fields on Database Secrets Engine
+```
diff --git a/v1.14.6/changelog/10951.txt b/v1.14.6/changelog/10951.txt
new file mode 100644
index 0000000..1fdac2d
--- /dev/null
+++ b/v1.14.6/changelog/10951.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Clarify language on usage metrics page empty state
+```
diff --git a/v1.14.6/changelog/10952.txt b/v1.14.6/changelog/10952.txt
new file mode 100644
index 0000000..0d1d48f
--- /dev/null
+++ b/v1.14.6/changelog/10952.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/oci: Fixes alias name to use the role name, and not the literal string `name` [[GH-10](https://github.com/hashicorp/vault-plugin-auth-oci/pull/10)]
+```
diff --git a/v1.14.6/changelog/10953.txt b/v1.14.6/changelog/10953.txt
new file mode 100644
index 0000000..55d011e
--- /dev/null
+++ b/v1.14.6/changelog/10953.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/aws: add IAM tagging support for iam_user roles
+```
diff --git a/v1.14.6/changelog/10964.txt b/v1.14.6/changelog/10964.txt
new file mode 100644
index 0000000..04874b8
--- /dev/null
+++ b/v1.14.6/changelog/10964.txt
@@ -0,0 +1,5 @@
+```release-note:changes
+agent: Failed auto-auth attempts are now throttled by an exponential backoff instead of the
+~2 second retry delay. The maximum backoff may be configured with the new `max_backoff` parameter,
+which defaults to 5 minutes.
+```
diff --git a/v1.14.6/changelog/10980.txt b/v1.14.6/changelog/10980.txt
new file mode 100644
index 0000000..d6edaf6
--- /dev/null
+++ b/v1.14.6/changelog/10980.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: better errors on Database secrets engine role create
+```
diff --git a/v1.14.6/changelog/10982.txt b/v1.14.6/changelog/10982.txt
new file mode 100644
index 0000000..7102478
--- /dev/null
+++ b/v1.14.6/changelog/10982.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Adds the wizard to the Database Secret Engine
+```
diff --git a/v1.14.6/changelog/10992.txt b/v1.14.6/changelog/10992.txt
new file mode 100644
index 0000000..5b216af
--- /dev/null
+++ b/v1.14.6/changelog/10992.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: dev mode listener allows unauthenticated sys/metrics requests
+```
diff --git a/v1.14.6/changelog/10995.txt b/v1.14.6/changelog/10995.txt
new file mode 100644
index 0000000..bf8b41c
--- /dev/null
+++ b/v1.14.6/changelog/10995.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/couchbase: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/10996.txt b/v1.14.6/changelog/10996.txt
new file mode 100644
index 0000000..e79f99b
--- /dev/null
+++ b/v1.14.6/changelog/10996.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/openldap: Added dynamic roles to OpenLDAP similar to the combined database engine
+```
diff --git a/v1.14.6/changelog/10997.txt b/v1.14.6/changelog/10997.txt
new file mode 100644
index 0000000..0a6b846
--- /dev/null
+++ b/v1.14.6/changelog/10997.txt
@@ -0,0 +1,13 @@
+```release-note:change
+aws/auth: AWS Auth concepts and endpoints that use the "whitelist" and "blacklist" terms
+have been updated to more inclusive language (e.g. `/auth/aws/identity-whitelist` has been
+updated to`/auth/aws/identity-accesslist`). The legacy endpoint names have not been removed
+but are considered **deprecated**. The old and new endpoints are essentially aliases, sharing
+the same underlying data. The complete list of endpoint changes is available in the
+[AWS Auth API docs](https://www.vaultproject.io/api-docs/auth/aws).
+```
+
+```release-note:deprecation
+aws/auth: AWS Auth endpoints that use the "whitelist" and "blacklist" terms have been deprecated.
+Refer to the CHANGES section for addition details.
+```
diff --git a/v1.14.6/changelog/11000.txt b/v1.14.6/changelog/11000.txt
new file mode 100644
index 0000000..84b4af9
--- /dev/null
+++ b/v1.14.6/changelog/11000.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: include support for an optional user filter field when searching for users
+```
diff --git a/v1.14.6/changelog/11011.txt b/v1.14.6/changelog/11011.txt
new file mode 100644
index 0000000..8855842
--- /dev/null
+++ b/v1.14.6/changelog/11011.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix KMIP failing test and a bug that ocurred because the configuration model was not being unloaded.
+```
diff --git a/v1.14.6/changelog/11015.txt b/v1.14.6/changelog/11015.txt
new file mode 100644
index 0000000..694ee6e
--- /dev/null
+++ b/v1.14.6/changelog/11015.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+release-note: Add dependencies listed in dependencies/2-25-21
+```
diff --git a/v1.14.6/changelog/11018.txt b/v1.14.6/changelog/11018.txt
new file mode 100644
index 0000000..d5af26f
--- /dev/null
+++ b/v1.14.6/changelog/11018.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+ui: Add tests for database role setting form
+```
diff --git a/v1.14.6/changelog/11022.txt b/v1.14.6/changelog/11022.txt
new file mode 100644
index 0000000..6c3f507
--- /dev/null
+++ b/v1.14.6/changelog/11022.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: add partial month client count api
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11094.txt b/v1.14.6/changelog/11094.txt
new file mode 100644
index 0000000..b193bd5
--- /dev/null
+++ b/v1.14.6/changelog/11094.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix issue where logging in without namespace input causes error
+```
diff --git a/v1.14.6/changelog/11113.txt b/v1.14.6/changelog/11113.txt
new file mode 100644
index 0000000..0e372e6
--- /dev/null
+++ b/v1.14.6/changelog/11113.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+agent: Add a vault.retry stanza that allows specifying number of retries on failure; this applies both to templating and proxied requests.
+```
diff --git a/v1.14.6/changelog/11119.txt b/v1.14.6/changelog/11119.txt
new file mode 100644
index 0000000..6ce5c6d
--- /dev/null
+++ b/v1.14.6/changelog/11119.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Add role from database connection automatically populates the database for new role
+```
diff --git a/v1.14.6/changelog/11127.txt b/v1.14.6/changelog/11127.txt
new file mode 100644
index 0000000..7d25325
--- /dev/null
+++ b/v1.14.6/changelog/11127.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix bug where database secret engines with custom names cannot delete connections
+```
diff --git a/v1.14.6/changelog/11129.txt b/v1.14.6/changelog/11129.txt
new file mode 100644
index 0000000..8faedf2
--- /dev/null
+++ b/v1.14.6/changelog/11129.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+cli/api: Add lease lookup command
+```
diff --git a/v1.14.6/changelog/11142.txt b/v1.14.6/changelog/11142.txt
new file mode 100644
index 0000000..713dc13
--- /dev/null
+++ b/v1.14.6/changelog/11142.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix date display on expired token notice
+```
diff --git a/v1.14.6/changelog/11143.txt b/v1.14.6/changelog/11143.txt
new file mode 100644
index 0000000..e847eb9
--- /dev/null
+++ b/v1.14.6/changelog/11143.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix error message caused by control group
+```
diff --git a/v1.14.6/changelog/11182.txt b/v1.14.6/changelog/11182.txt
new file mode 100644
index 0000000..cdb40ed
--- /dev/null
+++ b/v1.14.6/changelog/11182.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+ui: Fix namespace-bug on login
+```
+
diff --git a/v1.14.6/changelog/11208.txt b/v1.14.6/changelog/11208.txt
new file mode 100644
index 0000000..555a304
--- /dev/null
+++ b/v1.14.6/changelog/11208.txt
@@ -0,0 +1,3 @@
+```release-note:change
+ui: replaces Vault's use of elazarl/go-bindata-assetfs in building the UI with Go's native Embed package
+```
diff --git a/v1.14.6/changelog/11213.txt b/v1.14.6/changelog/11213.txt
new file mode 100644
index 0000000..120582e
--- /dev/null
+++ b/v1.14.6/changelog/11213.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix status menu no showing on login
+```
diff --git a/v1.14.6/changelog/11216.txt b/v1.14.6/changelog/11216.txt
new file mode 100644
index 0000000..beef5c5
--- /dev/null
+++ b/v1.14.6/changelog/11216.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: select appropriate signature algorithm for ECDSA signature on certificates.
+```
diff --git a/v1.14.6/changelog/11218.txt b/v1.14.6/changelog/11218.txt
new file mode 100644
index 0000000..ef5e87f
--- /dev/null
+++ b/v1.14.6/changelog/11218.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Calculate the Subject Key Identifier as suggested in [RFC 5280, Section 4.2.1.2](https://datatracker.ietf.org/doc/html/rfc5280#section-4.2.1.2).
+```
diff --git a/v1.14.6/changelog/11226.txt b/v1.14.6/changelog/11226.txt
new file mode 100644
index 0000000..dd40cfa
--- /dev/null
+++ b/v1.14.6/changelog/11226.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+core: Add tls_max_version listener config option.
+```
diff --git a/v1.14.6/changelog/11231.txt b/v1.14.6/changelog/11231.txt
new file mode 100644
index 0000000..a51bb2d
--- /dev/null
+++ b/v1.14.6/changelog/11231.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Add database secret engine support for MSSQL
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11245.txt b/v1.14.6/changelog/11245.txt
new file mode 100644
index 0000000..4f20c69
--- /dev/null
+++ b/v1.14.6/changelog/11245.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+pki: adds signature_bits field to customize signature algorithm on CAs and certs signed by Vault
+```
diff --git a/v1.14.6/changelog/11247.txt b/v1.14.6/changelog/11247.txt
new file mode 100644
index 0000000..916d89b
--- /dev/null
+++ b/v1.14.6/changelog/11247.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Support cluster address change for nodes in a cluster managed by autopilot
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11252.txt b/v1.14.6/changelog/11252.txt
new file mode 100644
index 0000000..67bd5f2
--- /dev/null
+++ b/v1.14.6/changelog/11252.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: leader_tls_servername wasn't used unless leader_ca_cert_file and/or mTLS were configured.
+```
diff --git a/v1.14.6/changelog/11256.txt b/v1.14.6/changelog/11256.txt
new file mode 100644
index 0000000..63f22f6
--- /dev/null
+++ b/v1.14.6/changelog/11256.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed and updated lease renewal picker
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11258.txt b/v1.14.6/changelog/11258.txt
new file mode 100644
index 0000000..49d936f
--- /dev/null
+++ b/v1.14.6/changelog/11258.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix bug where the UI does not recognize version 2 KV until refresh, and fix [object Object] error message
+```
diff --git a/v1.14.6/changelog/11259.txt b/v1.14.6/changelog/11259.txt
new file mode 100644
index 0000000..78c5871
--- /dev/null
+++ b/v1.14.6/changelog/11259.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+secret/pki: Preserve ordering of all DN attribute values when issuing certificates
+```
diff --git a/v1.14.6/changelog/11260.txt b/v1.14.6/changelog/11260.txt
new file mode 100644
index 0000000..88c7d73
--- /dev/null
+++ b/v1.14.6/changelog/11260.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: Support autopilot for HA only raft storage.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11262.txt b/v1.14.6/changelog/11262.txt
new file mode 100644
index 0000000..2627ca2
--- /dev/null
+++ b/v1.14.6/changelog/11262.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database/cassandra: Updated default statement for password rotation to allow for special characters. This applies to root and static credentials.
+```
diff --git a/v1.14.6/changelog/11269.txt b/v1.14.6/changelog/11269.txt
new file mode 100644
index 0000000..d732eaf
--- /dev/null
+++ b/v1.14.6/changelog/11269.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+storage/raft: Switch to shared raft-boltdb library and add boltdb metrics
+```
diff --git a/v1.14.6/changelog/11283.txt b/v1.14.6/changelog/11283.txt
new file mode 100644
index 0000000..14b33bf
--- /dev/null
+++ b/v1.14.6/changelog/11283.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix footer URL linking to the correct version changelog.
+```
diff --git a/v1.14.6/changelog/11284.txt b/v1.14.6/changelog/11284.txt
new file mode 100644
index 0000000..8c0332a
--- /dev/null
+++ b/v1.14.6/changelog/11284.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Obscure secret values on input and displayOnly fields like certificates.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11288.txt b/v1.14.6/changelog/11288.txt
new file mode 100644
index 0000000..6f0e95c
--- /dev/null
+++ b/v1.14.6/changelog/11288.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Fixed agent templating to use configured tls servername values
+```
diff --git a/v1.14.6/changelog/11289.txt b/v1.14.6/changelog/11289.txt
new file mode 100644
index 0000000..29e9087
--- /dev/null
+++ b/v1.14.6/changelog/11289.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+http: Add optional HTTP response headers for hostname and raft node ID
+```
diff --git a/v1.14.6/changelog/11294.txt b/v1.14.6/changelog/11294.txt
new file mode 100644
index 0000000..a176b4a
--- /dev/null
+++ b/v1.14.6/changelog/11294.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix issue where select-one option was not showing in secrets database role creation
+```
diff --git a/v1.14.6/changelog/11324.txt b/v1.14.6/changelog/11324.txt
new file mode 100644
index 0000000..e638d26
--- /dev/null
+++ b/v1.14.6/changelog/11324.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+core: Add per-listener config to allow unauthenticated pprof requests, and collect a few more pprof targets.
+```
diff --git a/v1.14.6/changelog/11345.txt b/v1.14.6/changelog/11345.txt
new file mode 100644
index 0000000..8ff694f
--- /dev/null
+++ b/v1.14.6/changelog/11345.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/aws: add ability to provide a role session name when generating STS credentials
+```
diff --git a/v1.14.6/changelog/11360.txt b/v1.14.6/changelog/11360.txt
new file mode 100644
index 0000000..a773c41
--- /dev/null
+++ b/v1.14.6/changelog/11360.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Updated search select component styling
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11364.txt b/v1.14.6/changelog/11364.txt
new file mode 100644
index 0000000..64fae59
--- /dev/null
+++ b/v1.14.6/changelog/11364.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: allow arbitrary length stack traces upon receiving SIGUSR2 (was 32MB)
+```
diff --git a/v1.14.6/changelog/11365.txt b/v1.14.6/changelog/11365.txt
new file mode 100644
index 0000000..cf99d52
--- /dev/null
+++ b/v1.14.6/changelog/11365.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database/cassandra: Fixed issue where hostnames were not being validated when using TLS
+```
diff --git a/v1.14.6/changelog/11366.txt b/v1.14.6/changelog/11366.txt
new file mode 100644
index 0000000..b1d9eb1
--- /dev/null
+++ b/v1.14.6/changelog/11366.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add metrics for standby node forwarding.
+```
diff --git a/v1.14.6/changelog/11367.txt b/v1.14.6/changelog/11367.txt
new file mode 100644
index 0000000..5e79b1c
--- /dev/null
+++ b/v1.14.6/changelog/11367.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+pki: Only remove revoked entry for certificates during tidy if they are past their NotAfter value
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11371.txt b/v1.14.6/changelog/11371.txt
new file mode 100644
index 0000000..884c3b9
--- /dev/null
+++ b/v1.14.6/changelog/11371.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix goroutine leak when updating rate limit quota
+```
diff --git a/v1.14.6/changelog/11377.txt b/v1.14.6/changelog/11377.txt
new file mode 100644
index 0000000..1719473
--- /dev/null
+++ b/v1.14.6/changelog/11377.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix storage entry leak when revoking leases created with non-orphan batch tokens.
+```
diff --git a/v1.14.6/changelog/11388.txt b/v1.14.6/changelog/11388.txt
new file mode 100644
index 0000000..d39fe5d
--- /dev/null
+++ b/v1.14.6/changelog/11388.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+auth/jwt: Adds ability to directly provide service account JSON in G Suite provider config.
+```
diff --git a/v1.14.6/changelog/11404.txt b/v1.14.6/changelog/11404.txt
new file mode 100644
index 0000000..d45aecc
--- /dev/null
+++ b/v1.14.6/changelog/11404.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Add root rotation statements support to appropriate database secret engine plugins
+```
diff --git a/v1.14.6/changelog/11408.txt b/v1.14.6/changelog/11408.txt
new file mode 100644
index 0000000..e4c47e3
--- /dev/null
+++ b/v1.14.6/changelog/11408.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix cleanup of storage entries from cubbyholes within namespaces.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11442.txt b/v1.14.6/changelog/11442.txt
new file mode 100644
index 0000000..8c12323
--- /dev/null
+++ b/v1.14.6/changelog/11442.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add push notification message when selecting okta auth.
+```
diff --git a/v1.14.6/changelog/11447.txt b/v1.14.6/changelog/11447.txt
new file mode 100644
index 0000000..243cfe9
--- /dev/null
+++ b/v1.14.6/changelog/11447.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Update ember to latest LTS and upgrade UI dependencies
+```
diff --git a/v1.14.6/changelog/11451.txt b/v1.14.6/changelog/11451.txt
new file mode 100644
index 0000000..b5ea7e2
--- /dev/null
+++ b/v1.14.6/changelog/11451.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database: Fix marshalling to allow providing numeric arguments to external database plugins.
+```
diff --git a/v1.14.6/changelog/11453.txt b/v1.14.6/changelog/11453.txt
new file mode 100644
index 0000000..8549b53
--- /dev/null
+++ b/v1.14.6/changelog/11453.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix race that allowed remounting on path used by another mount
+```
diff --git a/v1.14.6/changelog/11473.txt b/v1.14.6/changelog/11473.txt
new file mode 100644
index 0000000..851ae2c
--- /dev/null
+++ b/v1.14.6/changelog/11473.txt
@@ -0,0 +1,4 @@
+```release-note:change
+agent: Update to use IAM Service Account Credentials endpoint for signing JWTs
+when using GCP Auto-Auth method
+```
diff --git a/v1.14.6/changelog/11495.txt b/v1.14.6/changelog/11495.txt
new file mode 100644
index 0000000..d529872
--- /dev/null
+++ b/v1.14.6/changelog/11495.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ssh: add support for templated values in SSH CA DefaultExtensions
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11500.txt b/v1.14.6/changelog/11500.txt
new file mode 100644
index 0000000..e242c6f
--- /dev/null
+++ b/v1.14.6/changelog/11500.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Updated ivy code mirror component for consistency
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11502.txt b/v1.14.6/changelog/11502.txt
new file mode 100644
index 0000000..af84fba
--- /dev/null
+++ b/v1.14.6/changelog/11502.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Allow Agent auto auth to read symlinked JWT files
+```
diff --git a/v1.14.6/changelog/11506.txt b/v1.14.6/changelog/11506.txt
new file mode 100644
index 0000000..15ab6f3
--- /dev/null
+++ b/v1.14.6/changelog/11506.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Use correct mount accessor when refreshing external group memberships.
+```
diff --git a/v1.14.6/changelog/11517.txt b/v1.14.6/changelog/11517.txt
new file mode 100644
index 0000000..f5cca73
--- /dev/null
+++ b/v1.14.6/changelog/11517.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Send notifications to systemd on start, stop, and configuration reload.
+```
diff --git a/v1.14.6/changelog/11530.txt b/v1.14.6/changelog/11530.txt
new file mode 100644
index 0000000..95bb8be
--- /dev/null
+++ b/v1.14.6/changelog/11530.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Redesign of KV 2 Delete toolbar.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11532.txt b/v1.14.6/changelog/11532.txt
new file mode 100644
index 0000000..59760fa
--- /dev/null
+++ b/v1.14.6/changelog/11532.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**MySQL Database UI**: The UI now supports adding and editing MySQL connections in the database secret engine
+```
diff --git a/v1.14.6/changelog/11541.txt b/v1.14.6/changelog/11541.txt
new file mode 100644
index 0000000..3cf468c
--- /dev/null
+++ b/v1.14.6/changelog/11541.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix edge cases in the configuration endpoint for barrier key autorotation.
+```
diff --git a/v1.14.6/changelog/11562.txt b/v1.14.6/changelog/11562.txt
new file mode 100644
index 0000000..3593fbc
--- /dev/null
+++ b/v1.14.6/changelog/11562.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+secrets/azure: Update Azure SDK to allow consuming different Resource Manager Endpoint URIs
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11576.txt b/v1.14.6/changelog/11576.txt
new file mode 100644
index 0000000..0886ee9
--- /dev/null
+++ b/v1.14.6/changelog/11576.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+agent/cert: Fix issue where the API client on agent was not honoring certificate
+information from the auto-auth config map on renewals or retries.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11585.txt b/v1.14.6/changelog/11585.txt
new file mode 100644
index 0000000..c983802
--- /dev/null
+++ b/v1.14.6/changelog/11585.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database: Fixes issue for V4 database interface where `SetCredentials` wasn't falling back to using `RotateRootCredentials` if `SetCredentials` is `Unimplemented`
+```
diff --git a/v1.14.6/changelog/11586.txt b/v1.14.6/changelog/11586.txt
new file mode 100644
index 0000000..31c4069
--- /dev/null
+++ b/v1.14.6/changelog/11586.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add regex validation to Transform Template pattern input
+```
diff --git a/v1.14.6/changelog/11588.txt b/v1.14.6/changelog/11588.txt
new file mode 100644
index 0000000..1f7f036
--- /dev/null
+++ b/v1.14.6/changelog/11588.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add a small (<1s) exponential backoff to failed TCP listener Accept failures.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11596.txt b/v1.14.6/changelog/11596.txt
new file mode 100644
index 0000000..3735ca0
--- /dev/null
+++ b/v1.14.6/changelog/11596.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Fix plugins mounted in namespaces being unable to use password policies
+```
diff --git a/v1.14.6/changelog/11597.txt b/v1.14.6/changelog/11597.txt
new file mode 100644
index 0000000..4a9c113
--- /dev/null
+++ b/v1.14.6/changelog/11597.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix text link URL on database roles list
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11600.txt b/v1.14.6/changelog/11600.txt
new file mode 100644
index 0000000..f40d4bc
--- /dev/null
+++ b/v1.14.6/changelog/11600.txt
@@ -0,0 +1,9 @@
+```release-note:improvement
+secrets/database/mongodb: Add ability to customize `SocketTimeout`, `ConnectTimeout`, and `ServerSelectionTimeout`
+```
+```release-note:improvement
+secrets/database/mongodb: Increased throughput by allowing for multiple request threads to simultaneously update users in MongoDB
+```
+```release-note:bug
+secrets/database: Fixed minor race condition when rotate-root is called
+```
diff --git a/v1.14.6/changelog/11607.txt b/v1.14.6/changelog/11607.txt
new file mode 100644
index 0000000..4404a23
--- /dev/null
+++ b/v1.14.6/changelog/11607.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: add irrevocable lease list and count apis
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11628.txt b/v1.14.6/changelog/11628.txt
new file mode 100644
index 0000000..335777e
--- /dev/null
+++ b/v1.14.6/changelog/11628.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secret: fix the bug where transit encrypt batch doesn't work with key_version
+```
diff --git a/v1.14.6/changelog/11638.txt b/v1.14.6/changelog/11638.txt
new file mode 100644
index 0000000..5ed5065
--- /dev/null
+++ b/v1.14.6/changelog/11638.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/aws: Underlying error included in validation failure message.
+```
diff --git a/v1.14.6/changelog/11641.txt b/v1.14.6/changelog/11641.txt
new file mode 100644
index 0000000..84bd311
--- /dev/null
+++ b/v1.14.6/changelog/11641.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix entity group membership and metadata not showing
+```
diff --git a/v1.14.6/changelog/11647.txt b/v1.14.6/changelog/11647.txt
new file mode 100644
index 0000000..2075989
--- /dev/null
+++ b/v1.14.6/changelog/11647.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+tokenutil: Perform the num uses check before token type.
+```
diff --git a/v1.14.6/changelog/11650.txt b/v1.14.6/changelog/11650.txt
new file mode 100644
index 0000000..75029f9
--- /dev/null
+++ b/v1.14.6/changelog/11650.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: correct logic for renewal of leases nearing their expiration time.
+```
diff --git a/v1.14.6/changelog/11672.txt b/v1.14.6/changelog/11672.txt
new file mode 100644
index 0000000..2d019ce
--- /dev/null
+++ b/v1.14.6/changelog/11672.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+ui: Replace tool partials with components.
+```
+
diff --git a/v1.14.6/changelog/11680.txt b/v1.14.6/changelog/11680.txt
new file mode 100644
index 0000000..3e8b919
--- /dev/null
+++ b/v1.14.6/changelog/11680.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Update partials to components
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11696.txt b/v1.14.6/changelog/11696.txt
new file mode 100644
index 0000000..e3bc54c
--- /dev/null
+++ b/v1.14.6/changelog/11696.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Allow a leveled logger to be provided to `api.Client` through `SetLogger`.
+```
diff --git a/v1.14.6/changelog/11705.txt b/v1.14.6/changelog/11705.txt
new file mode 100644
index 0000000..42d683d
--- /dev/null
+++ b/v1.14.6/changelog/11705.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add specific error message if unseal fails due to license
+```
diff --git a/v1.14.6/changelog/11708.txt b/v1.14.6/changelog/11708.txt
new file mode 100644
index 0000000..2121191
--- /dev/null
+++ b/v1.14.6/changelog/11708.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: JSON fields on database can be cleared on edit
+```
diff --git a/v1.14.6/changelog/11759.txt b/v1.14.6/changelog/11759.txt
new file mode 100644
index 0000000..0b0776a
--- /dev/null
+++ b/v1.14.6/changelog/11759.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: show site-wide banners for license warnings if applicable
+```
diff --git a/v1.14.6/changelog/11775.txt b/v1.14.6/changelog/11775.txt
new file mode 100644
index 0000000..be37355
--- /dev/null
+++ b/v1.14.6/changelog/11775.txt
@@ -0,0 +1,9 @@
+```release-note:change
+agent: Errors in the template engine will no longer cause agent to exit unless
+explicitly defined to do so. A new configuration parameter,
+`exit_on_retry_failure`, within the new top-level stanza, `template_config`, can
+be set to `true` in order to cause agent to exit. Note that for agent to exit if
+`template.error_on_missing_key` is set to `true`, `exit_on_retry_failure` must
+be also set to `true`. Otherwise, the template engine will log an error but then
+restart its internal runner.
+```
diff --git a/v1.14.6/changelog/11778.txt b/v1.14.6/changelog/11778.txt
new file mode 100644
index 0000000..34acf3d
--- /dev/null
+++ b/v1.14.6/changelog/11778.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: update license page with relevant autoload info
+```
diff --git a/v1.14.6/changelog/11780.txt b/v1.14.6/changelog/11780.txt
new file mode 100644
index 0000000..e424054
--- /dev/null
+++ b/v1.14.6/changelog/11780.txt
@@ -0,0 +1,3 @@
+```release-note:feature

+pki: Support ed25519 as a key for the pki backend

+```

diff --git a/v1.14.6/changelog/11784.txt b/v1.14.6/changelog/11784.txt
new file mode 100644
index 0000000..1ccffea
--- /dev/null
+++ b/v1.14.6/changelog/11784.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+auth/jwt: Updates the [hashicorp/cap](https://github.com/hashicorp/cap) library to `v0.1.0` to
+bring in a verification key caching fix.
+```
diff --git a/v1.14.6/changelog/11785.txt b/v1.14.6/changelog/11785.txt
new file mode 100644
index 0000000..e8bf429
--- /dev/null
+++ b/v1.14.6/changelog/11785.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add Validation to KV secret engine
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11795.txt b/v1.14.6/changelog/11795.txt
new file mode 100644
index 0000000..ead4434
--- /dev/null
+++ b/v1.14.6/changelog/11795.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Added auth method descriptions to UI login page
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11796.txt b/v1.14.6/changelog/11796.txt
new file mode 100644
index 0000000..76509d9
--- /dev/null
+++ b/v1.14.6/changelog/11796.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/influxdb: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/11802.txt b/v1.14.6/changelog/11802.txt
new file mode 100644
index 0000000..90dee25
--- /dev/null
+++ b/v1.14.6/changelog/11802.txt
@@ -0,0 +1,3 @@
+```release-note:change
+go: Update to Go 1.16.5
+```
diff --git a/v1.14.6/changelog/11820.txt b/v1.14.6/changelog/11820.txt
new file mode 100644
index 0000000..a0d2c0e
--- /dev/null
+++ b/v1.14.6/changelog/11820.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+db/cassandra: Added tls_server_name to specify server name for TLS validation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11826.txt b/v1.14.6/changelog/11826.txt
new file mode 100644
index 0000000..b9accbd
--- /dev/null
+++ b/v1.14.6/changelog/11826.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+activity: Omit wrapping tokens and control groups from client counts
+```
diff --git a/v1.14.6/changelog/11836.txt b/v1.14.6/changelog/11836.txt
new file mode 100644
index 0000000..46981fd
--- /dev/null
+++ b/v1.14.6/changelog/11836.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/ad: Forward all creds requests to active node [[GH-76](https://github.com/hashicorp/vault-plugin-secrets-ad/pull/76)]
+```
diff --git a/v1.14.6/changelog/11838.txt b/v1.14.6/changelog/11838.txt
new file mode 100644
index 0000000..dc53551
--- /dev/null
+++ b/v1.14.6/changelog/11838.txt
@@ -0,0 +1,7 @@
+```release-note:bug
+agent: fix timestamp format in log messages from the templating engine
+```
+
+```release-note:bug
+agent/template: fix command shell quoting issue
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11861.txt b/v1.14.6/changelog/11861.txt
new file mode 100644
index 0000000..8dc8ae4
--- /dev/null
+++ b/v1.14.6/changelog/11861.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database/cassandra: Fixed issue where the PEM parsing logic of `pem_bundle` and `pem_json` didn't work for CA-only configurations
+```
diff --git a/v1.14.6/changelog/11864.txt b/v1.14.6/changelog/11864.txt
new file mode 100644
index 0000000..0773ab0
--- /dev/null
+++ b/v1.14.6/changelog/11864.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/approle: fixing dereference of nil pointer
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11872.txt b/v1.14.6/changelog/11872.txt
new file mode 100644
index 0000000..a573559
--- /dev/null
+++ b/v1.14.6/changelog/11872.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+mongo-db: default username template now strips invalid '.' characters
+```
diff --git a/v1.14.6/changelog/11878.txt b/v1.14.6/changelog/11878.txt
new file mode 100644
index 0000000..62d28a3
--- /dev/null
+++ b/v1.14.6/changelog/11878.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: add validations for duplicate path kv engine
+```
diff --git a/v1.14.6/changelog/11884.txt b/v1.14.6/changelog/11884.txt
new file mode 100644
index 0000000..1dd884c
--- /dev/null
+++ b/v1.14.6/changelog/11884.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix oidc login with Safari
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11887.txt b/v1.14.6/changelog/11887.txt
new file mode 100644
index 0000000..280d06e
--- /dev/null
+++ b/v1.14.6/changelog/11887.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secret/totp: pad input key to ensure length is a multiple of 8
+```
diff --git a/v1.14.6/changelog/11895.txt b/v1.14.6/changelog/11895.txt
new file mode 100644
index 0000000..2a8837f
--- /dev/null
+++ b/v1.14.6/changelog/11895.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+raft: change freelist type to map and set nofreelistsync to true
+```
diff --git a/v1.14.6/changelog/11899.txt b/v1.14.6/changelog/11899.txt
new file mode 100644
index 0000000..9867d9a
--- /dev/null
+++ b/v1.14.6/changelog/11899.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secret/rabbitmq: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/11904.txt b/v1.14.6/changelog/11904.txt
new file mode 100644
index 0000000..584aeae
--- /dev/null
+++ b/v1.14.6/changelog/11904.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: properly handle switching to/from unix domain socket when changing client address
+```
diff --git a/v1.14.6/changelog/11907.txt b/v1.14.6/changelog/11907.txt
new file mode 100644
index 0000000..e2bbafe
--- /dev/null
+++ b/v1.14.6/changelog/11907.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+raft: Improve raft batch size selection
+```
diff --git a/v1.14.6/changelog/11934.txt b/v1.14.6/changelog/11934.txt
new file mode 100644
index 0000000..ee67171
--- /dev/null
+++ b/v1.14.6/changelog/11934.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/template: Added static_secret_render_interval to specify how often to fetch non-leased secrets
+```
diff --git a/v1.14.6/changelog/11942.txt b/v1.14.6/changelog/11942.txt
new file mode 100644
index 0000000..52d7c69
--- /dev/null
+++ b/v1.14.6/changelog/11942.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Support manual rotation of Active Directory roles**: `rotate-role` endpoint has been added to the Active Directory secret engine to allow manual rotations of service accounts.
+```
diff --git a/v1.14.6/changelog/11956.txt b/v1.14.6/changelog/11956.txt
new file mode 100644
index 0000000..c2cb185
--- /dev/null
+++ b/v1.14.6/changelog/11956.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Customize dynamic usernames in MongoDB Atlas**: Adds the ability to customize username generation for dynamic users in MongoDB Atlas.
+```
diff --git a/v1.14.6/changelog/11957.txt b/v1.14.6/changelog/11957.txt
new file mode 100644
index 0000000..afc53a4
--- /dev/null
+++ b/v1.14.6/changelog/11957.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/elasticsearch: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/11958.txt b/v1.14.6/changelog/11958.txt
new file mode 100644
index 0000000..ef6b187
--- /dev/null
+++ b/v1.14.6/changelog/11958.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Key Management Secrets Engine (Enterprise)**: Adds general availability for distributing and managing keys in AWS KMS.
+```
diff --git a/v1.14.6/changelog/11963.txt b/v1.14.6/changelog/11963.txt
new file mode 100644
index 0000000..dd9c196
--- /dev/null
+++ b/v1.14.6/changelog/11963.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add validation support for open api form fields
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11969.txt b/v1.14.6/changelog/11969.txt
new file mode 100644
index 0000000..6680935
--- /dev/null
+++ b/v1.14.6/changelog/11969.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: JWT auto auth now supports a `remove_jwt_after_reading` config option which defaults to true.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11970.txt b/v1.14.6/changelog/11970.txt
new file mode 100644
index 0000000..60ea438
--- /dev/null
+++ b/v1.14.6/changelog/11970.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fixed double counting of http requests after operator stepdown
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11975.txt b/v1.14.6/changelog/11975.txt
new file mode 100644
index 0000000..0969112
--- /dev/null
+++ b/v1.14.6/changelog/11975.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/ldap: Fix a bug where the LDAP auth method does not return the request_timeout configuration parameter on config read.
+```
diff --git a/v1.14.6/changelog/11980.txt b/v1.14.6/changelog/11980.txt
new file mode 100644
index 0000000..0fe44f5
--- /dev/null
+++ b/v1.14.6/changelog/11980.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+physical/etcd: Upgrade etcd3 client to v3.5.0 and etcd2 to v2.305.0.
+```
diff --git a/v1.14.6/changelog/11984.txt b/v1.14.6/changelog/11984.txt
new file mode 100644
index 0000000..11b23e8
--- /dev/null
+++ b/v1.14.6/changelog/11984.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Show day of month instead of day of year in the expiration warning dialog
+```
diff --git a/v1.14.6/changelog/11992.txt b/v1.14.6/changelog/11992.txt
new file mode 100644
index 0000000..c9b2c47
--- /dev/null
+++ b/v1.14.6/changelog/11992.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: vault delete and vault kv delete should support the same output options (e.g. -format) as vault write.
+```
diff --git a/v1.14.6/changelog/11995.txt b/v1.14.6/changelog/11995.txt
new file mode 100644
index 0000000..ccabb84
--- /dev/null
+++ b/v1.14.6/changelog/11995.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Show description on secret engine list
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/11997.txt b/v1.14.6/changelog/11997.txt
new file mode 100644
index 0000000..b782ec8
--- /dev/null
+++ b/v1.14.6/changelog/11997.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/snowflake: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/12003.txt b/v1.14.6/changelog/12003.txt
new file mode 100644
index 0000000..ed81f83
--- /dev/null
+++ b/v1.14.6/changelog/12003.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: add transform secrets engine to features list
+```
diff --git a/v1.14.6/changelog/12008.txt b/v1.14.6/changelog/12008.txt
new file mode 100644
index 0000000..2c648f6
--- /dev/null
+++ b/v1.14.6/changelog/12008.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Revert fix for PR [11423](https://github.com/hashicorp/vault/pull/11423).
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12016.txt b/v1.14.6/changelog/12016.txt
new file mode 100644
index 0000000..4b57569
--- /dev/null
+++ b/v1.14.6/changelog/12016.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/database/redshift: Add ability to customize dynamic usernames
+```
diff --git a/v1.14.6/changelog/12019.txt b/v1.14.6/changelog/12019.txt
new file mode 100644
index 0000000..86d6a4d
--- /dev/null
+++ b/v1.14.6/changelog/12019.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/openldap: Fix bug where schema was not compatible with rotate-root [#24](https://github.com/hashicorp/vault-plugin-secrets-openldap/pull/24)
+```
diff --git a/v1.14.6/changelog/12020.txt b/v1.14.6/changelog/12020.txt
new file mode 100644
index 0000000..c3c605d
--- /dev/null
+++ b/v1.14.6/changelog/12020.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/metrics: Add generic KV mount support for vault.kv.secret.count telemetry metric
+```
diff --git a/v1.14.6/changelog/12023.txt b/v1.14.6/changelog/12023.txt
new file mode 100644
index 0000000..8a3a87b
--- /dev/null
+++ b/v1.14.6/changelog/12023.txt
@@ -0,0 +1,9 @@
+```release-note:feature
+**GCP Secrets Engine Static Accounts**: Adds ability to use existing service accounts for generation
+of service account keys and access tokens.
+```
+
+```release-note:deprecation
+secrets/gcp: Deprecated the `/gcp/token/:roleset` and `/gcp/key/:roleset` paths for generating
+secrets for rolesets. Use `/gcp/roleset/:roleset/token` and `/gcp/roleset/:roleset/key` instead.
+```
diff --git a/v1.14.6/changelog/12024.txt b/v1.14.6/changelog/12024.txt
new file mode 100644
index 0000000..52e39a0
--- /dev/null
+++ b/v1.14.6/changelog/12024.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix control group access for database credential
+```
diff --git a/v1.14.6/changelog/12025.txt b/v1.14.6/changelog/12025.txt
new file mode 100644
index 0000000..79f14b1
--- /dev/null
+++ b/v1.14.6/changelog/12025.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add `prefix_filter` to telemetry config
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12026.txt b/v1.14.6/changelog/12026.txt
new file mode 100644
index 0000000..12b6cdd
--- /dev/null
+++ b/v1.14.6/changelog/12026.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/aws: Remove warning stating AWS Token TTL will be capped by the Default Lease TTL.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12031.txt b/v1.14.6/changelog/12031.txt
new file mode 100644
index 0000000..80cc8f3
--- /dev/null
+++ b/v1.14.6/changelog/12031.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Add support for response wrapping in `vault list` and `vault kv list` with output format other than `table`.
+```
diff --git a/v1.14.6/changelog/12034.txt b/v1.14.6/changelog/12034.txt
new file mode 100644
index 0000000..09f91f8
--- /dev/null
+++ b/v1.14.6/changelog/12034.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Tweak creation of vault.db file
+```
diff --git a/v1.14.6/changelog/12035.txt b/v1.14.6/changelog/12035.txt
new file mode 100644
index 0000000..b0f2745
--- /dev/null
+++ b/v1.14.6/changelog/12035.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Automatically refresh the page when user logs out
+```
diff --git a/v1.14.6/changelog/12042.txt b/v1.14.6/changelog/12042.txt
new file mode 100644
index 0000000..2ec23c8
--- /dev/null
+++ b/v1.14.6/changelog/12042.txt
@@ -0,0 +1,3 @@
+```release-note:changes
+api: A request that fails field validation will now be responded to with a 400 rather than 500.
+```
diff --git a/v1.14.6/changelog/12049.txt b/v1.14.6/changelog/12049.txt
new file mode 100644
index 0000000..103bc0c
--- /dev/null
+++ b/v1.14.6/changelog/12049.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Updated node to v14, latest stable build
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12066.txt b/v1.14.6/changelog/12066.txt
new file mode 100644
index 0000000..6a672ff
--- /dev/null
+++ b/v1.14.6/changelog/12066.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+secrets/aws: add support for custom IAM usernames
+```
diff --git a/v1.14.6/changelog/12071.txt b/v1.14.6/changelog/12071.txt
new file mode 100644
index 0000000..17b7c68
--- /dev/null
+++ b/v1.14.6/changelog/12071.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+core: Add a darwin/arm64 binary release supporting the Apple M1 CPU
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12073.txt b/v1.14.6/changelog/12073.txt
new file mode 100644
index 0000000..765e101
--- /dev/null
+++ b/v1.14.6/changelog/12073.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/kubernetes: Fix AliasLookahead to correctly extract ServiceAccount UID when using ephemeral JWTs
+```
diff --git a/v1.14.6/changelog/12079.txt b/v1.14.6/changelog/12079.txt
new file mode 100644
index 0000000..e41d032
--- /dev/null
+++ b/v1.14.6/changelog/12079.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix Version History queryParams on LinkedBlock
+```
diff --git a/v1.14.6/changelog/12084.txt b/v1.14.6/changelog/12084.txt
new file mode 100644
index 0000000..b2e5d51
--- /dev/null
+++ b/v1.14.6/changelog/12084.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Render dashes for secret empty states
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12087.txt b/v1.14.6/changelog/12087.txt
new file mode 100644
index 0000000..9141739
--- /dev/null
+++ b/v1.14.6/changelog/12087.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database: Fixed an issue that prevented external database plugin processes from restarting after a shutdown.
+```
diff --git a/v1.14.6/changelog/12111.txt b/v1.14.6/changelog/12111.txt
new file mode 100644
index 0000000..192b4a1
--- /dev/null
+++ b/v1.14.6/changelog/12111.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix database role CG access
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12115.txt b/v1.14.6/changelog/12115.txt
new file mode 100644
index 0000000..cb00d73
--- /dev/null
+++ b/v1.14.6/changelog/12115.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+service_registration/consul: Print config service_address set in DEBUG log
+```
diff --git a/v1.14.6/changelog/12117.txt b/v1.14.6/changelog/12117.txt
new file mode 100644
index 0000000..081a587
--- /dev/null
+++ b/v1.14.6/changelog/12117.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Allow cloning `api.Client` HTTP headers via `api.Config.CloneHeaders` or `api.Client.SetCloneHeaders`.
+```
diff --git a/v1.14.6/changelog/12126.txt b/v1.14.6/changelog/12126.txt
new file mode 100644
index 0000000..c53d2a1
--- /dev/null
+++ b/v1.14.6/changelog/12126.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/api: Providing consistency for the use of comma separated parameters in auth/secret enable/tune
+```
diff --git a/v1.14.6/changelog/12151.txt b/v1.14.6/changelog/12151.txt
new file mode 100644
index 0000000..2d2a834
--- /dev/null
+++ b/v1.14.6/changelog/12151.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: do not allow a role's token_ttl to be longer than the signing key's verification_ttl
+```
diff --git a/v1.14.6/changelog/12162.txt b/v1.14.6/changelog/12162.txt
new file mode 100644
index 0000000..70c943a
--- /dev/null
+++ b/v1.14.6/changelog/12162.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: Best-effort handling of cancelled contexts.
+```
diff --git a/v1.14.6/changelog/12163.txt b/v1.14.6/changelog/12163.txt
new file mode 100644
index 0000000..10af9d0
--- /dev/null
+++ b/v1.14.6/changelog/12163.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+serviceregistration: add `external-source: "vault"` metadata value for Consul registration.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12165.txt b/v1.14.6/changelog/12165.txt
new file mode 100644
index 0000000..c5e28ee
--- /dev/null
+++ b/v1.14.6/changelog/12165.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/aerospike: Upgrade `aerospike-client-go` to v5.6.0.
+```
diff --git a/v1.14.6/changelog/12166.txt b/v1.14.6/changelog/12166.txt
new file mode 100644
index 0000000..9cec76c
--- /dev/null
+++ b/v1.14.6/changelog/12166.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: add additional raft metrics relating to applied index and heartbeating; also ensure OSS standbys emit periodic metrics.
+```
diff --git a/v1.14.6/changelog/12169.txt b/v1.14.6/changelog/12169.txt
new file mode 100644
index 0000000..6842cbd
--- /dev/null
+++ b/v1.14.6/changelog/12169.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Add custom metadata to KV secret engine and metadata to config
+```
diff --git a/v1.14.6/changelog/12175.txt b/v1.14.6/changelog/12175.txt
new file mode 100644
index 0000000..a75b21c
--- /dev/null
+++ b/v1.14.6/changelog/12175.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: vault debug now puts newlines after every captured log line.
+```
diff --git a/v1.14.6/changelog/12185.txt b/v1.14.6/changelog/12185.txt
new file mode 100644
index 0000000..919da9e
--- /dev/null
+++ b/v1.14.6/changelog/12185.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/aws: Add conditional template that allows custom usernames for both STS and IAM cases
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12196.txt b/v1.14.6/changelog/12196.txt
new file mode 100644
index 0000000..28b6b64
--- /dev/null
+++ b/v1.14.6/changelog/12196.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): namespace header included in responses, Go client uses it when displaying error messages
+```
diff --git a/v1.14.6/changelog/12208.txt b/v1.14.6/changelog/12208.txt
new file mode 100644
index 0000000..ab1aa83
--- /dev/null
+++ b/v1.14.6/changelog/12208.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: disallow creation of role without a key parameter
+```
diff --git a/v1.14.6/changelog/12212.txt b/v1.14.6/changelog/12212.txt
new file mode 100644
index 0000000..5130815
--- /dev/null
+++ b/v1.14.6/changelog/12212.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: updating database TTL picker help text.
+```
diff --git a/v1.14.6/changelog/12229.txt b/v1.14.6/changelog/12229.txt
new file mode 100644
index 0000000..6503ba5
--- /dev/null
+++ b/v1.14.6/changelog/12229.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fix byte printing for diagnose disk checks
+```
diff --git a/v1.14.6/changelog/12245.txt b/v1.14.6/changelog/12245.txt
new file mode 100644
index 0000000..2bf1aee
--- /dev/null
+++ b/v1.14.6/changelog/12245.txt
@@ -0,0 +1,3 @@
+```release-note:change
+go: Update go version to 1.16.6
+```
diff --git a/v1.14.6/changelog/12253.txt b/v1.14.6/changelog/12253.txt
new file mode 100644
index 0000000..fdf704c
--- /dev/null
+++ b/v1.14.6/changelog/12253.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Update github.com/ulikunitz/xz to fix security vulnerability GHSA-25xm-hr59-7c27.
+```
diff --git a/v1.14.6/changelog/12255.txt b/v1.14.6/changelog/12255.txt
new file mode 100644
index 0000000..e4c4781
--- /dev/null
+++ b/v1.14.6/changelog/12255.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Upgrade github.com/gogo/protobuf
+```
diff --git a/v1.14.6/changelog/12262.txt b/v1.14.6/changelog/12262.txt
new file mode 100644
index 0000000..415c922
--- /dev/null
+++ b/v1.14.6/changelog/12262.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database/influxdb: Switch/upgrade to the `influxdb1-client` module
+```
diff --git a/v1.14.6/changelog/12265.txt b/v1.14.6/changelog/12265.txt
new file mode 100644
index 0000000..5527f32
--- /dev/null
+++ b/v1.14.6/changelog/12265.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/jwt: Fixes OIDC auth from the Vault UI when using `form_post` as the `oidc_response_mode`.
+```
diff --git a/v1.14.6/changelog/12295.txt b/v1.14.6/changelog/12295.txt
new file mode 100644
index 0000000..144ad0f
--- /dev/null
+++ b/v1.14.6/changelog/12295.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Creates new StatText component
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12301.txt b/v1.14.6/changelog/12301.txt
new file mode 100644
index 0000000..d4acaf2
--- /dev/null
+++ b/v1.14.6/changelog/12301.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+database/couchbase: change default template to truncate username at 128 characters
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12317.txt b/v1.14.6/changelog/12317.txt
new file mode 100644
index 0000000..4554419
--- /dev/null
+++ b/v1.14.6/changelog/12317.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+core (enterprise): Fixes reading raft auto-snapshot configuration from performance standby node
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12320.txt b/v1.14.6/changelog/12320.txt
new file mode 100644
index 0000000..f6091e1
--- /dev/null
+++ b/v1.14.6/changelog/12320.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/okta: Send x-forwarded-for in Okta Push Factor request
+```
diff --git a/v1.14.6/changelog/12338.txt b/v1.14.6/changelog/12338.txt
new file mode 100644
index 0000000..6faf03e
--- /dev/null
+++ b/v1.14.6/changelog/12338.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+api: Fixes storage APIs returning incorrect error when parsing responses
+```
diff --git a/v1.14.6/changelog/12339.txt b/v1.14.6/changelog/12339.txt
new file mode 100644
index 0000000..b82044e
--- /dev/null
+++ b/v1.14.6/changelog/12339.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Only delete quotas on primary cluster.
+```
diff --git a/v1.14.6/changelog/12340.txt b/v1.14.6/changelog/12340.txt
new file mode 100644
index 0000000..f40253a
--- /dev/null
+++ b/v1.14.6/changelog/12340.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+auth/aws: Fixes ec2 login no longer supporting DSA signature verification
+```
diff --git a/v1.14.6/changelog/12348.txt b/v1.14.6/changelog/12348.txt
new file mode 100644
index 0000000..80ac862
--- /dev/null
+++ b/v1.14.6/changelog/12348.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+ui: Fixes metrics page when read on counter config not allowed
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12351.txt b/v1.14.6/changelog/12351.txt
new file mode 100644
index 0000000..bb8f84a
--- /dev/null
+++ b/v1.14.6/changelog/12351.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+sdk/database: Fix a DeleteUser error message on the gRPC client.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12354.txt b/v1.14.6/changelog/12354.txt
new file mode 100644
index 0000000..bbf0e2e
--- /dev/null
+++ b/v1.14.6/changelog/12354.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed api explorer routing bug
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12357.txt b/v1.14.6/changelog/12357.txt
new file mode 100644
index 0000000..30de5af
--- /dev/null
+++ b/v1.14.6/changelog/12357.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed text overflow in flash messages
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12366.txt b/v1.14.6/changelog/12366.txt
new file mode 100644
index 0000000..e8c16d1
--- /dev/null
+++ b/v1.14.6/changelog/12366.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Support `addr_type=public_v6` in auto-join
+```
diff --git a/v1.14.6/changelog/12371.txt b/v1.14.6/changelog/12371.txt
new file mode 100644
index 0000000..eb36e1d
--- /dev/null
+++ b/v1.14.6/changelog/12371.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+identity: Fix a panic on arm64 platform when doing identity I/O.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12372.txt b/v1.14.6/changelog/12372.txt
new file mode 100644
index 0000000..22a64c9
--- /dev/null
+++ b/v1.14.6/changelog/12372.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+core/api: Fix an arm64 bug converting a negative int to an unsigned int
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12377.txt b/v1.14.6/changelog/12377.txt
new file mode 100644
index 0000000..d3bd52a
--- /dev/null
+++ b/v1.14.6/changelog/12377.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+physical/raft: Fix safeio.Rename error when restoring snapshots on windows
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12378.txt b/v1.14.6/changelog/12378.txt
new file mode 100644
index 0000000..336ceb8
--- /dev/null
+++ b/v1.14.6/changelog/12378.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+plugin/snowflake: Fixed bug where plugin would crash on 32 bit systems
+```
diff --git a/v1.14.6/changelog/12379.txt b/v1.14.6/changelog/12379.txt
new file mode 100644
index 0000000..c4b2397
--- /dev/null
+++ b/v1.14.6/changelog/12379.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/gcp: Fixes a potential panic in the service account policy rollback for rolesets.
+```
diff --git a/v1.14.6/changelog/12388.txt b/v1.14.6/changelog/12388.txt
new file mode 100644
index 0000000..f384c90
--- /dev/null
+++ b/v1.14.6/changelog/12388.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Detect incomplete raft snapshots in api.RaftSnapshot(), and thereby in `vault operator raft snapshot save`.
+```
diff --git a/v1.14.6/changelog/12393.txt b/v1.14.6/changelog/12393.txt
new file mode 100644
index 0000000..7997d51
--- /dev/null
+++ b/v1.14.6/changelog/12393.txt
@@ -0,0 +1,3 @@
+```release-note: improvement
+core: observe the client counts broken down by namespace for partial month client count
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12408.txt b/v1.14.6/changelog/12408.txt
new file mode 100644
index 0000000..5a5532b
--- /dev/null
+++ b/v1.14.6/changelog/12408.txt
@@ -0,0 +1,3 @@
+```release-note:change
+go: Update go version to 1.16.7
+```
diff --git a/v1.14.6/changelog/12409.txt b/v1.14.6/changelog/12409.txt
new file mode 100644
index 0000000..483a151
--- /dev/null
+++ b/v1.14.6/changelog/12409.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix issue where on MaskedInput on auth methods if tab it would clear the value.
+```
diff --git a/v1.14.6/changelog/12413.txt b/v1.14.6/changelog/12413.txt
new file mode 100644
index 0000000..cd90b6e
--- /dev/null
+++ b/v1.14.6/changelog/12413.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+storage/postgres: Update postgres library (github.com/lib/pq) to properly remove terminated TLS connections from the connection pool.
+database/postgres: Update postgres library (github.com/lib/pq) to properly remove terminated TLS connections from the connection pool.
+```
diff --git a/v1.14.6/changelog/12414.txt b/v1.14.6/changelog/12414.txt
new file mode 100644
index 0000000..5f3cfdd
--- /dev/null
+++ b/v1.14.6/changelog/12414.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity: fix issue where Cache-Control header causes stampede of requests for JWKS keys
+```
diff --git a/v1.14.6/changelog/12418.txt b/v1.14.6/changelog/12418.txt
new file mode 100644
index 0000000..e6c07e9
--- /dev/null
+++ b/v1.14.6/changelog/12418.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: Enforce minimum cache size for transit backend and init cache size on transit backend without restart.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12422.txt b/v1.14.6/changelog/12422.txt
new file mode 100644
index 0000000..728b4a3
--- /dev/null
+++ b/v1.14.6/changelog/12422.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: updated client tracking config view
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12425.txt b/v1.14.6/changelog/12425.txt
new file mode 100644
index 0000000..709e631
--- /dev/null
+++ b/v1.14.6/changelog/12425.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/approle: expose secret_id_accessor as WrappedAccessor when creating wrapped secret-id.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12428.txt b/v1.14.6/changelog/12428.txt
new file mode 100644
index 0000000..8daeb8a
--- /dev/null
+++ b/v1.14.6/changelog/12428.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: add api method for modifying raft autopilot configuration
+```
diff --git a/v1.14.6/changelog/12437.txt b/v1.14.6/changelog/12437.txt
new file mode 100644
index 0000000..d329e1b
--- /dev/null
+++ b/v1.14.6/changelog/12437.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: creates bar chart component for displaying client count data by namespace 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12443.txt b/v1.14.6/changelog/12443.txt
new file mode 100644
index 0000000..6014140
--- /dev/null
+++ b/v1.14.6/changelog/12443.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database/cassandra: change connect_timeout to 5s as documentation says
+```
diff --git a/v1.14.6/changelog/12451.txt b/v1.14.6/changelog/12451.txt
new file mode 100644
index 0000000..9cd265f
--- /dev/null
+++ b/v1.14.6/changelog/12451.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+nomad: Bootstrap Nomad ACL system if no token is provided
+```
diff --git a/v1.14.6/changelog/12473.txt b/v1.14.6/changelog/12473.txt
new file mode 100644
index 0000000..3a0ecdd
--- /dev/null
+++ b/v1.14.6/changelog/12473.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Fail alias rename if the resulting (name,accessor) exists already
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12478.txt b/v1.14.6/changelog/12478.txt
new file mode 100644
index 0000000..3704e9a
--- /dev/null
+++ b/v1.14.6/changelog/12478.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix missing navbar items on login to namespace
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12483.txt b/v1.14.6/changelog/12483.txt
new file mode 100644
index 0000000..da3a72a
--- /dev/null
+++ b/v1.14.6/changelog/12483.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugin: update the couchbase gocb version in the couchbase plugin
+```
diff --git a/v1.14.6/changelog/12485.txt b/v1.14.6/changelog/12485.txt
new file mode 100644
index 0000000..6c8a87c
--- /dev/null
+++ b/v1.14.6/changelog/12485.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Customizable HTTP Headers**: Add support to define custom HTTP headers for root path (`/`) and also on API endpoints (`/v1/*`)
+```
diff --git a/v1.14.6/changelog/12502.txt b/v1.14.6/changelog/12502.txt
new file mode 100644
index 0000000..4d24e7a
--- /dev/null
+++ b/v1.14.6/changelog/12502.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+core: adds custom_metadata field for aliases
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12505.txt b/v1.14.6/changelog/12505.txt
new file mode 100644
index 0000000..075e53d
--- /dev/null
+++ b/v1.14.6/changelog/12505.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/template: add support for new 'writeToFile' template function
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12508.txt b/v1.14.6/changelog/12508.txt
new file mode 100644
index 0000000..52c9e7c
--- /dev/null
+++ b/v1.14.6/changelog/12508.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: add new http option : -header which enable sending arbitrary headers with the cli
+```
diff --git a/v1.14.6/changelog/12514.txt b/v1.14.6/changelog/12514.txt
new file mode 100644
index 0000000..8f00061
--- /dev/null
+++ b/v1.14.6/changelog/12514.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow signing of self-issued certs with a different signature algorithm.
+```
diff --git a/v1.14.6/changelog/12519.txt b/v1.14.6/changelog/12519.txt
new file mode 100644
index 0000000..df383b9
--- /dev/null
+++ b/v1.14.6/changelog/12519.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/aws: Fix ec2 auth on instances that have a cert in their PKCS7 signature
+```
diff --git a/v1.14.6/changelog/12534.txt b/v1.14.6/changelog/12534.txt
new file mode 100644
index 0000000..d7c05f6
--- /dev/null
+++ b/v1.14.6/changelog/12534.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Avoid possible `unexpected fault address` panic when using persistent cache.
+```
diff --git a/v1.14.6/changelog/12541.txt b/v1.14.6/changelog/12541.txt
new file mode 100644
index 0000000..aa10c65
--- /dev/null
+++ b/v1.14.6/changelog/12541.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: parse and display pki cert metadata
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12550.txt b/v1.14.6/changelog/12550.txt
new file mode 100644
index 0000000..171a34b
--- /dev/null
+++ b/v1.14.6/changelog/12550.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix bug where capabilities check on secret-delete-menu was encoding the forward slashes.
+```
diff --git a/v1.14.6/changelog/12554.txt b/v1.14.6/changelog/12554.txt
new file mode 100644
index 0000000..e3549ec
--- /dev/null
+++ b/v1.14.6/changelog/12554.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: client count monthly view
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12559.txt b/v1.14.6/changelog/12559.txt
new file mode 100644
index 0000000..9bcd4e8
--- /dev/null
+++ b/v1.14.6/changelog/12559.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Use entropy augmentation when available when generating root and intermediate CA key material.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12560.txt b/v1.14.6/changelog/12560.txt
new file mode 100644
index 0000000..0b76337
--- /dev/null
+++ b/v1.14.6/changelog/12560.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Use entropy augmentation when available for generation of the signing key.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12563.txt b/v1.14.6/changelog/12563.txt
new file mode 100644
index 0000000..9298e82
--- /dev/null
+++ b/v1.14.6/changelog/12563.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/db: Fix bug where Vault can rotate static role passwords early during start up under certain conditions.
+```
diff --git a/v1.14.6/changelog/12565.txt b/v1.14.6/changelog/12565.txt
new file mode 100644
index 0000000..a125950
--- /dev/null
+++ b/v1.14.6/changelog/12565.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/token: Return the token_no_default_policy config on token role read if set
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12577.txt b/v1.14.6/changelog/12577.txt
new file mode 100644
index 0000000..7f69476
--- /dev/null
+++ b/v1.14.6/changelog/12577.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: namespace search in client count views
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12581.txt b/v1.14.6/changelog/12581.txt
new file mode 100644
index 0000000..2260987
--- /dev/null
+++ b/v1.14.6/changelog/12581.txt
@@ -0,0 +1,3 @@
+```release-note: improvements
+core/plugin: Update plugin proto to send tls.ConnectionState across gRPC boundary
+```
diff --git a/v1.14.6/changelog/12582.txt b/v1.14.6/changelog/12582.txt
new file mode 100644
index 0000000..6e5c0c9
--- /dev/null
+++ b/v1.14.6/changelog/12582.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Support VAULT_HTTP_PROXY environment variable to allow overriding the Vault client's HTTP proxy
+```
diff --git a/v1.14.6/changelog/12600.txt b/v1.14.6/changelog/12600.txt
new file mode 100644
index 0000000..45d34e9
--- /dev/null
+++ b/v1.14.6/changelog/12600.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/openldap: Fix bug where Vault can rotate static role passwords early during start up under certain conditions. [#28](https://github.com/hashicorp/vault-plugin-secrets-openldap/pull/28)
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12621.txt b/v1.14.6/changelog/12621.txt
new file mode 100644
index 0000000..b17ad16
--- /dev/null
+++ b/v1.14.6/changelog/12621.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/aws: add profile support for AWS credentials when using the AWS auth method
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12622.txt b/v1.14.6/changelog/12622.txt
new file mode 100644
index 0000000..5c2d569
--- /dev/null
+++ b/v1.14.6/changelog/12622.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: update bar chart when model changes
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12626.txt b/v1.14.6/changelog/12626.txt
new file mode 100644
index 0000000..7c3cc7c
--- /dev/null
+++ b/v1.14.6/changelog/12626.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add KV secret search box when no metadata list access.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12629.txt b/v1.14.6/changelog/12629.txt
new file mode 100644
index 0000000..39b3eba
--- /dev/null
+++ b/v1.14.6/changelog/12629.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/azure: Adds support for using Microsoft Graph API since Azure Active Directory API is being removed in 2022. [#67](https://github.com/hashicorp/vault-plugin-secrets-azure/pull/67)
+```
diff --git a/v1.14.6/changelog/12633.txt b/v1.14.6/changelog/12633.txt
new file mode 100644
index 0000000..d8f1609
--- /dev/null
+++ b/v1.14.6/changelog/12633.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+auth/kubernetes: Add ability to configure entity alias names based on the serviceaccount's namespace and name. [#110](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/110) [#112](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/112)
+```
diff --git a/v1.14.6/changelog/12635.txt b/v1.14.6/changelog/12635.txt
new file mode 100644
index 0000000..9e1a7d7
--- /dev/null
+++ b/v1.14.6/changelog/12635.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Fix bug where password generation through password policies do not work on namespaces if performed outside a request callback or from an external plugin.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12646.txt b/v1.14.6/changelog/12646.txt
new file mode 100644
index 0000000..e4f9385
--- /dev/null
+++ b/v1.14.6/changelog/12646.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix bug where edit role form on auth method is invalid by default
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12663.txt b/v1.14.6/changelog/12663.txt
new file mode 100644
index 0000000..aab6e38
--- /dev/null
+++ b/v1.14.6/changelog/12663.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add creation time to KV 2 version history and version view
+```
diff --git a/v1.14.6/changelog/12668.txt b/v1.14.6/changelog/12668.txt
new file mode 100644
index 0000000..7006da5
--- /dev/null
+++ b/v1.14.6/changelog/12668.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk/framework: The '+' wildcard is now supported for parameterizing unauthenticated paths.
+```
diff --git a/v1.14.6/changelog/12672.txt b/v1.14.6/changelog/12672.txt
new file mode 100644
index 0000000..62ac12b
--- /dev/null
+++ b/v1.14.6/changelog/12672.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Elasticsearch in the UI**: Elasticsearch DB is now supported by the UI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12687.txt b/v1.14.6/changelog/12687.txt
new file mode 100644
index 0000000..f5998de
--- /dev/null
+++ b/v1.14.6/changelog/12687.txt
@@ -0,0 +1,5 @@
+```release-note:feature
+**KV patch**: Add partial update support the for the `/<mount>/data/:path` kv-v2
+endpoint through HTTP `PATCH`.  A new `patch` ACL capability has been added and
+is required to make such requests.
+```
diff --git a/v1.14.6/changelog/12688.txt b/v1.14.6/changelog/12688.txt
new file mode 100644
index 0000000..e57e56b
--- /dev/null
+++ b/v1.14.6/changelog/12688.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/kubernetes: validate JWT against the provided role on alias look ahead operations
+```
diff --git a/v1.14.6/changelog/12691.txt b/v1.14.6/changelog/12691.txt
new file mode 100644
index 0000000..2a8efdc
--- /dev/null
+++ b/v1.14.6/changelog/12691.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix a deadlock on HA leadership transfer
+```
diff --git a/v1.14.6/changelog/12713.txt b/v1.14.6/changelog/12713.txt
new file mode 100644
index 0000000..2204a3d
--- /dev/null
+++ b/v1.14.6/changelog/12713.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+http: removed unpublished true from logical_system path, making openapi spec consistent with documentation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12715.txt b/v1.14.6/changelog/12715.txt
new file mode 100644
index 0000000..b4a61a7
--- /dev/null
+++ b/v1.14.6/changelog/12715.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/aws: fix config/rotate-root to store new key
+```
diff --git a/v1.14.6/changelog/12716.txt b/v1.14.6/changelog/12716.txt
new file mode 100644
index 0000000..9a41d31
--- /dev/null
+++ b/v1.14.6/changelog/12716.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+pki: Fix regression preventing email addresses being used as a common name within certificates
+```
diff --git a/v1.14.6/changelog/12718.txt b/v1.14.6/changelog/12718.txt
new file mode 100644
index 0000000..1e786d7
--- /dev/null
+++ b/v1.14.6/changelog/12718.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/cache: tolerate partial restore failure from persistent cache
+```
diff --git a/v1.14.6/changelog/12720.txt b/v1.14.6/changelog/12720.txt
new file mode 100644
index 0000000..2c21312
--- /dev/null
+++ b/v1.14.6/changelog/12720.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: fixes CLI requests when namespace is both provided as argument and part of the path
+```
diff --git a/v1.14.6/changelog/12724.txt b/v1.14.6/changelog/12724.txt
new file mode 100644
index 0000000..caeb6cf
--- /dev/null
+++ b/v1.14.6/changelog/12724.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Update Oracle Cloud library to enable seal integration with the uk-gov-london-1 region
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12731.txt b/v1.14.6/changelog/12731.txt
new file mode 100644
index 0000000..c883668
--- /dev/null
+++ b/v1.14.6/changelog/12731.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Move mergeStates and other required utils from agent to api module
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12747.txt b/v1.14.6/changelog/12747.txt
new file mode 100644
index 0000000..2347d30
--- /dev/null
+++ b/v1.14.6/changelog/12747.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Disallow entity alias creation/update if a conflicting alias exists for the target entity and mount combination
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12752.txt b/v1.14.6/changelog/12752.txt
new file mode 100644
index 0000000..c5f1856
--- /dev/null
+++ b/v1.14.6/changelog/12752.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Oracle DB in the UI**: Oracle DB connection is now supported in the UI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12762.txt b/v1.14.6/changelog/12762.txt
new file mode 100644
index 0000000..6c90c48
--- /dev/null
+++ b/v1.14.6/changelog/12762.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/cache: Use an in-process listener between consul-template and vault-agent when caching is enabled and either templates or a listener is defined
+```
diff --git a/v1.14.6/changelog/12763.txt b/v1.14.6/changelog/12763.txt
new file mode 100644
index 0000000..0deac4c
--- /dev/null
+++ b/v1.14.6/changelog/12763.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+core: Fix double counting for "route" metrics
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12770.txt b/v1.14.6/changelog/12770.txt
new file mode 100644
index 0000000..46d99f4
--- /dev/null
+++ b/v1.14.6/changelog/12770.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Filter DB connection attributes so only relevant attrs POST to backend 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12780.txt b/v1.14.6/changelog/12780.txt
new file mode 100644
index 0000000..61a2c5d
--- /dev/null
+++ b/v1.14.6/changelog/12780.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity/token: Only return keys from the `.well-known/keys` endpoint that are being used by roles to sign/verify tokens.
+```
diff --git a/v1.14.6/changelog/12787.txt b/v1.14.6/changelog/12787.txt
new file mode 100644
index 0000000..f7826b2
--- /dev/null
+++ b/v1.14.6/changelog/12787.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add support to list password policies at `sys/policies/password`
+```
diff --git a/v1.14.6/changelog/12788.txt b/v1.14.6/changelog/12788.txt
new file mode 100644
index 0000000..47dd965
--- /dev/null
+++ b/v1.14.6/changelog/12788.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/approle: The `role/:name/secret-id-accessor/lookup` endpoint now returns a 404 status code when the `secret_id_accessor` cannot be found
+```
diff --git a/v1.14.6/changelog/12790.txt b/v1.14.6/changelog/12790.txt
new file mode 100644
index 0000000..dbea34d
--- /dev/null
+++ b/v1.14.6/changelog/12790.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: The audit logs now contain the port used by the client
+```
diff --git a/v1.14.6/changelog/12791.txt b/v1.14.6/changelog/12791.txt
new file mode 100644
index 0000000..1aa881a
--- /dev/null
+++ b/v1.14.6/changelog/12791.txt
@@ -0,0 +1,3 @@
+```release-notes:improvemment
+core: `num_uses` is now returned during authentication
+```
diff --git a/v1.14.6/changelog/12792.txt b/v1.14.6/changelog/12792.txt
new file mode 100644
index 0000000..76f5875
--- /dev/null
+++ b/v1.14.6/changelog/12792.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Reading `sys/mounts/:path` now returns the configuration for the secret engine at the given path
+```
diff --git a/v1.14.6/changelog/12793.txt b/v1.14.6/changelog/12793.txt
new file mode 100644
index 0000000..617c20f
--- /dev/null
+++ b/v1.14.6/changelog/12793.txt
@@ -0,0 +1,3 @@
+```release-note: improvement
+auth: reading `sys/auth/:path` now returns the configuration for the auth engine mounted at the given path
+```
diff --git a/v1.14.6/changelog/12795.txt b/v1.14.6/changelog/12795.txt
new file mode 100644
index 0000000..5b360be
--- /dev/null
+++ b/v1.14.6/changelog/12795.txt
@@ -0,0 +1,3 @@
+```release-note:improvement

+core/pki: Support Y10K value in notAfter field to be compliant with IEEE 802.1AR-2018 standard

+```

diff --git a/v1.14.6/changelog/12796.txt b/v1.14.6/changelog/12796.txt
new file mode 100644
index 0000000..8c001f3
--- /dev/null
+++ b/v1.14.6/changelog/12796.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+api: adds native Login method to Go client module with different auth method interfaces to support easier authentication
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12800.txt b/v1.14.6/changelog/12800.txt
new file mode 100644
index 0000000..38aadc0
--- /dev/null
+++ b/v1.14.6/changelog/12800.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**OIDC Authorization Code Flow**: The Vault UI now supports OIDC Authorization Code Flow
+```
diff --git a/v1.14.6/changelog/12802.txt b/v1.14.6/changelog/12802.txt
new file mode 100644
index 0000000..9c49bf1
--- /dev/null
+++ b/v1.14.6/changelog/12802.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Operator diagnose now tests for missing or partial telemetry configurations.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12812.txt b/v1.14.6/changelog/12812.txt
new file mode 100644
index 0000000..2179340
--- /dev/null
+++ b/v1.14.6/changelog/12812.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: suppress duplicate policies on entities
+```
diff --git a/v1.14.6/changelog/12814.txt b/v1.14.6/changelog/12814.txt
new file mode 100644
index 0000000..9d5b541
--- /dev/null
+++ b/v1.14.6/changelog/12814.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Add configuration option for ensuring isolated read-after-write semantics for all Client requests.
+```
diff --git a/v1.14.6/changelog/12819.txt b/v1.14.6/changelog/12819.txt
new file mode 100644
index 0000000..80e772b
--- /dev/null
+++ b/v1.14.6/changelog/12819.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Removes empty rows from DB config views
+```
diff --git a/v1.14.6/changelog/12820.txt b/v1.14.6/changelog/12820.txt
new file mode 100644
index 0000000..c7b92e6
--- /dev/null
+++ b/v1.14.6/changelog/12820.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+Add ClientID to Token With Entities in Activity Log: Vault tokens without entities are now tracked with client IDs and deduplicated in the Activity Log
+```
diff --git a/v1.14.6/changelog/12834.txt b/v1.14.6/changelog/12834.txt
new file mode 100644
index 0000000..205b648
--- /dev/null
+++ b/v1.14.6/changelog/12834.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Cleanup alias in the in-memory entity after an alias deletion by ID
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12839.txt b/v1.14.6/changelog/12839.txt
new file mode 100644
index 0000000..f591936
--- /dev/null
+++ b/v1.14.6/changelog/12839.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database: Update MSSQL dependency github.com/denisenkom/go-mssqldb to v0.11.0 and include support for contained databases in MSSQL plugin
+```
diff --git a/v1.14.6/changelog/12843.txt b/v1.14.6/changelog/12843.txt
new file mode 100644
index 0000000..2beee7f
--- /dev/null
+++ b/v1.14.6/changelog/12843.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/cache: Process persistent cache leases in dependency order during restore to ensure child leases are always correctly restored
+```
diff --git a/v1.14.6/changelog/12847.txt b/v1.14.6/changelog/12847.txt
new file mode 100644
index 0000000..30c92d0
--- /dev/null
+++ b/v1.14.6/changelog/12847.txt
@@ -0,0 +1,5 @@
+```release-note:breaking-change
+secrets/ssh: Roles with empty allowed_extensions will now forbid end-users
+specifying extensions when requesting ssh key signing. Update roles setting
+allowed_extensions to '*' to permit any extension to be specified by an end-user.
+```
diff --git a/v1.14.6/changelog/12868.txt b/v1.14.6/changelog/12868.txt
new file mode 100644
index 0000000..1fe6ece
--- /dev/null
+++ b/v1.14.6/changelog/12868.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: build with Go 1.17, and mitigate a breaking change they made that could impact how approle and ssh interpret IPs/CIDRs
+```
diff --git a/v1.14.6/changelog/12872.txt b/v1.14.6/changelog/12872.txt
new file mode 100644
index 0000000..6a6157c
--- /dev/null
+++ b/v1.14.6/changelog/12872.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fixes around NIST P-curve signature hash length, default value for signature_bits changed to 0.
+```
diff --git a/v1.14.6/changelog/12876.txt b/v1.14.6/changelog/12876.txt
new file mode 100644
index 0000000..a5c0944
--- /dev/null
+++ b/v1.14.6/changelog/12876.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/oidc: Adds the `skip_browser` CLI option to allow users to skip opening the default browser during the authentication flow.
+```
diff --git a/v1.14.6/changelog/12877.txt b/v1.14.6/changelog/12877.txt
new file mode 100644
index 0000000..c17731c
--- /dev/null
+++ b/v1.14.6/changelog/12877.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/rabbitmq: Update dependency github.com/michaelklishin/rabbit-hole to v2 and resolve UserInfo.tags regression from RabbitMQ v3.9
+```
diff --git a/v1.14.6/changelog/12881.txt b/v1.14.6/changelog/12881.txt
new file mode 100644
index 0000000..3cdf5b4
--- /dev/null
+++ b/v1.14.6/changelog/12881.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command: operator generate-root -decode: allow passing encoded token via stdin
+```
diff --git a/v1.14.6/changelog/12885.txt b/v1.14.6/changelog/12885.txt
new file mode 100644
index 0000000..4018b93
--- /dev/null
+++ b/v1.14.6/changelog/12885.txt
@@ -0,0 +1,3 @@
+```release-note:feature:
+secrets/pki: Add `tidy-status` endpoint to obtain information of the current or most recent tidy operation.
+```
diff --git a/v1.14.6/changelog/12887.txt b/v1.14.6/changelog/12887.txt
new file mode 100644
index 0000000..92ce4c8
--- /dev/null
+++ b/v1.14.6/changelog/12887.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Remove spinner after token renew
+```
diff --git a/v1.14.6/changelog/12888.txt b/v1.14.6/changelog/12888.txt
new file mode 100644
index 0000000..f7c3d56
--- /dev/null
+++ b/v1.14.6/changelog/12888.txt
@@ -0,0 +1,7 @@
+```release-note:change
+expiration: VAULT_LEASE_USE_LEGACY_REVOCATION_STRATEGY environment variable has
+been removed.
+```
+```release-note:change
+expiration: VAULT_16_REVOKE_PERMITPOOL environment variable has been removed.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12890.txt b/v1.14.6/changelog/12890.txt
new file mode 100644
index 0000000..603e72d
--- /dev/null
+++ b/v1.14.6/changelog/12890.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Click to copy database static role last rotation value in tooltip 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12895.txt b/v1.14.6/changelog/12895.txt
new file mode 100644
index 0000000..ff9a66e
--- /dev/null
+++ b/v1.14.6/changelog/12895.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Standardizes toolbar presentation of destructive actions 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12903.txt b/v1.14.6/changelog/12903.txt
new file mode 100644
index 0000000..f14762d
--- /dev/null
+++ b/v1.14.6/changelog/12903.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+db/cassandra: make the connect_timeout config option actually apply to connection timeouts, in addition to non-connection operations
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12904.txt b/v1.14.6/changelog/12904.txt
new file mode 100644
index 0000000..e65636b
--- /dev/null
+++ b/v1.14.6/changelog/12904.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Removes ability to tune token_type for token auth methods 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12906.txt b/v1.14.6/changelog/12906.txt
new file mode 100644
index 0000000..69e96ad
--- /dev/null
+++ b/v1.14.6/changelog/12906.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Added resize for JSON editor [[GH-12906](https://github.com/hashicorp/vault/pull/12906)]
+```
diff --git a/v1.14.6/changelog/12907.txt b/v1.14.6/changelog/12907.txt
new file mode 100644
index 0000000..c4c8c5d
--- /dev/null
+++ b/v1.14.6/changelog/12907.txt
@@ -0,0 +1,5 @@
+```release-note:feature
+**KV Custom Metadata**: Add ability in kv-v2 to specify version-agnostic custom key metadata via the
+metadata endpoint. The data will be present in responses made to the data endpoint independent of the
+calling token's `read` access to the metadata endpoint.
+```
diff --git a/v1.14.6/changelog/12908.txt b/v1.14.6/changelog/12908.txt
new file mode 100644
index 0000000..2e54217
--- /dev/null
+++ b/v1.14.6/changelog/12908.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Updates font for table row value fields 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12911.txt b/v1.14.6/changelog/12911.txt
new file mode 100644
index 0000000..2c21312
--- /dev/null
+++ b/v1.14.6/changelog/12911.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: fixes CLI requests when namespace is both provided as argument and part of the path
+```
diff --git a/v1.14.6/changelog/12916.txt b/v1.14.6/changelog/12916.txt
new file mode 100644
index 0000000..8d75b39
--- /dev/null
+++ b/v1.14.6/changelog/12916.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/token: Adds missing call to unlock mutex in key deletion error handling
+```
diff --git a/v1.14.6/changelog/12921.txt b/v1.14.6/changelog/12921.txt
new file mode 100644
index 0000000..77bb465
--- /dev/null
+++ b/v1.14.6/changelog/12921.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds warning about white space in KV secret engine.
+```
diff --git a/v1.14.6/changelog/12932.txt b/v1.14.6/changelog/12932.txt
new file mode 100644
index 0000000..cd2224e
--- /dev/null
+++ b/v1.14.6/changelog/12932.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**OIDC Identity Provider (Tech Preview)**: Adds support for Vault to be an OpenID Connect (OIDC) provider.
+```
diff --git a/v1.14.6/changelog/12934.txt b/v1.14.6/changelog/12934.txt
new file mode 100644
index 0000000..fbc6aa5
--- /dev/null
+++ b/v1.14.6/changelog/12934.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/keymgmt (enterprise): Fix support for Azure Managed HSM Key Vault instances.
+```
diff --git a/v1.14.6/changelog/12945.txt b/v1.14.6/changelog/12945.txt
new file mode 100644
index 0000000..1283787
--- /dev/null
+++ b/v1.14.6/changelog/12945.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Postgres in the UI**: Postgres DB is now supported by the UI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/12965.txt b/v1.14.6/changelog/12965.txt
new file mode 100644
index 0000000..4045d55
--- /dev/null
+++ b/v1.14.6/changelog/12965.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cockroachdb: add high-availability support
+```
diff --git a/v1.14.6/changelog/12976.txt b/v1.14.6/changelog/12976.txt
new file mode 100644
index 0000000..1dea358
--- /dev/null
+++ b/v1.14.6/changelog/12976.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds flight icons to UI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13000.txt b/v1.14.6/changelog/13000.txt
new file mode 100644
index 0000000..daddd07
--- /dev/null
+++ b/v1.14.6/changelog/13000.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add version diff view for KV V2
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13015.txt b/v1.14.6/changelog/13015.txt
new file mode 100644
index 0000000..48fd263
--- /dev/null
+++ b/v1.14.6/changelog/13015.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Display badge for all versions in secrets engine header
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13022.txt b/v1.14.6/changelog/13022.txt
new file mode 100644
index 0000000..bb3d3a6
--- /dev/null
+++ b/v1.14.6/changelog/13022.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Implements Login method in Go client libraries for GCP and Azure auth methods
+```
diff --git a/v1.14.6/changelog/13024.txt b/v1.14.6/changelog/13024.txt
new file mode 100644
index 0000000..765d5e1
--- /dev/null
+++ b/v1.14.6/changelog/13024.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Report in-flight requests**: Adding a trace capability to show in-flight requests, and a new gauge metric to show the total number of in-flight requests
+```
diff --git a/v1.14.6/changelog/13032.txt b/v1.14.6/changelog/13032.txt
new file mode 100644
index 0000000..b3ea4cd
--- /dev/null
+++ b/v1.14.6/changelog/13032.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes long secret key names overlapping masked values
+```
diff --git a/v1.14.6/changelog/13033.txt b/v1.14.6/changelog/13033.txt
new file mode 100644
index 0000000..53ee82f
--- /dev/null
+++ b/v1.14.6/changelog/13033.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugin/couchbase: Fix an issue in which the locking patterns did not allow parallel requests.
+```
diff --git a/v1.14.6/changelog/13034.txt b/v1.14.6/changelog/13034.txt
new file mode 100644
index 0000000..36c8f7f
--- /dev/null
+++ b/v1.14.6/changelog/13034.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/azure: Adds support for rotate-root. [#70](https://github.com/hashicorp/vault-plugin-secrets-azure/pull/70)
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13038.txt b/v1.14.6/changelog/13038.txt
new file mode 100644
index 0000000..cf20dec
--- /dev/null
+++ b/v1.14.6/changelog/13038.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with the number of PGP Key inputs not matching the key shares number in the initialization form on change
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13042.txt b/v1.14.6/changelog/13042.txt
new file mode 100644
index 0000000..192b4d4
--- /dev/null
+++ b/v1.14.6/changelog/13042.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix warnings logged on perf standbys re stored versions
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13044.txt b/v1.14.6/changelog/13044.txt
new file mode 100644
index 0000000..3896544
--- /dev/null
+++ b/v1.14.6/changelog/13044.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Trim newline character from wrapping token in logical.Unwrap from the api package
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13054.txt b/v1.14.6/changelog/13054.txt
new file mode 100644
index 0000000..f48d68b
--- /dev/null
+++ b/v1.14.6/changelog/13054.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Adds pagination to auth methods list view
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13078.txt b/v1.14.6/changelog/13078.txt
new file mode 100644
index 0000000..789445b
--- /dev/null
+++ b/v1.14.6/changelog/13078.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Periodically test the health of connectivity to auto-seal backends
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13080.txt b/v1.14.6/changelog/13080.txt
new file mode 100644
index 0000000..9c3ed52
--- /dev/null
+++ b/v1.14.6/changelog/13080.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Default value for key_bits changed to 0, enabling key_type=ec key generation with default value
+```
diff --git a/v1.14.6/changelog/13086.txt b/v1.14.6/changelog/13086.txt
new file mode 100644
index 0000000..d8c92ba
--- /dev/null
+++ b/v1.14.6/changelog/13086.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+activity log (enterprise): allow partial monthly client count to be accessed from namespaces
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13090.txt b/v1.14.6/changelog/13090.txt
new file mode 100644
index 0000000..82ad157
--- /dev/null
+++ b/v1.14.6/changelog/13090.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: customizes empty state messages for transit and transform
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13093.txt b/v1.14.6/changelog/13093.txt
new file mode 100644
index 0000000..d5b8af0
--- /dev/null
+++ b/v1.14.6/changelog/13093.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Address a data race condition between local updates to aliases and invalidations
+```
diff --git a/v1.14.6/changelog/13098.txt b/v1.14.6/changelog/13098.txt
new file mode 100644
index 0000000..84bbcbf
--- /dev/null
+++ b/v1.14.6/changelog/13098.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue removing raft storage peer via cli not reflected in UI until refresh
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13107.txt b/v1.14.6/changelog/13107.txt
new file mode 100644
index 0000000..50f01ef
--- /dev/null
+++ b/v1.14.6/changelog/13107.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue restoring raft storage snapshot
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13111.txt b/v1.14.6/changelog/13111.txt
new file mode 100644
index 0000000..800cabd
--- /dev/null
+++ b/v1.14.6/changelog/13111.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Don't abort transit encrypt or decrypt batches on single item failure.
+```
diff --git a/v1.14.6/changelog/13133.txt b/v1.14.6/changelog/13133.txt
new file mode 100644
index 0000000..ae39a1c
--- /dev/null
+++ b/v1.14.6/changelog/13133.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with OIDC auth workflow when using MetaMask Chrome extension
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13146.txt b/v1.14.6/changelog/13146.txt
new file mode 100644
index 0000000..6bbe85e
--- /dev/null
+++ b/v1.14.6/changelog/13146.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk/queue: move lock before length check to prevent panics.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13149.txt b/v1.14.6/changelog/13149.txt
new file mode 100644
index 0000000..54bcf18
--- /dev/null
+++ b/v1.14.6/changelog/13149.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Updates ember blueprints to glimmer components 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13152.txt b/v1.14.6/changelog/13152.txt
new file mode 100644
index 0000000..88c2f0e
--- /dev/null
+++ b/v1.14.6/changelog/13152.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Do not show verify connection value on database connection config page
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13162.txt b/v1.14.6/changelog/13162.txt
new file mode 100644
index 0000000..273a7e5
--- /dev/null
+++ b/v1.14.6/changelog/13162.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: authentication to "login" endpoint for non-existent mount path returns permission denied with status code 403
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13165.txt b/v1.14.6/changelog/13165.txt
new file mode 100644
index 0000000..4a0cbe9
--- /dev/null
+++ b/v1.14.6/changelog/13165.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix regression in 1.9.0-rc1 that changed how time is represented in Raft logs; this prevented using a raft db created pre-1.9.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13166.txt b/v1.14.6/changelog/13166.txt
new file mode 100644
index 0000000..ff1ab5f
--- /dev/null
+++ b/v1.14.6/changelog/13166.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with placeholder not displaying for automatically deleted secrets when deletion time has passed
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13168.txt b/v1.14.6/changelog/13168.txt
new file mode 100644
index 0000000..0782766
--- /dev/null
+++ b/v1.14.6/changelog/13168.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: revert some unintentionally downgraded dependencies from 1.9.0-rc1
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13169.txt b/v1.14.6/changelog/13169.txt
new file mode 100644
index 0000000..5b2236e
--- /dev/null
+++ b/v1.14.6/changelog/13169.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Fix regression preventing startup when aliases were created pre-1.9.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13177.txt b/v1.14.6/changelog/13177.txt
new file mode 100644
index 0000000..fd59459
--- /dev/null
+++ b/v1.14.6/changelog/13177.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with automate secret deletion value not displaying initially if set in secret metadata edit view
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13178.txt b/v1.14.6/changelog/13178.txt
new file mode 100644
index 0000000..67f6b2a
--- /dev/null
+++ b/v1.14.6/changelog/13178.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: Set InitialMmapSize to 100GB on 64bit architectures
+```
diff --git a/v1.14.6/changelog/13195.txt b/v1.14.6/changelog/13195.txt
new file mode 100644
index 0000000..0f9ce70
--- /dev/null
+++ b/v1.14.6/changelog/13195.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Added client side paging for namespace list view
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13200.txt b/v1.14.6/changelog/13200.txt
new file mode 100644
index 0000000..18b2cee
--- /dev/null
+++ b/v1.14.6/changelog/13200.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+http:Fix /sys/monitor endpoint returning streaming not supported
+```
diff --git a/v1.14.6/changelog/13215.txt b/v1.14.6/changelog/13215.txt
new file mode 100644
index 0000000..20a787e
--- /dev/null
+++ b/v1.14.6/changelog/13215.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kv: add patch support for KVv2 key metadata
+```
diff --git a/v1.14.6/changelog/13231.txt b/v1.14.6/changelog/13231.txt
new file mode 100644
index 0000000..3af5233
--- /dev/null
+++ b/v1.14.6/changelog/13231.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Make the `nonce` parameter optional for the Authorization Endpoint of OIDC providers.
+```
diff --git a/v1.14.6/changelog/13233.txt b/v1.14.6/changelog/13233.txt
new file mode 100644
index 0000000..718f520
--- /dev/null
+++ b/v1.14.6/changelog/13233.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/token: Fix null token panic from 'v1/auth/token/' endpoints and return proper error response.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13235.txt b/v1.14.6/changelog/13235.txt
new file mode 100644
index 0000000..50c3035
--- /dev/null
+++ b/v1.14.6/changelog/13235.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/approle: Fix regression where unset cidrlist is returned as nil instead of zero-length array.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13236.txt b/v1.14.6/changelog/13236.txt
new file mode 100644
index 0000000..568f021
--- /dev/null
+++ b/v1.14.6/changelog/13236.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/token: Fix null token_type panic resulting from 'v1/auth/token/roles/{role_name}' endpoint
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13238.txt b/v1.14.6/changelog/13238.txt
new file mode 100644
index 0000000..7b11758
--- /dev/null
+++ b/v1.14.6/changelog/13238.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes node-forge error when parsing EC (elliptical curve) certs
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13241.txt b/v1.14.6/changelog/13241.txt
new file mode 100644
index 0000000..aa5ead9
--- /dev/null
+++ b/v1.14.6/changelog/13241.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: respect WithWrappingToken() option during AppRole login authentication when used with secret ID specified from environment or from string
+```
diff --git a/v1.14.6/changelog/13254.txt b/v1.14.6/changelog/13254.txt
new file mode 100644
index 0000000..581d74b
--- /dev/null
+++ b/v1.14.6/changelog/13254.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Skip signature bits validation for ed25519 curve key type
+```
diff --git a/v1.14.6/changelog/13257.txt b/v1.14.6/changelog/13257.txt
new file mode 100644
index 0000000..10a4902
--- /dev/null
+++ b/v1.14.6/changelog/13257.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Recognize ed25519 when requesting a response in PKCS8 format
+```
diff --git a/v1.14.6/changelog/13277.txt b/v1.14.6/changelog/13277.txt
new file mode 100644
index 0000000..28de86b
--- /dev/null
+++ b/v1.14.6/changelog/13277.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/azure: Fixes service principal generation when assigning roles that have [DataActions](https://docs.microsoft.com/en-us/azure/role-based-access-control/role-definitions#dataactions). 
+```
diff --git a/v1.14.6/changelog/13282.txt b/v1.14.6/changelog/13282.txt
new file mode 100644
index 0000000..2c32209
--- /dev/null
+++ b/v1.14.6/changelog/13282.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix a panic when trying to write a key > 32KB
+```
diff --git a/v1.14.6/changelog/13286.txt b/v1.14.6/changelog/13286.txt
new file mode 100644
index 0000000..9d39be6
--- /dev/null
+++ b/v1.14.6/changelog/13286.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix a panic when trying to store a key > 32KB in a transaction.
+```
diff --git a/v1.14.6/changelog/13292.txt b/v1.14.6/changelog/13292.txt
new file mode 100644
index 0000000..e394338
--- /dev/null
+++ b/v1.14.6/changelog/13292.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/ha: Add new mechanism for keeping track of peers talking to active node, and new 'operator members' command to view them.
+```
diff --git a/v1.14.6/changelog/13298.txt b/v1.14.6/changelog/13298.txt
new file mode 100644
index 0000000..893ab12
--- /dev/null
+++ b/v1.14.6/changelog/13298.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Fixes a panic in the OIDC key rotation due to a missing nil check.
+```
diff --git a/v1.14.6/changelog/13318.txt b/v1.14.6/changelog/13318.txt
new file mode 100644
index 0000000..79ddb15
--- /dev/null
+++ b/v1.14.6/changelog/13318.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Fix possible nil pointer dereference.
+```
diff --git a/v1.14.6/changelog/13324.txt b/v1.14.6/changelog/13324.txt
new file mode 100644
index 0000000..f0bced3
--- /dev/null
+++ b/v1.14.6/changelog/13324.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Replace "master key" terminology with "root key"
+```
diff --git a/v1.14.6/changelog/13332.txt b/v1.14.6/changelog/13332.txt
new file mode 100644
index 0000000..968f32a
--- /dev/null
+++ b/v1.14.6/changelog/13332.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/github: Use the Organization ID instead of the Organization name to verify the org membership.
+```
diff --git a/v1.14.6/changelog/13348.txt b/v1.14.6/changelog/13348.txt
new file mode 100644
index 0000000..f7ca0c9
--- /dev/null
+++ b/v1.14.6/changelog/13348.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/cert: Add certificate extensions as metadata
+```
diff --git a/v1.14.6/changelog/13365.txt b/v1.14.6/changelog/13365.txt
new file mode 100644
index 0000000..65284ab
--- /dev/null
+++ b/v1.14.6/changelog/13365.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/jwt: The Authorization Code flow makes use of the Proof Key for Code Exchange (PKCE) extension.
+```
diff --git a/v1.14.6/changelog/13367.txt b/v1.14.6/changelog/13367.txt
new file mode 100644
index 0000000..85bbe5e
--- /dev/null
+++ b/v1.14.6/changelog/13367.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Transit SHA-3 Support**: Add support for SHA-3 in the Transit backend.
+```
diff --git a/v1.14.6/changelog/13395.txt b/v1.14.6/changelog/13395.txt
new file mode 100644
index 0000000..d8f2e71
--- /dev/null
+++ b/v1.14.6/changelog/13395.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/identity: Support updating an alias' `custom_metadata` to be empty.
+```
diff --git a/v1.14.6/changelog/13396.txt b/v1.14.6/changelog/13396.txt
new file mode 100644
index 0000000..6600abe
--- /dev/null
+++ b/v1.14.6/changelog/13396.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix client count current month data not showing unless monthly history data exists
+```
diff --git a/v1.14.6/changelog/13408.txt b/v1.14.6/changelog/13408.txt
new file mode 100644
index 0000000..4861b17
--- /dev/null
+++ b/v1.14.6/changelog/13408.txt
@@ -0,0 +1,3 @@
+```release-note:change
+go: Update go version to 1.17.5
+```
diff --git a/v1.14.6/changelog/13414.txt b/v1.14.6/changelog/13414.txt
new file mode 100644
index 0000000..54ae53d
--- /dev/null
+++ b/v1.14.6/changelog/13414.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database: Add database configuration parameter 'disable_escaping' for username and password when connecting to a database.
+```
diff --git a/v1.14.6/changelog/13439.txt b/v1.14.6/changelog/13439.txt
new file mode 100644
index 0000000..a7f76de
--- /dev/null
+++ b/v1.14.6/changelog/13439.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/okta: Update [okta-sdk-golang](https://github.com/okta/okta-sdk-golang) dependency to version v2.9.1 for improved request backoff handling
+```
diff --git a/v1.14.6/changelog/13443.txt b/v1.14.6/changelog/13443.txt
new file mode 100644
index 0000000..74a995c
--- /dev/null
+++ b/v1.14.6/changelog/13443.txt
@@ -0,0 +1,3 @@
+```release-note:change
+ui: Upgrade Ember to version 3.24
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13452.txt b/v1.14.6/changelog/13452.txt
new file mode 100644
index 0000000..6177230
--- /dev/null
+++ b/v1.14.6/changelog/13452.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk/helper/ldaputil: properly escape a trailing escape character to prevent panics.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13469.txt b/v1.14.6/changelog/13469.txt
new file mode 100644
index 0000000..97cb471
--- /dev/null
+++ b/v1.14.6/changelog/13469.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database/mssql: Accept a boolean for `contained_db`, rather than just a string.
+```
diff --git a/v1.14.6/changelog/13476.txt b/v1.14.6/changelog/13476.txt
new file mode 100644
index 0000000..d5b8af0
--- /dev/null
+++ b/v1.14.6/changelog/13476.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Address a data race condition between local updates to aliases and invalidations
+```
diff --git a/v1.14.6/changelog/13486.txt b/v1.14.6/changelog/13486.txt
new file mode 100644
index 0000000..493d363
--- /dev/null
+++ b/v1.14.6/changelog/13486.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api/client: Fixes an issue where the `replicateStateStore` was being set to `nil` upon consecutive calls to `client.SetReadYourWrites(true)`.
+```
diff --git a/v1.14.6/changelog/13487.txt b/v1.14.6/changelog/13487.txt
new file mode 100644
index 0000000..1df81d2
--- /dev/null
+++ b/v1.14.6/changelog/13487.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk/framework: Generate proper OpenAPI specs for path patterns that use an alternation as the root.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13492.txt b/v1.14.6/changelog/13492.txt
new file mode 100644
index 0000000..81841fa
--- /dev/null
+++ b/v1.14.6/changelog/13492.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/oidc: Fixes OIDC auth from the Vault UI when using the implicit flow and `form_post` response mode.
+```
diff --git a/v1.14.6/changelog/13515.txt b/v1.14.6/changelog/13515.txt
new file mode 100644
index 0000000..7c34dc9
--- /dev/null
+++ b/v1.14.6/changelog/13515.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Allow cloning `api.Client` tokens via `api.Config.CloneToken` or `api.Client.SetCloneToken()`.
+```
diff --git a/v1.14.6/changelog/13537.txt b/v1.14.6/changelog/13537.txt
new file mode 100644
index 0000000..d1c31af
--- /dev/null
+++ b/v1.14.6/changelog/13537.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sys/raw: Enhance sys/raw to read and write values that cannot be encoded in json.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13540.txt b/v1.14.6/changelog/13540.txt
new file mode 100644
index 0000000..05fd83d
--- /dev/null
+++ b/v1.14.6/changelog/13540.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core: Vault now supports the PROXY protocol v2. Support for UNKNOWN connections
+has also been added to the PROXY protocol v1.
+```
diff --git a/v1.14.6/changelog/13548.txt b/v1.14.6/changelog/13548.txt
new file mode 100644
index 0000000..0edc831
--- /dev/null
+++ b/v1.14.6/changelog/13548.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/gcp: Fixes role bindings for BigQuery dataset resources.
+```
diff --git a/v1.14.6/changelog/13573.txt b/v1.14.6/changelog/13573.txt
new file mode 100644
index 0000000..f908854
--- /dev/null
+++ b/v1.14.6/changelog/13573.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: On linux, use map_populate for bolt files to improve startup time.
+```
diff --git a/v1.14.6/changelog/13585.txt b/v1.14.6/changelog/13585.txt
new file mode 100644
index 0000000..886c8ed
--- /dev/null
+++ b/v1.14.6/changelog/13585.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue saving KMIP role correctly
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13590.txt b/v1.14.6/changelog/13590.txt
new file mode 100644
index 0000000..8731607
--- /dev/null
+++ b/v1.14.6/changelog/13590.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with SearchSelect component not holding focus
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13595.txt b/v1.14.6/changelog/13595.txt
new file mode 100644
index 0000000..ae86886
--- /dev/null
+++ b/v1.14.6/changelog/13595.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/kubernetes: Added support for dynamically reloading short-lived tokens for better Kubernetes 1.21+ compatibility
+```
diff --git a/v1.14.6/changelog/13604.txt b/v1.14.6/changelog/13604.txt
new file mode 100644
index 0000000..c74a2e2
--- /dev/null
+++ b/v1.14.6/changelog/13604.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes breadcrumb bug for secrets navigation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13606.txt b/v1.14.6/changelog/13606.txt
new file mode 100644
index 0000000..c41abba
--- /dev/null
+++ b/v1.14.6/changelog/13606.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: When using retry_join stanzas, join against all of them in parallel.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13615.txt b/v1.14.6/changelog/13615.txt
new file mode 100644
index 0000000..8e9a678
--- /dev/null
+++ b/v1.14.6/changelog/13615.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fix using kv patch with older server versions that don't support HTTP PATCH.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13643.txt b/v1.14.6/changelog/13643.txt
new file mode 100644
index 0000000..fd3c278
--- /dev/null
+++ b/v1.14.6/changelog/13643.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk: Fixes OpenAPI to distinguish between paths that can do only List, or both List and Read.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13660.txt b/v1.14.6/changelog/13660.txt
new file mode 100644
index 0000000..1920afe
--- /dev/null
+++ b/v1.14.6/changelog/13660.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: `-output-curl-string` now properly sets cURL options for client and CA
+certificates.
+```
diff --git a/v1.14.6/changelog/13661.txt b/v1.14.6/changelog/13661.txt
new file mode 100644
index 0000000..99ea592
--- /dev/null
+++ b/v1.14.6/changelog/13661.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth/token: The `auth/token/revoke-accessor` endpoint is now idempotent and will
+not error out if the token has already been revoked.
+```
diff --git a/v1.14.6/changelog/13667.txt b/v1.14.6/changelog/13667.txt
new file mode 100644
index 0000000..5c0c2b8
--- /dev/null
+++ b/v1.14.6/changelog/13667.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Fixes code scanning alerts
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13669.txt b/v1.14.6/changelog/13669.txt
new file mode 100644
index 0000000..01d4fe4
--- /dev/null
+++ b/v1.14.6/changelog/13669.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: Add username to alias metadata
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13675.txt b/v1.14.6/changelog/13675.txt
new file mode 100644
index 0000000..3441db3
--- /dev/null
+++ b/v1.14.6/changelog/13675.txt
@@ -0,0 +1,4 @@
+```release-note:feature
+agent: The Vault agent now returns telemetry information at the `/agent/v1/metrics`
+path.
+```
diff --git a/v1.14.6/changelog/13678.txt b/v1.14.6/changelog/13678.txt
new file mode 100644
index 0000000..f8cbbf3
--- /dev/null
+++ b/v1.14.6/changelog/13678.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: add support for go-sockaddr templates in the top-level cluster_addr field
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13682.txt b/v1.14.6/changelog/13682.txt
new file mode 100644
index 0000000..3eb908d
--- /dev/null
+++ b/v1.14.6/changelog/13682.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add duration and start_time to completed requests log entries
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13683.txt b/v1.14.6/changelog/13683.txt
new file mode 100644
index 0000000..4b5fa51
--- /dev/null
+++ b/v1.14.6/changelog/13683.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+ui: The integrated web terminal now accepts both `-f` and `--force` as aliases
+for `-force` for the `write` commmand.
+```
diff --git a/v1.14.6/changelog/13690.txt b/v1.14.6/changelog/13690.txt
new file mode 100644
index 0000000..03bbc11
--- /dev/null
+++ b/v1.14.6/changelog/13690.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: Ensure that Vault does not panic for invalid nonce size when we aren't in convergent encryption mode.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13691.txt b/v1.14.6/changelog/13691.txt
new file mode 100644
index 0000000..b3c0cb9
--- /dev/null
+++ b/v1.14.6/changelog/13691.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Transit Time-Based Key Autorotation**: Add support for automatic, time-based key rotation to transit secrets engine.
+```
diff --git a/v1.14.6/changelog/13703.txt b/v1.14.6/changelog/13703.txt
new file mode 100644
index 0000000..c713630
--- /dev/null
+++ b/v1.14.6/changelog/13703.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix issues allowing invalid nodes to become leadership candidates.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13716.txt b/v1.14.6/changelog/13716.txt
new file mode 100644
index 0000000..e7d35a0
--- /dev/null
+++ b/v1.14.6/changelog/13716.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Check for a nil signing key on rotation to prevent panics.
+```
diff --git a/v1.14.6/changelog/13736.txt b/v1.14.6/changelog/13736.txt
new file mode 100644
index 0000000..f90f363
--- /dev/null
+++ b/v1.14.6/changelog/13736.txt
@@ -0,0 +1,3 @@
+```release-note:improvement

+core/pki: Support Y10K value in notAfter field when signing non-CA certificates

+```

diff --git a/v1.14.6/changelog/13749.txt b/v1.14.6/changelog/13749.txt
new file mode 100644
index 0000000..f760799
--- /dev/null
+++ b/v1.14.6/changelog/13749.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Units for bolt metrics now given in milliseconds instead of nanoseconds
+```
diff --git a/v1.14.6/changelog/13759.txt b/v1.14.6/changelog/13759.txt
new file mode 100644
index 0000000..8c66ff5
--- /dev/null
+++ b/v1.14.6/changelog/13759.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix regression causing performance secondaries to forward certificate generation to the primary.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13766.txt b/v1.14.6/changelog/13766.txt
new file mode 100644
index 0000000..14913c1
--- /dev/null
+++ b/v1.14.6/changelog/13766.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add support to list version history via API at `sys/version-history` and via CLI with `vault version-history`
+```
diff --git a/v1.14.6/changelog/13799.txt b/v1.14.6/changelog/13799.txt
new file mode 100644
index 0000000..27e15d8
--- /dev/null
+++ b/v1.14.6/changelog/13799.txt
@@ -0,0 +1,3 @@
+```release-note:security
+database/mssql: Removed string interpolation on internal queries and replaced them with inline queries using named parameters.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13841.txt b/v1.14.6/changelog/13841.txt
new file mode 100644
index 0000000..964eb91
--- /dev/null
+++ b/v1.14.6/changelog/13841.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Implements Login method in Go client libraries for LDAP auth methods
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13850.txt b/v1.14.6/changelog/13850.txt
new file mode 100644
index 0000000..6e600d3
--- /dev/null
+++ b/v1.14.6/changelog/13850.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/consul: Add support for consul enterprise namespaces and admin partitions.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13871.txt b/v1.14.6/changelog/13871.txt
new file mode 100644
index 0000000..c8c5103
--- /dev/null
+++ b/v1.14.6/changelog/13871.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Adds support for port-agnostic validation of loopback IP redirect URIs.
+```
diff --git a/v1.14.6/changelog/13872.txt b/v1.14.6/changelog/13872.txt
new file mode 100644
index 0000000..688f6cc
--- /dev/null
+++ b/v1.14.6/changelog/13872.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix kv engine access bug
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13889.txt b/v1.14.6/changelog/13889.txt
new file mode 100644
index 0000000..8d98d4a
--- /dev/null
+++ b/v1.14.6/changelog/13889.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add count and duration metrics to PKI issue and revoke calls.
+```
diff --git a/v1.14.6/changelog/13893.txt b/v1.14.6/changelog/13893.txt
new file mode 100644
index 0000000..d7ff943
--- /dev/null
+++ b/v1.14.6/changelog/13893.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kv: add subkeys endpoint to retrieve a secret's stucture without its values
+```
diff --git a/v1.14.6/changelog/13894.txt b/v1.14.6/changelog/13894.txt
new file mode 100644
index 0000000..2ada1d5
--- /dev/null
+++ b/v1.14.6/changelog/13894.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add support for ECDSA and Ed25519 certificate views
+```
diff --git a/v1.14.6/changelog/13908.txt b/v1.14.6/changelog/13908.txt
new file mode 100644
index 0000000..7cc942a
--- /dev/null
+++ b/v1.14.6/changelog/13908.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Transform advanced templating with encode/decode format support
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13917.txt b/v1.14.6/changelog/13917.txt
new file mode 100644
index 0000000..aa166c3
--- /dev/null
+++ b/v1.14.6/changelog/13917.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity/oidc: Adds proof key for code exchange (PKCE) support to OIDC providers.
+```
diff --git a/v1.14.6/changelog/13925.txt b/v1.14.6/changelog/13925.txt
new file mode 100644
index 0000000..a7cce8d
--- /dev/null
+++ b/v1.14.6/changelog/13925.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/kubernetes: Properly handle the migration of role storage entries containing an empty `alias_name_source`
+```
diff --git a/v1.14.6/changelog/13927.txt b/v1.14.6/changelog/13927.txt
new file mode 100644
index 0000000..ec0e99f
--- /dev/null
+++ b/v1.14.6/changelog/13927.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Use application/pem-certificate-chain for PEM certificates, application/x-pem-file for PEM CRLs
+```
diff --git a/v1.14.6/changelog/13935.txt b/v1.14.6/changelog/13935.txt
new file mode 100644
index 0000000..4066f53
--- /dev/null
+++ b/v1.14.6/changelog/13935.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Return complete chain (in `ca_chain` field) on calls to `pki/cert/ca_chain`
+```
diff --git a/v1.14.6/changelog/13950.txt b/v1.14.6/changelog/13950.txt
new file mode 100644
index 0000000..02ed84d
--- /dev/null
+++ b/v1.14.6/changelog/13950.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: trigger token renewal if inactive and half of TTL has passed
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13958.txt b/v1.14.6/changelog/13958.txt
new file mode 100644
index 0000000..3b70069
--- /dev/null
+++ b/v1.14.6/changelog/13958.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow other_sans in sign-intermediate and sign-verbatim
+```
diff --git a/v1.14.6/changelog/13970.txt b/v1.14.6/changelog/13970.txt
new file mode 100644
index 0000000..0c15ae0
--- /dev/null
+++ b/v1.14.6/changelog/13970.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: Add support for time-based key autorotation in transit secrets engine.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13973.txt b/v1.14.6/changelog/13973.txt
new file mode 100644
index 0000000..625fd45
--- /dev/null
+++ b/v1.14.6/changelog/13973.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/azure: Fixed bug where Azure environment did not change Graph URL
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13974.txt b/v1.14.6/changelog/13974.txt
new file mode 100644
index 0000000..9a35564
--- /dev/null
+++ b/v1.14.6/changelog/13974.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/gcp: Fixed bug where error was not reported for invalid bindings 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/13991.txt b/v1.14.6/changelog/13991.txt
new file mode 100644
index 0000000..571689f
--- /dev/null
+++ b/v1.14.6/changelog/13991.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Allow specifying multiple approved key lengths for a single algorithm
+```
diff --git a/v1.14.6/changelog/14006.txt b/v1.14.6/changelog/14006.txt
new file mode 100644
index 0000000..30b5780
--- /dev/null
+++ b/v1.14.6/changelog/14006.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Use secure default for algorithm signer (rsa-sha2-256) with RSA SSH CA keys on new roles
+```
diff --git a/v1.14.6/changelog/14008.txt b/v1.14.6/changelog/14008.txt
new file mode 100644
index 0000000..624ba6f
--- /dev/null
+++ b/v1.14.6/changelog/14008.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Add support for generating non-RSA SSH CAs
+```
diff --git a/v1.14.6/changelog/14013.txt b/v1.14.6/changelog/14013.txt
new file mode 100644
index 0000000..ad6c311
--- /dev/null
+++ b/v1.14.6/changelog/14013.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Fixes inherited group membership when evaluating client assignments
+```
diff --git a/v1.14.6/changelog/14014.txt b/v1.14.6/changelog/14014.txt
new file mode 100644
index 0000000..14bdef1
--- /dev/null
+++ b/v1.14.6/changelog/14014.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/consul: Add support for consul roles.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14025.txt b/v1.14.6/changelog/14025.txt
new file mode 100644
index 0000000..1c01f0b
--- /dev/null
+++ b/v1.14.6/changelog/14025.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+* **Login MFA**: Single and two phase MFA is now available when authenticating to Vault.
+```
diff --git a/v1.14.6/changelog/14033.txt b/v1.14.6/changelog/14033.txt
new file mode 100644
index 0000000..43906a4
--- /dev/null
+++ b/v1.14.6/changelog/14033.txt
@@ -0,0 +1,7 @@
+```release-note:feature
+**Database plugin multiplexing**: manage multiple database connections with a single plugin process
+```
+
+```release-note:change
+plugin/database: The return value from `POST /database/config/:name` has been updated to "204 No Content"
+```
diff --git a/v1.14.6/changelog/14049.txt b/v1.14.6/changelog/14049.txt
new file mode 100644
index 0000000..93af683
--- /dev/null
+++ b/v1.14.6/changelog/14049.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds multi-factor authentication support
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14051.txt b/v1.14.6/changelog/14051.txt
new file mode 100644
index 0000000..00068e7
--- /dev/null
+++ b/v1.14.6/changelog/14051.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/aws: Enable region detection in the CLI by specifying the region as `auto`
+```
diff --git a/v1.14.6/changelog/14054.txt b/v1.14.6/changelog/14054.txt
new file mode 100644
index 0000000..a75d6fa
--- /dev/null
+++ b/v1.14.6/changelog/14054.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Swap browser localStorage in favor of sessionStorage
+```
diff --git a/v1.14.6/changelog/14067.txt b/v1.14.6/changelog/14067.txt
new file mode 100644
index 0000000..bd24019
--- /dev/null
+++ b/v1.14.6/changelog/14067.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Define constants for X-Vault-Forward and X-Vault-Inconsistent headers
+```
diff --git a/v1.14.6/changelog/14074.txt b/v1.14.6/changelog/14074.txt
new file mode 100644
index 0000000..2e553c8
--- /dev/null
+++ b/v1.14.6/changelog/14074.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: Return an error if any required parameter is missing.
+```
diff --git a/v1.14.6/changelog/14095.txt b/v1.14.6/changelog/14095.txt
new file mode 100644
index 0000000..f534d66
--- /dev/null
+++ b/v1.14.6/changelog/14095.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth/ldap: Add a response warning and server log whenever the config is accessed
+if `userfilter` doesn't consider `userattr`
+```
diff --git a/v1.14.6/changelog/14107.txt b/v1.14.6/changelog/14107.txt
new file mode 100644
index 0000000..f17138c
--- /dev/null
+++ b/v1.14.6/changelog/14107.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/approle: Fix wrapping of nil errors in `login` endpoint
+```
diff --git a/v1.14.6/changelog/14109.txt b/v1.14.6/changelog/14109.txt
new file mode 100644
index 0000000..0e473d8
--- /dev/null
+++ b/v1.14.6/changelog/14109.txt
@@ -0,0 +1,4 @@
+```release-note:feature
+**Server Side Consistent Tokens**: Service tokens have been updated to be longer (a minimum of 95 bytes) and token prefixes for all token types are updated from s., b., and r. to hvs., hvb., and hvr. for service, batch, and recovery tokens respectively. Vault clusters with integrated storage will now have read-after-write
+consistency by default. [[GH-14109](https://github.com/hashicorp/vault/pull/14109)]
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14119.txt b/v1.14.6/changelog/14119.txt
new file mode 100644
index 0000000..3056bc2
--- /dev/null
+++ b/v1.14.6/changelog/14119.txt
@@ -0,0 +1,9 @@
+```release-note:improvement
+identity/oidc: Adds a default OIDC provider
+```
+```release-note:improvement
+identity/oidc: Adds a default key for OIDC clients
+```
+```release-note:improvement
+identity/oidc: Adds an `allow_all` assignment that permits all entities to authenticate via an OIDC client
+```
diff --git a/v1.14.6/changelog/14130.txt b/v1.14.6/changelog/14130.txt
new file mode 100644
index 0000000..25978b5
--- /dev/null
+++ b/v1.14.6/changelog/14130.txt
@@ -0,0 +1,8 @@
+```release-note:change
+secrets/azure: Changes the configuration parameter `use_microsoft_graph_api` to use the Microsoft 
+Graph API by default.
+```
+```release-note:bug
+secrets/azure: Fixes the [rotate root](https://www.vaultproject.io/api-docs/secret/azure#rotate-root) 
+operation for upgraded configurations with a `root_password_ttl` of zero.
+```
diff --git a/v1.14.6/changelog/14131.txt b/v1.14.6/changelog/14131.txt
new file mode 100644
index 0000000..e2d2d87
--- /dev/null
+++ b/v1.14.6/changelog/14131.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: interactive CLI for login mfa
+```
diff --git a/v1.14.6/changelog/14138.txt b/v1.14.6/changelog/14138.txt
new file mode 100644
index 0000000..ccc11dd
--- /dev/null
+++ b/v1.14.6/changelog/14138.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+Fixed bug where auth method only considers system-identity when multiple identities are available. [#50](https://github.com/hashicorp/vault-plugin-auth-azure/pull/50)
+```
diff --git a/v1.14.6/changelog/14144.txt b/v1.14.6/changelog/14144.txt
new file mode 100644
index 0000000..2c80941
--- /dev/null
+++ b/v1.14.6/changelog/14144.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/kubernetes: ensure valid entity alias names created for projected volume tokens
+```
diff --git a/v1.14.6/changelog/14171.txt b/v1.14.6/changelog/14171.txt
new file mode 100644
index 0000000..eb7dde3
--- /dev/null
+++ b/v1.14.6/changelog/14171.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ secrets/openldap: Fix panic from nil logger in backend
+```
diff --git a/v1.14.6/changelog/14178.txt b/v1.14.6/changelog/14178.txt
new file mode 100644
index 0000000..ef6c355
--- /dev/null
+++ b/v1.14.6/changelog/14178.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add not_before_duration to root CA generation, intermediate CA signing paths.
+```
diff --git a/v1.14.6/changelog/14190.txt b/v1.14.6/changelog/14190.txt
new file mode 100644
index 0000000..7f982cf
--- /dev/null
+++ b/v1.14.6/changelog/14190.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Update github.com/prometheus/client_golang to fix security vulnerability CVE-2022-21698.
+```
diff --git a/v1.14.6/changelog/14193.txt b/v1.14.6/changelog/14193.txt
new file mode 100644
index 0000000..4dfc83f
--- /dev/null
+++ b/v1.14.6/changelog/14193.txt
@@ -0,0 +1,3 @@
+```release-note:change
+storage/etcd: Remove support for v2.
+```
diff --git a/v1.14.6/changelog/14195.txt b/v1.14.6/changelog/14195.txt
new file mode 100644
index 0000000..7dc18c5
--- /dev/null
+++ b/v1.14.6/changelog/14195.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add error handling for error types other than UserError or InternalError
+```
diff --git a/v1.14.6/changelog/14197.txt b/v1.14.6/changelog/14197.txt
new file mode 100644
index 0000000..dec9d3d
--- /dev/null
+++ b/v1.14.6/changelog/14197.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Small changes to ensure goroutines terminate in tests
+```
diff --git a/v1.14.6/changelog/14206.txt b/v1.14.6/changelog/14206.txt
new file mode 100644
index 0000000..00c7cc1
--- /dev/null
+++ b/v1.14.6/changelog/14206.txt
@@ -0,0 +1,4 @@
+```release-note:change
+core: Changes the unit of `default_lease_ttl` and `max_lease_ttl` values returned by
+the `/sys/config/state/sanitized` endpoint from nanoseconds to seconds.
+```
diff --git a/v1.14.6/changelog/14214.txt b/v1.14.6/changelog/14214.txt
new file mode 100644
index 0000000..773b894
--- /dev/null
+++ b/v1.14.6/changelog/14214.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Adds ability to configure specific user-assigned managed identities for Azure auto-auth.
+```
diff --git a/v1.14.6/changelog/14217.txt b/v1.14.6/changelog/14217.txt
new file mode 100644
index 0000000..de42fca
--- /dev/null
+++ b/v1.14.6/changelog/14217.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk: Change OpenAPI code generator to extract request objects into /components/schemas and reference them by name.
+```
diff --git a/v1.14.6/changelog/14222.txt b/v1.14.6/changelog/14222.txt
new file mode 100644
index 0000000..3d9cfb1
--- /dev/null
+++ b/v1.14.6/changelog/14222.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+core/api: Fix overwriting of request headers when using JSONMergePatch.
+```
diff --git a/v1.14.6/changelog/14223.txt b/v1.14.6/changelog/14223.txt
new file mode 100644
index 0000000..6bb4d1d
--- /dev/null
+++ b/v1.14.6/changelog/14223.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: The `agent/v1/quit` endpoint can now be used to stop the Vault Agent remotely
+```
diff --git a/v1.14.6/changelog/14224.txt b/v1.14.6/changelog/14224.txt
new file mode 100644
index 0000000..f7e566b
--- /dev/null
+++ b/v1.14.6/changelog/14224.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ ui: Fix default TTL display and set on database role
+```
diff --git a/v1.14.6/changelog/14229.txt b/v1.14.6/changelog/14229.txt
new file mode 100644
index 0000000..5fa7a2d
--- /dev/null
+++ b/v1.14.6/changelog/14229.txt
@@ -0,0 +1,4 @@
+```release-note:change
+core: Vault version has been moved out of sdk and into main vault module.
+Plugins using sdk/useragent.String must instead use sdk/useragent.PluginString.
+```
diff --git a/v1.14.6/changelog/14231.txt b/v1.14.6/changelog/14231.txt
new file mode 100644
index 0000000..d0c261f
--- /dev/null
+++ b/v1.14.6/changelog/14231.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ physical/mysql: Create table with wider `vault_key` column when initializing database tables.
+```
diff --git a/v1.14.6/changelog/14232.txt b/v1.14.6/changelog/14232.txt
new file mode 100644
index 0000000..e9497b5
--- /dev/null
+++ b/v1.14.6/changelog/14232.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Bump Go version to 1.17.7.
+```
diff --git a/v1.14.6/changelog/14233.txt b/v1.14.6/changelog/14233.txt
new file mode 100644
index 0000000..9cee8ff
--- /dev/null
+++ b/v1.14.6/changelog/14233.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ ui: Fix incorrect validity message on transit secrets engine
+```
diff --git a/v1.14.6/changelog/14235.txt b/v1.14.6/changelog/14235.txt
new file mode 100644
index 0000000..75fa53d
--- /dev/null
+++ b/v1.14.6/changelog/14235.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix issuance of wildcard certificates matching glob patterns
+```
diff --git a/v1.14.6/changelog/14238.txt b/v1.14.6/changelog/14238.txt
new file mode 100644
index 0000000..8c794eb
--- /dev/null
+++ b/v1.14.6/changelog/14238.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Restrict issuance of wildcard certificates via role parameter (`allow_wildcard_certificates`)
+```
diff --git a/v1.14.6/changelog/14268.txt b/v1.14.6/changelog/14268.txt
new file mode 100644
index 0000000..85de0a8
--- /dev/null
+++ b/v1.14.6/changelog/14268.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Allow static role credential rotation in Database secrets engines
+```
diff --git a/v1.14.6/changelog/14269.txt b/v1.14.6/changelog/14269.txt
new file mode 100644
index 0000000..529b7c6
--- /dev/null
+++ b/v1.14.6/changelog/14269.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ api/sys/raft: Update RaftSnapshotRestore to use net/http client allowing bodies larger than allocated memory to be streamed
+```
diff --git a/v1.14.6/changelog/14292.txt b/v1.14.6/changelog/14292.txt
new file mode 100644
index 0000000..98d48f9
--- /dev/null
+++ b/v1.14.6/changelog/14292.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Warn when `generate_lease` and `no_store` are both set to `true` on requests.
+```
diff --git a/v1.14.6/changelog/14301.txt b/v1.14.6/changelog/14301.txt
new file mode 100644
index 0000000..9f5e4ba
--- /dev/null
+++ b/v1.14.6/changelog/14301.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kv: add full secret path output to table-formatted responses
+```
diff --git a/v1.14.6/changelog/14324.txt b/v1.14.6/changelog/14324.txt
new file mode 100644
index 0000000..2932b23
--- /dev/null
+++ b/v1.14.6/changelog/14324.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: Add username_as_alias configurable to change how aliases are named
+```
diff --git a/v1.14.6/changelog/14328.txt b/v1.14.6/changelog/14328.txt
new file mode 100644
index 0000000..c5e45f0
--- /dev/null
+++ b/v1.14.6/changelog/14328.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: A request that fails path validation due to relative path check will now be responded to with a 400 rather than 500.
+```
diff --git a/v1.14.6/changelog/14329.txt b/v1.14.6/changelog/14329.txt
new file mode 100644
index 0000000..87917be
--- /dev/null
+++ b/v1.14.6/changelog/14329.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue logging out with wrapped token query parameter
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14385.txt b/v1.14.6/changelog/14385.txt
new file mode 100644
index 0000000..101fa11
--- /dev/null
+++ b/v1.14.6/changelog/14385.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Systemd unit file included with the Linux packages now sets the service type to notify.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14388.txt b/v1.14.6/changelog/14388.txt
new file mode 100644
index 0000000..5db7af5
--- /dev/null
+++ b/v1.14.6/changelog/14388.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Add context-aware functions to vault/api for each API wrapper function.
+```
diff --git a/v1.14.6/changelog/14389.txt b/v1.14.6/changelog/14389.txt
new file mode 100644
index 0000000..56ee8c4
--- /dev/null
+++ b/v1.14.6/changelog/14389.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: added a link to an Enigma secret plugin.
+```
diff --git a/v1.14.6/changelog/14399.txt b/v1.14.6/changelog/14399.txt
new file mode 100644
index 0000000..5d5c6b1
--- /dev/null
+++ b/v1.14.6/changelog/14399.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+debug: Fix panic when capturing debug bundle on Windows
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14400.txt b/v1.14.6/changelog/14400.txt
new file mode 100644
index 0000000..0efaa3d
--- /dev/null
+++ b/v1.14.6/changelog/14400.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes displaying empty masked values in PKI engine
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14422.txt b/v1.14.6/changelog/14422.txt
new file mode 100644
index 0000000..edfc380
--- /dev/null
+++ b/v1.14.6/changelog/14422.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Redirects to managed namespace if incorrect namespace in URL param
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14424.txt b/v1.14.6/changelog/14424.txt
new file mode 100644
index 0000000..cc54058
--- /dev/null
+++ b/v1.14.6/changelog/14424.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Fix log level mismatch between ERR and ERROR
+```
diff --git a/v1.14.6/changelog/14426.txt b/v1.14.6/changelog/14426.txt
new file mode 100644
index 0000000..81ecc0d
--- /dev/null
+++ b/v1.14.6/changelog/14426.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Fixes potential write to readonly storage on performance secondary clusters during key rotation
+```
diff --git a/v1.14.6/changelog/14455.txt b/v1.14.6/changelog/14455.txt
new file mode 100644
index 0000000..e8e7f74
--- /dev/null
+++ b/v1.14.6/changelog/14455.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/gcs: Add documentation explaining how to configure the gcs backend using environment variables instead of options in the configuration stanza
+```
diff --git a/v1.14.6/changelog/14474.txt b/v1.14.6/changelog/14474.txt
new file mode 100644
index 0000000..1469c03
--- /dev/null
+++ b/v1.14.6/changelog/14474.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth/approle: SecretIDs can now be generated with an per-request specified TTL and num_uses.
+When either the ttl and num_uses fields are not specified, the role's configuration is used.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14487.txt b/v1.14.6/changelog/14487.txt
new file mode 100644
index 0000000..b7e9969
--- /dev/null
+++ b/v1.14.6/changelog/14487.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk/cidrutil: Only check if cidr contains remote address for IP addresses
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14489.txt b/v1.14.6/changelog/14489.txt
new file mode 100644
index 0000000..014d0a5
--- /dev/null
+++ b/v1.14.6/changelog/14489.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes caching issue on kv new version create
+```
diff --git a/v1.14.6/changelog/14493.txt b/v1.14.6/changelog/14493.txt
new file mode 100644
index 0000000..cb98314
--- /dev/null
+++ b/v1.14.6/changelog/14493.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes horizontal bar chart hover issue when filtering namespaces and mounts
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14501.txt b/v1.14.6/changelog/14501.txt
new file mode 100644
index 0000000..5ed687e
--- /dev/null
+++ b/v1.14.6/changelog/14501.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic caused by parsing policies with empty slice values.
+```
diff --git a/v1.14.6/changelog/14508.txt b/v1.14.6/changelog/14508.txt
new file mode 100644
index 0000000..dde6b55
--- /dev/null
+++ b/v1.14.6/changelog/14508.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Parse schema refs from OpenAPI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14522.txt b/v1.14.6/changelog/14522.txt
new file mode 100644
index 0000000..420a983
--- /dev/null
+++ b/v1.14.6/changelog/14522.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic caused by parsing JSON integers for fields defined as comma-delimited strings
+```
diff --git a/v1.14.6/changelog/14523.txt b/v1.14.6/changelog/14523.txt
new file mode 100644
index 0000000..f314731
--- /dev/null
+++ b/v1.14.6/changelog/14523.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fix panic caused by parsing key=value fields whose value is a single backslash
+```
diff --git a/v1.14.6/changelog/14543.txt b/v1.14.6/changelog/14543.txt
new file mode 100644
index 0000000..649d1e7
--- /dev/null
+++ b/v1.14.6/changelog/14543.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/token: Fixes a bug where duplicate public keys could appear in the .well-known JWKS
+```
diff --git a/v1.14.6/changelog/14545.txt b/v1.14.6/changelog/14545.txt
new file mode 100644
index 0000000..6b34221
--- /dev/null
+++ b/v1.14.6/changelog/14545.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with correct auth method not selected when logging out from OIDC or JWT methods
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14551.txt b/v1.14.6/changelog/14551.txt
new file mode 100644
index 0000000..47ef9ad
--- /dev/null
+++ b/v1.14.6/changelog/14551.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix issue where UI incorrectly handled API errors when mounting backends
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14622.txt b/v1.14.6/changelog/14622.txt
new file mode 100644
index 0000000..289756a
--- /dev/null
+++ b/v1.14.6/changelog/14622.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+replication (enterprise): fix panic due to missing entity during invalidation of local aliases.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14659.txt b/v1.14.6/changelog/14659.txt
new file mode 100644
index 0000000..0468cbc
--- /dev/null
+++ b/v1.14.6/changelog/14659.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Replaces the IvyCodemirror wrapper with a custom ember modifier.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14670.txt b/v1.14.6/changelog/14670.txt
new file mode 100644
index 0000000..c054f55
--- /dev/null
+++ b/v1.14.6/changelog/14670.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/vault: warn when policy name contains upper-case letter
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14704.txt b/v1.14.6/changelog/14704.txt
new file mode 100644
index 0000000..e5663e1
--- /dev/null
+++ b/v1.14.6/changelog/14704.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic for help request URL paths without /v1/ prefix   
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14744.txt b/v1.14.6/changelog/14744.txt
new file mode 100644
index 0000000..e5226f9
--- /dev/null
+++ b/v1.14.6/changelog/14744.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database: Ensure that a `connection_url` password is redacted in all cases.
+```
diff --git a/v1.14.6/changelog/14746.txt b/v1.14.6/changelog/14746.txt
new file mode 100644
index 0000000..4c22a7c
--- /dev/null
+++ b/v1.14.6/changelog/14746.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/approle: Add maximum length for input values that result in SHA56 HMAC calculation
+```
diff --git a/v1.14.6/changelog/14751.txt b/v1.14.6/changelog/14751.txt
new file mode 100644
index 0000000..17cbfa0
--- /dev/null
+++ b/v1.14.6/changelog/14751.txt
@@ -0,0 +1,4 @@
+
+```release-note:improvement
+auth/cert: Add metadata to identity-alias
+```
diff --git a/v1.14.6/changelog/14752.txt b/v1.14.6/changelog/14752.txt
new file mode 100644
index 0000000..3cc5fd0
--- /dev/null
+++ b/v1.14.6/changelog/14752.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: report unused or redundant keys in server configuration   
+```
diff --git a/v1.14.6/changelog/14753.txt b/v1.14.6/changelog/14753.txt
new file mode 100644
index 0000000..af7fbb5
--- /dev/null
+++ b/v1.14.6/changelog/14753.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Add ability to pass certificate as PEM bytes to api.Client.
+```
diff --git a/v1.14.6/changelog/14755.txt b/v1.14.6/changelog/14755.txt
new file mode 100644
index 0000000..1c94f44
--- /dev/null
+++ b/v1.14.6/changelog/14755.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/metrics: Fix incorrect table size metric for local mounts
+```
diff --git a/v1.14.6/changelog/14763.txt b/v1.14.6/changelog/14763.txt
new file mode 100644
index 0000000..8eb8ff0
--- /dev/null
+++ b/v1.14.6/changelog/14763.txt
@@ -0,0 +1,3 @@
+```release-note:change
+ui: Upgrade Ember to version 3.28
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14775.txt b/v1.14.6/changelog/14775.txt
new file mode 100644
index 0000000..03beb82
--- /dev/null
+++ b/v1.14.6/changelog/14775.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Use the context passed to the api/auth Login helpers.
+```
diff --git a/v1.14.6/changelog/14791.txt b/v1.14.6/changelog/14791.txt
new file mode 100644
index 0000000..b9e4315
--- /dev/null
+++ b/v1.14.6/changelog/14791.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fixing excessive unix file permissions   
+```
diff --git a/v1.14.6/changelog/14794.txt b/v1.14.6/changelog/14794.txt
new file mode 100644
index 0000000..fb45492
--- /dev/null
+++ b/v1.14.6/changelog/14794.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix KV secret showing in the edit form after a user creates a new version but doesn't have read capabilities
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14807.txt b/v1.14.6/changelog/14807.txt
new file mode 100644
index 0000000..3c338a2
--- /dev/null
+++ b/v1.14.6/changelog/14807.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Alternative flag-based syntax for KV to mitigate confusion from automatically appended /data
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14814.txt b/v1.14.6/changelog/14814.txt
new file mode 100644
index 0000000..0583fb7
--- /dev/null
+++ b/v1.14.6/changelog/14814.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: time.After() used in a select statement can lead to memory leak
+```
diff --git a/v1.14.6/changelog/14817.txt b/v1.14.6/changelog/14817.txt
new file mode 100644
index 0000000..9b8e39a
--- /dev/null
+++ b/v1.14.6/changelog/14817.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core : check uid and permissions of config dir, config file, plugin dir and plugin binaries 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14836.txt b/v1.14.6/changelog/14836.txt
new file mode 100644
index 0000000..6ee8d54
--- /dev/null
+++ b/v1.14.6/changelog/14836.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Respect increment value in grace period calculations in LifetimeWatcher
+```
diff --git a/v1.14.6/changelog/14846.txt b/v1.14.6/changelog/14846.txt
new file mode 100644
index 0000000..10621ff
--- /dev/null
+++ b/v1.14.6/changelog/14846.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fixing excessive unix file permissions on dir, files and archive created by vault debug command  
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14864.txt b/v1.14.6/changelog/14864.txt
new file mode 100644
index 0000000..34af10f
--- /dev/null
+++ b/v1.14.6/changelog/14864.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth: enforce a rate limit for TOTP passcode validation attempts
+```
diff --git a/v1.14.6/changelog/14869.txt b/v1.14.6/changelog/14869.txt
new file mode 100644
index 0000000..1ee6122
--- /dev/null
+++ b/v1.14.6/changelog/14869.txt
@@ -0,0 +1,4 @@
+```release-note:change
+auth: Remove support for legacy MFA
+(https://www.vaultproject.io/docs/v1.10.x/auth/mfa)
+```
diff --git a/v1.14.6/changelog/14875.txt b/v1.14.6/changelog/14875.txt
new file mode 100644
index 0000000..ef4622d
--- /dev/null
+++ b/v1.14.6/changelog/14875.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix handling of "any" key type with default zero signature bits value.
+```
diff --git a/v1.14.6/changelog/14899.txt b/v1.14.6/changelog/14899.txt
new file mode 100644
index 0000000..550005e
--- /dev/null
+++ b/v1.14.6/changelog/14899.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Print minimum required policy for any command**: The global CLI flag `-output-policy` can now be used with any command to print out the minimum required policy HCL for that operation, including whether the given path requires the "sudo" capability.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14900.txt b/v1.14.6/changelog/14900.txt
new file mode 100644
index 0000000..6d995fa
--- /dev/null
+++ b/v1.14.6/changelog/14900.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Added MFALogin() for handling MFA flow when using login helpers.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14916.txt b/v1.14.6/changelog/14916.txt
new file mode 100644
index 0000000..d61065a
--- /dev/null
+++ b/v1.14.6/changelog/14916.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue logging in with OIDC from a listed auth mounts tab
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14941.txt b/v1.14.6/changelog/14941.txt
new file mode 100644
index 0000000..f82b633
--- /dev/null
+++ b/v1.14.6/changelog/14941.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix issue with KV not recomputing model when you changed versions.
+```
diff --git a/v1.14.6/changelog/14943.txt b/v1.14.6/changelog/14943.txt
new file mode 100644
index 0000000..1501c56
--- /dev/null
+++ b/v1.14.6/changelog/14943.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fixed bug where larger SHA-2 hashes were truncated with shorter ECDSA CA certificates
+```
diff --git a/v1.14.6/changelog/14945.txt b/v1.14.6/changelog/14945.txt
new file mode 100644
index 0000000..50dea71
--- /dev/null
+++ b/v1.14.6/changelog/14945.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Support the -format=raw option, to read non-JSON Vault endpoints and original response bodies.
+```
diff --git a/v1.14.6/changelog/14946.txt b/v1.14.6/changelog/14946.txt
new file mode 100644
index 0000000..43ee1e5
--- /dev/null
+++ b/v1.14.6/changelog/14946.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Secrets/auth plugin multiplexing**: manage multiple plugin configurations with a single plugin process
+```
diff --git a/v1.14.6/changelog/14954.txt b/v1.14.6/changelog/14954.txt
new file mode 100644
index 0000000..fc8be70
--- /dev/null
+++ b/v1.14.6/changelog/14954.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/aws: Add RoleSession to DisplayName when using assumeRole for authentication
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14957.txt b/v1.14.6/changelog/14957.txt
new file mode 100644
index 0000000..96f0c04
--- /dev/null
+++ b/v1.14.6/changelog/14957.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Include build date in `sys/seal-status` and `sys/version-history` endpoints.
+```
diff --git a/v1.14.6/changelog/14962.txt b/v1.14.6/changelog/14962.txt
new file mode 100644
index 0000000..b8bea45
--- /dev/null
+++ b/v1.14.6/changelog/14962.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+api: If the parameters supplied over the API payload are ignored due to not
+being what the endpoints were expecting, or if the parameters supplied get
+replaced by the values in the endpoint's path itself, warnings will be added to
+the non-empty responses listing all the ignored and replaced parameters.
+```
diff --git a/v1.14.6/changelog/14963.txt b/v1.14.6/changelog/14963.txt
new file mode 100644
index 0000000..9bc3dc8
--- /dev/null
+++ b/v1.14.6/changelog/14963.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Provide a helper method WithNamespace to create a cloned client with a new NS
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14966.txt b/v1.14.6/changelog/14966.txt
new file mode 100644
index 0000000..8892944
--- /dev/null
+++ b/v1.14.6/changelog/14966.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes edit auth method capabilities issue
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14968.txt b/v1.14.6/changelog/14968.txt
new file mode 100644
index 0000000..a9a5e76
--- /dev/null
+++ b/v1.14.6/changelog/14968.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Fixes bug where OutputCurlString field was unintentionally being copied over during client cloning
+```
diff --git a/v1.14.6/changelog/14973.txt b/v1.14.6/changelog/14973.txt
new file mode 100644
index 0000000..461aa38
--- /dev/null
+++ b/v1.14.6/changelog/14973.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cassandra: Update gocql Cassandra client to fix "no hosts available in the pool" error
+```
diff --git a/v1.14.6/changelog/14975.txt b/v1.14.6/changelog/14975.txt
new file mode 100644
index 0000000..34de9a7
--- /dev/null
+++ b/v1.14.6/changelog/14975.txt
@@ -0,0 +1,5 @@
+```release-note:change
+secrets/pki: existing Generate Root (pki/root/generate/:type),
+Set Signed Intermediate (/pki/intermediate/set-signed) APIs will
+add new issuers/keys to a mount instead of warning that an existing CA exists
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/14977.txt b/v1.14.6/changelog/14977.txt
new file mode 100644
index 0000000..937c5d7
--- /dev/null
+++ b/v1.14.6/changelog/14977.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+raft: Ensure initialMmapSize is set to 0 on Windows
+```
diff --git a/v1.14.6/changelog/14985.txt b/v1.14.6/changelog/14985.txt
new file mode 100644
index 0000000..3d8f428
--- /dev/null
+++ b/v1.14.6/changelog/14985.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/okta: Add support for Google provider TOTP type in the Okta auth method
+```
diff --git a/v1.14.6/changelog/15004.txt b/v1.14.6/changelog/15004.txt
new file mode 100644
index 0000000..dc1fc2d
--- /dev/null
+++ b/v1.14.6/changelog/15004.txt
@@ -0,0 +1,4 @@
+```release-note:change
+secrets/pki: existing Delete Root API (pki/root) will now delete all issuers
+and keys within the mount path.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15009.txt b/v1.14.6/changelog/15009.txt
new file mode 100644
index 0000000..aa2fd74
--- /dev/null
+++ b/v1.14.6/changelog/15009.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth: forward requests subject to login MFA from perfStandby to Active node
+```
diff --git a/v1.14.6/changelog/15025.txt b/v1.14.6/changelog/15025.txt
new file mode 100644
index 0000000..fd69733
--- /dev/null
+++ b/v1.14.6/changelog/15025.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: masked values no longer give away length or location of special characters
+```
diff --git a/v1.14.6/changelog/15041.txt b/v1.14.6/changelog/15041.txt
new file mode 100644
index 0000000..609b23d
--- /dev/null
+++ b/v1.14.6/changelog/15041.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fixed systemd reloading notification
+```
diff --git a/v1.14.6/changelog/15042.txt b/v1.14.6/changelog/15042.txt
new file mode 100644
index 0000000..77c5a85
--- /dev/null
+++ b/v1.14.6/changelog/15042.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: Use larger timeouts at startup to reduce likelihood of inducing elections.
+```
diff --git a/v1.14.6/changelog/15046.txt b/v1.14.6/changelog/15046.txt
new file mode 100644
index 0000000..e52d9db
--- /dev/null
+++ b/v1.14.6/changelog/15046.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+ui: Fix Generated Token's Policies helpText to clarify that comma separated values are not accepted in this field. 
+```
+
diff --git a/v1.14.6/changelog/15054.txt b/v1.14.6/changelog/15054.txt
new file mode 100644
index 0000000..8d4a827
--- /dev/null
+++ b/v1.14.6/changelog/15054.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+storage/dynamodb: Added `AWS_DYNAMODB_REGION` environment variable.
+```
diff --git a/v1.14.6/changelog/15055.txt b/v1.14.6/changelog/15055.txt
new file mode 100644
index 0000000..648aa29
--- /dev/null
+++ b/v1.14.6/changelog/15055.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: deduplicate policies when creating/updating identity groups
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15058.txt b/v1.14.6/changelog/15058.txt
new file mode 100644
index 0000000..6e4cad8
--- /dev/null
+++ b/v1.14.6/changelog/15058.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix search-select component showing blank selections when editing group member entity
+```
diff --git a/v1.14.6/changelog/15067.txt b/v1.14.6/changelog/15067.txt
new file mode 100644
index 0000000..4adee8f
--- /dev/null
+++ b/v1.14.6/changelog/15067.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: pre-calculate namespace specific paths when tainting a route during postUnseal
+```
diff --git a/v1.14.6/changelog/15072.txt b/v1.14.6/changelog/15072.txt
new file mode 100644
index 0000000..c96b194
--- /dev/null
+++ b/v1.14.6/changelog/15072.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic caused by parsing JSON integers for fields defined as comma-delimited integers
+```
diff --git a/v1.14.6/changelog/15074.txt b/v1.14.6/changelog/15074.txt
new file mode 100644
index 0000000..fed33ea
--- /dev/null
+++ b/v1.14.6/changelog/15074.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Remove storybook.
+```
diff --git a/v1.14.6/changelog/15092.txt b/v1.14.6/changelog/15092.txt
new file mode 100644
index 0000000..968d6ba
--- /dev/null
+++ b/v1.14.6/changelog/15092.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Upgrade hashicorp/consul-template version for sprig template functions and improved writeTo function
+```
diff --git a/v1.14.6/changelog/15100.txt b/v1.14.6/changelog/15100.txt
new file mode 100644
index 0000000..0b4a716
--- /dev/null
+++ b/v1.14.6/changelog/15100.txt
@@ -0,0 +1,4 @@
+```release-note:change
+secrets/pki: Existing CRL API (/pki/crl) now returns an X.509 v2 CRL instead
+of a v1 CRL.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15104.txt b/v1.14.6/changelog/15104.txt
new file mode 100644
index 0000000..39ea1f5
--- /dev/null
+++ b/v1.14.6/changelog/15104.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk: Fix OpenApi spec generator to properly convert TypeInt64 to OAS supported int64
+```
diff --git a/v1.14.6/changelog/15123.txt b/v1.14.6/changelog/15123.txt
new file mode 100644
index 0000000..51223e4
--- /dev/null
+++ b/v1.14.6/changelog/15123.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Fix some identity data races found by Go race detector (no known impact yet).
+```
diff --git a/v1.14.6/changelog/15125.txt b/v1.14.6/changelog/15125.txt
new file mode 100644
index 0000000..4d6e508
--- /dev/null
+++ b/v1.14.6/changelog/15125.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Upgrade github.org/x/crypto/ssh
+```
diff --git a/v1.14.6/changelog/15152.txt b/v1.14.6/changelog/15152.txt
new file mode 100644
index 0000000..e2e3c03
--- /dev/null
+++ b/v1.14.6/changelog/15152.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+secrets/pki: Allow operators to control the issuing certificate behavior when
+the requested TTL is beyond the NotAfter value of the signing certificate
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15155.txt b/v1.14.6/changelog/15155.txt
new file mode 100644
index 0000000..c65e1c0
--- /dev/null
+++ b/v1.14.6/changelog/15155.txt
@@ -0,0 +1,5 @@
+```release-note:change
+secrets/pki: The `ca_chain` response field within issuing (/pki/issue/:role)
+and signing APIs will now include the root CA certificate if the mount is
+aware of it.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15156.txt b/v1.14.6/changelog/15156.txt
new file mode 100644
index 0000000..8718f1b
--- /dev/null
+++ b/v1.14.6/changelog/15156.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+rafft: fix Raft TLS key rotation panic that occurs if active key is more than 24 hours old
+```
diff --git a/v1.14.6/changelog/15163.txt b/v1.14.6/changelog/15163.txt
new file mode 100644
index 0000000..337a279
--- /dev/null
+++ b/v1.14.6/changelog/15163.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk: Fix OpenApi spec generator to remove duplicate sha_256 parameter
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15166.txt b/v1.14.6/changelog/15166.txt
new file mode 100644
index 0000000..bf73aef
--- /dev/null
+++ b/v1.14.6/changelog/15166.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add new DB methods that do not prepare statements.
+```
diff --git a/v1.14.6/changelog/15167.txt b/v1.14.6/changelog/15167.txt
new file mode 100644
index 0000000..f4c0d86
--- /dev/null
+++ b/v1.14.6/changelog/15167.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed client count timezone for start and end months
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15179.txt b/v1.14.6/changelog/15179.txt
new file mode 100644
index 0000000..00944f6
--- /dev/null
+++ b/v1.14.6/changelog/15179.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+secrets/pki: CRLs on performance secondary clusters are now automatically
+rebuilt upon changes to the list of issuers.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15188.txt b/v1.14.6/changelog/15188.txt
new file mode 100644
index 0000000..4435ccb
--- /dev/null
+++ b/v1.14.6/changelog/15188.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: kv get command now honors trailing spaces to retrieve secrets
+```
diff --git a/v1.14.6/changelog/15204.txt b/v1.14.6/changelog/15204.txt
new file mode 100644
index 0000000..f4c5b8c
--- /dev/null
+++ b/v1.14.6/changelog/15204.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/auto-auth: Add `min_backoff` to the method stanza for configuring initial backoff duration.
+```
diff --git a/v1.14.6/changelog/15211.txt b/v1.14.6/changelog/15211.txt
new file mode 100644
index 0000000..da7faa9
--- /dev/null
+++ b/v1.14.6/changelog/15211.txt
@@ -0,0 +1,6 @@
+```release-note:change
+secrets/pki: A new aliased api path (/pki/issuer/:issuer_ref/sign-self-issued)
+providing the same functionality as the existing API(/pki/root/sign-self-issued)
+does not require sudo capabilities but the latter still requires it in an
+effort to maintain backwards compatibility.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15213.txt b/v1.14.6/changelog/15213.txt
new file mode 100644
index 0000000..b5774b2
--- /dev/null
+++ b/v1.14.6/changelog/15213.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core,transit: Allow callers to choose random byte source including entropy augmentation sources for the sys/tools/random and transit/random endpoints.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15224.txt b/v1.14.6/changelog/15224.txt
new file mode 100644
index 0000000..c25ccf6
--- /dev/null
+++ b/v1.14.6/changelog/15224.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/config: Only ask the system about network interfaces when address configs contain a template having the format: {{ ... }}
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15248.txt b/v1.14.6/changelog/15248.txt
new file mode 100644
index 0000000..9726d07
--- /dev/null
+++ b/v1.14.6/changelog/15248.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth: Globally scoped Login MFA method Get/List endpoints
+```
diff --git a/v1.14.6/changelog/15250.txt b/v1.14.6/changelog/15250.txt
new file mode 100644
index 0000000..36d6d03
--- /dev/null
+++ b/v1.14.6/changelog/15250.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Support for `add_before_duration` in SSH
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15259.txt b/v1.14.6/changelog/15259.txt
new file mode 100644
index 0000000..6ad0b2e
--- /dev/null
+++ b/v1.14.6/changelog/15259.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: Order month data in ascending order of timestamps
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15261.txt b/v1.14.6/changelog/15261.txt
new file mode 100644
index 0000000..c04c80a
--- /dev/null
+++ b/v1.14.6/changelog/15261.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth: load login MFA configuration upon restart
+```
diff --git a/v1.14.6/changelog/15277.txt b/v1.14.6/changelog/15277.txt
new file mode 100644
index 0000000..91a3754
--- /dev/null
+++ b/v1.14.6/changelog/15277.txt
@@ -0,0 +1,6 @@
+```release-note:feature
+**Non-Disruptive Intermediate/Root Certificate Rotation**: This allows
+import, generation and configuration of any number of keys and/or issuers
+within a PKI mount, providing operators the ability to rotate certificates
+in place without affecting existing client configurations.
+```
diff --git a/v1.14.6/changelog/15293.txt b/v1.14.6/changelog/15293.txt
new file mode 100644
index 0000000..857b198
--- /dev/null
+++ b/v1.14.6/changelog/15293.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Update consult-template to v0.29.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15295.txt b/v1.14.6/changelog/15295.txt
new file mode 100644
index 0000000..0fbf4b5
--- /dev/null
+++ b/v1.14.6/changelog/15295.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/consul: Add support for Consul node-identities and service-identities
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15305.txt b/v1.14.6/changelog/15305.txt
new file mode 100644
index 0000000..be3607c
--- /dev/null
+++ b/v1.14.6/changelog/15305.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: KV helper methods to simplify the common use case of reading and writing KV secrets
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15316.txt b/v1.14.6/changelog/15316.txt
new file mode 100644
index 0000000..d871900
--- /dev/null
+++ b/v1.14.6/changelog/15316.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/debug: added support for retrieving metrics from DR clusters if `unauthenticated_metrics_access` is enabled
+```
diff --git a/v1.14.6/changelog/15342.txt b/v1.14.6/changelog/15342.txt
new file mode 100644
index 0000000..0b0d6c1
--- /dev/null
+++ b/v1.14.6/changelog/15342.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: Include mount_accessor in audit request and response logs
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15343.txt b/v1.14.6/changelog/15343.txt
new file mode 100644
index 0000000..e293dd4
--- /dev/null
+++ b/v1.14.6/changelog/15343.txt
@@ -0,0 +1,15 @@
+```release-note:change
+physical/cockroachdb: Change underlying driver library from [lib/pq](https://github.com/lib/pq) to [pgx](https://github.com/jackc/pgx)
+```
+
+```release-note:change
+physical/postgres: Change underlying driver library from [lib/pq](https://github.com/lib/pq) to [pgx](https://github.com/jackc/pgx)
+```
+
+```release-note:change
+database/postgres: Change underlying driver library from [lib/pq](https://github.com/lib/pq) to [pgx](https://github.com/jackc/pgx)
+```
+
+```release-note:change
+database/redshift: Change underlying driver library from [lib/pq](https://github.com/lib/pq) to [pgx](https://github.com/jackc/pgx)
+```
diff --git a/v1.14.6/changelog/15352.txt b/v1.14.6/changelog/15352.txt
new file mode 100644
index 0000000..c9ce4c0
--- /dev/null
+++ b/v1.14.6/changelog/15352.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: allow client counts to be precomputed and queried on non-contiguous chunks of data
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15355.txt b/v1.14.6/changelog/15355.txt
new file mode 100644
index 0000000..ef56c84
--- /dev/null
+++ b/v1.14.6/changelog/15355.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+mfa/okta: migrate to use official Okta SDK
+```
diff --git a/v1.14.6/changelog/15361.txt b/v1.14.6/changelog/15361.txt
new file mode 100644
index 0000000..1d4284d
--- /dev/null
+++ b/v1.14.6/changelog/15361.txt
@@ -0,0 +1,5 @@
+```release-note:improvement
+auth/okta: Add support for performing [the number
+challenge](https://help.okta.com/en-us/Content/Topics/Mobile/ov-admin-config.htm?cshid=csh-okta-verify-number-challenge-v1#enable-number-challenge)
+during an Okta Verify push challenge
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15364.txt b/v1.14.6/changelog/15364.txt
new file mode 100644
index 0000000..e118076
--- /dev/null
+++ b/v1.14.6/changelog/15364.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix firefox inability to recognize file format of client count csv export
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15369.txt b/v1.14.6/changelog/15369.txt
new file mode 100644
index 0000000..b27c004
--- /dev/null
+++ b/v1.14.6/changelog/15369.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+mfa/okta: disable client side rate limiting causing delays in push notifications
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15376.txt b/v1.14.6/changelog/15376.txt
new file mode 100644
index 0000000..68ebd65
--- /dev/null
+++ b/v1.14.6/changelog/15376.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Snowflake Database Plugin**: Adds ability to manage RSA key pair credentials for dynamic and static Snowflake users.
+```
diff --git a/v1.14.6/changelog/15377.txt b/v1.14.6/changelog/15377.txt
new file mode 100644
index 0000000..c754710
--- /dev/null
+++ b/v1.14.6/changelog/15377.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Support VAULT_PROXY_ADDR environment variable to allow overriding the Vault client's HTTP proxy. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15378.txt b/v1.14.6/changelog/15378.txt
new file mode 100644
index 0000000..bb752e6
--- /dev/null
+++ b/v1.14.6/changelog/15378.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Allow namespace param to be parsed from state queryParam
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15380.txt b/v1.14.6/changelog/15380.txt
new file mode 100644
index 0000000..d895f8a
--- /dev/null
+++ b/v1.14.6/changelog/15380.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Redact auto auth token from renew endpoints
+```
diff --git a/v1.14.6/changelog/15383.txt b/v1.14.6/changelog/15383.txt
new file mode 100644
index 0000000..e987382
--- /dev/null
+++ b/v1.14.6/changelog/15383.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+command: do not report listener and storage types as key not found warnings
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15400.txt b/v1.14.6/changelog/15400.txt
new file mode 100644
index 0000000..aa14944
--- /dev/null
+++ b/v1.14.6/changelog/15400.txt
@@ -0,0 +1,3 @@
+```release-note:deprecation
+secrets/consul: Deprecate parameter "policies" in favor of "consul_policies" for consistency
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15405.txt b/v1.14.6/changelog/15405.txt
new file mode 100644
index 0000000..eb98386
--- /dev/null
+++ b/v1.14.6/changelog/15405.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command: Support optional '-log-level' flag to be passed to 'operator migrate' command (defaults to info). Also support VAULT_LOG_LEVEL env var.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15414.txt b/v1.14.6/changelog/15414.txt
new file mode 100644
index 0000000..de6372b
--- /dev/null
+++ b/v1.14.6/changelog/15414.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Transit BYOK**: Allow import of externally-generated keys into the Transit secrets engine.
+```
diff --git a/v1.14.6/changelog/15417.txt b/v1.14.6/changelog/15417.txt
new file mode 100644
index 0000000..1864779
--- /dev/null
+++ b/v1.14.6/changelog/15417.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command: Support the optional '-detailed' flag to be passed to 'vault list' command to show ListResponseWithInfo data. Also supports the VAULT_DETAILED env var.
+```
diff --git a/v1.14.6/changelog/15420.txt b/v1.14.6/changelog/15420.txt
new file mode 100644
index 0000000..e92c5da
--- /dev/null
+++ b/v1.14.6/changelog/15420.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+activity: return nil response months in activity log API when no month data exists
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15428.txt b/v1.14.6/changelog/15428.txt
new file mode 100644
index 0000000..2c4a4a5
--- /dev/null
+++ b/v1.14.6/changelog/15428.txt
@@ -0,0 +1,9 @@
+```release-note:bug
+auth: Fixed erroneous success message when using vault login in case of two-phase MFA
+```
+```release-note:bug
+auth: Fixed erroneous token information being displayed when using vault login in case of two-phase MFA
+```
+```release-note:bug
+auth: Fixed two-phase MFA information missing from table format when using vault login
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15429.txt b/v1.14.6/changelog/15429.txt
new file mode 100644
index 0000000..1f46aaf
--- /dev/null
+++ b/v1.14.6/changelog/15429.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Have pki/sign-verbatim use the not_before_duration field defined in the role
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15434.txt b/v1.14.6/changelog/15434.txt
new file mode 100644
index 0000000..565fb9e
--- /dev/null
+++ b/v1.14.6/changelog/15434.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: make ListPlugins parse only known plugin types
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15440.txt b/v1.14.6/changelog/15440.txt
new file mode 100644
index 0000000..36e0c79
--- /dev/null
+++ b/v1.14.6/changelog/15440.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Add connection timeout of 1 minute for outbound SSH connection in deprecated Dynamic SSH Keys mode.
+```
diff --git a/v1.14.6/changelog/15452.txt b/v1.14.6/changelog/15452.txt
new file mode 100644
index 0000000..3014168
--- /dev/null
+++ b/v1.14.6/changelog/15452.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: renaming the environment variable VAULT_DISABLE_FILE_PERMISSIONS_CHECK to VAULT_ENABLE_FILE_PERMISSIONS_CHECK and adjusting the logic
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15457.txt b/v1.14.6/changelog/15457.txt
new file mode 100644
index 0000000..d3a2f18
--- /dev/null
+++ b/v1.14.6/changelog/15457.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+audit: Add a policy_results block into the audit log that contains the set of
+policies that granted this request access.
+```
diff --git a/v1.14.6/changelog/15464.txt b/v1.14.6/changelog/15464.txt
new file mode 100644
index 0000000..73cd5aa
--- /dev/null
+++ b/v1.14.6/changelog/15464.txt
@@ -0,0 +1,3 @@
+```release-note:changes
+ui: pki issuer delete capabilities have been removed from the UI and reserved for the API and CLI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15469.txt b/v1.14.6/changelog/15469.txt
new file mode 100644
index 0000000..ec87347
--- /dev/null
+++ b/v1.14.6/changelog/15469.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth: forward cached MFA auth response to the leader using RPC instead of forwarding all login requests
+```
diff --git a/v1.14.6/changelog/15470.txt b/v1.14.6/changelog/15470.txt
new file mode 100644
index 0000000..2fbaede
--- /dev/null
+++ b/v1.14.6/changelog/15470.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Always return CRLs, URLs configurations, even if using the default value.
+```
diff --git a/v1.14.6/changelog/15474.txt b/v1.14.6/changelog/15474.txt
new file mode 100644
index 0000000..158da8c
--- /dev/null
+++ b/v1.14.6/changelog/15474.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Default auto-rotation period in transit is 30 days
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15478.txt b/v1.14.6/changelog/15478.txt
new file mode 100644
index 0000000..4e35391
--- /dev/null
+++ b/v1.14.6/changelog/15478.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secret/pki: Remove unused signature_bits parameter from intermediate CSR generation; this parameter doesn't control the final certificate's signature algorithm selection as that is up to the signing CA
+```
diff --git a/v1.14.6/changelog/15482.txt b/v1.14.6/changelog/15482.txt
new file mode 100644
index 0000000..0dcfd6f
--- /dev/null
+++ b/v1.14.6/changelog/15482.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth: Prevent deleting a valid MFA method ID using the endpoint for a different MFA method type
+```
diff --git a/v1.14.6/changelog/15487.txt b/v1.14.6/changelog/15487.txt
new file mode 100644
index 0000000..4ce85a1
--- /dev/null
+++ b/v1.14.6/changelog/15487.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: added entity_created boolean to audit log, set when login operations create an entity
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15493.txt b/v1.14.6/changelog/15493.txt
new file mode 100644
index 0000000..dfa11f4
--- /dev/null
+++ b/v1.14.6/changelog/15493.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Forward autopilot state requests on perf standbys to active node.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15494.txt b/v1.14.6/changelog/15494.txt
new file mode 100644
index 0000000..cd2caec
--- /dev/null
+++ b/v1.14.6/changelog/15494.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Warn on empty Subject field during issuer generation (root/generate and root/sign-intermediate).
+```
diff --git a/v1.14.6/changelog/15509.txt b/v1.14.6/changelog/15509.txt
new file mode 100644
index 0000000..88d4aa7
--- /dev/null
+++ b/v1.14.6/changelog/15509.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Warn on missing AIA access information when generating issuers (config/urls).
+```
diff --git a/v1.14.6/changelog/15510.txt b/v1.14.6/changelog/15510.txt
new file mode 100644
index 0000000..b6b6ab9
--- /dev/null
+++ b/v1.14.6/changelog/15510.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Enable Patch Functionality for Roles and Issuers (API only)
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15513.txt b/v1.14.6/changelog/15513.txt
new file mode 100644
index 0000000..a3d8a33
--- /dev/null
+++ b/v1.14.6/changelog/15513.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Remove stored license references
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15519.txt b/v1.14.6/changelog/15519.txt
new file mode 100644
index 0000000..d0ec744
--- /dev/null
+++ b/v1.14.6/changelog/15519.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: joining a node to a cluster now ignores any VAULT_NAMESPACE environment variable set on the server process
+```
diff --git a/v1.14.6/changelog/15523.txt b/v1.14.6/changelog/15523.txt
new file mode 100644
index 0000000..867fe27
--- /dev/null
+++ b/v1.14.6/changelog/15523.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**KeyMgmt UI**: Add UI support for managing the Key Management Secrets Engine
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15524.txt b/v1.14.6/changelog/15524.txt
new file mode 100644
index 0000000..1331f1e
--- /dev/null
+++ b/v1.14.6/changelog/15524.txt
@@ -0,0 +1,4 @@
+```release-note:change
+secrets/pki: the signed CA certificate from the sign-intermediate api will now appear within the ca_chain
+response field along with the issuer's ca chain.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15525.txt b/v1.14.6/changelog/15525.txt
new file mode 100644
index 0000000..3e44c20
--- /dev/null
+++ b/v1.14.6/changelog/15525.txt
@@ -0,0 +1,8 @@
+```release-note:bug
+auth/ldap: The logic for setting the entity alias when `username_as_alias` is set
+has been fixed. The previous behavior would make a request to the LDAP server to
+get `user_attr` before discarding it and using the username instead. This would
+make it impossible for a user to connect if this attribute was missing or had
+multiple values, even though it would not be used anyway. This has been fixed
+and the username is now used without making superfluous LDAP searches.
+```
diff --git a/v1.14.6/changelog/15527.txt b/v1.14.6/changelog/15527.txt
new file mode 100644
index 0000000..2dfb63f
--- /dev/null
+++ b/v1.14.6/changelog/15527.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: Add usage documentation for Kubernetes Secrets Engine
+```
diff --git a/v1.14.6/changelog/15536.txt b/v1.14.6/changelog/15536.txt
new file mode 100644
index 0000000..7bda619
--- /dev/null
+++ b/v1.14.6/changelog/15536.txt
@@ -0,0 +1,7 @@
+```release-note:improvement
+api/monitor: Add log_format option to allow for logs to be emitted in JSON format
+```
+
+```release-note:improvement
+command/debug: Add log_format flag to allow for logs to be emitted in JSON format
+```
diff --git a/v1.14.6/changelog/15543.txt b/v1.14.6/changelog/15543.txt
new file mode 100644
index 0000000..43c2c74
--- /dev/null
+++ b/v1.14.6/changelog/15543.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/pki: Err on unknown role during sign-verbatim.
+```
diff --git a/v1.14.6/changelog/15550.txt b/v1.14.6/changelog/15550.txt
new file mode 100644
index 0000000..6579b89
--- /dev/null
+++ b/v1.14.6/changelog/15550.txt
@@ -0,0 +1,3 @@
+```release-note:deprecation
+secrets/consul: Deprecate old parameters "token_type" and "policy"
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15551.txt b/v1.14.6/changelog/15551.txt
new file mode 100644
index 0000000..de41f7c
--- /dev/null
+++ b/v1.14.6/changelog/15551.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Kubernetes Secrets Engine**: This new secrets engine generates Kubernetes service account tokens, service accounts, role bindings, and roles dynamically.
+```
diff --git a/v1.14.6/changelog/15552.txt b/v1.14.6/changelog/15552.txt
new file mode 100644
index 0000000..22d854b
--- /dev/null
+++ b/v1.14.6/changelog/15552.txt
@@ -0,0 +1,6 @@
+```release-note:bug
+openapi: Fixed issue where information about /auth/token endpoints was not present with explicit policy permissions
+```
+```release-note:bug
+api: Fixed issue with internal/ui/mounts and internal/ui/mounts/(?P<path>.+) endpoints where it was not properly handling /auth/
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15559.txt b/v1.14.6/changelog/15559.txt
new file mode 100644
index 0000000..5df2f8b
--- /dev/null
+++ b/v1.14.6/changelog/15559.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/ssh: Convert role field not_before_duration to seconds before returning it
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15560.txt b/v1.14.6/changelog/15560.txt
new file mode 100644
index 0000000..387d2a8
--- /dev/null
+++ b/v1.14.6/changelog/15560.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix form validations ignoring default values and disabling submit button 
+```
diff --git a/v1.14.6/changelog/15561.txt b/v1.14.6/changelog/15561.txt
new file mode 100644
index 0000000..95787b6
--- /dev/null
+++ b/v1.14.6/changelog/15561.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ssh: Addition of an endpoint `ssh/issue/:role` to allow the creation of signed key pairs
+```
diff --git a/v1.14.6/changelog/15573.txt b/v1.14.6/changelog/15573.txt
new file mode 100644
index 0000000..49f1d26
--- /dev/null
+++ b/v1.14.6/changelog/15573.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed unsupported revocation statements field for DB roles
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15579.txt b/v1.14.6/changelog/15579.txt
new file mode 100644
index 0000000..f682dd4
--- /dev/null
+++ b/v1.14.6/changelog/15579.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugin: Fix a bug where plugin reload would falsely report success in certain scenarios.
+```
diff --git a/v1.14.6/changelog/15581.txt b/v1.14.6/changelog/15581.txt
new file mode 100644
index 0000000..abc55a5
--- /dev/null
+++ b/v1.14.6/changelog/15581.txt
@@ -0,0 +1,3 @@
+```release-note:deprecation
+docs: Document removal of X.509 certificates with signatures who use SHA-1 in Vault 1.12
+```
diff --git a/v1.14.6/changelog/15583.txt b/v1.14.6/changelog/15583.txt
new file mode 100644
index 0000000..b6cda31
--- /dev/null
+++ b/v1.14.6/changelog/15583.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Fix bug where wrapping token lookup does not work within namespaces.
+```
diff --git a/v1.14.6/changelog/15584.txt b/v1.14.6/changelog/15584.txt
new file mode 100644
index 0000000..ebf4f11
--- /dev/null
+++ b/v1.14.6/changelog/15584.txt
@@ -0,0 +1,6 @@
+```release-note:bug
+auth/kubernetes: Fix error code when using the wrong service account
+```
+```release-note:change
+auth/kubernetes: If `kubernetes_ca_cert` is unset, and there is no pod-local CA available, an error will be surfaced when writing config instead of waiting for login.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15586.txt b/v1.14.6/changelog/15586.txt
new file mode 100644
index 0000000..063f193
--- /dev/null
+++ b/v1.14.6/changelog/15586.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add an export API for historical activity log data
+```
diff --git a/v1.14.6/changelog/15592.txt b/v1.14.6/changelog/15592.txt
new file mode 100644
index 0000000..0393c6a
--- /dev/null
+++ b/v1.14.6/changelog/15592.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+auth/gcp: Vault CLI now infers the service account email when running on Google Cloud 
+```
+```release-note:improvement
+auth/gcp: Enable the Google service endpoints used by the underlying client to be customized 
+```
diff --git a/v1.14.6/changelog/15593.txt b/v1.14.6/changelog/15593.txt
new file mode 100644
index 0000000..01d749f
--- /dev/null
+++ b/v1.14.6/changelog/15593.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/jwt: Adds ability to use JSON pointer syntax for the `user_claim` value.
+```
diff --git a/v1.14.6/changelog/15614.txt b/v1.14.6/changelog/15614.txt
new file mode 100644
index 0000000..3c63dd5
--- /dev/null
+++ b/v1.14.6/changelog/15614.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database/elasticsearch: Use the new /_security base API path instead of /_xpack/security when managing elasticsearch.
+```
diff --git a/v1.14.6/changelog/15638.txt b/v1.14.6/changelog/15638.txt
new file mode 100644
index 0000000..9417955
--- /dev/null
+++ b/v1.14.6/changelog/15638.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+vault: Fix a bug where duplicate policies could be added to an identity group.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15655.txt b/v1.14.6/changelog/15655.txt
new file mode 100644
index 0000000..c5864ba
--- /dev/null
+++ b/v1.14.6/changelog/15655.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/kubernetes: Split `additional_metadata` into `extra_annotations` and `extra_labels` parameters
+```
diff --git a/v1.14.6/changelog/15681.txt b/v1.14.6/changelog/15681.txt
new file mode 100644
index 0000000..2054411
--- /dev/null
+++ b/v1.14.6/changelog/15681.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixed bug where red spellcheck underline appears in sensitive/secret kv values when it should not appear
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15685.txt b/v1.14.6/changelog/15685.txt
new file mode 100644
index 0000000..bf9313f
--- /dev/null
+++ b/v1.14.6/changelog/15685.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+ui: Updated `leasId` to `leaseId` in the "Copy Credentials" section of "Generate AWS Credentials"
+```
diff --git a/v1.14.6/changelog/15693.txt b/v1.14.6/changelog/15693.txt
new file mode 100644
index 0000000..7426c15
--- /dev/null
+++ b/v1.14.6/changelog/15693.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Prevent metrics generation from causing deadlocks.
+```
diff --git a/v1.14.6/changelog/15719.txt b/v1.14.6/changelog/15719.txt
new file mode 100644
index 0000000..902648c
--- /dev/null
+++ b/v1.14.6/changelog/15719.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/aws: Add rsa2048 signature type to API
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15735.txt b/v1.14.6/changelog/15735.txt
new file mode 100644
index 0000000..3dd6600
--- /dev/null
+++ b/v1.14.6/changelog/15735.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+quotas/lease-count: Fix lease-count quotas on mounts not properly being enforced when the lease generating request is a read
+```
diff --git a/v1.14.6/changelog/15742.txt b/v1.14.6/changelog/15742.txt
new file mode 100644
index 0000000..c7f69b6
--- /dev/null
+++ b/v1.14.6/changelog/15742.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secret/transit: Allow importing Ed25519 keys from PKCS#8 with inner RFC 5915 ECPrivateKey blobs (NSS-wrapped keys).
+```
diff --git a/v1.14.6/changelog/15751.txt b/v1.14.6/changelog/15751.txt
new file mode 100644
index 0000000..d753db8
--- /dev/null
+++ b/v1.14.6/changelog/15751.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add support for CPS URLs and User Notice to Policy Information
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15759.txt b/v1.14.6/changelog/15759.txt
new file mode 100644
index 0000000..0687000
--- /dev/null
+++ b/v1.14.6/changelog/15759.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Prevent changing file permissions of audit logs when mode 0000 is used.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15769.txt b/v1.14.6/changelog/15769.txt
new file mode 100644
index 0000000..76eab0e
--- /dev/null
+++ b/v1.14.6/changelog/15769.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Revert using localStorage in favor of sessionStorage
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15789.txt b/v1.14.6/changelog/15789.txt
new file mode 100644
index 0000000..d6aaaa6
--- /dev/null
+++ b/v1.14.6/changelog/15789.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix inconsistent behavior in client count calendar widget
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15792.txt b/v1.14.6/changelog/15792.txt
new file mode 100644
index 0000000..9a7eb43
--- /dev/null
+++ b/v1.14.6/changelog/15792.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/kv: Fix issue preventing the ability to reset the `delete_version_after` key metadata field to 0s via HTTP `PATCH`.
+```
diff --git a/v1.14.6/changelog/15809.txt b/v1.14.6/changelog/15809.txt
new file mode 100644
index 0000000..87e42c8
--- /dev/null
+++ b/v1.14.6/changelog/15809.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secret/nomad: allow reading CA and client auth certificate from /nomad/config/access
+```
diff --git a/v1.14.6/changelog/15824.txt b/v1.14.6/changelog/15824.txt
new file mode 100644
index 0000000..9d9708f
--- /dev/null
+++ b/v1.14.6/changelog/15824.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix issue where metadata tab is hidden even though policy grants access
+```
diff --git a/v1.14.6/changelog/15835.txt b/v1.14.6/changelog/15835.txt
new file mode 100644
index 0000000..d689c2a
--- /dev/null
+++ b/v1.14.6/changelog/15835.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api/sys/internal/specs/openapi: support a new "dynamic" query parameter to generate generic mountpaths
+```
diff --git a/v1.14.6/changelog/15852.txt b/v1.14.6/changelog/15852.txt
new file mode 100644
index 0000000..8ed97dc
--- /dev/null
+++ b/v1.14.6/changelog/15852.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Changed the tokenBoundCidrs tooltip content to clarify that comma separated values are not accepted in this field.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15858.txt b/v1.14.6/changelog/15858.txt
new file mode 100644
index 0000000..24f4488
--- /dev/null
+++ b/v1.14.6/changelog/15858.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core/fips: Disable and warn about entropy augmentation in FIPS 140-2 Inside mode
+```
diff --git a/v1.14.6/changelog/15866.txt b/v1.14.6/changelog/15866.txt
new file mode 100644
index 0000000..384762e
--- /dev/null
+++ b/v1.14.6/changelog/15866.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+physical/postgresql: pass context to queries to propagate timeouts and cancellations on requests.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15869.txt b/v1.14.6/changelog/15869.txt
new file mode 100644
index 0000000..bb0278d
--- /dev/null
+++ b/v1.14.6/changelog/15869.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/aws: do not create leases for non-renewable/non-revocable STS credentials to reduce storage calls
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15879.txt b/v1.14.6/changelog/15879.txt
new file mode 100644
index 0000000..0d435b0
--- /dev/null
+++ b/v1.14.6/changelog/15879.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Limit SSCT WAL checks on perf standbys to raft backends only
+```
diff --git a/v1.14.6/changelog/15898.txt b/v1.14.6/changelog/15898.txt
new file mode 100644
index 0000000..02e380d
--- /dev/null
+++ b/v1.14.6/changelog/15898.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Removed deprecated version of core-js 2.6.11
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15900.txt b/v1.14.6/changelog/15900.txt
new file mode 100644
index 0000000..ec1e8b6
--- /dev/null
+++ b/v1.14.6/changelog/15900.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fixes parsing boolean values for ha_storage backends in config
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15912.txt b/v1.14.6/changelog/15912.txt
new file mode 100644
index 0000000..391d735
--- /dev/null
+++ b/v1.14.6/changelog/15912.txt
@@ -0,0 +1,3 @@
+```release-note:change
+identity: a request to `/identity/group` that includes `member_group_ids` that contains a cycle will now be responded to with a 400 rather than 500
+```
diff --git a/v1.14.6/changelog/15933.txt b/v1.14.6/changelog/15933.txt
new file mode 100644
index 0000000..9afa910
--- /dev/null
+++ b/v1.14.6/changelog/15933.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+database: Invalidate queue should cancel context first to avoid deadlock
+```
diff --git a/v1.14.6/changelog/15946.txt b/v1.14.6/changelog/15946.txt
new file mode 100644
index 0000000..869f61a
--- /dev/null
+++ b/v1.14.6/changelog/15946.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/seal: Fix possible keyring truncation when using the file backend.
+```
diff --git a/v1.14.6/changelog/15986.txt b/v1.14.6/changelog/15986.txt
new file mode 100644
index 0000000..101bc13
--- /dev/null
+++ b/v1.14.6/changelog/15986.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Added `disable_idle_connections` configuration to disable leaving idle connections open in auto-auth, caching and templating.
+```
diff --git a/v1.14.6/changelog/15989.txt b/v1.14.6/changelog/15989.txt
new file mode 100644
index 0000000..68ad278
--- /dev/null
+++ b/v1.14.6/changelog/15989.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/quotas: Added ability to add path suffixes for rate-limit resource quotas
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/15996.txt b/v1.14.6/changelog/15996.txt
new file mode 100644
index 0000000..b29f1da
--- /dev/null
+++ b/v1.14.6/changelog/15996.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secret/pki: Allow issuing certificates with non-domain, non-email Common Names from roles, sign-verbatim, and as issuers (`cn_validations`).
+```
diff --git a/v1.14.6/changelog/15998.txt b/v1.14.6/changelog/15998.txt
new file mode 100644
index 0000000..69274f6
--- /dev/null
+++ b/v1.14.6/changelog/15998.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+ui: UI support for Okta Number Challenge.
+```
diff --git a/v1.14.6/changelog/16000.txt b/v1.14.6/changelog/16000.txt
new file mode 100644
index 0000000..fde39b9
--- /dev/null
+++ b/v1.14.6/changelog/16000.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Limit activity log client count usage by namespaces
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16018.txt b/v1.14.6/changelog/16018.txt
new file mode 100644
index 0000000..31b4929
--- /dev/null
+++ b/v1.14.6/changelog/16018.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Allow additional text along with a template definition in defaultExtension value fields.
+```
diff --git a/v1.14.6/changelog/16056.txt b/v1.14.6/changelog/16056.txt
new file mode 100644
index 0000000..1652726
--- /dev/null
+++ b/v1.14.6/changelog/16056.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Add allowed_domains_template to allow templating of allowed_domains.
+```
diff --git a/v1.14.6/changelog/16063.txt b/v1.14.6/changelog/16063.txt
new file mode 100644
index 0000000..aa90bec
--- /dev/null
+++ b/v1.14.6/changelog/16063.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+website/docs: Update replication docs to mention Integrated Storage
+```
+
diff --git a/v1.14.6/changelog/16087.txt b/v1.14.6/changelog/16087.txt
new file mode 100644
index 0000000..5320635
--- /dev/null
+++ b/v1.14.6/changelog/16087.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Update consul-template for pkiCert bug fixes
+```
diff --git a/v1.14.6/changelog/16088.txt b/v1.14.6/changelog/16088.txt
new file mode 100644
index 0000000..ff2457a
--- /dev/null
+++ b/v1.14.6/changelog/16088.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Replicate member_entity_ids and policies in identity/group across nodes identically
+```
diff --git a/v1.14.6/changelog/16094.txt b/v1.14.6/changelog/16094.txt
new file mode 100644
index 0000000..edb1060
--- /dev/null
+++ b/v1.14.6/changelog/16094.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugin/multiplexing: Fix panic when id doesn't exist in connection map
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16111.txt b/v1.14.6/changelog/16111.txt
new file mode 100644
index 0000000..59d5330
--- /dev/null
+++ b/v1.14.6/changelog/16111.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add `sys/loggers` and `sys/loggers/:name` endpoints to provide ability to modify logging verbosity
+```
diff --git a/v1.14.6/changelog/16112.txt b/v1.14.6/changelog/16112.txt
new file mode 100644
index 0000000..3b61c6b
--- /dev/null
+++ b/v1.14.6/changelog/16112.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/auth: Return a 403 instead of a 500 for a malformed SSCT
+```
diff --git a/v1.14.6/changelog/16115.txt b/v1.14.6/changelog/16115.txt
new file mode 100644
index 0000000..82998b6
--- /dev/null
+++ b/v1.14.6/changelog/16115.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/quotas: Added ability to add role information for rate-limit resource quotas, to limit login requests on auth mounts made using that role
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16124.txt b/v1.14.6/changelog/16124.txt
new file mode 100644
index 0000000..38eca2a
--- /dev/null
+++ b/v1.14.6/changelog/16124.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secret/pki: Add signature_bits to sign-intermediate, sign-verbatim endpoints
+```
diff --git a/v1.14.6/changelog/16140.txt b/v1.14.6/changelog/16140.txt
new file mode 100644
index 0000000..1fffd7e
--- /dev/null
+++ b/v1.14.6/changelog/16140.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ad: set config default length only if password_policy is missing
+```
diff --git a/v1.14.6/changelog/16146.txt b/v1.14.6/changelog/16146.txt
new file mode 100644
index 0000000..39086b3
--- /dev/null
+++ b/v1.14.6/changelog/16146.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: generate hyperloglogs containing clientIds for each month during precomputation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16162.txt b/v1.14.6/changelog/16162.txt
new file mode 100644
index 0000000..5e3c348
--- /dev/null
+++ b/v1.14.6/changelog/16162.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: refactor activity log api to reuse partial api functions in activity endpoint when current month is specified
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16170.txt b/v1.14.6/changelog/16170.txt
new file mode 100644
index 0000000..04707ce
--- /dev/null
+++ b/v1.14.6/changelog/16170.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: OIDC login type uses localStorage instead of sessionStorage
+```
diff --git a/v1.14.6/changelog/16181.txt b/v1.14.6/changelog/16181.txt
new file mode 100644
index 0000000..1e97d1e
--- /dev/null
+++ b/v1.14.6/changelog/16181.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity/oidc: allows filtering the list providers response by an allowed_client_id
+```
diff --git a/v1.14.6/changelog/16184.txt b/v1.14.6/changelog/16184.txt
new file mode 100644
index 0000000..e7a8b06
--- /dev/null
+++ b/v1.14.6/changelog/16184.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: use monthly hyperloglogs to calculate new clients approximation for current month
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16213.txt b/v1.14.6/changelog/16213.txt
new file mode 100644
index 0000000..489243d
--- /dev/null
+++ b/v1.14.6/changelog/16213.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: API generate-recovery-token documentation.
+```
diff --git a/v1.14.6/changelog/16218.txt b/v1.14.6/changelog/16218.txt
new file mode 100644
index 0000000..aa6eff0
--- /dev/null
+++ b/v1.14.6/changelog/16218.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+docs: Clarify the behaviour of local mounts in the context of DR replication
+```
diff --git a/v1.14.6/changelog/16224.txt b/v1.14.6/changelog/16224.txt
new file mode 100644
index 0000000..822b245
--- /dev/null
+++ b/v1.14.6/changelog/16224.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fix GPG encryption to support subkeys.
+```
diff --git a/v1.14.6/changelog/16231.txt b/v1.14.6/changelog/16231.txt
new file mode 100644
index 0000000..aa979d1
--- /dev/null
+++ b/v1.14.6/changelog/16231.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent/template: Fix parsing error for the exec stanza
+```
diff --git a/v1.14.6/changelog/16246.txt b/v1.14.6/changelog/16246.txt
new file mode 100644
index 0000000..8883de1
--- /dev/null
+++ b/v1.14.6/changelog/16246.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secret/pki: Do not fail validation with a legacy key_bits default value and key_type=any when signing CSRs
+```
diff --git a/v1.14.6/changelog/16249.txt b/v1.14.6/changelog/16249.txt
new file mode 100644
index 0000000..f84977d
--- /dev/null
+++ b/v1.14.6/changelog/16249.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Honor If-Modified-Since header on CA, CRL fetch; requires passthrough_request_headers modification on the mount point.
+```
diff --git a/v1.14.6/changelog/16274.txt b/v1.14.6/changelog/16274.txt
new file mode 100644
index 0000000..75374ed
--- /dev/null
+++ b/v1.14.6/changelog/16274.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/oidc: Adds support for group membership parsing when using SecureAuth as an OIDC provider.
+```
diff --git a/v1.14.6/changelog/16324.txt b/v1.14.6/changelog/16324.txt
new file mode 100644
index 0000000..3d4cfbf
--- /dev/null
+++ b/v1.14.6/changelog/16324.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft (enterprise): Prevent unauthenticated voter status change with rejoin
+```
diff --git a/v1.14.6/changelog/16327.txt b/v1.14.6/changelog/16327.txt
new file mode 100644
index 0000000..da22993
--- /dev/null
+++ b/v1.14.6/changelog/16327.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Increase the allowed concurrent gRPC streams over the cluster port.
+```
diff --git a/v1.14.6/changelog/16351.txt b/v1.14.6/changelog/16351.txt
new file mode 100644
index 0000000..879c7f6
--- /dev/null
+++ b/v1.14.6/changelog/16351.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Allow the use of Identity templates in the `default_user` field
+```
diff --git a/v1.14.6/changelog/16353.txt b/v1.14.6/changelog/16353.txt
new file mode 100644
index 0000000..be247cc
--- /dev/null
+++ b/v1.14.6/changelog/16353.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: remove gox
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16379.txt b/v1.14.6/changelog/16379.txt
new file mode 100644
index 0000000..99ed7e5
--- /dev/null
+++ b/v1.14.6/changelog/16379.txt
@@ -0,0 +1,3 @@
+```release-note:change 
+core: Validate input parameters for vault operator init command. Vault 1.12 CLI version is needed to run operator init now.   
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16386.txt b/v1.14.6/changelog/16386.txt
new file mode 100644
index 0000000..4fa6a6c
--- /dev/null
+++ b/v1.14.6/changelog/16386.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/quotas: Added globbing functionality on the end of path suffix quota paths
+```
diff --git a/v1.14.6/changelog/16409.txt b/v1.14.6/changelog/16409.txt
new file mode 100644
index 0000000..d8f83b0
--- /dev/null
+++ b/v1.14.6/changelog/16409.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command/audit: Improve missing type error message
+```
diff --git a/v1.14.6/changelog/16421.txt b/v1.14.6/changelog/16421.txt
new file mode 100644
index 0000000..281d2e8
--- /dev/null
+++ b/v1.14.6/changelog/16421.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command/server: add `-dev-tls` and `-dev-tls-cert-dir` subcommands to create a Vault dev server with generated certificates and private key.
+```
diff --git a/v1.14.6/changelog/16435.txt b/v1.14.6/changelog/16435.txt
new file mode 100644
index 0000000..a7246e3
--- /dev/null
+++ b/v1.14.6/changelog/16435.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/gcp: Add support for GCE regional instance groups
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16441.txt b/v1.14.6/changelog/16441.txt
new file mode 100644
index 0000000..f265483
--- /dev/null
+++ b/v1.14.6/changelog/16441.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: CLI commands will print a warning if flags will be ignored because they are passed after positional arguments.
+```
diff --git a/v1.14.6/changelog/16443.txt b/v1.14.6/changelog/16443.txt
new file mode 100644
index 0000000..86b43c6
--- /dev/null
+++ b/v1.14.6/changelog/16443.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/kv: Fix `kv get` issue preventing the ability to read a secret when providing a leading slash
+```
diff --git a/v1.14.6/changelog/16455.txt b/v1.14.6/changelog/16455.txt
new file mode 100644
index 0000000..660dbc1
--- /dev/null
+++ b/v1.14.6/changelog/16455.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/aws: PKCS7 signatures will now use SHA256 by default in prep for Go 1.18
+```
diff --git a/v1.14.6/changelog/16466.txt b/v1.14.6/changelog/16466.txt
new file mode 100644
index 0000000..1b5fb3c
--- /dev/null
+++ b/v1.14.6/changelog/16466.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix issue logging in with JWT auth method
+```
diff --git a/v1.14.6/changelog/16479.txt b/v1.14.6/changelog/16479.txt
new file mode 100644
index 0000000..43b5258
--- /dev/null
+++ b/v1.14.6/changelog/16479.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Added `disable_keep_alives` configuration to disable keep alives in auto-auth, caching and templating.
+```
diff --git a/v1.14.6/changelog/16487.txt b/v1.14.6/changelog/16487.txt
new file mode 100644
index 0000000..cbf2a2a
--- /dev/null
+++ b/v1.14.6/changelog/16487.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity: Prevent possibility of data races on entity creation.
+```
diff --git a/v1.14.6/changelog/16489.txt b/v1.14.6/changelog/16489.txt
new file mode 100644
index 0000000..17c66ca
--- /dev/null
+++ b/v1.14.6/changelog/16489.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Renamed labels under Tools for wrap, lookup, rewrap and unwrap with description.
+```
diff --git a/v1.14.6/changelog/16494.txt b/v1.14.6/changelog/16494.txt
new file mode 100644
index 0000000..40cf364
--- /dev/null
+++ b/v1.14.6/changelog/16494.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secret/pki: Allow specifying SKID for cross-signed issuance from older Vault versions.
+```
diff --git a/v1.14.6/changelog/16519.txt b/v1.14.6/changelog/16519.txt
new file mode 100644
index 0000000..1325202
--- /dev/null
+++ b/v1.14.6/changelog/16519.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secret/pki: Add RSA PSS signature support for issuing certificates, signing CRLs
+```
diff --git a/v1.14.6/changelog/16525.txt b/v1.14.6/changelog/16525.txt
new file mode 100644
index 0000000..2f611af
--- /dev/null
+++ b/v1.14.6/changelog/16525.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+auth/jwt: Improves detection of Windows Subsystem for Linux (WSL) for CLI-based logins. 
+```
+```release-note:improvement
+auth/jwt: Adds support for Microsoft US Gov L4 to the Azure provider for groups fetching.
+```
diff --git a/v1.14.6/changelog/16534.txt b/v1.14.6/changelog/16534.txt
new file mode 100644
index 0000000..6d4386c
--- /dev/null
+++ b/v1.14.6/changelog/16534.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/gcp: Fixes duplicate static account key creation from performance secondary clusters. 
+```
diff --git a/v1.14.6/changelog/16539.txt b/v1.14.6/changelog/16539.txt
new file mode 100644
index 0000000..9927329
--- /dev/null
+++ b/v1.14.6/changelog/16539.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core/entities: Fixed stranding of aliases upon entity merge, and require explicit selection of which aliases should be kept when some must be deleted
+```
diff --git a/v1.14.6/changelog/16549.txt b/v1.14.6/changelog/16549.txt
new file mode 100644
index 0000000..101d1f9
--- /dev/null
+++ b/v1.14.6/changelog/16549.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Allow configuring the possible salt lengths for RSA PSS signatures.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16550.txt b/v1.14.6/changelog/16550.txt
new file mode 100644
index 0000000..a1df8bd
--- /dev/null
+++ b/v1.14.6/changelog/16550.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix retry_join initialization failure
+```
diff --git a/v1.14.6/changelog/16553.txt b/v1.14.6/changelog/16553.txt
new file mode 100644
index 0000000..7031f04
--- /dev/null
+++ b/v1.14.6/changelog/16553.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command: Fix shell completion for KV v2 mounts
+```
diff --git a/v1.14.6/changelog/16563.txt b/v1.14.6/changelog/16563.txt
new file mode 100644
index 0000000..e5ff275
--- /dev/null
+++ b/v1.14.6/changelog/16563.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add support for per-issuer Authority Information Access (AIA) URLs
+```
diff --git a/v1.14.6/changelog/16564.txt b/v1.14.6/changelog/16564.txt
new file mode 100644
index 0000000..90a5524
--- /dev/null
+++ b/v1.14.6/changelog/16564.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow revocation of certificates with explicitly provided certificate (bring your own certificate / BYOC).
+```
diff --git a/v1.14.6/changelog/16566.txt b/v1.14.6/changelog/16566.txt
new file mode 100644
index 0000000..269d8da
--- /dev/null
+++ b/v1.14.6/changelog/16566.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow revocation via proving possession of certificate's private key
+```
diff --git a/v1.14.6/changelog/16567.txt b/v1.14.6/changelog/16567.txt
new file mode 100644
index 0000000..78492e3
--- /dev/null
+++ b/v1.14.6/changelog/16567.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity/oidc: Adds support for detailed listing of clients and providers.
+```
diff --git a/v1.14.6/changelog/16594.txt b/v1.14.6/changelog/16594.txt
new file mode 100644
index 0000000..3aae964
--- /dev/null
+++ b/v1.14.6/changelog/16594.txt
@@ -0,0 +1,5 @@
+```release-note:improvement
+auth/kerberos: add `remove_instance_name` parameter to the login CLI and the 
+Kerberos config in Vault. This removes any instance names found in the keytab 
+service principal name.
+```
diff --git a/v1.14.6/changelog/16598.txt b/v1.14.6/changelog/16598.txt
new file mode 100644
index 0000000..5b051b1
--- /dev/null
+++ b/v1.14.6/changelog/16598.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+identity/oidc: Adds the `client_secret_post` token endpoint authentication method.
+```
diff --git a/v1.14.6/changelog/16599.txt b/v1.14.6/changelog/16599.txt
new file mode 100644
index 0000000..dd32395
--- /dev/null
+++ b/v1.14.6/changelog/16599.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Change the `state` parameter of the Authorization Endpoint to optional.
+```
diff --git a/v1.14.6/changelog/16600.txt b/v1.14.6/changelog/16600.txt
new file mode 100644
index 0000000..e0855f6
--- /dev/null
+++ b/v1.14.6/changelog/16600.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Fixes validation of the `request` and `request_uri` parameters.
+```
diff --git a/v1.14.6/changelog/16601.txt b/v1.14.6/changelog/16601.txt
new file mode 100644
index 0000000..ce0e77b
--- /dev/null
+++ b/v1.14.6/changelog/16601.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+identity/oidc: Detect invalid `redirect_uri` values sooner in validation of the 
+Authorization Endpoint.
+```
diff --git a/v1.14.6/changelog/16609.txt b/v1.14.6/changelog/16609.txt
new file mode 100644
index 0000000..13ecb7b
--- /dev/null
+++ b/v1.14.6/changelog/16609.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Upgrade github.com/hashicorp/raft
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16621.txt b/v1.14.6/changelog/16621.txt
new file mode 100644
index 0000000..e447dbb
--- /dev/null
+++ b/v1.14.6/changelog/16621.txt
@@ -0,0 +1,2 @@
+```release-note:improvement
+secrets/pki: Allow revocation of issuers within the same mount.
diff --git a/v1.14.6/changelog/16622.txt b/v1.14.6/changelog/16622.txt
new file mode 100644
index 0000000..37ae5ab
--- /dev/null
+++ b/v1.14.6/changelog/16622.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Evaluate ssh validprincipals user template before splitting
+```
diff --git a/v1.14.6/changelog/16631.txt b/v1.14.6/changelog/16631.txt
new file mode 100644
index 0000000..4e092b3
--- /dev/null
+++ b/v1.14.6/changelog/16631.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database/hana: Add ability to customize dynamic usernames
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16636.txt b/v1.14.6/changelog/16636.txt
new file mode 100644
index 0000000..e36a6fe
--- /dev/null
+++ b/v1.14.6/changelog/16636.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/kerberos: Maintain headers set by the client
+```
diff --git a/v1.14.6/changelog/16659.txt b/v1.14.6/changelog/16659.txt
new file mode 100644
index 0000000..c202616
--- /dev/null
+++ b/v1.14.6/changelog/16659.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix info tooltip submitting form
+```
diff --git a/v1.14.6/changelog/16668.txt b/v1.14.6/changelog/16668.txt
new file mode 100644
index 0000000..745cf0b
--- /dev/null
+++ b/v1.14.6/changelog/16668.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Add a dedicated HMAC key type, which can be used with key import.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16673.txt b/v1.14.6/changelog/16673.txt
new file mode 100644
index 0000000..e632bfe
--- /dev/null
+++ b/v1.14.6/changelog/16673.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugin/secrets/auth: Fix a bug with aliased backends such as aws-ec2 or generic
+```
diff --git a/v1.14.6/changelog/16676.txt b/v1.14.6/changelog/16676.txt
new file mode 100644
index 0000000..e52c086
--- /dev/null
+++ b/v1.14.6/changelog/16676.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Added gauge metrics "secrets.pki.total_revoked_certificates_stored" and "secrets.pki.total_certificates_stored" to track the number of certificates in storage.
+```
diff --git a/v1.14.6/changelog/16686.txt b/v1.14.6/changelog/16686.txt
new file mode 100644
index 0000000..293eb7c
--- /dev/null
+++ b/v1.14.6/changelog/16686.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/database: Fix a bug where the secret engine would queue up a lot of WAL deletes during startup.
+```
diff --git a/v1.14.6/changelog/16688.txt b/v1.14.6/changelog/16688.txt
new file mode 100644
index 0000000..c7310fd
--- /dev/null
+++ b/v1.14.6/changelog/16688.txt
@@ -0,0 +1,6 @@
+```release-note:change
+plugins: `GET /sys/plugins/catalog` endpoint now returns an additional `detailed` field in the response data with a list of additional plugin metadata.
+```
+```release-note:change
+plugins: `GET /sys/plugins/catalog/:type/:name` endpoint now returns an additional `version` field in the response data.
+```
diff --git a/v1.14.6/changelog/16699.txt b/v1.14.6/changelog/16699.txt
new file mode 100644
index 0000000..4a96e86
--- /dev/null
+++ b/v1.14.6/changelog/16699.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Add a sentinel error for missing KV secrets
+```
diff --git a/v1.14.6/changelog/16700.txt b/v1.14.6/changelog/16700.txt
new file mode 100644
index 0000000..9dc8d1e
--- /dev/null
+++ b/v1.14.6/changelog/16700.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fixes duplicate otherName in certificates created by the sign-verbatim endpoint.
+```
diff --git a/v1.14.6/changelog/16702.txt b/v1.14.6/changelog/16702.txt
new file mode 100644
index 0000000..a197646
--- /dev/null
+++ b/v1.14.6/changelog/16702.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki/tidy: Add another pair of metrics counting certificates not deleted by the tidy operation.
+```
diff --git a/v1.14.6/changelog/16714.txt b/v1.14.6/changelog/16714.txt
new file mode 100644
index 0000000..a136106
--- /dev/null
+++ b/v1.14.6/changelog/16714.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+debug: Remove extra empty lines from vault.log when debug command is run
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16721.txt b/v1.14.6/changelog/16721.txt
new file mode 100644
index 0000000..84e0ffa
--- /dev/null
+++ b/v1.14.6/changelog/16721.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Ignore EC PARAMETER PEM blocks during issuer import (/config/ca, /issuers/import/*, and /intermediate/set-signed)
+```
diff --git a/v1.14.6/changelog/16723.txt b/v1.14.6/changelog/16723.txt
new file mode 100644
index 0000000..faba459
--- /dev/null
+++ b/v1.14.6/changelog/16723.txt
@@ -0,0 +1,4 @@
+```release-note:feature
+**OCSP Responder**: PKI mounts now have an OCSP responder that implements a subset of RFC6960, answering single serial number OCSP requests for
+a specific cluster's revoked certificates in a mount.
+```
diff --git a/v1.14.6/changelog/16739.txt b/v1.14.6/changelog/16739.txt
new file mode 100644
index 0000000..00d190f
--- /dev/null
+++ b/v1.14.6/changelog/16739.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix naming of permitted_dns_domains form parameter on CA creation (root generation and sign intermediate).
+```
diff --git a/v1.14.6/changelog/16762.txt b/v1.14.6/changelog/16762.txt
new file mode 100644
index 0000000..ade57bd
--- /dev/null
+++ b/v1.14.6/changelog/16762.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add ability to periodically rebuild CRL before expiry
+```
diff --git a/v1.14.6/changelog/16773.txt b/v1.14.6/changelog/16773.txt
new file mode 100644
index 0000000..bebb0d5
--- /dev/null
+++ b/v1.14.6/changelog/16773.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Support generating delta CRLs for up-to-date CRLs when auto-building is enabled.
+```
diff --git a/v1.14.6/changelog/16794.txt b/v1.14.6/changelog/16794.txt
new file mode 100644
index 0000000..0f78cf0
--- /dev/null
+++ b/v1.14.6/changelog/16794.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Fixed erroneous warnings of unrecognized parameters when unwrapping data.
+```
diff --git a/v1.14.6/changelog/16813.txt b/v1.14.6/changelog/16813.txt
new file mode 100644
index 0000000..352fa09
--- /dev/null
+++ b/v1.14.6/changelog/16813.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix migration to properly handle mounts that contain only keys, no certificates
+```
diff --git a/v1.14.6/changelog/16821.txt b/v1.14.6/changelog/16821.txt
new file mode 100644
index 0000000..c414d80
--- /dev/null
+++ b/v1.14.6/changelog/16821.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: redirect_to param forwards from auth route when authenticated
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16830.txt b/v1.14.6/changelog/16830.txt
new file mode 100644
index 0000000..d0fa219
--- /dev/null
+++ b/v1.14.6/changelog/16830.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: LIST issuers endpoint is now unauthenticated.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16834.txt b/v1.14.6/changelog/16834.txt
new file mode 100644
index 0000000..70c7d34
--- /dev/null
+++ b/v1.14.6/changelog/16834.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+command/debug: fix bug where monitor was not honoring configured duration
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16846.txt b/v1.14.6/changelog/16846.txt
new file mode 100644
index 0000000..dd4aeaa
--- /dev/null
+++ b/v1.14.6/changelog/16846.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugins: Add Deprecation Status method to builtinregistry.
+```
diff --git a/v1.14.6/changelog/16849.txt b/v1.14.6/changelog/16849.txt
new file mode 100644
index 0000000..a320eed
--- /dev/null
+++ b/v1.14.6/changelog/16849.txt
@@ -0,0 +1,15 @@
+```release-note:change
+auth: `GET /sys/auth` endpoint now returns an additional `deprecation_status` field in the response data for builtins.
+```
+```release-note:change
+auth: `GET /sys/auth/:name` endpoint now returns an additional `deprecation_status` field in the response data for builtins.
+```
+```release-note:change
+secrets: `GET /sys/mounts` endpoint now returns an additional `deprecation_status` field in the response data for builtins.
+```
+```release-note:change
+secrets: `GET /sys/mounts/:name` endpoint now returns an additional `deprecation_status` field in the response data for builtins.
+```
+```release-note:improvement
+cli: `auth` and `secrets` list `-detailed` commands now show Deprecation Status for builtin plugins.
+```
diff --git a/v1.14.6/changelog/16856.txt b/v1.14.6/changelog/16856.txt
new file mode 100644
index 0000000..512dd67
--- /dev/null
+++ b/v1.14.6/changelog/16856.txt
@@ -0,0 +1,3 @@
+```release-note:change
+plugins: Add plugin version to auth register, list, and mount table
+```
diff --git a/v1.14.6/changelog/16865.txt b/v1.14.6/changelog/16865.txt
new file mode 100644
index 0000000..2f03b83
--- /dev/null
+++ b/v1.14.6/changelog/16865.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Allow import of issuers without CRLSign KeyUsage; prohibit setting crl-signing usage on such issuers
+```
diff --git a/v1.14.6/changelog/16871.txt b/v1.14.6/changelog/16871.txt
new file mode 100644
index 0000000..8b57c78
--- /dev/null
+++ b/v1.14.6/changelog/16871.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow tidy to associate revoked certs with their issuers for OCSP performance
+```
diff --git a/v1.14.6/changelog/16872.txt b/v1.14.6/changelog/16872.txt
new file mode 100644
index 0000000..5bbad14
--- /dev/null
+++ b/v1.14.6/changelog/16872.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: fix incorrectly used loop variables in parallel tests and when finalizing seals
+```
diff --git a/v1.14.6/changelog/16874.txt b/v1.14.6/changelog/16874.txt
new file mode 100644
index 0000000..f1dafa0
--- /dev/null
+++ b/v1.14.6/changelog/16874.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Improve stability of association of revoked cert with its parent issuer; when an issuer loses crl-signing usage, do not place certs on default issuer's CRL.
+```
diff --git a/v1.14.6/changelog/16886.txt b/v1.14.6/changelog/16886.txt
new file mode 100644
index 0000000..73b9b41
--- /dev/null
+++ b/v1.14.6/changelog/16886.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix OIDC callback to accept namespace flag in different formats
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16890.txt b/v1.14.6/changelog/16890.txt
new file mode 100644
index 0000000..1a3657c
--- /dev/null
+++ b/v1.14.6/changelog/16890.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/kerberos: add `add_group_aliases` config to include LDAP groups in Vault group aliases
+```
diff --git a/v1.14.6/changelog/16900.txt b/v1.14.6/changelog/16900.txt
new file mode 100644
index 0000000..35e2b5a
--- /dev/null
+++ b/v1.14.6/changelog/16900.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add ability to periodically run tidy operations to remove expired certificates.
+```
diff --git a/v1.14.6/changelog/16911.txt b/v1.14.6/changelog/16911.txt
new file mode 100644
index 0000000..a451f69
--- /dev/null
+++ b/v1.14.6/changelog/16911.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api/mfa: Add namespace path to the MFA read/list endpoint
+```
diff --git a/v1.14.6/changelog/16930.txt b/v1.14.6/changelog/16930.txt
new file mode 100644
index 0000000..1431689
--- /dev/null
+++ b/v1.14.6/changelog/16930.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix lease force revoke action
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16935.txt b/v1.14.6/changelog/16935.txt
new file mode 100644
index 0000000..0b0b46f
--- /dev/null
+++ b/v1.14.6/changelog/16935.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add a new flag to issue/sign APIs which can filter out root CAs from the returned ca_chain field
+```
diff --git a/v1.14.6/changelog/16938.txt b/v1.14.6/changelog/16938.txt
new file mode 100644
index 0000000..6fb00bf
--- /dev/null
+++ b/v1.14.6/changelog/16938.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/token: Fix ignored parameter warnings for valid parameters on token create
+```
diff --git a/v1.14.6/changelog/16950.txt b/v1.14.6/changelog/16950.txt
new file mode 100644
index 0000000..0ee2d5b
--- /dev/null
+++ b/v1.14.6/changelog/16950.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: Add documentation around the expensiveness of making lots of lease count quotas in a short period
+```
diff --git a/v1.14.6/changelog/16956.txt b/v1.14.6/changelog/16956.txt
new file mode 100644
index 0000000..8912f72
--- /dev/null
+++ b/v1.14.6/changelog/16956.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Prevent two or more DR failovers from invalidating SSCT tokens generated on the previous primaries.
+```
diff --git a/v1.14.6/changelog/16958.txt b/v1.14.6/changelog/16958.txt
new file mode 100644
index 0000000..a77af9a
--- /dev/null
+++ b/v1.14.6/changelog/16958.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add ability to cancel tidy operations, control tidy resource usage.
+```
diff --git a/v1.14.6/changelog/16970.txt b/v1.14.6/changelog/16970.txt
new file mode 100644
index 0000000..0f0a9f8
--- /dev/null
+++ b/v1.14.6/changelog/16970.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Agent will now respect `max_retries` retry configuration even when caching is set.
+```
diff --git a/v1.14.6/changelog/16972.txt b/v1.14.6/changelog/16972.txt
new file mode 100644
index 0000000..3aec66a
--- /dev/null
+++ b/v1.14.6/changelog/16972.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugins: Added environment variable flag to opt-out specific plugins from multiplexing
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16982.txt b/v1.14.6/changelog/16982.txt
new file mode 100644
index 0000000..70d2521
--- /dev/null
+++ b/v1.14.6/changelog/16982.txt
@@ -0,0 +1,3 @@
+```release-note:change
+plugins: `GET /database/config/:name` endpoint now returns an additional `plugin_version` field in the response data.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16983.txt b/v1.14.6/changelog/16983.txt
new file mode 100644
index 0000000..f89971d
--- /dev/null
+++ b/v1.14.6/changelog/16983.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes secret version and status menu links transitioning to auth screen
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/16992.txt b/v1.14.6/changelog/16992.txt
new file mode 100644
index 0000000..178bb4c
--- /dev/null
+++ b/v1.14.6/changelog/16992.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity/oidc: Adds `claims_supported` to discovery document.
+```
diff --git a/v1.14.6/changelog/16995.txt b/v1.14.6/changelog/16995.txt
new file mode 100644
index 0000000..c1adc90
--- /dev/null
+++ b/v1.14.6/changelog/16995.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugins/multiplexing: Added multiplexing support to database plugins if run as external plugins
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17005.txt b/v1.14.6/changelog/17005.txt
new file mode 100644
index 0000000..04273d9
--- /dev/null
+++ b/v1.14.6/changelog/17005.txt
@@ -0,0 +1,13 @@
+```release-note:change
+auth: `auth enable` returns an error and `POST /sys/auth/:type` endpoint
+reports an error for `Pending Removal` auth methods.
+```
+```release-note:change
+secrets: `secrets enable` returns an error and `POST /sys/mount/:type` endpoint
+reports an error for `Pending Removal` secrets engines.
+```
+```release-note:improvement
+core: Handle and log deprecated builtin mounts. Introduces
+`VAULT_ALLOW_PENDING_REMOVAL_MOUNTS` to override shutdown and error when
+attempting to mount `Pending Removal` builtin plugins.
+```
diff --git a/v1.14.6/changelog/17019.txt b/v1.14.6/changelog/17019.txt
new file mode 100644
index 0000000..63e2da4
--- /dev/null
+++ b/v1.14.6/changelog/17019.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Nodes no longer get demoted to nonvoter if we don't know their version due to missing heartbeats.
+```
diff --git a/v1.14.6/changelog/17028.txt b/v1.14.6/changelog/17028.txt
new file mode 100644
index 0000000..fd49440
--- /dev/null
+++ b/v1.14.6/changelog/17028.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Activity log goroutine management improvements to allow tests to be more deterministic.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17038.txt b/v1.14.6/changelog/17038.txt
new file mode 100644
index 0000000..f6451dc
--- /dev/null
+++ b/v1.14.6/changelog/17038.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets: All database-specific (standalone DB) secrets engines are now marked `Pending Removal`.
+```
diff --git a/v1.14.6/changelog/17040.txt b/v1.14.6/changelog/17040.txt
new file mode 100644
index 0000000..add116d
--- /dev/null
+++ b/v1.14.6/changelog/17040.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+login: Store token in tokenhelper for interactive login MFA
+```
diff --git a/v1.14.6/changelog/17045.txt b/v1.14.6/changelog/17045.txt
new file mode 100644
index 0000000..600641d
--- /dev/null
+++ b/v1.14.6/changelog/17045.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/azure: Adds option to permanently delete AzureAD objects created by Vault.
+```
diff --git a/v1.14.6/changelog/17058.txt b/v1.14.6/changelog/17058.txt
new file mode 100644
index 0000000..fd527cc
--- /dev/null
+++ b/v1.14.6/changelog/17058.txt
@@ -0,0 +1,6 @@
+```release-note:change
+auth: `POST /sys/auth/:type` endpoint response contains a warning for `Deprecated` auth methods.
+```
+```release-note:change
+secrets: `POST /sys/mounts/:type` endpoint response contains a warning for `Deprecated` secrets engines.
+```
diff --git a/v1.14.6/changelog/17070.txt b/v1.14.6/changelog/17070.txt
new file mode 100644
index 0000000..1b45fd6
--- /dev/null
+++ b/v1.14.6/changelog/17070.txt
@@ -0,0 +1,4 @@
+```release-note:feature
+**Redis DB Engine**: Adding the new Redis database engine that supports the generation of static and dynamic user
+roles and root credential rotation on a stand alone Redis server.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17071.txt b/v1.14.6/changelog/17071.txt
new file mode 100644
index 0000000..926ca83
--- /dev/null
+++ b/v1.14.6/changelog/17071.txt
@@ -0,0 +1,2 @@
+```release-note:feature
+**UI OIDC Provider Config**: Adds configuration of Vault as an OIDC identity provider, and offer Vault’s various authentication methods and source of identity to any client applications.
\ No newline at end of file
diff --git a/v1.14.6/changelog/17073.txt b/v1.14.6/changelog/17073.txt
new file mode 100644
index 0000000..96ab50b
--- /dev/null
+++ b/v1.14.6/changelog/17073.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add a warning to any successful response when the requested TTL is overwritten by MaxTTL
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17075.txt b/v1.14.6/changelog/17075.txt
new file mode 100644
index 0000000..1b122e5
--- /dev/null
+++ b/v1.14.6/changelog/17075.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Redis ElastiCache DB Plugin**: Added Redis ElastiCache as a built-in plugin.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17077.txt b/v1.14.6/changelog/17077.txt
new file mode 100644
index 0000000..0f5d1f8
--- /dev/null
+++ b/v1.14.6/changelog/17077.txt
@@ -0,0 +1,12 @@
+```release-note:change
+plugins: `GET /sys/plugins/catalog/:type/:name` endpoint contains deprecation status for builtin plugins.
+```
+```release-note:change
+plugins: `GET /sys/plugins/catalog/` endpoint contains deprecation status in `detailed` list.
+```
+```release-note:change
+plugins: `plugin list` now accepts a `-detailed` flag, which display deprecation status and version info.
+```
+```release-note:change
+plugins: `plugin info` displays deprecation status for builtin plugins.
+```
diff --git a/v1.14.6/changelog/17079.txt b/v1.14.6/changelog/17079.txt
new file mode 100644
index 0000000..1f3d7b1
--- /dev/null
+++ b/v1.14.6/changelog/17079.txt
@@ -0,0 +1,2 @@
+```release-note:bug
+storage/raft: Fix error writing raft TLS keyring during follower joins
\ No newline at end of file
diff --git a/v1.14.6/changelog/17086.txt b/v1.14.6/changelog/17086.txt
new file mode 100644
index 0000000..ce221ad
--- /dev/null
+++ b/v1.14.6/changelog/17086.txt
@@ -0,0 +1,3 @@
+```release-note:change
+ui: Upgrade Ember to version 4.4.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17088.txt b/v1.14.6/changelog/17088.txt
new file mode 100644
index 0000000..dfd08c9
--- /dev/null
+++ b/v1.14.6/changelog/17088.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugins: Adding version to plugin GRPC interface
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17091.txt b/v1.14.6/changelog/17091.txt
new file mode 100644
index 0000000..2b2c041
--- /dev/null
+++ b/v1.14.6/changelog/17091.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/auto-auth: Add `exit_on_err` which when set to true, will cause Agent to exit if any errors are encountered during authentication.
+```
diff --git a/v1.14.6/changelog/17093.txt b/v1.14.6/changelog/17093.txt
new file mode 100644
index 0000000..a51f3de
--- /dev/null
+++ b/v1.14.6/changelog/17093.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/cert: Add configurable support for validating client certs with OCSP.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17104.txt b/v1.14.6/changelog/17104.txt
new file mode 100644
index 0000000..00c5eeb
--- /dev/null
+++ b/v1.14.6/changelog/17104.txt
@@ -0,0 +1,4 @@
+```release-note:change
+auth: Returns invalid credentials for ldap, userpass and approle when wrong credentials are provided for existent users.
+This will only be used internally for implementing user lockout. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17116.txt b/v1.14.6/changelog/17116.txt
new file mode 100644
index 0000000..73116ee
--- /dev/null
+++ b/v1.14.6/changelog/17116.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Replaces non-inclusive terms
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17118.txt b/v1.14.6/changelog/17118.txt
new file mode 100644
index 0000000..76c7748
--- /dev/null
+++ b/v1.14.6/changelog/17118.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+secrets/transit: Added a parameter to encrypt/decrypt batch operations to allow the caller to
+override the HTTP response code in case of partial user-input failures.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17124.txt b/v1.14.6/changelog/17124.txt
new file mode 100644
index 0000000..ef4f116
--- /dev/null
+++ b/v1.14.6/changelog/17124.txt
@@ -0,0 +1,2 @@
+```release-note:bug
+ui: Fix kv deleting the latest version when not allowed to soft delete (and delete a specific version of a secret)
\ No newline at end of file
diff --git a/v1.14.6/changelog/17136.txt b/v1.14.6/changelog/17136.txt
new file mode 100644
index 0000000..e5e9744
--- /dev/null
+++ b/v1.14.6/changelog/17136.txt
@@ -0,0 +1,5 @@
+```release-note:improvement
+auth/cert: Operators can now specify a CRL distribution point URL, in which
+case the cert auth engine will fetch and use the CRL from that location
+rather than needing to push CRLs directly to auth/cert.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17138.txt b/v1.14.6/changelog/17138.txt
new file mode 100644
index 0000000..e8e2bfd
--- /dev/null
+++ b/v1.14.6/changelog/17138.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/cert: Vault does not initially load the CRLs in cert auth unless the read/write CRL endpoint is hit.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17139.txt b/v1.14.6/changelog/17139.txt
new file mode 100644
index 0000000..81b7507
--- /dev/null
+++ b/v1.14.6/changelog/17139.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+ui: Prevents requests to /sys/internal/ui/resultant-acl endpoint when unauthenticated
+```
+```release-note:improvement
+website/docs: Removes mentions of unauthenticated from internal ui resultant-acl doc
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17152.txt b/v1.14.6/changelog/17152.txt
new file mode 100644
index 0000000..fe5fee7
--- /dev/null
+++ b/v1.14.6/changelog/17152.txt
@@ -0,0 +1,4 @@
+```release-note:feature
+**LDAP Secrets Engine**: Adds the `ldap` secrets engine with service account check-out 
+functionality for all supported schemas.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17153.txt b/v1.14.6/changelog/17153.txt
new file mode 100644
index 0000000..00fe707
--- /dev/null
+++ b/v1.14.6/changelog/17153.txt
@@ -0,0 +1,2 @@
+```release-note:improvement
+ui: add 'disable' param to pki crl configuration
\ No newline at end of file
diff --git a/v1.14.6/changelog/17159.txt b/v1.14.6/changelog/17159.txt
new file mode 100644
index 0000000..b480f81
--- /dev/null
+++ b/v1.14.6/changelog/17159.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database/snowflake: Add multiplexing support
+```
diff --git a/v1.14.6/changelog/17160.txt b/v1.14.6/changelog/17160.txt
new file mode 100644
index 0000000..36b6d07
--- /dev/null
+++ b/v1.14.6/changelog/17160.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/gcp: Updates dependencies: `google.golang.org/api@v0.83.0`, `github.com/hashicorp/go-gcp-common@v0.8.0`.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17161.txt b/v1.14.6/changelog/17161.txt
new file mode 100644
index 0000000..d23421a
--- /dev/null
+++ b/v1.14.6/changelog/17161.txt
@@ -0,0 +1,7 @@
+```release-note:improvement
+auth/kubernetes: Role resolution for K8S Auth [[GH-156](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/156)]
+```
+
+```release-note:bug
+auth/kubernetes: Restore support for JWT signature algorithm ES384 [[GH-160](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/160)]
+```
diff --git a/v1.14.6/changelog/17164.txt b/v1.14.6/changelog/17164.txt
new file mode 100644
index 0000000..e09797d
--- /dev/null
+++ b/v1.14.6/changelog/17164.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kubernetes: upgrade to v0.2.0
+```
diff --git a/v1.14.6/changelog/17167.txt b/v1.14.6/changelog/17167.txt
new file mode 100644
index 0000000..89b8905
--- /dev/null
+++ b/v1.14.6/changelog/17167.txt
@@ -0,0 +1,6 @@
+```release-note:change
+plugins: `GET /sys/auth/:path/tune` and `GET /sys/mounts/:path/tune` endpoints may now return an additional `plugin_version` field in the response data if set.
+```
+```release-note:change
+plugins: `GET` for `/sys/auth`, `/sys/auth/:path`, `/sys/mounts`, and `/sys/mounts/:path` paths now return additional `plugin_version`, `running_plugin_version` and `running_sha256` fields in the response data for each mount.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17174.txt b/v1.14.6/changelog/17174.txt
new file mode 100644
index 0000000..302c99a
--- /dev/null
+++ b/v1.14.6/changelog/17174.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/gcp: Updates dependencies: `google.golang.org/api@v0.83.0`, `github.com/hashicorp/go-gcp-common@v0.8.0`.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17180.txt b/v1.14.6/changelog/17180.txt
new file mode 100644
index 0000000..4e1e5d9
--- /dev/null
+++ b/v1.14.6/changelog/17180.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/azure: Removed deprecated AAD graph API support from the secrets engine.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17186.txt b/v1.14.6/changelog/17186.txt
new file mode 100644
index 0000000..d086dd0
--- /dev/null
+++ b/v1.14.6/changelog/17186.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fix race when using SystemView.ReplicationState outside of a request context
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17187.txt b/v1.14.6/changelog/17187.txt
new file mode 100644
index 0000000..71476ef
--- /dev/null
+++ b/v1.14.6/changelog/17187.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Refactor lock grabbing code to simplify stateLock deadlock investigations
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17194.txt b/v1.14.6/changelog/17194.txt
new file mode 100644
index 0000000..a3ea955
--- /dev/null
+++ b/v1.14.6/changelog/17194.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/azure: Enables Azure roles to be compatible with Vault's role based quotas.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17196.txt b/v1.14.6/changelog/17196.txt
new file mode 100644
index 0000000..586205b
--- /dev/null
+++ b/v1.14.6/changelog/17196.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/cf: Enables CF roles to be compatible with Vault's role based quotas.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17199.txt b/v1.14.6/changelog/17199.txt
new file mode 100644
index 0000000..e960045
--- /dev/null
+++ b/v1.14.6/changelog/17199.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/gcpkms: Update dependencies: google.golang.org/api@v0.83.0.
+```
diff --git a/v1.14.6/changelog/17204.txt b/v1.14.6/changelog/17204.txt
new file mode 100644
index 0000000..07ea8c0
--- /dev/null
+++ b/v1.14.6/changelog/17204.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic when the plugin catalog returns neither a plugin nor an error.
+```
diff --git a/v1.14.6/changelog/17212.txt b/v1.14.6/changelog/17212.txt
new file mode 100644
index 0000000..1130ca6
--- /dev/null
+++ b/v1.14.6/changelog/17212.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/oci: Add support for role resolution.
+```
diff --git a/v1.14.6/changelog/17251.txt b/v1.14.6/changelog/17251.txt
new file mode 100644
index 0000000..2849ab0
--- /dev/null
+++ b/v1.14.6/changelog/17251.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/alicloud: Enables AliCloud roles to be compatible with Vault's role based quotas.
+```
diff --git a/v1.14.6/changelog/17265.txt b/v1.14.6/changelog/17265.txt
new file mode 100644
index 0000000..fe2d3b9
--- /dev/null
+++ b/v1.14.6/changelog/17265.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: License location is no longer cache exempt, meaning sys/health will not contribute as greatly to storage load when using consul as a storage backend.
+```
diff --git a/v1.14.6/changelog/17281.txt b/v1.14.6/changelog/17281.txt
new file mode 100644
index 0000000..8711283
--- /dev/null
+++ b/v1.14.6/changelog/17281.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/quotas: Fix goroutine leak caused by the seal process not fully cleaning up Rate Limit Quotas.
+```
diff --git a/v1.14.6/changelog/17289.txt b/v1.14.6/changelog/17289.txt
new file mode 100644
index 0000000..e8df6ca
--- /dev/null
+++ b/v1.14.6/changelog/17289.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugins: Allow selecting builtin plugins by their reported semantic version of the form `vX.Y.Z+builtin` or `vX.Y.Z+builtin.vault`.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17308.txt b/v1.14.6/changelog/17308.txt
new file mode 100644
index 0000000..5a2bf8b
--- /dev/null
+++ b/v1.14.6/changelog/17308.txt
@@ -0,0 +1,3 @@
+```release-note:improvement:
+cli: User-requested -help text now appears on stdout for paging rather than stderr
+```
diff --git a/v1.14.6/changelog/17328.txt b/v1.14.6/changelog/17328.txt
new file mode 100644
index 0000000..e10e380
--- /dev/null
+++ b/v1.14.6/changelog/17328.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Do not ignore provided signature bits value when signing intermediate and leaf certificates with a managed key
+```
diff --git a/v1.14.6/changelog/17338.txt b/v1.14.6/changelog/17338.txt
new file mode 100644
index 0000000..00b537b
--- /dev/null
+++ b/v1.14.6/changelog/17338.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add user lockout field to config and configuring this for auth mount using auth tune to prevent brute forcing in auth methods 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17339.txt b/v1.14.6/changelog/17339.txt
new file mode 100644
index 0000000..4ab1421
--- /dev/null
+++ b/v1.14.6/changelog/17339.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugins/kv: KV v2 returns 404 instead of 500 for request paths that incorrectly include a trailing slash.
+```
diff --git a/v1.14.6/changelog/17340.txt b/v1.14.6/changelog/17340.txt
new file mode 100644
index 0000000..733c737
--- /dev/null
+++ b/v1.14.6/changelog/17340.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugins: Corrected the path to check permissions on when the registered plugin name does not match the plugin binary's filename.
+```
diff --git a/v1.14.6/changelog/17347.txt b/v1.14.6/changelog/17347.txt
new file mode 100644
index 0000000..e74f4e3
--- /dev/null
+++ b/v1.14.6/changelog/17347.txt
@@ -0,0 +1,6 @@
+```release-note:change
+api: Exclusively use `GET /sys/plugins/catalog` endpoint for listing plugins, and add `details` field to list responses.
+```
+```release-note:improvement
+cli: `vault plugin list` now has a `details` field in JSON format, and version and type information in table format.
+```
diff --git a/v1.14.6/changelog/17352.txt b/v1.14.6/changelog/17352.txt
new file mode 100644
index 0000000..a5b5ca5
--- /dev/null
+++ b/v1.14.6/changelog/17352.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Support VAULT_DISABLE_REDIRECTS environment variable (and --disable-redirects flag) to disable default client behavior and prevent the client following any redirection responses. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17376.txt b/v1.14.6/changelog/17376.txt
new file mode 100644
index 0000000..0b2f4e4
--- /dev/null
+++ b/v1.14.6/changelog/17376.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Remove default value of 30 to TtlPicker2 if no value is passed in.
+```
diff --git a/v1.14.6/changelog/17385.txt b/v1.14.6/changelog/17385.txt
new file mode 100644
index 0000000..a6a8749
--- /dev/null
+++ b/v1.14.6/changelog/17385.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Do not read revoked certificates from backend when CRL is disabled
+```
diff --git a/v1.14.6/changelog/17388.txt b/v1.14.6/changelog/17388.txt
new file mode 100644
index 0000000..e3a98d8
--- /dev/null
+++ b/v1.14.6/changelog/17388.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add support to specify signature bits when generating CSRs through intermediate/generate apis
+```
diff --git a/v1.14.6/changelog/17395.txt b/v1.14.6/changelog/17395.txt
new file mode 100644
index 0000000..f7ce602
--- /dev/null
+++ b/v1.14.6/changelog/17395.txt
@@ -0,0 +1,3 @@
+```release-note:bug:
+api: Fix to account for older versions of Vault with no `custom_metadata` support
+```
diff --git a/v1.14.6/changelog/17406.txt b/v1.14.6/changelog/17406.txt
new file mode 100644
index 0000000..29bf04a
--- /dev/null
+++ b/v1.14.6/changelog/17406.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kv: new KVv2 mounts and KVv1 mounts without any keys will upgrade synchronously, allowing for instant use
+```
diff --git a/v1.14.6/changelog/17407.txt b/v1.14.6/changelog/17407.txt
new file mode 100644
index 0000000..b0e5ae4
--- /dev/null
+++ b/v1.14.6/changelog/17407.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui/keymgmt: Sets the defaultValue for type when creating a key.
+```
diff --git a/v1.14.6/changelog/17419.txt b/v1.14.6/changelog/17419.txt
new file mode 100644
index 0000000..f57fd31
--- /dev/null
+++ b/v1.14.6/changelog/17419.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic caused in Vault Agent when rendering certificate templates
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17430.txt b/v1.14.6/changelog/17430.txt
new file mode 100644
index 0000000..12ab331
--- /dev/null
+++ b/v1.14.6/changelog/17430.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+plugins: Add plugin version information to key plugin lifecycle log lines.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17459.txt b/v1.14.6/changelog/17459.txt
new file mode 100644
index 0000000..fd240c5
--- /dev/null
+++ b/v1.14.6/changelog/17459.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/identity: Add machine-readable output to body of response upon alias clash during entity merge
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17497.txt b/v1.14.6/changelog/17497.txt
new file mode 100644
index 0000000..98e6136
--- /dev/null
+++ b/v1.14.6/changelog/17497.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Respond to tidy-status, tidy-cancel on PR Secondary clusters.
+```
diff --git a/v1.14.6/changelog/17499.txt b/v1.14.6/changelog/17499.txt
new file mode 100644
index 0000000..f3b1831
--- /dev/null
+++ b/v1.14.6/changelog/17499.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Update protoc from 3.21.5 to 3.21.7
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17514.txt b/v1.14.6/changelog/17514.txt
new file mode 100644
index 0000000..215ea83
--- /dev/null
+++ b/v1.14.6/changelog/17514.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix vault operator init command to show the right curl string with -output-curl-string and right policy hcl with -output-policy
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17532.txt b/v1.14.6/changelog/17532.txt
new file mode 100644
index 0000000..0a09261
--- /dev/null
+++ b/v1.14.6/changelog/17532.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: prevent memory leak when using control group factors in a policy
+```
diff --git a/v1.14.6/changelog/17540.txt b/v1.14.6/changelog/17540.txt
new file mode 100644
index 0000000..3915eae
--- /dev/null
+++ b/v1.14.6/changelog/17540.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth/azure: Adds support for authentication with Managed Service Identity (MSI) from a 
+Virtual Machine Scale Set (VMSS) in flexible orchestration mode.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17562.txt b/v1.14.6/changelog/17562.txt
new file mode 100644
index 0000000..9d9d0f7
--- /dev/null
+++ b/v1.14.6/changelog/17562.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: prevent panic during mfa after enforcement's namespace is deleted
+```
diff --git a/v1.14.6/changelog/17575.txt b/v1.14.6/changelog/17575.txt
new file mode 100644
index 0000000..f08b53f
--- /dev/null
+++ b/v1.14.6/changelog/17575.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: use the combined activity log (partial + historic) API for client count dashboard and remove use of monthly endpoint
+```
diff --git a/v1.14.6/changelog/17577.txt b/v1.14.6/changelog/17577.txt
new file mode 100644
index 0000000..2794e5f
--- /dev/null
+++ b/v1.14.6/changelog/17577.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Remove empty table heading for `vault secrets list -detailed` output.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17593.txt b/v1.14.6/changelog/17593.txt
new file mode 100644
index 0000000..4f38d40
--- /dev/null
+++ b/v1.14.6/changelog/17593.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/snowflake: Allow parallel requests to Snowflake
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17612.txt b/v1.14.6/changelog/17612.txt
new file mode 100644
index 0000000..3005d0b
--- /dev/null
+++ b/v1.14.6/changelog/17612.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/seal: Fix regression handling of the key_id parameter in seal configuration HCL.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17636.txt b/v1.14.6/changelog/17636.txt
new file mode 100644
index 0000000..0668f21
--- /dev/null
+++ b/v1.14.6/changelog/17636.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Add support for PKCSv1_5_NoOID RSA signatures
+```
diff --git a/v1.14.6/changelog/17638.txt b/v1.14.6/changelog/17638.txt
new file mode 100644
index 0000000..37e0575
--- /dev/null
+++ b/v1.14.6/changelog/17638.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Add associated_data parameter for additional authenticated data in AEAD ciphers
+```
diff --git a/v1.14.6/changelog/17640.txt b/v1.14.6/changelog/17640.txt
new file mode 100644
index 0000000..6db136a
--- /dev/null
+++ b/v1.14.6/changelog/17640.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk/ldap: Added support for paging when searching for groups using group filters
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17650.txt b/v1.14.6/changelog/17650.txt
new file mode 100644
index 0000000..79e7669
--- /dev/null
+++ b/v1.14.6/changelog/17650.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Add support for creating requests to existing non-KVv2 PATCH-capable endpoints.
+```
diff --git a/v1.14.6/changelog/17660.txt b/v1.14.6/changelog/17660.txt
new file mode 100644
index 0000000..59ac664
--- /dev/null
+++ b/v1.14.6/changelog/17660.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fixes spurious warnings being emitted relating to "unknown or unsupported fields" for JSON config
+```
diff --git a/v1.14.6/changelog/17661.txt b/v1.14.6/changelog/17661.txt
new file mode 100644
index 0000000..5dfb8ea
--- /dev/null
+++ b/v1.14.6/changelog/17661.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes oidc/jwt login issue with alternate mount path and jwt login via mount path tab
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17678.txt b/v1.14.6/changelog/17678.txt
new file mode 100644
index 0000000..bddf213
--- /dev/null
+++ b/v1.14.6/changelog/17678.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+Reduced binary size
+```
diff --git a/v1.14.6/changelog/17679.txt b/v1.14.6/changelog/17679.txt
new file mode 100644
index 0000000..b77f631
--- /dev/null
+++ b/v1.14.6/changelog/17679.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fix issue preventing kv commands from executing properly when the mount path provided by `-mount` flag and secret key path are the same.
+```
diff --git a/v1.14.6/changelog/17693.txt b/v1.14.6/changelog/17693.txt
new file mode 100644
index 0000000..748af4e
--- /dev/null
+++ b/v1.14.6/changelog/17693.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix upgrade of missing expiry, delta_rebuild_interval by setting them to the default.
+```
diff --git a/v1.14.6/changelog/17732.txt b/v1.14.6/changelog/17732.txt
new file mode 100644
index 0000000..e9c30dc
--- /dev/null
+++ b/v1.14.6/changelog/17732.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Don't panic on unknown raft ops
+```
diff --git a/v1.14.6/changelog/17747.txt b/v1.14.6/changelog/17747.txt
new file mode 100644
index 0000000..53ceafa
--- /dev/null
+++ b/v1.14.6/changelog/17747.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/aws: Update dependencies [[PR-17747](https://github.com/hashicorp/vault/pull/17747)]
+```
diff --git a/v1.14.6/changelog/17749.txt b/v1.14.6/changelog/17749.txt
new file mode 100644
index 0000000..aac4946
--- /dev/null
+++ b/v1.14.6/changelog/17749.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add inline policy creation when creating an identity entity or group
+```
diff --git a/v1.14.6/changelog/17750.txt b/v1.14.6/changelog/17750.txt
new file mode 100644
index 0000000..af12458
--- /dev/null
+++ b/v1.14.6/changelog/17750.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/pki: Add health-check subcommand to evaluate the health of a PKI instance.
+```
diff --git a/v1.14.6/changelog/17752.txt b/v1.14.6/changelog/17752.txt
new file mode 100644
index 0000000..628eed8
--- /dev/null
+++ b/v1.14.6/changelog/17752.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+openapi: fix gen_openapi.sh script to correctly load vault plugins
+```
diff --git a/v1.14.6/changelog/17768.txt b/v1.14.6/changelog/17768.txt
new file mode 100644
index 0000000..25246ea
--- /dev/null
+++ b/v1.14.6/changelog/17768.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/approle: Add maximum length of 4096 for approle role_names, as this value results in HMAC calculation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17769.txt b/v1.14.6/changelog/17769.txt
new file mode 100644
index 0000000..12fe2d4
--- /dev/null
+++ b/v1.14.6/changelog/17769.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with not being able to download raft snapshot via service worker
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17772.txt b/v1.14.6/changelog/17772.txt
new file mode 100644
index 0000000..6866d3f
--- /dev/null
+++ b/v1.14.6/changelog/17772.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secret/pki: fix bug with initial legacy bundle migration (from < 1.11 into 1.11+) and missing issuers from ca_chain
+```
diff --git a/v1.14.6/changelog/17774.txt b/v1.14.6/changelog/17774.txt
new file mode 100644
index 0000000..f6103ec
--- /dev/null
+++ b/v1.14.6/changelog/17774.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Return new fields revocation_time_rfc3339 and issuer_id to existing certificate serial lookup api if it is revoked
+```
diff --git a/v1.14.6/changelog/17779.txt b/v1.14.6/changelog/17779.txt
new file mode 100644
index 0000000..a0b3bd6
--- /dev/null
+++ b/v1.14.6/changelog/17779.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add a new API that returns the serial numbers of revoked certificates on the local cluster
+```
diff --git a/v1.14.6/changelog/17789.txt b/v1.14.6/changelog/17789.txt
new file mode 100644
index 0000000..fd6f3b0
--- /dev/null
+++ b/v1.14.6/changelog/17789.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sys/internal/inspect: Creates an endpoint to look to inspect internal subsystems.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17801.txt b/v1.14.6/changelog/17801.txt
new file mode 100644
index 0000000..8d3764a
--- /dev/null
+++ b/v1.14.6/changelog/17801.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: fix a start up race condition where performance standbys could go into a 
+mount loop if default policies are not yet synced from the active node.
+```
diff --git a/v1.14.6/changelog/17816.txt b/v1.14.6/changelog/17816.txt
new file mode 100644
index 0000000..4ad3bc8
--- /dev/null
+++ b/v1.14.6/changelog/17816.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugins: Only report deprecation status for builtin plugins.
+```
diff --git a/v1.14.6/changelog/17822.txt b/v1.14.6/changelog/17822.txt
new file mode 100644
index 0000000..5c39b3c
--- /dev/null
+++ b/v1.14.6/changelog/17822.txt
@@ -0,0 +1,3 @@
+```release-note:change
+logging: Removed legacy environment variable for log format ('LOGXI_FORMAT'), should use 'VAULT_LOG_FORMAT' instead
+```
diff --git a/v1.14.6/changelog/17823.txt b/v1.14.6/changelog/17823.txt
new file mode 100644
index 0000000..d999c87
--- /dev/null
+++ b/v1.14.6/changelog/17823.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow tidying of expired issuer certificates.
+```
diff --git a/v1.14.6/changelog/17824.txt b/v1.14.6/changelog/17824.txt
new file mode 100644
index 0000000..0d3fbb6
--- /dev/null
+++ b/v1.14.6/changelog/17824.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow issuer creation, import to change default issuer via `default_follows_latest_issuer`.
+```
diff --git a/v1.14.6/changelog/17835.txt b/v1.14.6/changelog/17835.txt
new file mode 100644
index 0000000..3c48884
--- /dev/null
+++ b/v1.14.6/changelog/17835.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: mfa: use proper request id generation
+```
diff --git a/v1.14.6/changelog/17836.txt b/v1.14.6/changelog/17836.txt
new file mode 100644
index 0000000..66bc236
--- /dev/null
+++ b/v1.14.6/changelog/17836.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: trying to unseal with the wrong key now returns HTTP 400
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17841.txt b/v1.14.6/changelog/17841.txt
new file mode 100644
index 0000000..6234bbb
--- /dev/null
+++ b/v1.14.6/changelog/17841.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+logging: Vault Agent supports logging to a specified file path via environment variable, CLI or config
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17855.txt b/v1.14.6/changelog/17855.txt
new file mode 100644
index 0000000..c73838a
--- /dev/null
+++ b/v1.14.6/changelog/17855.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Added warning to /sys/seal-status and vault status command if potentially dangerous behaviour overrides are being used.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17856.txt b/v1.14.6/changelog/17856.txt
new file mode 100644
index 0000000..f039794
--- /dev/null
+++ b/v1.14.6/changelog/17856.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: fix the end_date returned from the activity log endpoint when partial counts are computed
+```
diff --git a/v1.14.6/changelog/17857.txt b/v1.14.6/changelog/17857.txt
new file mode 100644
index 0000000..7c07f4e
--- /dev/null
+++ b/v1.14.6/changelog/17857.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/azure: upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17858.txt b/v1.14.6/changelog/17858.txt
new file mode 100644
index 0000000..2b1a76e
--- /dev/null
+++ b/v1.14.6/changelog/17858.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/gcp: Upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17866.txt b/v1.14.6/changelog/17866.txt
new file mode 100644
index 0000000..7e173f8
--- /dev/null
+++ b/v1.14.6/changelog/17866.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: consolidate all <a> tag usage
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17871.txt b/v1.14.6/changelog/17871.txt
new file mode 100644
index 0000000..b4fb2b0
--- /dev/null
+++ b/v1.14.6/changelog/17871.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/gcp: Upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17879.txt b/v1.14.6/changelog/17879.txt
new file mode 100644
index 0000000..efb71b8
--- /dev/null
+++ b/v1.14.6/changelog/17879.txt
@@ -0,0 +1,7 @@
+```release-note:bug
+plugins: Allow running external plugins which override deprecated builtins.
+```
+```release-note:improvement
+plugins: Let Vault unseal and mount deprecated builtin plugins in a
+deactivated state if this is not the first unseal after an upgrade.
+```
diff --git a/v1.14.6/changelog/17893.txt b/v1.14.6/changelog/17893.txt
new file mode 100644
index 0000000..3dddc76
--- /dev/null
+++ b/v1.14.6/changelog/17893.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Kubernetes Secrets Engine UI**: Kubernetes is now available in the UI as a supported secrets engine.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17894.txt b/v1.14.6/changelog/17894.txt
new file mode 100644
index 0000000..bd056cd
--- /dev/null
+++ b/v1.14.6/changelog/17894.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: allow selection of "default" for ssh algorithm_signer in web interface
+```
diff --git a/v1.14.6/changelog/17904.txt b/v1.14.6/changelog/17904.txt
new file mode 100644
index 0000000..aa65404
--- /dev/null
+++ b/v1.14.6/changelog/17904.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+credential/cert: adds error message if no tls connection is found during the AliasLookahead operation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17909.txt b/v1.14.6/changelog/17909.txt
new file mode 100644
index 0000000..3f19f94
--- /dev/null
+++ b/v1.14.6/changelog/17909.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Mark request body objects as required 
+```
diff --git a/v1.14.6/changelog/17913.txt b/v1.14.6/changelog/17913.txt
new file mode 100644
index 0000000..f26a779
--- /dev/null
+++ b/v1.14.6/changelog/17913.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fix vault read handling to return raw data as secret.Data when there is no top-level data object from api response.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17914.txt b/v1.14.6/changelog/17914.txt
new file mode 100644
index 0000000..671e636
--- /dev/null
+++ b/v1.14.6/changelog/17914.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth: Deduplicate policies prior to ACL generation
+```
diff --git a/v1.14.6/changelog/17919.txt b/v1.14.6/changelog/17919.txt
new file mode 100644
index 0000000..8fbb41d
--- /dev/null
+++ b/v1.14.6/changelog/17919.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: property based testing for LifetimeWatcher sleep duration calculation
+```
diff --git a/v1.14.6/changelog/17927.txt b/v1.14.6/changelog/17927.txt
new file mode 100644
index 0000000..946c535
--- /dev/null
+++ b/v1.14.6/changelog/17927.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Enable typescript for future development
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17929.txt b/v1.14.6/changelog/17929.txt
new file mode 100644
index 0000000..72b639c
--- /dev/null
+++ b/v1.14.6/changelog/17929.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core/server: Added an environment variable to write goroutine stacktraces to a 
+temporary file for SIGUSR2 signals.
+```
diff --git a/v1.14.6/changelog/17932.txt b/v1.14.6/changelog/17932.txt
new file mode 100644
index 0000000..09dd01c
--- /dev/null
+++ b/v1.14.6/changelog/17932.txt
@@ -0,0 +1,3 @@
+```release-note:bug:
+UI: Fix "MFA-Setup permission denied error" by using user-token specific MFA generate endpoint instead of admin-generate
+```
diff --git a/v1.14.6/changelog/17934.txt b/v1.14.6/changelog/17934.txt
new file mode 100644
index 0000000..7f087a9
--- /dev/null
+++ b/v1.14.6/changelog/17934.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Add support to import public keys in transit engine and allow encryption and verification of signed data
+```
diff --git a/v1.14.6/changelog/17935.txt b/v1.14.6/changelog/17935.txt
new file mode 100644
index 0000000..c16ffdf
--- /dev/null
+++ b/v1.14.6/changelog/17935.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: return partial month counts when querying a historical date range and no historical data exists.
+```
diff --git a/v1.14.6/changelog/17944.txt b/v1.14.6/changelog/17944.txt
new file mode 100644
index 0000000..2ce17ca
--- /dev/null
+++ b/v1.14.6/changelog/17944.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix potential deadlock if barrier ciphertext is less than 4 bytes.
+```
diff --git a/v1.14.6/changelog/17950.txt b/v1.14.6/changelog/17950.txt
new file mode 100644
index 0000000..318334e
--- /dev/null
+++ b/v1.14.6/changelog/17950.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fix entity policies list link to policy show page
+```
diff --git a/v1.14.6/changelog/17951.txt b/v1.14.6/changelog/17951.txt
new file mode 100644
index 0000000..06dd7a4
--- /dev/null
+++ b/v1.14.6/changelog/17951.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: added changes for user lockout workflow.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/17964.txt b/v1.14.6/changelog/17964.txt
new file mode 100644
index 0000000..605100f
--- /dev/null
+++ b/v1.14.6/changelog/17964.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/azure: upgrades dependencies
+```
diff --git a/v1.14.6/changelog/17979.txt b/v1.14.6/changelog/17979.txt
new file mode 100644
index 0000000..81a5c02
--- /dev/null
+++ b/v1.14.6/changelog/17979.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add read support to `sys/loggers` and `sys/loggers/:name` endpoints
+```
diff --git a/v1.14.6/changelog/18011.txt b/v1.14.6/changelog/18011.txt
new file mode 100644
index 0000000..ed22510
--- /dev/null
+++ b/v1.14.6/changelog/18011.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/okta: fix a panic for AuthRenew in Okta
+```
diff --git a/v1.14.6/changelog/18021.txt b/v1.14.6/changelog/18021.txt
new file mode 100644
index 0000000..69a6df1
--- /dev/null
+++ b/v1.14.6/changelog/18021.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/alicloud: upgrades dependencies
+```
diff --git a/v1.14.6/changelog/18030.txt b/v1.14.6/changelog/18030.txt
new file mode 100644
index 0000000..30a49c5
--- /dev/null
+++ b/v1.14.6/changelog/18030.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: Add `retry_join_as_non_voter` config option.
+```
diff --git a/v1.14.6/changelog/18031.txt b/v1.14.6/changelog/18031.txt
new file mode 100644
index 0000000..74d659f
--- /dev/null
+++ b/v1.14.6/changelog/18031.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+logging: Vault agent and server commands support log file and log rotation.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18039.txt b/v1.14.6/changelog/18039.txt
new file mode 100644
index 0000000..ea522a7
--- /dev/null
+++ b/v1.14.6/changelog/18039.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+plugins: Mark logical database plugins Removed and remove the plugin code.
+```
+```release-note:improvement
+plugins: Mark app-id auth method Removed and remove the plugin code.
+```
diff --git a/v1.14.6/changelog/18040.txt b/v1.14.6/changelog/18040.txt
new file mode 100644
index 0000000..cb4eaf8
--- /dev/null
+++ b/v1.14.6/changelog/18040.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Added a new API that allows external actors to craft a CRL through JSON parameters
+```
diff --git a/v1.14.6/changelog/18043.txt b/v1.14.6/changelog/18043.txt
new file mode 100644
index 0000000..564574c
--- /dev/null
+++ b/v1.14.6/changelog/18043.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/cert: Support listing provisioned CRLs within the mount.
+```
diff --git a/v1.14.6/changelog/18051.txt b/v1.14.6/changelog/18051.txt
new file mode 100644
index 0000000..c4c3232
--- /dev/null
+++ b/v1.14.6/changelog/18051.txt
@@ -0,0 +1,6 @@
+```release-note:change
+plugins: Mounts can no longer be pinned to a specific _builtin_ version. Mounts previously pinned to a specific builtin version will now automatically upgrade to the latest builtin version, and may now be overridden if an unversioned plugin of the same name and type is registered. Mounts using plugin versions without `builtin` in their metadata remain unaffected.
+```
+```release-note:bug
+plugins: Vault upgrades will no longer fail if a mount has been created using an explicit builtin plugin version.
+```
diff --git a/v1.14.6/changelog/18067.txt b/v1.14.6/changelog/18067.txt
new file mode 100644
index 0000000..2c86305
--- /dev/null
+++ b/v1.14.6/changelog/18067.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/kv: improve kv CLI to remove data or custom metadata using kv patch
+```
diff --git a/v1.14.6/changelog/18101.txt b/v1.14.6/changelog/18101.txt
new file mode 100644
index 0000000..97ece74
--- /dev/null
+++ b/v1.14.6/changelog/18101.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Agent listeners can now be to be the `metrics_only` role, serving only metrics, as part of the listener's new top level `role` option.
+```
diff --git a/v1.14.6/changelog/18114.txt b/v1.14.6/changelog/18114.txt
new file mode 100644
index 0000000..3692b12
--- /dev/null
+++ b/v1.14.6/changelog/18114.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: update TTL picker for consistency
+```
diff --git a/v1.14.6/changelog/18121.txt b/v1.14.6/changelog/18121.txt
new file mode 100644
index 0000000..e162247
--- /dev/null
+++ b/v1.14.6/changelog/18121.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: Include stack trace when audit logging recovers from a panic.
+```
diff --git a/v1.14.6/changelog/18125.txt b/v1.14.6/changelog/18125.txt
new file mode 100644
index 0000000..5d9f05a
--- /dev/null
+++ b/v1.14.6/changelog/18125.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command/server: Environment variable keys are now logged at startup.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18128.txt b/v1.14.6/changelog/18128.txt
new file mode 100644
index 0000000..32dc537
--- /dev/null
+++ b/v1.14.6/changelog/18128.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: Add `elide_list_responses` option, providing a countermeasure for a common source of oversized audit log entries
+```
diff --git a/v1.14.6/changelog/18137.txt b/v1.14.6/changelog/18137.txt
new file mode 100644
index 0000000..f262f96
--- /dev/null
+++ b/v1.14.6/changelog/18137.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Configured Vault Agent listeners now listen without the need for caching to be configured.
+```
diff --git a/v1.14.6/changelog/18143.txt b/v1.14.6/changelog/18143.txt
new file mode 100644
index 0000000..b1ff7f3
--- /dev/null
+++ b/v1.14.6/changelog/18143.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+command/namespace: Fix vault cli namespace patch examples in help text.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18145.txt b/v1.14.6/changelog/18145.txt
new file mode 100644
index 0000000..2e7172e
--- /dev/null
+++ b/v1.14.6/changelog/18145.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/approle: Fix `token_bound_cidrs` validation when using /32 blocks for role and secret ID
+```
diff --git a/v1.14.6/changelog/18163.txt b/v1.14.6/changelog/18163.txt
new file mode 100644
index 0000000..f98c751
--- /dev/null
+++ b/v1.14.6/changelog/18163.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/kv: skip formatting of nil secrets for patch and put with field parameter set
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18173.txt b/v1.14.6/changelog/18173.txt
new file mode 100644
index 0000000..04545ea
--- /dev/null
+++ b/v1.14.6/changelog/18173.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugins: Listing all plugins while audit logging is enabled will no longer result in an internal server error.
+```
diff --git a/v1.14.6/changelog/18184.txt b/v1.14.6/changelog/18184.txt
new file mode 100644
index 0000000..153131a
--- /dev/null
+++ b/v1.14.6/changelog/18184.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Address nil panic when an empty POST request is sent to the OCSP handler
+```
diff --git a/v1.14.6/changelog/18186.txt b/v1.14.6/changelog/18186.txt
new file mode 100644
index 0000000..1371082
--- /dev/null
+++ b/v1.14.6/changelog/18186.txt
@@ -0,0 +1,6 @@
+```release-note:breaking-change
+secrets/pki: Maintaining running count of certificates will be turned off by default.
+To re-enable keeping these metrics available on the tidy status endpoint, enable
+maintain_stored_certificate_counts on tidy-config, to also publish them to the
+metrics consumer, enable publish_stored_certificate_count_metrics .
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18189.txt b/v1.14.6/changelog/18189.txt
new file mode 100644
index 0000000..5033404
--- /dev/null
+++ b/v1.14.6/changelog/18189.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugins: Skip loading but still mount data associated with missing plugins on unseal.
+```
diff --git a/v1.14.6/changelog/18192.txt b/v1.14.6/changelog/18192.txt
new file mode 100644
index 0000000..56e377e
--- /dev/null
+++ b/v1.14.6/changelog/18192.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add logic to generate openapi response structures
+```
diff --git a/v1.14.6/changelog/18198.txt b/v1.14.6/changelog/18198.txt
new file mode 100644
index 0000000..ed03e74
--- /dev/null
+++ b/v1.14.6/changelog/18198.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add openapi response definitions to approle/path_role.go
+```
diff --git a/v1.14.6/changelog/18199.txt b/v1.14.6/changelog/18199.txt
new file mode 100644
index 0000000..706a556
--- /dev/null
+++ b/v1.14.6/changelog/18199.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow templating performance replication cluster- and issuer-specific AIA URLs.
+```
diff --git a/v1.14.6/changelog/18210.txt b/v1.14.6/changelog/18210.txt
new file mode 100644
index 0000000..bd1c70b
--- /dev/null
+++ b/v1.14.6/changelog/18210.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk: Don't panic if system view or storage methods called during plugin setup.
+```
diff --git a/v1.14.6/changelog/18222.txt b/v1.14.6/changelog/18222.txt
new file mode 100644
index 0000000..a7f822a
--- /dev/null
+++ b/v1.14.6/changelog/18222.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Respond with written data to `config/auto-tidy`, `config/crl`, and `roles/:role`.
+```
diff --git a/v1.14.6/changelog/18225.txt b/v1.14.6/changelog/18225.txt
new file mode 100644
index 0000000..567c3c7
--- /dev/null
+++ b/v1.14.6/changelog/18225.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: allow providing the LDAP password via an env var when authenticating via the CLI
+```
diff --git a/v1.14.6/changelog/18227.txt b/v1.14.6/changelog/18227.txt
new file mode 100644
index 0000000..4779159
--- /dev/null
+++ b/v1.14.6/changelog/18227.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Server UDS Listener**: Adding listener to Vault server to serve http request via unix domain socket
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18228.txt b/v1.14.6/changelog/18228.txt
new file mode 100644
index 0000000..4f1b6d1
--- /dev/null
+++ b/v1.14.6/changelog/18228.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+hcp/connectivity: Add foundational OSS support for opt-in secure communication between self-managed Vault nodes and [HashiCorp Cloud Platform](https://cloud.hashicorp.com)
+```
diff --git a/v1.14.6/changelog/18230.txt b/v1.14.6/changelog/18230.txt
new file mode 100644
index 0000000..335f967
--- /dev/null
+++ b/v1.14.6/changelog/18230.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: allow configuration of alias dereferencing in LDAP search
+```
diff --git a/v1.14.6/changelog/18243.txt b/v1.14.6/changelog/18243.txt
new file mode 100644
index 0000000..f187579
--- /dev/null
+++ b/v1.14.6/changelog/18243.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+secrets/transit: Add an optional reference field to batch operation items
+which is repeated on batch responses to help more easily correlate inputs with outputs.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18244.txt b/v1.14.6/changelog/18244.txt
new file mode 100644
index 0000000..b81de03
--- /dev/null
+++ b/v1.14.6/changelog/18244.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: parallelize backend initialization to improve startup time for large numbers of mounts.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18263.txt b/v1.14.6/changelog/18263.txt
new file mode 100644
index 0000000..1cdad85
--- /dev/null
+++ b/v1.14.6/changelog/18263.txt
@@ -0,0 +1,5 @@
+```release-note:bug
+storage/raft (enterprise): An already joined node can rejoin by wiping storage
+and re-issueing a join request, but in doing so could transiently become a
+non-voter.  In some scenarios this resulted in loss of quorum.
+```
diff --git a/v1.14.6/changelog/18272.txt b/v1.14.6/changelog/18272.txt
new file mode 100644
index 0000000..168913b
--- /dev/null
+++ b/v1.14.6/changelog/18272.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Allow configuring whether upsert of keys is allowed.
+```
diff --git a/v1.14.6/changelog/18273.txt b/v1.14.6/changelog/18273.txt
new file mode 100644
index 0000000..46033c7
--- /dev/null
+++ b/v1.14.6/changelog/18273.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/quotas: Fix issue with improper application of default rate limit quota exempt paths
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18279.txt b/v1.14.6/changelog/18279.txt
new file mode 100644
index 0000000..9823a1f
--- /dev/null
+++ b/v1.14.6/changelog/18279.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core: Added sys/lockedusers/[mount_accessor]/unlock/[alias_identifier] endpoint to unlock an user
+with given mount_accessor and alias_identifier if locked 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18299.txt b/v1.14.6/changelog/18299.txt
new file mode 100644
index 0000000..b340b95
--- /dev/null
+++ b/v1.14.6/changelog/18299.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: Do not warn about unrecognized parameter 'batch_input'
+```
diff --git a/v1.14.6/changelog/18302.txt b/v1.14.6/changelog/18302.txt
new file mode 100644
index 0000000..1f4b69d
--- /dev/null
+++ b/v1.14.6/changelog/18302.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+hcp/status: Expand node-level status information
+```
diff --git a/v1.14.6/changelog/18310.txt b/v1.14.6/changelog/18310.txt
new file mode 100644
index 0000000..5af54ed
--- /dev/null
+++ b/v1.14.6/changelog/18310.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: Honor `partial_success_response_code` on decryption failures.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18315.txt b/v1.14.6/changelog/18315.txt
new file mode 100644
index 0000000..dc69847
--- /dev/null
+++ b/v1.14.6/changelog/18315.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+hcp/connectivity: Include HCP organization, project, and resource ID in server startup logs
+```
diff --git a/v1.14.6/changelog/18342.txt b/v1.14.6/changelog/18342.txt
new file mode 100644
index 0000000..f2978bf
--- /dev/null
+++ b/v1.14.6/changelog/18342.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Prepends "passcode=" if not provided in user input for duo totp mfa method authentication
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18350.txt b/v1.14.6/changelog/18350.txt
new file mode 100644
index 0000000..efe65ee
--- /dev/null
+++ b/v1.14.6/changelog/18350.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Update language on database role to "Connection name" [[GH-18261](https://github.com/hashicorp/vault/issues/18261)]
+```
diff --git a/v1.14.6/changelog/18351.txt b/v1.14.6/changelog/18351.txt
new file mode 100644
index 0000000..07faa06
--- /dev/null
+++ b/v1.14.6/changelog/18351.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+hcp/status: Add cluster-level status information 
+```
diff --git a/v1.14.6/changelog/18374.txt b/v1.14.6/changelog/18374.txt
new file mode 100644
index 0000000..eaa5798
--- /dev/null
+++ b/v1.14.6/changelog/18374.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: update DocLink component to use new host url: developer.hashicorp.com
+```
diff --git a/v1.14.6/changelog/18376.txt b/v1.14.6/changelog/18376.txt
new file mode 100644
index 0000000..1edc3df
--- /dev/null
+++ b/v1.14.6/changelog/18376.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add openapi response definitions to pki/config_*.go
+```
diff --git a/v1.14.6/changelog/18397.txt b/v1.14.6/changelog/18397.txt
new file mode 100644
index 0000000..aafb9d7
--- /dev/null
+++ b/v1.14.6/changelog/18397.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow UserID Field (https://www.rfc-editor.org/rfc/rfc1274#section-9.3.1) to be set on Certificates when
+allowed by role```
diff --git a/v1.14.6/changelog/18401.txt b/v1.14.6/changelog/18401.txt
new file mode 100644
index 0000000..8f1c148
--- /dev/null
+++ b/v1.14.6/changelog/18401.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+expiration: Prevent panics on perf standbys when an irrevocable lease gets deleted.
+```
diff --git a/v1.14.6/changelog/18403.txt b/v1.14.6/changelog/18403.txt
new file mode 100644
index 0000000..458f6c9
--- /dev/null
+++ b/v1.14.6/changelog/18403.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent/config: Allow config directories to be specified with -config, and allow multiple -configs to be supplied.
+```
diff --git a/v1.14.6/changelog/18437.txt b/v1.14.6/changelog/18437.txt
new file mode 100644
index 0000000..9ca8a8d
--- /dev/null
+++ b/v1.14.6/changelog/18437.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+client/pki: Add a new command verify-sign which checks the relationship between two certificates.
+```
diff --git a/v1.14.6/changelog/18452.txt b/v1.14.6/changelog/18452.txt
new file mode 100644
index 0000000..6d45666
--- /dev/null
+++ b/v1.14.6/changelog/18452.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: de-duplicate namespaces when historical and current month data are mixed
+```
diff --git a/v1.14.6/changelog/18456.txt b/v1.14.6/changelog/18456.txt
new file mode 100644
index 0000000..ee29750
--- /dev/null
+++ b/v1.14.6/changelog/18456.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response defintions to /sys/audit endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18463.txt b/v1.14.6/changelog/18463.txt
new file mode 100644
index 0000000..538f66e
--- /dev/null
+++ b/v1.14.6/changelog/18463.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/pki: Add List-Intermediates functionality to pki client.
+```
diff --git a/v1.14.6/changelog/18465.txt b/v1.14.6/changelog/18465.txt
new file mode 100644
index 0000000..928da99
--- /dev/null
+++ b/v1.14.6/changelog/18465.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response defintions to /sys/auth endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18466.txt b/v1.14.6/changelog/18466.txt
new file mode 100644
index 0000000..220e058
--- /dev/null
+++ b/v1.14.6/changelog/18466.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Allow patching issuer to set an empty issuer name.
+```
diff --git a/v1.14.6/changelog/18467.txt b/v1.14.6/changelog/18467.txt
new file mode 100644
index 0000000..55a85a6
--- /dev/null
+++ b/v1.14.6/changelog/18467.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/pki: Add pki issue command, which creates a CSR, has a vault mount sign it, then reimports it.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18468.txt b/v1.14.6/changelog/18468.txt
new file mode 100644
index 0000000..362bf05
--- /dev/null
+++ b/v1.14.6/changelog/18468.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response defintions to /sys/capabilities endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18472.txt b/v1.14.6/changelog/18472.txt
new file mode 100644
index 0000000..e34d53a
--- /dev/null
+++ b/v1.14.6/changelog/18472.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response defintions to /sys/config and /sys/generate-root endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18482.txt b/v1.14.6/changelog/18482.txt
new file mode 100644
index 0000000..f51abb6
--- /dev/null
+++ b/v1.14.6/changelog/18482.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Return issuer_id and issuer_name on /issuer/:issuer_ref/json endpoint.
+```
diff --git a/v1.14.6/changelog/18499.txt b/v1.14.6/changelog/18499.txt
new file mode 100644
index 0000000..b329ed0
--- /dev/null
+++ b/v1.14.6/changelog/18499.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/pki: Added "Reissue" command which allows extracting fields from an existing certificate to create a new certificate.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18515.txt b/v1.14.6/changelog/18515.txt
new file mode 100644
index 0000000..86eb71b
--- /dev/null
+++ b/v1.14.6/changelog/18515.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add openapi response definitions to vault/logical_system_paths.go defined endpoints.
+```
diff --git a/v1.14.6/changelog/18521.txt b/v1.14.6/changelog/18521.txt
new file mode 100644
index 0000000..4111aea
--- /dev/null
+++ b/v1.14.6/changelog/18521.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: wait for wanted message event during OIDC callback instead of using the first message event
+```
diff --git a/v1.14.6/changelog/18542.txt b/v1.14.6/changelog/18542.txt
new file mode 100644
index 0000000..ff46740
--- /dev/null
+++ b/v1.14.6/changelog/18542.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response definitions to /sys/internal endpoints
+```
diff --git a/v1.14.6/changelog/18546.txt b/v1.14.6/changelog/18546.txt
new file mode 100644
index 0000000..48bc906
--- /dev/null
+++ b/v1.14.6/changelog/18546.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+database/mongodb: Fix writeConcern set to be applied to any query made on the database
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18554.txt b/v1.14.6/changelog/18554.txt
new file mode 100644
index 0000000..68d1d84
--- /dev/null
+++ b/v1.14.6/changelog/18554.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+openapi: Fix many incorrect details in generated API spec, by using better techniques to parse path regexps
+```
diff --git a/v1.14.6/changelog/18556.txt b/v1.14.6/changelog/18556.txt
new file mode 100644
index 0000000..a48dacd
--- /dev/null
+++ b/v1.14.6/changelog/18556.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/token: Fix parsing of `auth/token/create` fields to avoid incorrect warnings about ignored parameters
+```
diff --git a/v1.14.6/changelog/18568.txt b/v1.14.6/changelog/18568.txt
new file mode 100644
index 0000000..a1fbabf
--- /dev/null
+++ b/v1.14.6/changelog/18568.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix spurious `permission denied` for all HelpOperations on sudo-protected paths
+```
diff --git a/v1.14.6/changelog/18571.txt b/v1.14.6/changelog/18571.txt
new file mode 100644
index 0000000..dd811d9
--- /dev/null
+++ b/v1.14.6/changelog/18571.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/token, sys: Fix path-help being unavailable for some list-only endpoints
+```
diff --git a/v1.14.6/changelog/18585.txt b/v1.14.6/changelog/18585.txt
new file mode 100644
index 0000000..a0832e2
--- /dev/null
+++ b/v1.14.6/changelog/18585.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+hcp/connectivity: Only update SCADA session metadata if status changes
+```
diff --git a/v1.14.6/changelog/18587.txt b/v1.14.6/changelog/18587.txt
new file mode 100644
index 0000000..7471d9a
--- /dev/null
+++ b/v1.14.6/changelog/18587.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kubernetes: Add /check endpoint to determine if environment variables are set [[GH-18](https://github.com/hashicorp/vault-plugin-secrets-kubernetes/pull/18)]
+```
diff --git a/v1.14.6/changelog/18589.txt b/v1.14.6/changelog/18589.txt
new file mode 100644
index 0000000..2e1ef48
--- /dev/null
+++ b/v1.14.6/changelog/18589.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+vault/diagnose: Upgrade `go.opentelemetry.io/otel`, `go.opentelemetry.io/otel/sdk`, `go.opentelemetry.io/otel/trace` to v1.11.2
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18598.txt b/v1.14.6/changelog/18598.txt
new file mode 100644
index 0000000..62d13d0
--- /dev/null
+++ b/v1.14.6/changelog/18598.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: include mount counts when de-duplicating current and historical month data
+```
diff --git a/v1.14.6/changelog/18604.txt b/v1.14.6/changelog/18604.txt
new file mode 100644
index 0000000..7645cbb
--- /dev/null
+++ b/v1.14.6/changelog/18604.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: add `detect_deadlocks` config to optionally detect core state deadlocks
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18610.txt b/v1.14.6/changelog/18610.txt
new file mode 100644
index 0000000..bac3add
--- /dev/null
+++ b/v1.14.6/changelog/18610.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth: Allow naming login MFA methods and using those names instead of IDs in satisfying MFA requirement for requests.
+Make passcode arguments consistent across login MFA method types.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18624.txt b/v1.14.6/changelog/18624.txt
new file mode 100644
index 0000000..91209bb
--- /dev/null
+++ b/v1.14.6/changelog/18624.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response definitions to /sys/rotate endpoints
+```
diff --git a/v1.14.6/changelog/18625.txt b/v1.14.6/changelog/18625.txt
new file mode 100644
index 0000000..526d6b6
--- /dev/null
+++ b/v1.14.6/changelog/18625.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response definitions to /sys/seal endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18626.txt b/v1.14.6/changelog/18626.txt
new file mode 100644
index 0000000..6bb2ba0
--- /dev/null
+++ b/v1.14.6/changelog/18626.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response definitions to /sys/tool endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18627.txt b/v1.14.6/changelog/18627.txt
new file mode 100644
index 0000000..e2a4dfb
--- /dev/null
+++ b/v1.14.6/changelog/18627.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response definitions to /sys/wrapping endpoints
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18628.txt b/v1.14.6/changelog/18628.txt
new file mode 100644
index 0000000..0722856
--- /dev/null
+++ b/v1.14.6/changelog/18628.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: add openapi response definitions to /sys/version-history, /sys/leader, /sys/ha-status, /sys/host-info, /sys/in-flight-req
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18632.txt b/v1.14.6/changelog/18632.txt
new file mode 100644
index 0000000..5359613
--- /dev/null
+++ b/v1.14.6/changelog/18632.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/postgres: Support multiline strings for revocation statements.
+```
diff --git a/v1.14.6/changelog/18633.txt b/v1.14.6/changelog/18633.txt
new file mode 100644
index 0000000..2048c46
--- /dev/null
+++ b/v1.14.6/changelog/18633.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add openapi response definitions to /sys defined endpoints.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18635.txt b/v1.14.6/changelog/18635.txt
new file mode 100644
index 0000000..43f3fdf
--- /dev/null
+++ b/v1.14.6/changelog/18635.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk: Add response schema validation method framework/FieldData.ValidateStrict and two test helpers (ValidateResponse, ValidateResponseData)
+```
diff --git a/v1.14.6/changelog/18636.txt b/v1.14.6/changelog/18636.txt
new file mode 100644
index 0000000..9f260e2
--- /dev/null
+++ b/v1.14.6/changelog/18636.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk: Adding FindResponseSchema test helper to assist with response schema validation in tests
+```
diff --git a/v1.14.6/changelog/18638.txt b/v1.14.6/changelog/18638.txt
new file mode 100644
index 0000000..727c85a
--- /dev/null
+++ b/v1.14.6/changelog/18638.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: allows some parts of config to be reloaded without requiring a restart.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18645.txt b/v1.14.6/changelog/18645.txt
new file mode 100644
index 0000000..0122111
--- /dev/null
+++ b/v1.14.6/changelog/18645.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow tidying of the legacy ca_bundle, improving startup on post-migrated, seal-wrapped PKI mounts.
+```
diff --git a/v1.14.6/changelog/18651.txt b/v1.14.6/changelog/18651.txt
new file mode 100644
index 0000000..9fc7ff8
--- /dev/null
+++ b/v1.14.6/changelog/18651.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: cleanup unsaved auth method ember data record when navigating away from mount backend form
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18663.txt b/v1.14.6/changelog/18663.txt
new file mode 100644
index 0000000..941b271
--- /dev/null
+++ b/v1.14.6/changelog/18663.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: generic_mount_paths: Move implementation fully into server, rather than partially in plugin framework; recognize all 4 singleton mounts (auth/token, cubbyhole, identity, system) rather than just 2; change parameter from `{mountPath}` to `{<type>_mount_path}`
+```
diff --git a/v1.14.6/changelog/18673.txt b/v1.14.6/changelog/18673.txt
new file mode 100644
index 0000000..73a2a8f
--- /dev/null
+++ b/v1.14.6/changelog/18673.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Implemented background thread to update locked user entries every 15 minutes to prevent brute forcing in auth methods. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18675.txt b/v1.14.6/changelog/18675.txt
new file mode 100644
index 0000000..90a8ed6
--- /dev/null
+++ b/v1.14.6/changelog/18675.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core: Added sys/locked-users endpoint to list locked users. Changed api endpoint from
+sys/lockedusers/[mount_accessor]/unlock/[alias_identifier] to sys/locked-users/[mount_accessor]/unlock/[alias_identifier]. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18682.txt b/v1.14.6/changelog/18682.txt
new file mode 100644
index 0000000..9042109
--- /dev/null
+++ b/v1.14.6/changelog/18682.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core: Add experiments system and `events.alpha1` experiment.
+```
+
diff --git a/v1.14.6/changelog/18684.txt b/v1.14.6/changelog/18684.txt
new file mode 100644
index 0000000..803c7cc
--- /dev/null
+++ b/v1.14.6/changelog/18684.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Add note in logs when starting Vault Agent indicating if the version differs to the Vault Server.
+```
diff --git a/v1.14.6/changelog/18704.txt b/v1.14.6/changelog/18704.txt
new file mode 100644
index 0000000..bc76db9
--- /dev/null
+++ b/v1.14.6/changelog/18704.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix race with follower heartbeat tracker during teardown.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18708.txt b/v1.14.6/changelog/18708.txt
new file mode 100644
index 0000000..1db2ba6
--- /dev/null
+++ b/v1.14.6/changelog/18708.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Remove timeout logic from ReadRaw functions and add ReadRawWithContext
+```
diff --git a/v1.14.6/changelog/18716.txt b/v1.14.6/changelog/18716.txt
new file mode 100644
index 0000000..e3fa257
--- /dev/null
+++ b/v1.14.6/changelog/18716.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/kubernetes: Ensure a consistent TLS configuration for all k8s API requests [[#173](https://github.com/hashicorp/vault-plugin-auth-kubernetes/pull/173)]
+```
diff --git a/v1.14.6/changelog/18718.txt b/v1.14.6/changelog/18718.txt
new file mode 100644
index 0000000..a5b9b13
--- /dev/null
+++ b/v1.14.6/changelog/18718.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add vault.core.locked_users telemetry metric to emit information about total number of locked users.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18729.txt b/v1.14.6/changelog/18729.txt
new file mode 100644
index 0000000..975d027
--- /dev/null
+++ b/v1.14.6/changelog/18729.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+sdk/backend: prevent panic when computing the zero value for a `TypeInt64` schema field.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18740.txt b/v1.14.6/changelog/18740.txt
new file mode 100644
index 0000000..f493995
--- /dev/null
+++ b/v1.14.6/changelog/18740.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Added `token_file` auto-auth configuration to allow using a pre-existing token for Vault Agent.
+```
diff --git a/v1.14.6/changelog/18743.txt b/v1.14.6/changelog/18743.txt
new file mode 100644
index 0000000..7cdfb79
--- /dev/null
+++ b/v1.14.6/changelog/18743.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes query parameters not passed in api explorer test requests
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18752.txt b/v1.14.6/changelog/18752.txt
new file mode 100644
index 0000000..95346e0
--- /dev/null
+++ b/v1.14.6/changelog/18752.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+**Redis ElastiCache DB Engine**: Renamed configuration parameters for disambiguation; old parameters still supported for compatibility.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18766.txt b/v1.14.6/changelog/18766.txt
new file mode 100644
index 0000000..50743b3
--- /dev/null
+++ b/v1.14.6/changelog/18766.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: add namespace breakdown for new clients when date range spans multiple months, including the current month.
+```
diff --git a/v1.14.6/changelog/18772.txt b/v1.14.6/changelog/18772.txt
new file mode 100644
index 0000000..55c0696
--- /dev/null
+++ b/v1.14.6/changelog/18772.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add openapi response definitions to approle/path_login.go & approle/path_tidy_user_id.go
+```
diff --git a/v1.14.6/changelog/18787.txt b/v1.14.6/changelog/18787.txt
new file mode 100644
index 0000000..e865125
--- /dev/null
+++ b/v1.14.6/changelog/18787.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Added JWT authentication warning message about blocked pop-up windows and web browser settings.
+```
diff --git a/v1.14.6/changelog/18799.txt b/v1.14.6/changelog/18799.txt
new file mode 100644
index 0000000..1d71593
--- /dev/null
+++ b/v1.14.6/changelog/18799.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/db/mysql: Add `tls_server_name` and `tls_skip_verify` parameters
+```
diff --git a/v1.14.6/changelog/18808.txt b/v1.14.6/changelog/18808.txt
new file mode 100644
index 0000000..12c80e6
--- /dev/null
+++ b/v1.14.6/changelog/18808.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes keymgmt key details page 
+``
\ No newline at end of file
diff --git a/v1.14.6/changelog/18809.txt b/v1.14.6/changelog/18809.txt
new file mode 100644
index 0000000..a1ec06f
--- /dev/null
+++ b/v1.14.6/changelog/18809.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+activity (enterprise): Fix misattribution of entities to no or child namespace auth methods
+```
diff --git a/v1.14.6/changelog/18811.txt b/v1.14.6/changelog/18811.txt
new file mode 100644
index 0000000..34a155d
--- /dev/null
+++ b/v1.14.6/changelog/18811.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth: Provide an IP address of the requests from Vault to a Duo challenge after successful authentication.
+```
diff --git a/v1.14.6/changelog/18817.txt b/v1.14.6/changelog/18817.txt
new file mode 100644
index 0000000..17c93aa
--- /dev/null
+++ b/v1.14.6/changelog/18817.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+migration: allow parallelization of key migration for `vault operator migrate` in order to speed up a migration.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18842.txt b/v1.14.6/changelog/18842.txt
new file mode 100644
index 0000000..9a69ff6
--- /dev/null
+++ b/v1.14.6/changelog/18842.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**New PKI UI**: Add beta support for new and improved PKI UI
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18859.txt b/v1.14.6/changelog/18859.txt
new file mode 100644
index 0000000..0ee2c36
--- /dev/null
+++ b/v1.14.6/changelog/18859.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/auth: Return a 403 instead of a 500 for wrapping requests when token is not provided
+```
diff --git a/v1.14.6/changelog/18863.txt b/v1.14.6/changelog/18863.txt
new file mode 100644
index 0000000..c1f2800
--- /dev/null
+++ b/v1.14.6/changelog/18863.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: JWT auto-auth has a new config option, `remove_jwt_follows_symlinks` (default: false), that, if set to true will now remove the JWT, instead of the symlink to the JWT, if a symlink to a JWT has been provided in the `path` option, and the `remove_jwt_after_reading` config option is set to true (default).
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18870.txt b/v1.14.6/changelog/18870.txt
new file mode 100644
index 0000000..1b69489
--- /dev/null
+++ b/v1.14.6/changelog/18870.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core:provide more descriptive error message when calling enterprise feature paths in open-source
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18874.txt b/v1.14.6/changelog/18874.txt
new file mode 100644
index 0000000..7483c43
--- /dev/null
+++ b/v1.14.6/changelog/18874.txt
@@ -0,0 +1,3 @@
+```release-note:security
+secrets/ssh: removal of the deprecated dynamic keys mode. **When any remaining dynamic key leases expire**, an error stating `secret is unsupported by this backend` will be thrown by the lease manager.
+```
diff --git a/v1.14.6/changelog/18885.txt b/v1.14.6/changelog/18885.txt
new file mode 100644
index 0000000..99878c8
--- /dev/null
+++ b/v1.14.6/changelog/18885.txt
@@ -0,0 +1,3 @@
+```release-note:enhancement
+auth/cert: Load config, crls from InitializeFunc to allow parallel processing.
+```
diff --git a/v1.14.6/changelog/18887.txt b/v1.14.6/changelog/18887.txt
new file mode 100644
index 0000000..55e8600
--- /dev/null
+++ b/v1.14.6/changelog/18887.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Add transit import key helper commands for BYOK to Transit/Transform.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/18890.txt b/v1.14.6/changelog/18890.txt
new file mode 100644
index 0000000..056e585
--- /dev/null
+++ b/v1.14.6/changelog/18890.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: removes strings.ToLower for alias name from pathLoginAliasLookahead function in userpass. This fixes
+the storage entry for locked users by having the correct alias name in path. 
+``
\ No newline at end of file
diff --git a/v1.14.6/changelog/18892.txt b/v1.14.6/changelog/18892.txt
new file mode 100644
index 0000000..65b6ebf
--- /dev/null
+++ b/v1.14.6/changelog/18892.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: updated `vault operator rekey` prompts to describe recovery keys when `-target=recovery`
+```
diff --git a/v1.14.6/changelog/18899.txt b/v1.14.6/changelog/18899.txt
new file mode 100644
index 0000000..92f2474
--- /dev/null
+++ b/v1.14.6/changelog/18899.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: fix race between tidy's cert counting and tidy status reporting.
+```
diff --git a/v1.14.6/changelog/18916.txt b/v1.14.6/changelog/18916.txt
new file mode 100644
index 0000000..eb2792b
--- /dev/null
+++ b/v1.14.6/changelog/18916.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: report mount paths (rather than mount accessors) in current month activity log counts and include deleted mount paths in precomputed queries.
+```
diff --git a/v1.14.6/changelog/18923.txt b/v1.14.6/changelog/18923.txt
new file mode 100644
index 0000000..2b4abae
--- /dev/null
+++ b/v1.14.6/changelog/18923.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: prevent panic in login mfa enforcement delete after enforcement's namespace is deleted
+```
diff --git a/v1.14.6/changelog/18934.txt b/v1.14.6/changelog/18934.txt
new file mode 100644
index 0000000..e84f666
--- /dev/null
+++ b/v1.14.6/changelog/18934.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Change gen_openapi.sh to generate schema with generic mount paths
+```
diff --git a/v1.14.6/changelog/18935.txt b/v1.14.6/changelog/18935.txt
new file mode 100644
index 0000000..c55cda1
--- /dev/null
+++ b/v1.14.6/changelog/18935.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Add default values to thing_mount_path parameters
+```
diff --git a/v1.14.6/changelog/18938.txt b/v1.14.6/changelog/18938.txt
new file mode 100644
index 0000000..de937fc
--- /dev/null
+++ b/v1.14.6/changelog/18938.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: OCSP GET request parameter was not being URL unescaped before processing.
+```
diff --git a/v1.14.6/changelog/18939.txt b/v1.14.6/changelog/18939.txt
new file mode 100644
index 0000000..aa7f8e7
--- /dev/null
+++ b/v1.14.6/changelog/18939.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ssh: Allow removing SSH host keys from the dynamic keys feature.
+```
diff --git a/v1.14.6/changelog/18945.txt b/v1.14.6/changelog/18945.txt
new file mode 100644
index 0000000..a6f6a66
--- /dev/null
+++ b/v1.14.6/changelog/18945.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/cert: Address a race condition accessing the loaded crls without a lock
+```
diff --git a/v1.14.6/changelog/18951.txt b/v1.14.6/changelog/18951.txt
new file mode 100644
index 0000000..9617c0d
--- /dev/null
+++ b/v1.14.6/changelog/18951.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Prevent panics in `sys/leases/lookup`, `sys/leases/revoke`, and `sys/leases/renew` endpoints if provided `lease_id` is null
+```
diff --git a/v1.14.6/changelog/18962.txt b/v1.14.6/changelog/18962.txt
new file mode 100644
index 0000000..322c347
--- /dev/null
+++ b/v1.14.6/changelog/18962.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api: Remove dependency on sdk module.
+```
diff --git a/v1.14.6/changelog/18984.txt b/v1.14.6/changelog/18984.txt
new file mode 100644
index 0000000..4652bf2
--- /dev/null
+++ b/v1.14.6/changelog/18984.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: consistently use UTC for CA's notAfter exceeded error message
+```
diff --git a/v1.14.6/changelog/19002.txt b/v1.14.6/changelog/19002.txt
new file mode 100644
index 0000000..d1a1ff5
--- /dev/null
+++ b/v1.14.6/changelog/19002.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Added `reload` option to cert auth configuration in case of external renewals of local x509 key-pairs.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19005.txt b/v1.14.6/changelog/19005.txt
new file mode 100644
index 0000000..27e251e
--- /dev/null
+++ b/v1.14.6/changelog/19005.txt
@@ -0,0 +1,7 @@
+```release-note:change
+auth/alicloud: require the `role` field on login
+```
+
+```release-note:bug
+auth/alicloud: fix regression in vault login command that caused login to fail
+```
diff --git a/v1.14.6/changelog/19018.txt b/v1.14.6/changelog/19018.txt
new file mode 100644
index 0000000..bd79dbd
--- /dev/null
+++ b/v1.14.6/changelog/19018.txt
@@ -0,0 +1,7 @@
+```release-note:feature
+**GCP Secrets Impersonated Account Support**: Add support for GCP service account impersonation, allowing callers to generate a GCP access token without requiring Vault to store or retrieve a GCP service account key for each role.
+```
+
+```release-note:bug
+secrets/gcp: fix issue where IAM bindings were not preserved during policy update
+```
diff --git a/v1.14.6/changelog/19032.txt b/v1.14.6/changelog/19032.txt
new file mode 100644
index 0000000..a474c22
--- /dev/null
+++ b/v1.14.6/changelog/19032.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/ldap: Add max_page_size configurable to LDAP configuration
+```
diff --git a/v1.14.6/changelog/19036.txt b/v1.14.6/changelog/19036.txt
new file mode 100644
index 0000000..ebe62a7
--- /dev/null
+++ b/v1.14.6/changelog/19036.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes logout route wrapped_token bug
+``
\ No newline at end of file
diff --git a/v1.14.6/changelog/19037.txt b/v1.14.6/changelog/19037.txt
new file mode 100644
index 0000000..2ccd656
--- /dev/null
+++ b/v1.14.6/changelog/19037.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Revert fix for PR [18938](https://github.com/hashicorp/vault/pull/18938)
+```
diff --git a/v1.14.6/changelog/19043.txt b/v1.14.6/changelog/19043.txt
new file mode 100644
index 0000000..20a1a77
--- /dev/null
+++ b/v1.14.6/changelog/19043.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: added ability to validate response structures against openapi schema for test clusters
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19044.txt b/v1.14.6/changelog/19044.txt
new file mode 100644
index 0000000..7926bb6
--- /dev/null
+++ b/v1.14.6/changelog/19044.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/redis-elasticache: changed config argument names for disambiguation
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19056.txt b/v1.14.6/changelog/19056.txt
new file mode 100644
index 0000000..b5b1ae3
--- /dev/null
+++ b/v1.14.6/changelog/19056.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kv: make upgrade synchronous when no keys to upgrade
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19061.txt b/v1.14.6/changelog/19061.txt
new file mode 100644
index 0000000..ddf7943
--- /dev/null
+++ b/v1.14.6/changelog/19061.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/ad: Fix bug where updates to config would fail if password isn't provided 
+```
diff --git a/v1.14.6/changelog/19063.txt b/v1.14.6/changelog/19063.txt
new file mode 100644
index 0000000..df36111
--- /dev/null
+++ b/v1.14.6/changelog/19063.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/gcpkms: Updated plugin from v0.13.0 to v0.14.0
+```
diff --git a/v1.14.6/changelog/19068.txt b/v1.14.6/changelog/19068.txt
new file mode 100644
index 0000000..6edb29f
--- /dev/null
+++ b/v1.14.6/changelog/19068.txt
@@ -0,0 +1,3 @@
+```release-note:change
+sdk: Remove version package, make useragent.String versionless.
+```
diff --git a/v1.14.6/changelog/19071.txt b/v1.14.6/changelog/19071.txt
new file mode 100644
index 0000000..ca988db
--- /dev/null
+++ b/v1.14.6/changelog/19071.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix bug where logging in via OIDC fails if browser is in fullscreen mode
+```
diff --git a/v1.14.6/changelog/19076.txt b/v1.14.6/changelog/19076.txt
new file mode 100644
index 0000000..c206f44
--- /dev/null
+++ b/v1.14.6/changelog/19076.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+auth/oidc: Adds ability to set Google Workspace domain for groups search
+```
+```release-note:improvement
+auth/oidc: Adds `abort_on_error` parameter to CLI login command to help in non-interactive contexts
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19077.txt b/v1.14.6/changelog/19077.txt
new file mode 100644
index 0000000..604cea5
--- /dev/null
+++ b/v1.14.6/changelog/19077.txt
@@ -0,0 +1,11 @@
+```release-note:feature
+**Azure Auth Rotate Root**: Add support for rotate root in Azure Auth engine
+```
+
+```release-note:feature
+**Azure Auth Managed Identities**: Allow any Azure resource that supports managed identities to authenticate with Vault
+```
+
+```release-note:feature
+**VMSS Flex Authentication**: Adds support for Virtual Machine Scale Set Flex Authentication
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19084.txt b/v1.14.6/changelog/19084.txt
new file mode 100644
index 0000000..97896d3
--- /dev/null
+++ b/v1.14.6/changelog/19084.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/kubernetes: add /check endpoint to determine if environment variables are set
+```
diff --git a/v1.14.6/changelog/19094.txt b/v1.14.6/changelog/19094.txt
new file mode 100644
index 0000000..d3d872d
--- /dev/null
+++ b/v1.14.6/changelog/19094.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/kubernetes: fixes and dep updates for the auth-kubernetes plugin (see plugin changelog for details)
+```
diff --git a/v1.14.6/changelog/19096.txt b/v1.14.6/changelog/19096.txt
new file mode 100644
index 0000000..2cb0bbf
--- /dev/null
+++ b/v1.14.6/changelog/19096.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/azure: Adds ability to persist an application for the lifetime of a role.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19098.txt b/v1.14.6/changelog/19098.txt
new file mode 100644
index 0000000..df0f9c1
--- /dev/null
+++ b/v1.14.6/changelog/19098.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/cf: Remove incorrect usage of CreateOperation from path_config
+```
diff --git a/v1.14.6/changelog/19100.txt b/v1.14.6/changelog/19100.txt
new file mode 100644
index 0000000..a2f1b72
--- /dev/null
+++ b/v1.14.6/changelog/19100.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+Bump github.com/hashicorp/go-plugin version from 1.4.5 to 1.4.8
+```
+
diff --git a/v1.14.6/changelog/19103.txt b/v1.14.6/changelog/19103.txt
new file mode 100644
index 0000000..868db62
--- /dev/null
+++ b/v1.14.6/changelog/19103.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database: Adds error message requiring password on root crednetial rotation.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19111.txt b/v1.14.6/changelog/19111.txt
new file mode 100644
index 0000000..35b7803
--- /dev/null
+++ b/v1.14.6/changelog/19111.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/mongodb-atlas: Fix a bug that did not allow WAL rollback to handle partial failures when creating API keys
+```
diff --git a/v1.14.6/changelog/19116.txt b/v1.14.6/changelog/19116.txt
new file mode 100644
index 0000000..5dfcd9e
--- /dev/null
+++ b/v1.14.6/changelog/19116.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Allows license-banners to be dismissed. Saves preferences in localStorage.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19135.txt b/v1.14.6/changelog/19135.txt
new file mode 100644
index 0000000..a3e085b
--- /dev/null
+++ b/v1.14.6/changelog/19135.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui (enterprise): Fix cancel button from transform engine role creation page
+```
diff --git a/v1.14.6/changelog/19139.txt b/v1.14.6/changelog/19139.txt
new file mode 100644
index 0000000..75e9a78
--- /dev/null
+++ b/v1.14.6/changelog/19139.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes bug in kmip role form that caused `operation_all` to persist after deselecting all operation checkboxes
+```
diff --git a/v1.14.6/changelog/19145.txt b/v1.14.6/changelog/19145.txt
new file mode 100644
index 0000000..9cca8e8
--- /dev/null
+++ b/v1.14.6/changelog/19145.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+secrets/kv: Emit events on write if events system enabled
+```
+
diff --git a/v1.14.6/changelog/19160.txt b/v1.14.6/changelog/19160.txt
new file mode 100644
index 0000000..66a3baa
--- /dev/null
+++ b/v1.14.6/changelog/19160.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Addressed a couple of issues that arose as edge cases for the -output-policy flag. Specifically around properly handling list commands, distinguishing kv V1/V2, and correctly recognizing protected paths.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19170.txt b/v1.14.6/changelog/19170.txt
new file mode 100644
index 0000000..9a421dd
--- /dev/null
+++ b/v1.14.6/changelog/19170.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: fix database static-user sample payload
+```
diff --git a/v1.14.6/changelog/19186.txt b/v1.14.6/changelog/19186.txt
new file mode 100644
index 0000000..cb3b59a
--- /dev/null
+++ b/v1.14.6/changelog/19186.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/approle: Add nil check for the secret ID entry when deleting via secret id accessor preventing cross role secret id deletion
+```
diff --git a/v1.14.6/changelog/19187.txt b/v1.14.6/changelog/19187.txt
new file mode 100644
index 0000000..c04234a
--- /dev/null
+++ b/v1.14.6/changelog/19187.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: Add rotate root documentation for azure secrets engine
+```
diff --git a/v1.14.6/changelog/19190.txt b/v1.14.6/changelog/19190.txt
new file mode 100644
index 0000000..480006b
--- /dev/null
+++ b/v1.14.6/changelog/19190.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: show Get credentials button for static roles detail page when a user has the proper permissions.
+```
diff --git a/v1.14.6/changelog/19194.txt b/v1.14.6/changelog/19194.txt
new file mode 100644
index 0000000..b2a5ff3
--- /dev/null
+++ b/v1.14.6/changelog/19194.txt
@@ -0,0 +1,4 @@
+```release-note:feature
+**Event System (Alpha)**: Vault has a new opt-in experimental event system. Not yet suitable for production use. Events are currently only generated on writes to the KV secrets engine, but external plugins can also be updated to start generating events.
+```
+
diff --git a/v1.14.6/changelog/19196.txt b/v1.14.6/changelog/19196.txt
new file mode 100644
index 0000000..aab2638
--- /dev/null
+++ b/v1.14.6/changelog/19196.txt
@@ -0,0 +1,5 @@
+```release-note:feature
+**PKI Cross-Cluster Revocations**: Revocation information can now be
+synchronized across primary and performance replica clusters offering
+a unified CRL/OCSP view of revocations across cluster boundaries.
+```
diff --git a/v1.14.6/changelog/19215.txt b/v1.14.6/changelog/19215.txt
new file mode 100644
index 0000000..33fea94
--- /dev/null
+++ b/v1.14.6/changelog/19215.txt
@@ -0,0 +1,5 @@
+```release-note:feature
+**Secrets/Auth Plugin Multiplexing**: The plugin will be multiplexed when run
+as an external plugin by vault versions that support secrets/auth plugin
+multiplexing (> 1.12)
+```
diff --git a/v1.14.6/changelog/19216.txt b/v1.14.6/changelog/19216.txt
new file mode 100644
index 0000000..e03e866
--- /dev/null
+++ b/v1.14.6/changelog/19216.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: adds allowed_response_headers as param for secret engine mount config
+```
diff --git a/v1.14.6/changelog/19220.txt b/v1.14.6/changelog/19220.txt
new file mode 100644
index 0000000..cbfe7e5
--- /dev/null
+++ b/v1.14.6/changelog/19220.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: remove wizard
+```
diff --git a/v1.14.6/changelog/19244.txt b/v1.14.6/changelog/19244.txt
new file mode 100644
index 0000000..63a663e
--- /dev/null
+++ b/v1.14.6/changelog/19244.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth/github: Allow for an optional Github auth token environment variable to make authenticated requests when fetching org id
+website/docs: Add docs for `VAULT_AUTH_CONFIG_GITHUB_TOKEN` environment variable when writing Github config
+```
diff --git a/v1.14.6/changelog/19247.txt b/v1.14.6/changelog/19247.txt
new file mode 100644
index 0000000..f51e847
--- /dev/null
+++ b/v1.14.6/changelog/19247.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/oidc: Adds support for group membership parsing when using IBM ISAM as an OIDC provider.
+```
diff --git a/v1.14.6/changelog/19252.txt b/v1.14.6/changelog/19252.txt
new file mode 100644
index 0000000..9912135
--- /dev/null
+++ b/v1.14.6/changelog/19252.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Consistently stop Vault server on exit in gen_openapi.sh
+```
diff --git a/v1.14.6/changelog/19260.txt b/v1.14.6/changelog/19260.txt
new file mode 100644
index 0000000..77138a3
--- /dev/null
+++ b/v1.14.6/changelog/19260.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**agent/auto-auth:**: Add OCI (Oracle Cloud Infrastructure) auto-auth method
+```
diff --git a/v1.14.6/changelog/19265.txt b/v1.14.6/changelog/19265.txt
new file mode 100644
index 0000000..23d957e
--- /dev/null
+++ b/v1.14.6/changelog/19265.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/pki: Decode integer values properly in health-check configuration file
+```
diff --git a/v1.14.6/changelog/19269.txt b/v1.14.6/changelog/19269.txt
new file mode 100644
index 0000000..57ff207
--- /dev/null
+++ b/v1.14.6/changelog/19269.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli/pki: Change the pki health-check --list default config output to JSON so it's a usable configuration file
+```
diff --git a/v1.14.6/changelog/19274.txt b/v1.14.6/changelog/19274.txt
new file mode 100644
index 0000000..a7f5d8c
--- /dev/null
+++ b/v1.14.6/changelog/19274.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/pki: Fix path for role health-check warning messages
+```
diff --git a/v1.14.6/changelog/19276.txt b/v1.14.6/changelog/19276.txt
new file mode 100644
index 0000000..3731994
--- /dev/null
+++ b/v1.14.6/changelog/19276.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/pki: Properly report permission issues within health-check mount tune checks
+```
diff --git a/v1.14.6/changelog/19290.txt b/v1.14.6/changelog/19290.txt
new file mode 100644
index 0000000..1a45115
--- /dev/null
+++ b/v1.14.6/changelog/19290.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Remove `default` and add `default-service` and `default-batch` to UI token_type for auth mount and tuning. 
+```
diff --git a/v1.14.6/changelog/19296.txt b/v1.14.6/changelog/19296.txt
new file mode 100644
index 0000000..1ef62a0
--- /dev/null
+++ b/v1.14.6/changelog/19296.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Sidebar Navigation in UI**: A new sidebar navigation panel has been added in the UI to replace the top navigation bar.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19311.txt b/v1.14.6/changelog/19311.txt
new file mode 100644
index 0000000..5ad6e2c
--- /dev/null
+++ b/v1.14.6/changelog/19311.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+server/config:  Use file.Stat when checking file permissions when VAULT_ENABLE_FILE_PERMISSIONS_CHECK is enabled
+```
diff --git a/v1.14.6/changelog/19319.txt b/v1.14.6/changelog/19319.txt
new file mode 100644
index 0000000..4702344
--- /dev/null
+++ b/v1.14.6/changelog/19319.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Improve operationId/request/response naming strategy
+```
diff --git a/v1.14.6/changelog/19334.txt b/v1.14.6/changelog/19334.txt
new file mode 100644
index 0000000..7df6826
--- /dev/null
+++ b/v1.14.6/changelog/19334.txt
@@ -0,0 +1,3 @@
+```release-note:deprecation
+secrets/ad: Marks the Active Directory (AD) secrets engine as deprecated.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19365.txt b/v1.14.6/changelog/19365.txt
new file mode 100644
index 0000000..774c750
--- /dev/null
+++ b/v1.14.6/changelog/19365.txt
@@ -0,0 +1,7 @@
+```release-note: enhancement
+auth/aws: Support request cancellation with AWS requests
+```
+
+```release-note: enhancement
+secrets/aws: Support request cancellation with AWS requests
+```
diff --git a/v1.14.6/changelog/19373.txt b/v1.14.6/changelog/19373.txt
new file mode 100644
index 0000000..8775180
--- /dev/null
+++ b/v1.14.6/changelog/19373.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/transit: Fix import, import-version command invocation
+```
diff --git a/v1.14.6/changelog/19378.txt b/v1.14.6/changelog/19378.txt
new file mode 100644
index 0000000..40a1e82
--- /dev/null
+++ b/v1.14.6/changelog/19378.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli/kv: add -mount flag to kv list
+```
diff --git a/v1.14.6/changelog/19416.txt b/v1.14.6/changelog/19416.txt
new file mode 100644
index 0000000..f2a7d32
--- /dev/null
+++ b/v1.14.6/changelog/19416.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/token: Fix cubbyhole and revocation for legacy service tokens
+```
diff --git a/v1.14.6/changelog/19428.txt b/v1.14.6/changelog/19428.txt
new file mode 100644
index 0000000..c1ae6d5
--- /dev/null
+++ b/v1.14.6/changelog/19428.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes crypto.randomUUID error in unsecure contexts from third party ember-data library
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19429.txt b/v1.14.6/changelog/19429.txt
new file mode 100644
index 0000000..341fbf5
--- /dev/null
+++ b/v1.14.6/changelog/19429.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: pass encodeBase64 param to HMAC transit-key-actions.
+```
diff --git a/v1.14.6/changelog/19448.txt b/v1.14.6/changelog/19448.txt
new file mode 100644
index 0000000..8c75b79
--- /dev/null
+++ b/v1.14.6/changelog/19448.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes SSH engine config deletion
+```
diff --git a/v1.14.6/changelog/19460.txt b/v1.14.6/changelog/19460.txt
new file mode 100644
index 0000000..6334c7f
--- /dev/null
+++ b/v1.14.6/changelog/19460.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: use URLSearchParams interface to capture namespace param from SSOs (ex. ADFS) with decoded state param in callback url
+```
diff --git a/v1.14.6/changelog/19468.txt b/v1.14.6/changelog/19468.txt
new file mode 100644
index 0000000..5afce90
--- /dev/null
+++ b/v1.14.6/changelog/19468.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+plugin/reload:  Fix a possible data race with rollback manager and plugin reload
+```
diff --git a/v1.14.6/changelog/19472.txt b/v1.14.6/changelog/19472.txt
new file mode 100644
index 0000000..db9ec72
--- /dev/null
+++ b/v1.14.6/changelog/19472.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+autopilot: Update version to v0.2.0 to add better support for respecting min quorum
+```
diff --git a/v1.14.6/changelog/19483.txt b/v1.14.6/changelog/19483.txt
new file mode 100644
index 0000000..c7ba6f6
--- /dev/null
+++ b/v1.14.6/changelog/19483.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Fix panic when SIGHUP is issued to Agent while it has a non-TLS listener.
+```
diff --git a/v1.14.6/changelog/19495.txt b/v1.14.6/changelog/19495.txt
new file mode 100644
index 0000000..dac2ca0
--- /dev/null
+++ b/v1.14.6/changelog/19495.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+shamir: change mul and div implementations to be constant-time
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19519.txt b/v1.14.6/changelog/19519.txt
new file mode 100644
index 0000000..6756f62
--- /dev/null
+++ b/v1.14.6/changelog/19519.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Allow importing RSA-PSS OID (1.2.840.113549.1.1.10) private keys via BYOK.
+```
diff --git a/v1.14.6/changelog/19520.txt b/v1.14.6/changelog/19520.txt
new file mode 100644
index 0000000..726be2c
--- /dev/null
+++ b/v1.14.6/changelog/19520.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+http: Support responding to HEAD operation from plugins
+```
diff --git a/v1.14.6/changelog/19541.txt b/v1.14.6/changelog/19541.txt
new file mode 100644
index 0000000..9bdecc3
--- /dev/null
+++ b/v1.14.6/changelog/19541.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes oidc tabs in auth form submitting with the root's default_role value after a namespace has been inputted
+```
diff --git a/v1.14.6/changelog/19545.txt b/v1.14.6/changelog/19545.txt
new file mode 100644
index 0000000..615742c
--- /dev/null
+++ b/v1.14.6/changelog/19545.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/elasticsearch: Update error messages resulting from Elasticsearch API errors
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19585.txt b/v1.14.6/changelog/19585.txt
new file mode 100644
index 0000000..f68c0dc
--- /dev/null
+++ b/v1.14.6/changelog/19585.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fixed issue with remounting mounts that have a non-trailing space in the 'to' or 'from' paths.
+```
diff --git a/v1.14.6/changelog/19591.txt b/v1.14.6/changelog/19591.txt
new file mode 100644
index 0000000..f15d397
--- /dev/null
+++ b/v1.14.6/changelog/19591.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: validate name identifiers in mssql physical storage backend prior use 
+```
diff --git a/v1.14.6/changelog/19593.txt b/v1.14.6/changelog/19593.txt
new file mode 100644
index 0000000..8f17057
--- /dev/null
+++ b/v1.14.6/changelog/19593.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+events: Suppress log warnings triggered when events are sent but the events system is not enabled.
+```
+
diff --git a/v1.14.6/changelog/19600.txt b/v1.14.6/changelog/19600.txt
new file mode 100644
index 0000000..f2c1f71
--- /dev/null
+++ b/v1.14.6/changelog/19600.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+openapi: Fix logic for labeling unauthenticated/sudo paths.
+```
diff --git a/v1.14.6/changelog/19616.txt b/v1.14.6/changelog/19616.txt
new file mode 100644
index 0000000..3afcc60
--- /dev/null
+++ b/v1.14.6/changelog/19616.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/postgresql: Add configuration to scram-sha-256 encrypt passwords on Vault before sending them to PostgreSQL
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19624.txt b/v1.14.6/changelog/19624.txt
new file mode 100644
index 0000000..7bc2df6
--- /dev/null
+++ b/v1.14.6/changelog/19624.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix PKI revocation request forwarding from standby nodes due to an error wrapping bug
+```
diff --git a/v1.14.6/changelog/19640.txt b/v1.14.6/changelog/19640.txt
new file mode 100644
index 0000000..8dcf59b
--- /dev/null
+++ b/v1.14.6/changelog/19640.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ secrets/ldap: Invalidates WAL entry for static role if `password_policy` has changed.
+```
diff --git a/v1.14.6/changelog/19676.txt b/v1.14.6/changelog/19676.txt
new file mode 100644
index 0000000..090dc80
--- /dev/null
+++ b/v1.14.6/changelog/19676.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core: Allow overriding gRPC connect timeout via VAULT_GRPC_MIN_CONNECT_TIMEOUT. This is an env var rather than a config setting because we don't expect this to ever be needed.  It's being added as a last-ditch
+option in case all else fails for some replication issues we may not have fully reproduced.
+```
diff --git a/v1.14.6/changelog/19703.txt b/v1.14.6/changelog/19703.txt
new file mode 100644
index 0000000..6bf8e5c
--- /dev/null
+++ b/v1.14.6/changelog/19703.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes issue navigating back a level using the breadcrumb from secret metadata view
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19721.txt b/v1.14.6/changelog/19721.txt
new file mode 100644
index 0000000..9818a0f
--- /dev/null
+++ b/v1.14.6/changelog/19721.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix regression breaking non-raft clusters whose nodes share the same cluster_addr/api_addr.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19776.txt b/v1.14.6/changelog/19776.txt
new file mode 100644
index 0000000..786cfd3
--- /dev/null
+++ b/v1.14.6/changelog/19776.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Vault Agent now reports its name and version as part of the User-Agent header in all requests issued.
+```
diff --git a/v1.14.6/changelog/19791.txt b/v1.14.6/changelog/19791.txt
new file mode 100644
index 0000000..26722cd
--- /dev/null
+++ b/v1.14.6/changelog/19791.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: add allowed_managed_keys field to secret engine mount options
+```
diff --git a/v1.14.6/changelog/19798.txt b/v1.14.6/changelog/19798.txt
new file mode 100644
index 0000000..4bae8b6
--- /dev/null
+++ b/v1.14.6/changelog/19798.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/terraform: upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19799.txt b/v1.14.6/changelog/19799.txt
new file mode 100644
index 0000000..aee76ca
--- /dev/null
+++ b/v1.14.6/changelog/19799.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix bad link to namespace when namespace name includes `.`
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19814.txt b/v1.14.6/changelog/19814.txt
new file mode 100644
index 0000000..687527e
--- /dev/null
+++ b/v1.14.6/changelog/19814.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: add plugin metadata, including plugin name, type, version, sha256, and whether plugin is external, to audit logging
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19829.txt b/v1.14.6/changelog/19829.txt
new file mode 100644
index 0000000..e8472b2
--- /dev/null
+++ b/v1.14.6/changelog/19829.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/ad: upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19846.txt b/v1.14.6/changelog/19846.txt
new file mode 100644
index 0000000..269b117
--- /dev/null
+++ b/v1.14.6/changelog/19846.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/alicloud: upgrades dependencies
+```
diff --git a/v1.14.6/changelog/19861.txt b/v1.14.6/changelog/19861.txt
new file mode 100644
index 0000000..ee5bc70
--- /dev/null
+++ b/v1.14.6/changelog/19861.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/mongodbatlas: upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19862.txt b/v1.14.6/changelog/19862.txt
new file mode 100644
index 0000000..c1ce6d8
--- /dev/null
+++ b/v1.14.6/changelog/19862.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+build: Prefer GOBIN when set over GOPATH/bin when building the binary
+```
diff --git a/v1.14.6/changelog/19875.txt b/v1.14.6/changelog/19875.txt
new file mode 100644
index 0000000..1167e39
--- /dev/null
+++ b/v1.14.6/changelog/19875.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+helper/random: Fix race condition in string generator helper
+```
diff --git a/v1.14.6/changelog/19878.txt b/v1.14.6/changelog/19878.txt
new file mode 100644
index 0000000..4135434
--- /dev/null
+++ b/v1.14.6/changelog/19878.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Remove the Bulma CSS framework.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19891.txt b/v1.14.6/changelog/19891.txt
new file mode 100644
index 0000000..b030151
--- /dev/null
+++ b/v1.14.6/changelog/19891.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core (enterprise): add configuration for license reporting 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19901.txt b/v1.14.6/changelog/19901.txt
new file mode 100644
index 0000000..8e0bbbd
--- /dev/null
+++ b/v1.14.6/changelog/19901.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Updates UI javascript dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19913.txt b/v1.14.6/changelog/19913.txt
new file mode 100644
index 0000000..eccdec6
--- /dev/null
+++ b/v1.14.6/changelog/19913.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds whitespace warning to secrets engine and auth method path inputs
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/19954.txt b/v1.14.6/changelog/19954.txt
new file mode 100644
index 0000000..e0ff45f
--- /dev/null
+++ b/v1.14.6/changelog/19954.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/mongodb: upgrade mongo driver to 1.11
+```
diff --git a/v1.14.6/changelog/19993.txt b/v1.14.6/changelog/19993.txt
new file mode 100644
index 0000000..9065086
--- /dev/null
+++ b/v1.14.6/changelog/19993.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/openldap: upgrades dependencies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20019.txt b/v1.14.6/changelog/20019.txt
new file mode 100644
index 0000000..0483d17
--- /dev/null
+++ b/v1.14.6/changelog/20019.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: add an endpoint to write test activity log data, guarded by a build flag 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20034.txt b/v1.14.6/changelog/20034.txt
new file mode 100644
index 0000000..c105079
--- /dev/null
+++ b/v1.14.6/changelog/20034.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+secrets/aws: Revert changes that removed the lease on STS credentials, while leaving the new ttl field in place.
+```
diff --git a/v1.14.6/changelog/20044.txt b/v1.14.6/changelog/20044.txt
new file mode 100644
index 0000000..014e61b
--- /dev/null
+++ b/v1.14.6/changelog/20044.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+core: Add a `raft` sub-field to the `storage` and `ha_storage` details provided by the
+`/sys/config/state/sanitized` endpoint in order to include the `max_entry_size`.
+```
diff --git a/v1.14.6/changelog/20057.txt b/v1.14.6/changelog/20057.txt
new file mode 100644
index 0000000..585a07d
--- /dev/null
+++ b/v1.14.6/changelog/20057.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+secrets/pki: Ensure cross-cluster delta WAL write failure only logs to avoid unattended forwarding.
+```
diff --git a/v1.14.6/changelog/20058.txt b/v1.14.6/changelog/20058.txt
new file mode 100644
index 0000000..e43a1f4
--- /dev/null
+++ b/v1.14.6/changelog/20058.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix building of unified delta CRLs and recovery during unified delta WAL write failures.
+```
diff --git a/v1.14.6/changelog/20064.txt b/v1.14.6/changelog/20064.txt
new file mode 100644
index 0000000..c539119
--- /dev/null
+++ b/v1.14.6/changelog/20064.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes browser console formatting for help command output
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20070.txt b/v1.14.6/changelog/20070.txt
new file mode 100644
index 0000000..34e6e55
--- /dev/null
+++ b/v1.14.6/changelog/20070.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes remaining doc links to include /vault in path
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20073.txt b/v1.14.6/changelog/20073.txt
new file mode 100644
index 0000000..10c21a5
--- /dev/null
+++ b/v1.14.6/changelog/20073.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: refactor the activity log's generation of precomputed queries 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20078.txt b/v1.14.6/changelog/20078.txt
new file mode 100644
index 0000000..8749354
--- /dev/null
+++ b/v1.14.6/changelog/20078.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/activity: error when attempting to update retention configuration below the minimum 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20086.txt b/v1.14.6/changelog/20086.txt
new file mode 100644
index 0000000..9511c97
--- /dev/null
+++ b/v1.14.6/changelog/20086.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+api: `/sys/internal/counters/config` endpoint now contains read-only
+`reporting_enabled` and `billing_start_timestamp` fields.
+```
diff --git a/v1.14.6/changelog/20109.txt b/v1.14.6/changelog/20109.txt
new file mode 100644
index 0000000..8c7cb3b
--- /dev/null
+++ b/v1.14.6/changelog/20109.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sys/wrapping: Add example how to unwrap without authentication in Vault
+```
diff --git a/v1.14.6/changelog/20125.txt b/v1.14.6/changelog/20125.txt
new file mode 100644
index 0000000..07dd820
--- /dev/null
+++ b/v1.14.6/changelog/20125.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: updates clients configuration edit form state based on census reporting configuration
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20144.txt b/v1.14.6/changelog/20144.txt
new file mode 100644
index 0000000..ef8b9a0
--- /dev/null
+++ b/v1.14.6/changelog/20144.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+sdk/ldaputil: added `connection_timeout` to tune connection timeout duration 
+for all LDAP plugins.
+```
diff --git a/v1.14.6/changelog/20150.txt b/v1.14.6/changelog/20150.txt
new file mode 100644
index 0000000..0ea8259
--- /dev/null
+++ b/v1.14.6/changelog/20150.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+api: `/sys/internal/counters/config` endpoint now contains read-only
+`minimum_retention_months`.
+```
diff --git a/v1.14.6/changelog/20154.txt b/v1.14.6/changelog/20154.txt
new file mode 100644
index 0000000..7bda362
--- /dev/null
+++ b/v1.14.6/changelog/20154.txt
@@ -0,0 +1,2 @@
+```release-note:bug
+auth/cert: Include OCSP parameters in read CA certificate role response.
diff --git a/v1.14.6/changelog/20163.txt b/v1.14.6/changelog/20163.txt
new file mode 100644
index 0000000..0b845fb
--- /dev/null
+++ b/v1.14.6/changelog/20163.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: adds warning for commas in stringArray inputs and updates tooltip help text to remove references to comma separation 
+```
diff --git a/v1.14.6/changelog/20181.txt b/v1.14.6/changelog/20181.txt
new file mode 100644
index 0000000..121c869
--- /dev/null
+++ b/v1.14.6/changelog/20181.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+sdk/helper/ocsp: Workaround bug in Go's ocsp.ParseResponse(...), causing validation to fail with embedded CA certificates.
+auth/cert: Fix OCSP validation against Vault's PKI engine.
+```
diff --git a/v1.14.6/changelog/20201.txt b/v1.14.6/changelog/20201.txt
new file mode 100644
index 0000000..d50c9bc
--- /dev/null
+++ b/v1.14.6/changelog/20201.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Decrease size and improve compatibility of OCSP responses by removing issuer certificate.
+```
diff --git a/v1.14.6/changelog/20216.txt b/v1.14.6/changelog/20216.txt
new file mode 100644
index 0000000..59ee78c
--- /dev/null
+++ b/v1.14.6/changelog/20216.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+website/docs: Fix Kubernetes Auth Code Example to use the correct whitespace in import.
+```
diff --git a/v1.14.6/changelog/20220.txt b/v1.14.6/changelog/20220.txt
new file mode 100644
index 0000000..1cf72aa
--- /dev/null
+++ b/v1.14.6/changelog/20220.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+pki: Fix automatically turning off CRL signing on upgrade to Vault >= 1.12, if CA Key Usage disallows it
+```
diff --git a/v1.14.6/changelog/20224.txt b/v1.14.6/changelog/20224.txt
new file mode 100644
index 0000000..7ec5bf6
--- /dev/null
+++ b/v1.14.6/changelog/20224.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command/server: New -dev-cluster-json writes a file describing the dev cluster in -dev and -dev-three-node modes, plus -dev-three-node now enables unauthenticated metrics and pprof requests.
+```
diff --git a/v1.14.6/changelog/20234.txt b/v1.14.6/changelog/20234.txt
new file mode 100644
index 0000000..1f20bdc
--- /dev/null
+++ b/v1.14.6/changelog/20234.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/cert: Better return OCSP validation errors during login to the caller.
+```
diff --git a/v1.14.6/changelog/20235.txt b/v1.14.6/changelog/20235.txt
new file mode 100644
index 0000000..d1b9f8a
--- /dev/null
+++ b/v1.14.6/changelog/20235.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: remove use of htmlSafe except when first sanitized
+```
diff --git a/v1.14.6/changelog/20243.txt b/v1.14.6/changelog/20243.txt
new file mode 100644
index 0000000..8d5b044
--- /dev/null
+++ b/v1.14.6/changelog/20243.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+cli/namespace: Add detailed flag to output additional namespace information 
+such as namespace IDs and custom metadata.
+```
diff --git a/v1.14.6/changelog/20247.txt b/v1.14.6/changelog/20247.txt
new file mode 100644
index 0000000..91f2f0d
--- /dev/null
+++ b/v1.14.6/changelog/20247.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk: Add new docker-based cluster testing framework to the sdk.
+```
diff --git a/v1.14.6/changelog/20253.txt b/v1.14.6/changelog/20253.txt
new file mode 100644
index 0000000..19edae1
--- /dev/null
+++ b/v1.14.6/changelog/20253.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add warning when issuer lacks KeyUsage during CRL rebuilds; expose in logs and on rotation.
+```
diff --git a/v1.14.6/changelog/20257.txt b/v1.14.6/changelog/20257.txt
new file mode 100644
index 0000000..c2dba45
--- /dev/null
+++ b/v1.14.6/changelog/20257.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+command/server: Fix incorrect paths in generated config for `-dev-tls` flag on Windows 
+```
diff --git a/v1.14.6/changelog/20261.txt b/v1.14.6/changelog/20261.txt
new file mode 100644
index 0000000..5f4eb97
--- /dev/null
+++ b/v1.14.6/changelog/20261.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+* physical/etcd: Upgrade etcd3 client to v3.5.7
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20263.txt b/v1.14.6/changelog/20263.txt
new file mode 100644
index 0000000..8556fe8
--- /dev/null
+++ b/v1.14.6/changelog/20263.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix OIDC provider logo showing when domain doesn't match
+```
diff --git a/v1.14.6/changelog/20265.txt b/v1.14.6/changelog/20265.txt
new file mode 100644
index 0000000..8e27875
--- /dev/null
+++ b/v1.14.6/changelog/20265.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+* api: Add Config.TLSConfig method to fetch the TLS configuration from a client config.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20276.txt b/v1.14.6/changelog/20276.txt
new file mode 100644
index 0000000..71f288a
--- /dev/null
+++ b/v1.14.6/changelog/20276.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Include CA serial number, key UUID on issuers list endpoint.
+```
diff --git a/v1.14.6/changelog/20285.txt b/v1.14.6/changelog/20285.txt
new file mode 100644
index 0000000..2bc2241
--- /dev/null
+++ b/v1.14.6/changelog/20285.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+openapi: Small fixes for OpenAPI display attributes. Changed "log-in" to "login"
+```
diff --git a/v1.14.6/changelog/20294.txt b/v1.14.6/changelog/20294.txt
new file mode 100644
index 0000000..92f7c29
--- /dev/null
+++ b/v1.14.6/changelog/20294.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+Add debug symbols back to builds to fix Dynatrace support
+```
diff --git a/v1.14.6/changelog/20341.txt b/v1.14.6/changelog/20341.txt
new file mode 100644
index 0000000..652e573
--- /dev/null
+++ b/v1.14.6/changelog/20341.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix patching of leaf_not_after_behavior on issuers.
+```
diff --git a/v1.14.6/changelog/20354.txt b/v1.14.6/changelog/20354.txt
new file mode 100644
index 0000000..abdacb7
--- /dev/null
+++ b/v1.14.6/changelog/20354.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Include per-issuer enable_aia_url_templating in issuer read endpoint.
+```
diff --git a/v1.14.6/changelog/20368.txt b/v1.14.6/changelog/20368.txt
new file mode 100644
index 0000000..bca5957
--- /dev/null
+++ b/v1.14.6/changelog/20368.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/identity: Allow updates of only the custom-metadata for entity alias.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20375.txt b/v1.14.6/changelog/20375.txt
new file mode 100644
index 0000000..92caf1e
--- /dev/null
+++ b/v1.14.6/changelog/20375.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: prevent panic on login after namespace is deleted that had mfa enforcement
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20411.txt b/v1.14.6/changelog/20411.txt
new file mode 100644
index 0000000..0935090
--- /dev/null
+++ b/v1.14.6/changelog/20411.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+audit: add a `mount_point` field to audit requests and response entries
+```
diff --git a/v1.14.6/changelog/20418.txt b/v1.14.6/changelog/20418.txt
new file mode 100644
index 0000000..596b7e4
--- /dev/null
+++ b/v1.14.6/changelog/20418.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+command/server: fixes panic in Vault server command when running in recovery mode
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20425.txt b/v1.14.6/changelog/20425.txt
new file mode 100644
index 0000000..20869fc
--- /dev/null
+++ b/v1.14.6/changelog/20425.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**MongoDB Atlas Database Secrets**: Adds support for client certificate credentials
+```
diff --git a/v1.14.6/changelog/20430.txt b/v1.14.6/changelog/20430.txt
new file mode 100644
index 0000000..5ac95f1
--- /dev/null
+++ b/v1.14.6/changelog/20430.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix secret render when path includes %. Resolves #11616.
+```
diff --git a/v1.14.6/changelog/20431.txt b/v1.14.6/changelog/20431.txt
new file mode 100644
index 0000000..a0083d8
--- /dev/null
+++ b/v1.14.6/changelog/20431.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add download button for each secret value in KV v2
+```
diff --git a/v1.14.6/changelog/20441.txt b/v1.14.6/changelog/20441.txt
new file mode 100644
index 0000000..6287848
--- /dev/null
+++ b/v1.14.6/changelog/20441.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Allow determining existing issuers and keys on import.
+```
diff --git a/v1.14.6/changelog/20442.txt b/v1.14.6/changelog/20442.txt
new file mode 100644
index 0000000..09636b6
--- /dev/null
+++ b/v1.14.6/changelog/20442.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add missing fields to tidy-status, include new last_auto_tidy_finished field.
+```
diff --git a/v1.14.6/changelog/20453.txt b/v1.14.6/changelog/20453.txt
new file mode 100644
index 0000000..e605791
--- /dev/null
+++ b/v1.14.6/changelog/20453.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/ldap: Set default value for `max_page_size` properly
+```
diff --git a/v1.14.6/changelog/20464.txt b/v1.14.6/changelog/20464.txt
new file mode 100644
index 0000000..6b58153
--- /dev/null
+++ b/v1.14.6/changelog/20464.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Add walkSecretsTree helper function, which recursively walks secrets rooted at the given path
+```
diff --git a/v1.14.6/changelog/20477.txt b/v1.14.6/changelog/20477.txt
new file mode 100644
index 0000000..e95305a
--- /dev/null
+++ b/v1.14.6/changelog/20477.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: CLI should take days as a unit of time for ttl like flags
+```
diff --git a/v1.14.6/changelog/20481.txt b/v1.14.6/changelog/20481.txt
new file mode 100644
index 0000000..c6f2711
--- /dev/null
+++ b/v1.14.6/changelog/20481.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add filtering by engine type and engine name to the Secret Engine list view.
+```
diff --git a/v1.14.6/changelog/20488.txt b/v1.14.6/changelog/20488.txt
new file mode 100644
index 0000000..5ea0f78
--- /dev/null
+++ b/v1.14.6/changelog/20488.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+cli: Improve addPrefixToKVPath helper
+```
diff --git a/v1.14.6/changelog/20502.txt b/v1.14.6/changelog/20502.txt
new file mode 100644
index 0000000..153309a
--- /dev/null
+++ b/v1.14.6/changelog/20502.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: disable printing flags warnings messages for the ssh command
+```
diff --git a/v1.14.6/changelog/20519.txt b/v1.14.6/changelog/20519.txt
new file mode 100644
index 0000000..92f7c29
--- /dev/null
+++ b/v1.14.6/changelog/20519.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+Add debug symbols back to builds to fix Dynatrace support
+```
diff --git a/v1.14.6/changelog/20530.txt b/v1.14.6/changelog/20530.txt
new file mode 100644
index 0000000..6f6d04b
--- /dev/null
+++ b/v1.14.6/changelog/20530.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Environment Variables through Vault Agent**: Introducing a new process-supervisor mode for Vault Agent which allows injecting secrets as environment variables into a child process using a new `env_template` configuration stanza. The process-supervisor configuration can be generated with a new `vault agent generate-config` helper tool. 
+```
diff --git a/v1.14.6/changelog/20536.txt b/v1.14.6/changelog/20536.txt
new file mode 100644
index 0000000..62aa936
--- /dev/null
+++ b/v1.14.6/changelog/20536.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**AWS Static Roles**: The AWS Secrets Engine can manage static roles configured by users.
+```
diff --git a/v1.14.6/changelog/20548.txt b/v1.14.6/changelog/20548.txt
new file mode 100644
index 0000000..fed5d2b
--- /dev/null
+++ b/v1.14.6/changelog/20548.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Vault Proxy**: Introduced Vault Proxy, a new subcommand of the Vault binary that can be invoked using `vault proxy -config=config.hcl`. It currently has the same feature set as Vault Agent's API proxy, but the two may diverge in the future. We plan to deprecate the API proxy functionality of Vault Agent in a future release.
+```
diff --git a/v1.14.6/changelog/20559.txt b/v1.14.6/changelog/20559.txt
new file mode 100644
index 0000000..2ff6422
--- /dev/null
+++ b/v1.14.6/changelog/20559.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core, secrets/pki, audit: Update dependency go-jose to v3 due to v2 deprecation.
+```
diff --git a/v1.14.6/changelog/20569.txt b/v1.14.6/changelog/20569.txt
new file mode 100644
index 0000000..e10a464
--- /dev/null
+++ b/v1.14.6/changelog/20569.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Add logic to validate env_template entries in configuration
+```
diff --git a/v1.14.6/changelog/20590.txt b/v1.14.6/changelog/20590.txt
new file mode 100644
index 0000000..c1c7c9e
--- /dev/null
+++ b/v1.14.6/changelog/20590.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Update Web CLI with examples and a new `kv-get` command for reading kv v2 data and metadata
+```
diff --git a/v1.14.6/changelog/20595.txt b/v1.14.6/changelog/20595.txt
new file mode 100644
index 0000000..982f414
--- /dev/null
+++ b/v1.14.6/changelog/20595.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add possibility to decode a generated encoded root token via the rest API
+```
diff --git a/v1.14.6/changelog/20603.txt b/v1.14.6/changelog/20603.txt
new file mode 100644
index 0000000..c3e7e2b
--- /dev/null
+++ b/v1.14.6/changelog/20603.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes issue creating mfa login enforcement from method enforcements tab
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20609.txt b/v1.14.6/changelog/20609.txt
new file mode 100644
index 0000000..fe92833
--- /dev/null
+++ b/v1.14.6/changelog/20609.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+command/server: Add support for dumping pprof files to the filesystem via SIGUSR2 when 
+`VAULT_PPROF_WRITE_TO_FILE=true` is set on the server.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20626.txt b/v1.14.6/changelog/20626.txt
new file mode 100644
index 0000000..2a13cee
--- /dev/null
+++ b/v1.14.6/changelog/20626.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+activitylog: EntityRecord protobufs now contain a ClientType field for
+distinguishing client sources.
+```
diff --git a/v1.14.6/changelog/20628.txt b/v1.14.6/changelog/20628.txt
new file mode 100644
index 0000000..9788146
--- /dev/null
+++ b/v1.14.6/changelog/20628.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: initial implementation of a process runner for injecting secrets via environment variables via vault agent
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20629.txt b/v1.14.6/changelog/20629.txt
new file mode 100644
index 0000000..f5692f7
--- /dev/null
+++ b/v1.14.6/changelog/20629.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+command/server (enterprise): -dev-three-node now creates perf standbys instead of regular standbys.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20636.txt b/v1.14.6/changelog/20636.txt
new file mode 100644
index 0000000..6e20fcd
--- /dev/null
+++ b/v1.14.6/changelog/20636.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Properly Handle nil identity_policies in Secret Data
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20642.txt b/v1.14.6/changelog/20642.txt
new file mode 100644
index 0000000..8b8bc40
--- /dev/null
+++ b/v1.14.6/changelog/20642.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: add subject key identifier to read key response
+```
diff --git a/v1.14.6/changelog/20643.txt b/v1.14.6/changelog/20643.txt
new file mode 100644
index 0000000..340ec5b
--- /dev/null
+++ b/v1.14.6/changelog/20643.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: report intermediate error messages during request forwarding
+```
diff --git a/v1.14.6/changelog/20652.txt b/v1.14.6/changelog/20652.txt
new file mode 100644
index 0000000..c41e750
--- /dev/null
+++ b/v1.14.6/changelog/20652.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Respond to writes with updated key policy, cache configuration.
+```
diff --git a/v1.14.6/changelog/20654.txt b/v1.14.6/changelog/20654.txt
new file mode 100644
index 0000000..91e5674
--- /dev/null
+++ b/v1.14.6/changelog/20654.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/pki: Warning when issuing leafs from CSRs with basic constraints. In the future, issuance of non-CA leaf certs from CSRs with asserted IsCA Basic Constraints will be prohibited.
+```
diff --git a/v1.14.6/changelog/20664.txt b/v1.14.6/changelog/20664.txt
new file mode 100644
index 0000000..6f2b4ab
--- /dev/null
+++ b/v1.14.6/changelog/20664.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Support setting both maintain_stored_certificate_counts=false and publish_stored_certificate_count_metrics=false explicitly in tidy config.
+```
diff --git a/v1.14.6/changelog/20668.txt b/v1.14.6/changelog/20668.txt
new file mode 100644
index 0000000..f3f840c
--- /dev/null
+++ b/v1.14.6/changelog/20668.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transform: Added importing of keys and key versions into the Transform secrets engine using the command 'vault transform import' and 'vault transform import-version'.
+```
diff --git a/v1.14.6/changelog/20680.txt b/v1.14.6/changelog/20680.txt
new file mode 100644
index 0000000..ff80ac4
--- /dev/null
+++ b/v1.14.6/changelog/20680.txt
@@ -0,0 +1,6 @@
+```release-note:improvement
+core (enterprise): support reloading configuration for automated reporting via SIGHUP
+```
+```release-note:improvement
+core (enterprise): license updates trigger a reload of reporting and the activity log 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20694.txt b/v1.14.6/changelog/20694.txt
new file mode 100644
index 0000000..07f790a
--- /dev/null
+++ b/v1.14.6/changelog/20694.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+api: GET ... /sys/internal/counters/activity?current_billing_period=true now
+results in a response which contains the full billing period
+```
diff --git a/v1.14.6/changelog/20701.txt b/v1.14.6/changelog/20701.txt
new file mode 100644
index 0000000..24942d5
--- /dev/null
+++ b/v1.14.6/changelog/20701.txt
@@ -0,0 +1,3 @@
+```release-notes:bug
+secrets/pki: Fix race during runUnifiedTransfer when deciding to skip re-running a test within a short window.
+```
diff --git a/v1.14.6/changelog/20725.txt b/v1.14.6/changelog/20725.txt
new file mode 100644
index 0000000..04399cc
--- /dev/null
+++ b/v1.14.6/changelog/20725.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/gcp: Updated plugin from v0.15.0 to v0.16.0
+```
diff --git a/v1.14.6/changelog/20731.txt b/v1.14.6/changelog/20731.txt
new file mode 100644
index 0000000..1896c19
--- /dev/null
+++ b/v1.14.6/changelog/20731.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes auto_rotate_period ttl input for transit keys
+```
diff --git a/v1.14.6/changelog/20736.txt b/v1.14.6/changelog/20736.txt
new file mode 100644
index 0000000..1c4c3d4
--- /dev/null
+++ b/v1.14.6/changelog/20736.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/transit: Support BYOK-encrypted export of keys to securely allow synchronizing specific keys and version across clusters.
+```
diff --git a/v1.14.6/changelog/20741.txt b/v1.14.6/changelog/20741.txt
new file mode 100644
index 0000000..8034e45
--- /dev/null
+++ b/v1.14.6/changelog/20741.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Add integration tests for agent running in process supervisor mode
+```
diff --git a/v1.14.6/changelog/20742.txt b/v1.14.6/changelog/20742.txt
new file mode 100644
index 0000000..d91237e
--- /dev/null
+++ b/v1.14.6/changelog/20742.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/mongodbatlas: Updated plugin from v0.9.1 to v0.10.0
+```
diff --git a/v1.14.6/changelog/20745.txt b/v1.14.6/changelog/20745.txt
new file mode 100644
index 0000000..57a4391
--- /dev/null
+++ b/v1.14.6/changelog/20745.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/centrify: Updated plugin from v0.14.0 to v0.15.1
+```
diff --git a/v1.14.6/changelog/20747.txt b/v1.14.6/changelog/20747.txt
new file mode 100644
index 0000000..4c600d2
--- /dev/null
+++ b/v1.14.6/changelog/20747.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add filtering by auth type and auth name to the Authentication Method list view.
+```
diff --git a/v1.14.6/changelog/20750.txt b/v1.14.6/changelog/20750.txt
new file mode 100644
index 0000000..75a3e1d
--- /dev/null
+++ b/v1.14.6/changelog/20750.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/ad: Updated plugin from v0.10.1-0.20230329210417-0b2cdb26cf5d to v0.16.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20751.txt b/v1.14.6/changelog/20751.txt
new file mode 100644
index 0000000..9b78b3d
--- /dev/null
+++ b/v1.14.6/changelog/20751.txt
@@ -0,0 +1,3 @@
+```release-note:change
+database/redis-elasticache: Updated plugin from v0.2.0 to v0.2.1
+```
diff --git a/v1.14.6/changelog/20752.txt b/v1.14.6/changelog/20752.txt
new file mode 100644
index 0000000..667bc37
--- /dev/null
+++ b/v1.14.6/changelog/20752.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Vault PKI ACME Server**: Support for the ACME certificate lifecycle management protocol has been added to the Vault PKI Plugin. This allows standard ACME clients, such as the EFF's certbot and the CNCF's k8s cert-manager, to request certificates from a Vault server with no knowledge of Vault APIs or authentication mechanisms. For public-facing Vault instances, we recommend requiring External Account Bindings (EAB) to limit the ability to request certificates to only authenticated clients.
+```
diff --git a/v1.14.6/changelog/20758.txt b/v1.14.6/changelog/20758.txt
new file mode 100644
index 0000000..7eed0b0
--- /dev/null
+++ b/v1.14.6/changelog/20758.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/alicloud: Updated plugin from v0.14.0 to v0.15.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20763.txt b/v1.14.6/changelog/20763.txt
new file mode 100644
index 0000000..311dcb0
--- /dev/null
+++ b/v1.14.6/changelog/20763.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/redis: Upgrade plugin dependencies
+```
diff --git a/v1.14.6/changelog/20764.txt b/v1.14.6/changelog/20764.txt
new file mode 100644
index 0000000..adc14e0
--- /dev/null
+++ b/v1.14.6/changelog/20764.txt
@@ -0,0 +1,3 @@
+```release-note:change
+database/couchbase: Updated plugin from v0.9.0 to v0.9.2
+```
diff --git a/v1.14.6/changelog/20767.txt b/v1.14.6/changelog/20767.txt
new file mode 100644
index 0000000..b6d853a
--- /dev/null
+++ b/v1.14.6/changelog/20767.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+database/elasticsearch: Upgrade plugin dependencies
+```
diff --git a/v1.14.6/changelog/20771.txt b/v1.14.6/changelog/20771.txt
new file mode 100644
index 0000000..5cc1ee2
--- /dev/null
+++ b/v1.14.6/changelog/20771.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+auth/kerberos: Enable plugin multiplexing
+auth/kerberos: Upgrade plugin dependencies
+```
diff --git a/v1.14.6/changelog/20777.txt b/v1.14.6/changelog/20777.txt
new file mode 100644
index 0000000..ec3c9e4
--- /dev/null
+++ b/v1.14.6/changelog/20777.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/aure: Updated plugin from v0.15.0 to v0.16.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20783.txt b/v1.14.6/changelog/20783.txt
new file mode 100644
index 0000000..372d36c
--- /dev/null
+++ b/v1.14.6/changelog/20783.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix writes to readonly storage on performance standbys when user lockout feature is enabled.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20784.txt b/v1.14.6/changelog/20784.txt
new file mode 100644
index 0000000..b24a857
--- /dev/null
+++ b/v1.14.6/changelog/20784.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+secrets/gcpkms: Enable plugin multiplexing
+secrets/gcpkms: Upgrade plugin dependencies
+```
diff --git a/v1.14.6/changelog/20787.txt b/v1.14.6/changelog/20787.txt
new file mode 100644
index 0000000..a69b90d
--- /dev/null
+++ b/v1.14.6/changelog/20787.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/alicloud: Updated plugin from v0.5.4-beta1.0.20230330124709-3fcfc5914a22 to v0.15.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20799.txt b/v1.14.6/changelog/20799.txt
new file mode 100644
index 0000000..2e17ff9
--- /dev/null
+++ b/v1.14.6/changelog/20799.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/jwt: Updated plugin from v0.15.0 to v0.16.0
+```
diff --git a/v1.14.6/changelog/20802.txt b/v1.14.6/changelog/20802.txt
new file mode 100644
index 0000000..de8e1b9
--- /dev/null
+++ b/v1.14.6/changelog/20802.txt
@@ -0,0 +1,6 @@
+```release-note:change
+secrets/kubernetes: Update plugin to v0.5.0
+```
+```release-note:change
+auth/kubernetes: Update plugin to v0.16.0
+```
diff --git a/v1.14.6/changelog/20807.txt b/v1.14.6/changelog/20807.txt
new file mode 100644
index 0000000..3a3c1f4
--- /dev/null
+++ b/v1.14.6/changelog/20807.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/database/snowflake: Updated plugin from v0.7.0 to v0.8.0
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20816.txt b/v1.14.6/changelog/20816.txt
new file mode 100644
index 0000000..aae4b59
--- /dev/null
+++ b/v1.14.6/changelog/20816.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/azure: Updated plugin from v0.13.0 to v0.15.0
+```
diff --git a/v1.14.6/changelog/20818.txt b/v1.14.6/changelog/20818.txt
new file mode 100644
index 0000000..885ee92
--- /dev/null
+++ b/v1.14.6/changelog/20818.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/gcp: Updated plugin from v0.15.0 to v0.16.0
+```
diff --git a/v1.14.6/changelog/20825.txt b/v1.14.6/changelog/20825.txt
new file mode 100644
index 0000000..da99369
--- /dev/null
+++ b/v1.14.6/changelog/20825.txt
@@ -0,0 +1,3 @@
+```release-note:change
+storage/aerospike: Aerospike storage shouldn't be used on 32-bit architectures and is now unsupported on them.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20826.txt b/v1.14.6/changelog/20826.txt
new file mode 100644
index 0000000..8a693d9
--- /dev/null
+++ b/v1.14.6/changelog/20826.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Revert #19676 (VAULT_GRPC_MIN_CONNECT_TIMEOUT env var) as we decided it was unnecessary.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20834.txt b/v1.14.6/changelog/20834.txt
new file mode 100644
index 0000000..f17f1d3
--- /dev/null
+++ b/v1.14.6/changelog/20834.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Remove feature toggle for SSCTs, i.e. the env var VAULT_DISABLE_SERVER_SIDE_CONSISTENT_TOKENS.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20864.txt b/v1.14.6/changelog/20864.txt
new file mode 100644
index 0000000..7193c6b
--- /dev/null
+++ b/v1.14.6/changelog/20864.txt
@@ -0,0 +1,5 @@
+```release-note:bug
+secrets/transit: Fix export of HMAC-only key, correctly exporting the key used for sign operations. For consumers of the previously incorrect key, use the plaintext export to retrieve these incorrect keys and import them as new versions.
+secrets/transit: Fix bug related to shorter dedicated HMAC key sizing.
+sdk/helper/keysutil: New HMAC type policies will have HMACKey equal to Key and be copied over on import.
+```
diff --git a/v1.14.6/changelog/20881.txt b/v1.14.6/changelog/20881.txt
new file mode 100644
index 0000000..fd3e6d5
--- /dev/null
+++ b/v1.14.6/changelog/20881.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sdk/framework: Fix non-deterministic ordering of 'required' fields in OpenAPI spec
+```
diff --git a/v1.14.6/changelog/20882.txt b/v1.14.6/changelog/20882.txt
new file mode 100644
index 0000000..3694468
--- /dev/null
+++ b/v1.14.6/changelog/20882.txt
@@ -0,0 +1,6 @@
+```release-note:change
+secrets/database/mongodbatlas: Updated plugin from v0.9.0 to v0.10.0
+```
+```release-note:feature
+**MongoDB Atlas Database Secrets**: Adds support for generating X.509 certificates on dynamic roles for user authentication
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20891.txt b/v1.14.6/changelog/20891.txt
new file mode 100644
index 0000000..3057ec5
--- /dev/null
+++ b/v1.14.6/changelog/20891.txt
@@ -0,0 +1,4 @@
+```release-note:improvement
+secrets/consul: Improve error message when ACL bootstrapping fails.
+```
+
diff --git a/v1.14.6/changelog/20897.txt b/v1.14.6/changelog/20897.txt
new file mode 100644
index 0000000..01be5ac
--- /dev/null
+++ b/v1.14.6/changelog/20897.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue unsealing cluster for seal types other than shamir
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20907.txt b/v1.14.6/changelog/20907.txt
new file mode 100644
index 0000000..3f13a65
--- /dev/null
+++ b/v1.14.6/changelog/20907.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes key_bits and signature_bits reverting to default values when editing a pki role
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20934.txt b/v1.14.6/changelog/20934.txt
new file mode 100644
index 0000000..72c2257
--- /dev/null
+++ b/v1.14.6/changelog/20934.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Fix bug with 'cache' stanza validation
+```
diff --git a/v1.14.6/changelog/20943.txt b/v1.14.6/changelog/20943.txt
new file mode 100644
index 0000000..7cf186d
--- /dev/null
+++ b/v1.14.6/changelog/20943.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Support TLS-ALPN-01 challenge type in ACME for DNS certificate identifiers.
+```
diff --git a/v1.14.6/changelog/20964.txt b/v1.14.6/changelog/20964.txt
new file mode 100644
index 0000000..8bd9563
--- /dev/null
+++ b/v1.14.6/changelog/20964.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Fixes duplicate groups creation with the same name but unique IDs. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20965.txt b/v1.14.6/changelog/20965.txt
new file mode 100644
index 0000000..43c1d97
--- /dev/null
+++ b/v1.14.6/changelog/20965.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+identity: Remove caseSensitivityKey to prevent errors while loading groups which could result in missing groups in memDB when duplicates are found.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/20981.txt b/v1.14.6/changelog/20981.txt
new file mode 100644
index 0000000..26a5304
--- /dev/null
+++ b/v1.14.6/changelog/20981.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Limit ACME issued certificates NotAfter TTL to a maximum of 90 days 
+```
diff --git a/v1.14.6/changelog/20986.txt b/v1.14.6/changelog/20986.txt
new file mode 100644
index 0000000..c0615f9
--- /dev/null
+++ b/v1.14.6/changelog/20986.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft: Fix race where new follower joining can get pruned by dead server cleanup.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21100.txt b/v1.14.6/changelog/21100.txt
new file mode 100644
index 0000000..50024c9
--- /dev/null
+++ b/v1.14.6/changelog/21100.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+replication (enterprise): Fix regression causing token creation against a role
+with a new entity alias to be incorrectly forwarded from perf standbys.
+```
diff --git a/v1.14.6/changelog/21110.txt b/v1.14.6/changelog/21110.txt
new file mode 100644
index 0000000..2471fac
--- /dev/null
+++ b/v1.14.6/changelog/21110.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core/quotas (enterprise): Fix a case where we were applying login roles to lease count quotas in a non-login context.
+Also fix a related potential deadlock.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21165.txt b/v1.14.6/changelog/21165.txt
new file mode 100644
index 0000000..dd6b6d0
--- /dev/null
+++ b/v1.14.6/changelog/21165.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+raft/autopilot: Add dr-token flag for raft autopilot cli commands
+```
diff --git a/v1.14.6/changelog/21209.txt b/v1.14.6/changelog/21209.txt
new file mode 100644
index 0000000..31ddf41
--- /dev/null
+++ b/v1.14.6/changelog/21209.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/pki: Allow issuance of root CAs without AIA, when templated AIA information includes issuer_id.
+```
diff --git a/v1.14.6/changelog/21215.txt b/v1.14.6/changelog/21215.txt
new file mode 100644
index 0000000..ec4a63a
--- /dev/null
+++ b/v1.14.6/changelog/21215.txt
@@ -0,0 +1,4 @@
+```release-note:change
+core/namespace (enterprise): Introduce the concept of high-privilege namespace (administrative namespace),
+which will have access to some system backend paths that were previously only accessible in the root namespace.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21223.txt b/v1.14.6/changelog/21223.txt
new file mode 100644
index 0000000..96605f0
--- /dev/null
+++ b/v1.14.6/changelog/21223.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Do not cache seal configuration to fix a bug that resulted in sporadic auto unseal failures.
+```
diff --git a/v1.14.6/changelog/21249.txt b/v1.14.6/changelog/21249.txt
new file mode 100644
index 0000000..a088677
--- /dev/null
+++ b/v1.14.6/changelog/21249.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix panic in sealed nodes using raft storage trying to emit raft metrics
+```
diff --git a/v1.14.6/changelog/21260.txt b/v1.14.6/changelog/21260.txt
new file mode 100644
index 0000000..b291ec7
--- /dev/null
+++ b/v1.14.6/changelog/21260.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+core: Change where we evaluate filtered paths as part of mount operations; this is part of an enterprise bugfix that will
+have its own changelog entry.  Fix wrong lock used in ListAuths link meta interface implementation.
+```
diff --git a/v1.14.6/changelog/21282.txt b/v1.14.6/changelog/21282.txt
new file mode 100644
index 0000000..03f22e4
--- /dev/null
+++ b/v1.14.6/changelog/21282.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/ldap: Normalize HTTP response codes when invalid credentials are provided
+```
diff --git a/v1.14.6/changelog/21297.txt b/v1.14.6/changelog/21297.txt
new file mode 100644
index 0000000..9f98fd3
--- /dev/null
+++ b/v1.14.6/changelog/21297.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Fix agent generate-config to accept -namespace, VAULT_NAMESPACE, and other client-modifying flags. 
+```
diff --git a/v1.14.6/changelog/21316.txt b/v1.14.6/changelog/21316.txt
new file mode 100644
index 0000000..5573c7e
--- /dev/null
+++ b/v1.14.6/changelog/21316.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Prevent deleted issuers from reappearing when migrating from a version 1 bundle to a version 2 bundle (versions including 1.13.0, 1.12.2, and 1.11.6); when managed keys were removed but referenced in the Vault 1.10 legacy CA bundle, this the error: `no managed key found with uuid`.
+```
diff --git a/v1.14.6/changelog/21342.txt b/v1.14.6/changelog/21342.txt
new file mode 100644
index 0000000..c1d8cd0
--- /dev/null
+++ b/v1.14.6/changelog/21342.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Don't exit just because we think there's a potential deadlock.
+```
diff --git a/v1.14.6/changelog/21357.txt b/v1.14.6/changelog/21357.txt
new file mode 100644
index 0000000..3b3bffd
--- /dev/null
+++ b/v1.14.6/changelog/21357.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fixed issue with some durations not being properly parsed to include days.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21449.txt b/v1.14.6/changelog/21449.txt
new file mode 100644
index 0000000..7711909
--- /dev/null
+++ b/v1.14.6/changelog/21449.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+openapi: Fix response schema for PKI Issue requests
+```
diff --git a/v1.14.6/changelog/21458.txt b/v1.14.6/changelog/21458.txt
new file mode 100644
index 0000000..352b8a0
--- /dev/null
+++ b/v1.14.6/changelog/21458.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+openapi: Fix schema definitions for PKI EAB APIs
+```
diff --git a/v1.14.6/changelog/21466.txt b/v1.14.6/changelog/21466.txt
new file mode 100644
index 0000000..94d0af9
--- /dev/null
+++ b/v1.14.6/changelog/21466.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+agent: Fix "generate-config" command documentation URL
+```
diff --git a/v1.14.6/changelog/21470.txt b/v1.14.6/changelog/21470.txt
new file mode 100644
index 0000000..9f047a9
--- /dev/null
+++ b/v1.14.6/changelog/21470.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+core: Fixed an instance where incorrect route entries would get tainted. We now pre-calculate namespace specific paths to avoid this.
+```
diff --git a/v1.14.6/changelog/21503.txt b/v1.14.6/changelog/21503.txt
new file mode 100644
index 0000000..a61b22b
--- /dev/null
+++ b/v1.14.6/changelog/21503.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Surface DOMException error when browser settings prevent localStorage.
+```
diff --git a/v1.14.6/changelog/21531.txt b/v1.14.6/changelog/21531.txt
new file mode 100644
index 0000000..dff421a
--- /dev/null
+++ b/v1.14.6/changelog/21531.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+ui: Fixes styling of private key input when configuring an SSH key
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21562.txt b/v1.14.6/changelog/21562.txt
new file mode 100644
index 0000000..c41d727
--- /dev/null
+++ b/v1.14.6/changelog/21562.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with certain navigational links incorrectly displaying in child namespaces
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21563.txt b/v1.14.6/changelog/21563.txt
new file mode 100644
index 0000000..7426ed2
--- /dev/null
+++ b/v1.14.6/changelog/21563.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+openapi: Better mount points for kv-v1 and kv-v2 in openapi.json
+```
diff --git a/v1.14.6/changelog/21582.txt b/v1.14.6/changelog/21582.txt
new file mode 100644
index 0000000..6a9d9a4
--- /dev/null
+++ b/v1.14.6/changelog/21582.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes login screen display issue with Safari browser
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21623.txt b/v1.14.6/changelog/21623.txt
new file mode 100644
index 0000000..7fc272d
--- /dev/null
+++ b/v1.14.6/changelog/21623.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+eventbus: updated go-eventlogger library to allow removal of nodes referenced by pipelines (used for subscriptions)
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21631.txt b/v1.14.6/changelog/21631.txt
new file mode 100644
index 0000000..ffdb4bb
--- /dev/null
+++ b/v1.14.6/changelog/21631.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/azure: Fix intermittent 401s by preventing performance secondary clusters from rotating root credentials. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21635.txt b/v1.14.6/changelog/21635.txt
new file mode 100644
index 0000000..6d19e8d
--- /dev/null
+++ b/v1.14.6/changelog/21635.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+ui: Adds missing values to details view after generating PKI certificate
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21642.txt b/v1.14.6/changelog/21642.txt
new file mode 100644
index 0000000..84af5b6
--- /dev/null
+++ b/v1.14.6/changelog/21642.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+serviceregistration: Fix bug where multiple nodes in a secondary cluster could be labelled active after updating the cluster's primary
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21681.txt b/v1.14.6/changelog/21681.txt
new file mode 100644
index 0000000..8d68442
--- /dev/null
+++ b/v1.14.6/changelog/21681.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+sys/metrics (enterprise): Adds a gauge metric that tracks whether enterprise builtin secret plugins are enabled.
+```
diff --git a/v1.14.6/changelog/21702.txt b/v1.14.6/changelog/21702.txt
new file mode 100644
index 0000000..5475a48
--- /dev/null
+++ b/v1.14.6/changelog/21702.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/pki: Add a parameter to allow ExtKeyUsage field usage from a role within ACME.
+```
diff --git a/v1.14.6/changelog/21739.txt b/v1.14.6/changelog/21739.txt
new file mode 100644
index 0000000..7b559d9
--- /dev/null
+++ b/v1.14.6/changelog/21739.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+ui: Fixed an issue where editing an SSH role would clear `default_critical_options` and `default_extension` if left unchanged. 
+```
diff --git a/v1.14.6/changelog/21767.txt b/v1.14.6/changelog/21767.txt
new file mode 100644
index 0000000..2092442
--- /dev/null
+++ b/v1.14.6/changelog/21767.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+ui: Fixed secrets, leases, and policies filter dropping focus after a single character
+```
diff --git a/v1.14.6/changelog/21800.txt b/v1.14.6/changelog/21800.txt
new file mode 100644
index 0000000..bfe8f67
--- /dev/null
+++ b/v1.14.6/changelog/21800.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+auth/azure: Fix intermittent 401s by preventing performance secondary clusters from rotating root credentials. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21870.txt b/v1.14.6/changelog/21870.txt
new file mode 100644
index 0000000..3cb9856
--- /dev/null
+++ b/v1.14.6/changelog/21870.txt
@@ -0,0 +1,6 @@
+```release-note:bug
+secrets/pki: Fix bug with ACME tidy, 'unable to determine acme base folder path'.
+```
+```release-note:bug
+secrets/pki: Fix preserving acme_account_safety_buffer on config/auto-tidy.
+```
diff --git a/v1.14.6/changelog/21925.txt b/v1.14.6/changelog/21925.txt
new file mode 100644
index 0000000..ca89ff7
--- /dev/null
+++ b/v1.14.6/changelog/21925.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+kmip (enterprise): Add namespace lock and unlock support
+```
diff --git a/v1.14.6/changelog/21926.txt b/v1.14.6/changelog/21926.txt
new file mode 100644
index 0000000..a602020
--- /dev/null
+++ b/v1.14.6/changelog/21926.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes problem displaying certificates issued with unsupported signature algorithms (i.e. ed25519)
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/21951.txt b/v1.14.6/changelog/21951.txt
new file mode 100644
index 0000000..d53c0f1
--- /dev/null
+++ b/v1.14.6/changelog/21951.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+awsutil: Update awsutil to v0.2.3 to fix a regression where Vault no longer
+respects `AWS_ROLE_ARN`, `AWS_WEB_IDENTITY_TOKEN_FILE`, and `AWS_ROLE_SESSION_NAME`.
+```
diff --git a/v1.14.6/changelog/22040.txt b/v1.14.6/changelog/22040.txt
new file mode 100644
index 0000000..e96a428
--- /dev/null
+++ b/v1.14.6/changelog/22040.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/raft: Cap the minimum dead_server_last_contact_threshold to 1m.
+```
diff --git a/v1.14.6/changelog/22137.txt b/v1.14.6/changelog/22137.txt
new file mode 100644
index 0000000..6f5a3be
--- /dev/null
+++ b/v1.14.6/changelog/22137.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core:  Remove "expiration manager is nil on tokenstore" error log for unauth requests on DR secondary as they do not have expiration manager. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22191.txt b/v1.14.6/changelog/22191.txt
new file mode 100644
index 0000000..9fa7c85
--- /dev/null
+++ b/v1.14.6/changelog/22191.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: adds allowed_user_ids field to create role form and user_ids to generate certificates form in pki
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22235.txt b/v1.14.6/changelog/22235.txt
new file mode 100644
index 0000000..3d62e70
--- /dev/null
+++ b/v1.14.6/changelog/22235.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Log rollback manager failures during unmount, remount to prevent replication failures on secondary clusters.
+```
diff --git a/v1.14.6/changelog/22249.txt b/v1.14.6/changelog/22249.txt
new file mode 100644
index 0000000..d470b97
--- /dev/null
+++ b/v1.14.6/changelog/22249.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+sdk/ldaputil: Properly escape user filters when using UPN domains
+sdk/ldaputil: use EscapeLDAPValue implementation from cap/ldap
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22253.txt b/v1.14.6/changelog/22253.txt
new file mode 100644
index 0000000..c3a9ab0
--- /dev/null
+++ b/v1.14.6/changelog/22253.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+secrets/database: Improves error logging for static role rotations by including the database and role names.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22264.txt b/v1.14.6/changelog/22264.txt
new file mode 100644
index 0000000..5ee5378
--- /dev/null
+++ b/v1.14.6/changelog/22264.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auto-auth/azure: Added Azure Workload Identity Federation support to auto-auth (for Vault Agent and Vault Proxy).
+```
diff --git a/v1.14.6/changelog/22277.txt b/v1.14.6/changelog/22277.txt
new file mode 100644
index 0000000..0d0dbf2
--- /dev/null
+++ b/v1.14.6/changelog/22277.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/azure: Update plugin to v0.16.0
+```
diff --git a/v1.14.6/changelog/22322.txt b/v1.14.6/changelog/22322.txt
new file mode 100644
index 0000000..8df620c
--- /dev/null
+++ b/v1.14.6/changelog/22322.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+agent: Environment variable VAULT_CACERT_BYTES now works for Vault Agent templates.
+```
+
diff --git a/v1.14.6/changelog/22330.txt b/v1.14.6/changelog/22330.txt
new file mode 100644
index 0000000..427fe39
--- /dev/null
+++ b/v1.14.6/changelog/22330.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/ldap: Fix bug causing schema and password_policy to be overwritten in config. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22355.txt b/v1.14.6/changelog/22355.txt
new file mode 100644
index 0000000..d748796
--- /dev/null
+++ b/v1.14.6/changelog/22355.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fix bug where background thread to update locked user entries runs on DR secondaries. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22362.txt b/v1.14.6/changelog/22362.txt
new file mode 100644
index 0000000..0de5440
--- /dev/null
+++ b/v1.14.6/changelog/22362.txt
@@ -0,0 +1,3 @@
+```release-note:bug 
+core: Fix readonly errors that could occur while loading mounts/auths during unseal
+```
diff --git a/v1.14.6/changelog/22363.txt b/v1.14.6/changelog/22363.txt
new file mode 100644
index 0000000..faa5a24
--- /dev/null
+++ b/v1.14.6/changelog/22363.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+license: Add autoloaded license path to the cache exempt list. This is to ensure the license changes on the active node is observed on the perfStandby node.
+```
diff --git a/v1.14.6/changelog/22374.txt b/v1.14.6/changelog/22374.txt
new file mode 100644
index 0000000..2f744c5
--- /dev/null
+++ b/v1.14.6/changelog/22374.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+expiration: Fix a deadlock that could occur when a revocation failure happens while restoring leases on startup.
+```
diff --git a/v1.14.6/changelog/22390.txt b/v1.14.6/changelog/22390.txt
new file mode 100644
index 0000000..449a8a2
--- /dev/null
+++ b/v1.14.6/changelog/22390.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes text readability issue in revoke token confirmation dialog
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22394.txt b/v1.14.6/changelog/22394.txt
new file mode 100644
index 0000000..4f5a2b9
--- /dev/null
+++ b/v1.14.6/changelog/22394.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes `max_versions` default for secret metadata unintentionally overriding kv engine defaults
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22396.txt b/v1.14.6/changelog/22396.txt
new file mode 100644
index 0000000..d05cbb7
--- /dev/null
+++ b/v1.14.6/changelog/22396.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: Fix link formatting in Vault lambda extension docs
+```
diff --git a/v1.14.6/changelog/22458.txt b/v1.14.6/changelog/22458.txt
new file mode 100644
index 0000000..6ce0929
--- /dev/null
+++ b/v1.14.6/changelog/22458.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes model defaults overwriting input value when user tries to clear form input
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22468.txt b/v1.14.6/changelog/22468.txt
new file mode 100644
index 0000000..538da14
--- /dev/null
+++ b/v1.14.6/changelog/22468.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/metrics: vault.raft_storage.bolt.write.time should be a counter not a summary
+```
diff --git a/v1.14.6/changelog/22471.txt b/v1.14.6/changelog/22471.txt
new file mode 100644
index 0000000..67b110c
--- /dev/null
+++ b/v1.14.6/changelog/22471.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: enables create and update KV secret workflow when control group present
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22502.txt b/v1.14.6/changelog/22502.txt
new file mode 100644
index 0000000..b9d21c2
--- /dev/null
+++ b/v1.14.6/changelog/22502.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: KV View Secret card will link to list view if input ends in "/"
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22516.txt b/v1.14.6/changelog/22516.txt
new file mode 100644
index 0000000..661b77d
--- /dev/null
+++ b/v1.14.6/changelog/22516.txt
@@ -0,0 +1,3 @@
+```release-note:change
+database/snowflake: Update plugin to v0.9.0
+```
diff --git a/v1.14.6/changelog/22523.txt b/v1.14.6/changelog/22523.txt
new file mode 100644
index 0000000..e53ab65
--- /dev/null
+++ b/v1.14.6/changelog/22523.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+api: Fix breakage with UNIX domain socket addresses introduced by newest Go versions as a security fix.
+```
diff --git a/v1.14.6/changelog/22541.txt b/v1.14.6/changelog/22541.txt
new file mode 100644
index 0000000..918af3e
--- /dev/null
+++ b/v1.14.6/changelog/22541.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix blank page or ghost secret when canceling KV secret create
+```
diff --git a/v1.14.6/changelog/22567.txt b/v1.14.6/changelog/22567.txt
new file mode 100644
index 0000000..d9e5570
--- /dev/null
+++ b/v1.14.6/changelog/22567.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Use a worker pool for the rollback manager. Add new metrics for the rollback manager to track the queued tasks. 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22583.txt b/v1.14.6/changelog/22583.txt
new file mode 100644
index 0000000..0bc29d6
--- /dev/null
+++ b/v1.14.6/changelog/22583.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/quotas: Reduce overhead for role calculation when using cloud auth methods.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22597.txt b/v1.14.6/changelog/22597.txt
new file mode 100644
index 0000000..0c37e56
--- /dev/null
+++ b/v1.14.6/changelog/22597.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/quotas: Only perform ResolveRoleOperation for role-based quotas and lease creation.
+```
diff --git a/v1.14.6/changelog/22651.txt b/v1.14.6/changelog/22651.txt
new file mode 100644
index 0000000..5ca2819
--- /dev/null
+++ b/v1.14.6/changelog/22651.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core/quotas: Add configuration to allow skipping of expensive role calculations
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/22659.txt b/v1.14.6/changelog/22659.txt
new file mode 100644
index 0000000..501fb4e
--- /dev/null
+++ b/v1.14.6/changelog/22659.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+auth/ldap: improved login speed by adding concurrency to LDAP token group searches
+```
diff --git a/v1.14.6/changelog/22753.txt b/v1.14.6/changelog/22753.txt
new file mode 100644
index 0000000..a297337
--- /dev/null
+++ b/v1.14.6/changelog/22753.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: fix panic when providing non-PEM formatted public key for import
+```
diff --git a/v1.14.6/changelog/22760.txt b/v1.14.6/changelog/22760.txt
new file mode 100644
index 0000000..cf3f7c5
--- /dev/null
+++ b/v1.14.6/changelog/22760.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/seal: add a workaround for potential connection [[hangs](https://github.com/Azure/azure-sdk-for-go/issues/21346)] in Azure autoseals.
+```
diff --git a/v1.14.6/changelog/22818.txt b/v1.14.6/changelog/22818.txt
new file mode 100644
index 0000000..1ef9b64
--- /dev/null
+++ b/v1.14.6/changelog/22818.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+cli: Fix the CLI failing to return wrapping information for KV PUT and PATCH operations when format is set to `table`.
+```
diff --git a/v1.14.6/changelog/22852.txt b/v1.14.6/changelog/22852.txt
new file mode 100644
index 0000000..3a667eb
--- /dev/null
+++ b/v1.14.6/changelog/22852.txt
@@ -0,0 +1,3 @@
+```release-note:security
+secrets/transit: fix a regression that was honoring nonces provided in non-convergent modes during encryption.
+```
diff --git a/v1.14.6/changelog/22855.txt b/v1.14.6/changelog/22855.txt
new file mode 100644
index 0000000..a911e21
--- /dev/null
+++ b/v1.14.6/changelog/22855.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: don't exclude features present on license
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23007.txt b/v1.14.6/changelog/23007.txt
new file mode 100644
index 0000000..02fee8c
--- /dev/null
+++ b/v1.14.6/changelog/23007.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Fix removal of issuers to clean up unreferenced CRLs.
+```
diff --git a/v1.14.6/changelog/23010.txt b/v1.14.6/changelog/23010.txt
new file mode 100644
index 0000000..f6a72ec
--- /dev/null
+++ b/v1.14.6/changelog/23010.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/consul: Fix revocations when Vault has an access token using specific namespace and admin partition policies
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23013.txt b/v1.14.6/changelog/23013.txt
new file mode 100644
index 0000000..78987e6
--- /dev/null
+++ b/v1.14.6/changelog/23013.txt
@@ -0,0 +1,7 @@
+```release-note:bug
+storage/consul: fix a bug where an active node in a specific sort of network
+partition could continue to write data to Consul after a new leader is elected
+potentially causing data loss or corruption for keys with many concurrent
+writers. For Enterprise clusters this could cause corruption of the merkle trees
+leading to failure to complete merkle sync without a full re-index.
+```
diff --git a/v1.14.6/changelog/23025.txt b/v1.14.6/changelog/23025.txt
new file mode 100644
index 0000000..5392c75
--- /dev/null
+++ b/v1.14.6/changelog/23025.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui (enterprise): Fix error message when generating SSH credential with control group
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23066.txt b/v1.14.6/changelog/23066.txt
new file mode 100644
index 0000000..f4636b9
--- /dev/null
+++ b/v1.14.6/changelog/23066.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix the issue where confirm delete dropdown is being cut off
+```
diff --git a/v1.14.6/changelog/23119.txt b/v1.14.6/changelog/23119.txt
new file mode 100644
index 0000000..fd5f694
--- /dev/null
+++ b/v1.14.6/changelog/23119.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Added allowed_domains_template field for CA type role in SSH engine
+```
diff --git a/v1.14.6/changelog/23123.txt b/v1.14.6/changelog/23123.txt
new file mode 100644
index 0000000..4bfc0c0
--- /dev/null
+++ b/v1.14.6/changelog/23123.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes filter and search bug in secrets engines 
+```
diff --git a/v1.14.6/changelog/23155.txt b/v1.14.6/changelog/23155.txt
new file mode 100644
index 0000000..0c6914a
--- /dev/null
+++ b/v1.14.6/changelog/23155.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Fixes list password policy to include those with names containing / characters.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23193.txt b/v1.14.6/changelog/23193.txt
new file mode 100644
index 0000000..b895907
--- /dev/null
+++ b/v1.14.6/changelog/23193.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Add pagination to PKI roles, keys, issuers, and certificates list pages
+```
diff --git a/v1.14.6/changelog/23225.txt b/v1.14.6/changelog/23225.txt
new file mode 100644
index 0000000..31d5b64
--- /dev/null
+++ b/v1.14.6/changelog/23225.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+docs: fix wrong api path for ldap secrets cli-commands
+```
diff --git a/v1.14.6/changelog/23232.txt b/v1.14.6/changelog/23232.txt
new file mode 100644
index 0000000..8084391
--- /dev/null
+++ b/v1.14.6/changelog/23232.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds tidy_revoked_certs to PKI tidy status page
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23240.txt b/v1.14.6/changelog/23240.txt
new file mode 100644
index 0000000..da202c7
--- /dev/null
+++ b/v1.14.6/changelog/23240.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+mongo-db: allow non-admin database for root credential rotation
+```
diff --git a/v1.14.6/changelog/23260.txt b/v1.14.6/changelog/23260.txt
new file mode 100644
index 0000000..52de9b8
--- /dev/null
+++ b/v1.14.6/changelog/23260.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds warning before downloading KV v2 secret values 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23278.txt b/v1.14.6/changelog/23278.txt
new file mode 100644
index 0000000..cd02679
--- /dev/null
+++ b/v1.14.6/changelog/23278.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/pki: Stop processing in-flight ACME verifications when an active node steps down
+```
diff --git a/v1.14.6/changelog/23282.txt b/v1.14.6/changelog/23282.txt
new file mode 100644
index 0000000..1026ccf
--- /dev/null
+++ b/v1.14.6/changelog/23282.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+expiration: Prevent large lease loads from delaying state changes, e.g. becoming active or standby.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23287.txt b/v1.14.6/changelog/23287.txt
new file mode 100644
index 0000000..6d3229f
--- /dev/null
+++ b/v1.14.6/changelog/23287.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+website/docs: fix inaccuracies with unauthenticated_in_flight_requests_access parameter
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23331.txt b/v1.14.6/changelog/23331.txt
new file mode 100644
index 0000000..aef48cd
--- /dev/null
+++ b/v1.14.6/changelog/23331.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix the copy token button in the sidebar navigation window when in a collapsed state.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23457.txt b/v1.14.6/changelog/23457.txt
new file mode 100644
index 0000000..adec8ca
--- /dev/null
+++ b/v1.14.6/changelog/23457.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+cli/snapshot: Add CLI tool to inspect Vault snapshots
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23470.txt b/v1.14.6/changelog/23470.txt
new file mode 100644
index 0000000..744fa76
--- /dev/null
+++ b/v1.14.6/changelog/23470.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fix AWS secret engine to allow empty policy_document field.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23500.txt b/v1.14.6/changelog/23500.txt
new file mode 100644
index 0000000..52f95c9
--- /dev/null
+++ b/v1.14.6/changelog/23500.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+events: Ignore sending context to give more time for events to send
+```
diff --git a/v1.14.6/changelog/23516.txt b/v1.14.6/changelog/23516.txt
new file mode 100644
index 0000000..f87ab20
--- /dev/null
+++ b/v1.14.6/changelog/23516.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Fixes issue with sidebar navigation links disappearing when navigating to policies when a user is not authorized
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23549.txt b/v1.14.6/changelog/23549.txt
new file mode 100644
index 0000000..078cc23
--- /dev/null
+++ b/v1.14.6/changelog/23549.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+api/plugins: add `tls-server-name` arg for plugin registration
+```
diff --git a/v1.14.6/changelog/23636.txt b/v1.14.6/changelog/23636.txt
new file mode 100644
index 0000000..2625560
--- /dev/null
+++ b/v1.14.6/changelog/23636.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+command/server: Fix bug with sigusr2 where pprof files were not closed correctly
+```
diff --git a/v1.14.6/changelog/23695.txt b/v1.14.6/changelog/23695.txt
new file mode 100644
index 0000000..1046706
--- /dev/null
+++ b/v1.14.6/changelog/23695.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: Decode the connection url for display on the connection details page
+```
diff --git a/v1.14.6/changelog/23723.txt b/v1.14.6/changelog/23723.txt
new file mode 100644
index 0000000..25828f9
--- /dev/null
+++ b/v1.14.6/changelog/23723.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secrets/transit: Do not allow auto rotation on managed_key key types
+```
diff --git a/v1.14.6/changelog/23747.txt b/v1.14.6/changelog/23747.txt
new file mode 100644
index 0000000..bf611ed
--- /dev/null
+++ b/v1.14.6/changelog/23747.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Adds toggle to KV secrets engine value download modal to optionally stringify value in downloaded file
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23781.txt b/v1.14.6/changelog/23781.txt
new file mode 100644
index 0000000..32d3b51
--- /dev/null
+++ b/v1.14.6/changelog/23781.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/activity: Fixes segments fragment loss due to exceeding entry record size limit 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23786.txt b/v1.14.6/changelog/23786.txt
new file mode 100644
index 0000000..b6e7314
--- /dev/null
+++ b/v1.14.6/changelog/23786.txt
@@ -0,0 +1,3 @@
+```release-note:change
+auth/approle: Normalized error response messages when invalid credentials are provided
+```
diff --git a/v1.14.6/changelog/23802.txt b/v1.14.6/changelog/23802.txt
new file mode 100644
index 0000000..49caebc
--- /dev/null
+++ b/v1.14.6/changelog/23802.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core/mounts: Fix reading an "auth" mount using "sys/internal/ui/mounts/" when filter paths are enforced returns 500 error code from the secondary
+```
diff --git a/v1.14.6/changelog/23849.txt b/v1.14.6/changelog/23849.txt
new file mode 100644
index 0000000..e5d89a3
--- /dev/null
+++ b/v1.14.6/changelog/23849.txt
@@ -0,0 +1,3 @@
+```release-note:change
+secrets/mongodbatlas: Update plugin to v0.10.2
+```
diff --git a/v1.14.6/changelog/23861.txt b/v1.14.6/changelog/23861.txt
new file mode 100644
index 0000000..8c4ac70
--- /dev/null
+++ b/v1.14.6/changelog/23861.txt
@@ -0,0 +1,4 @@
+```release-note:bug
+api/seal-status: Fix deadlock on calls to sys/seal-status with a namespace configured
+on the request.
+```
diff --git a/v1.14.6/changelog/23872.txt b/v1.14.6/changelog/23872.txt
new file mode 100644
index 0000000..b486fd2
--- /dev/null
+++ b/v1.14.6/changelog/23872.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+storage/etcd: etcd should only return keys when calling List()
+```
diff --git a/v1.14.6/changelog/23874.txt b/v1.14.6/changelog/23874.txt
new file mode 100644
index 0000000..34ac61d
--- /dev/null
+++ b/v1.14.6/changelog/23874.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: fix policies with wildcards not matching list operations due to the policy path not having a trailing slash 
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23894.txt b/v1.14.6/changelog/23894.txt
new file mode 100644
index 0000000..a94e142
--- /dev/null
+++ b/v1.14.6/changelog/23894.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core: Skip unnecessary deriving of policies during Login MFA Check.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/23902.txt b/v1.14.6/changelog/23902.txt
new file mode 100644
index 0000000..cbfec65
--- /dev/null
+++ b/v1.14.6/changelog/23902.txt
@@ -0,0 +1,5 @@
+```release-note:bug
+core: fix bug where deadlock detection was always on for expiration and quotas. 
+These can now be configured individually with `detect_deadlocks`.
+```
+
diff --git a/v1.14.6/changelog/24027.txt b/v1.14.6/changelog/24027.txt
new file mode 100644
index 0000000..d276928
--- /dev/null
+++ b/v1.14.6/changelog/24027.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+expiration: Fix fatal error "concurrent map iteration and map write" when collecting metrics from leases.
+```
diff --git a/v1.14.6/changelog/7277.txt b/v1.14.6/changelog/7277.txt
new file mode 100644
index 0000000..4a19cf9
--- /dev/null
+++ b/v1.14.6/changelog/7277.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+auth/token: Add `allowed_policies_glob` and `disallowed_policies_glob` fields to token roles to allow glob matching of policies
+```
diff --git a/v1.14.6/changelog/9081.txt b/v1.14.6/changelog/9081.txt
new file mode 100644
index 0000000..03045e4
--- /dev/null
+++ b/v1.14.6/changelog/9081.txt
@@ -0,0 +1,4 @@
+
+```release-note:improvement
+website/docs: changed to echo for all string examples instead of (<<<) here-string.
+```
diff --git a/v1.14.6/changelog/9109.txt b/v1.14.6/changelog/9109.txt
new file mode 100644
index 0000000..c85db60
--- /dev/null
+++ b/v1.14.6/changelog/9109.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core: Add support for go-sockaddr templated addresses in config.
+```
diff --git a/v1.14.6/changelog/9802.txt b/v1.14.6/changelog/9802.txt
new file mode 100644
index 0000000..f5102a0
--- /dev/null
+++ b/v1.14.6/changelog/9802.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+agent: Send notifications to systemd on start and stop.
+```
diff --git a/v1.14.6/changelog/9972.txt b/v1.14.6/changelog/9972.txt
new file mode 100644
index 0000000..c091b47
--- /dev/null
+++ b/v1.14.6/changelog/9972.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: Upgrade Ember-cli from 3.8 to 3.22.
+```
diff --git a/v1.14.6/changelog/README.md b/v1.14.6/changelog/README.md
new file mode 100644
index 0000000..cbf841f
--- /dev/null
+++ b/v1.14.6/changelog/README.md
@@ -0,0 +1,56 @@
+# changelog
+
+This folder holds changelog updates from commit 3bc7d15 onwards.
+
+Release notes are text files with three lines:
+
+ 1. An opening code block with the `release-note:<MODE>` type annotation.
+
+    For example:
+
+        ```release-note:bug
+
+    Valid modes are:
+
+     - `bug` - Any sort of non-security defect fix. 
+     - `change` - A change in the product that may require action or
+       review by the operator. Examples would be any kind of API change
+       (as opposed to backwards compatible addition), a notable behavior
+       change, or anything that might require attention before updating. Go
+       version changes are also listed here since they can potentially have
+       large, sometimes unknown impacts. (Go updates are a special case, and
+       dep updates in general aren't a `change`). Discussion of any potential
+       `change` items in the pull request to see what other communication
+       might be warranted.
+     - `deprecation` - Announcement of a planned future removal of a
+       feature. Only use this if a deprecation notice also exists [in the
+       docs](https://www.vaultproject.io/docs/deprecation).
+     - `feature` - Large topical additions for a major release. These are
+       rarely in minor releases. Formatting for `feature` entries differs
+       from normal changelog formatting - see the [new features
+       instructions](#new-and-major-features).
+     - `improvement` - Most updates to the product that aren’t `bug`s, but
+       aren't big enough to be a `feature`, will be an `improvement`.
+
+ 2. A component (for example, `secret/pki` or `sdk/framework` or), a colon and a space, and then a one-line description of the change.
+
+ 3. An ending code block.
+
+This should be in a file named after the pull request number (e.g., `12345.txt`).
+
+There are many examples in this folder; check one out if you're stuck!
+
+See [hashicorp/go-changelog](https://github.com/hashicorp/go-changelog) for full documentation on the supported entries.
+
+## New and Major Features
+
+For features we are introducing in a new major release, we prefer a single
+changelog entry representing that feature. This way, it is clear to readers
+what feature is being introduced. You do not need to reference a specific PR,
+and the formatting is slightly different - your changelog file should look
+like:
+
+    changelog/<pr num OR feature name>.txt:
+    ```release-note:feature
+    **Feature Name**: Description of feature - for example "Custom password policies are now supported for all database engines."
+    ```
diff --git a/v1.14.6/changelog/_ 1686.txt b/v1.14.6/changelog/_ 1686.txt
new file mode 100644
index 0000000..a4faefa
--- /dev/null
+++ b/v1.14.6/changelog/_ 1686.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+kmip (enterprise): Use entropy augmentation to generate kmip certificates
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/_10959.txt b/v1.14.6/changelog/_10959.txt
new file mode 100644
index 0000000..1f9740a
--- /dev/null
+++ b/v1.14.6/changelog/_10959.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+secret/pki: use case insensitive domain name comparison as per RFC1035 section 2.3.3
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/_1622.txt b/v1.14.6/changelog/_1622.txt
new file mode 100644
index 0000000..728f4e0
--- /dev/null
+++ b/v1.14.6/changelog/_1622.txt
@@ -0,0 +1,12 @@
+```release-note:bug
+transform (enterprise): Fix bug tokenization handling metadata on exportable stores
+```
+```release-note:bug
+transform (enterprise): Fix transform configuration not handling `stores` parameter on the legacy path
+```
+```release-note:bug
+transform (enterprise): Make expiration timestamps human readable
+```
+```release-note:bug
+transform (enterprise): Return false for invalid tokens on the validate endpoint rather than returning an HTTP error
+```
diff --git a/v1.14.6/changelog/_1633.txt b/v1.14.6/changelog/_1633.txt
new file mode 100644
index 0000000..591f623
--- /dev/null
+++ b/v1.14.6/changelog/_1633.txt
@@ -0,0 +1,3 @@
+```release-note: bug
+core (enterprise): Vault EGP policies attached to path * were not correctly scoped to the namespace.
+```
diff --git a/v1.14.6/changelog/_1637.txt b/v1.14.6/changelog/_1637.txt
new file mode 100644
index 0000000..cfc6cb5
--- /dev/null
+++ b/v1.14.6/changelog/_1637.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+transform (enterprise): Fix bug where tokenization store changes are persisted but don't take effect
+```
diff --git a/v1.14.6/changelog/_1642.txt b/v1.14.6/changelog/_1642.txt
new file mode 100644
index 0000000..95558dc
--- /dev/null
+++ b/v1.14.6/changelog/_1642.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+core (enterprise): Update Trial Enterprise license from 30 minutes to 6 hours
+```
diff --git a/v1.14.6/changelog/_1656.txt b/v1.14.6/changelog/_1656.txt
new file mode 100644
index 0000000..6bce70b
--- /dev/null
+++ b/v1.14.6/changelog/_1656.txt
@@ -0,0 +1,5 @@
+```release-note:bug
+storage/raft (enterprise): The parameter aws_s3_server_kms_key was misnamed and
+didn't work.  Renamed to aws_s3_kms_key, and make it work so that when provided
+the given key will be used to encrypt the snapshot using AWS KMS.
+```
diff --git a/v1.14.6/changelog/_1659.txt b/v1.14.6/changelog/_1659.txt
new file mode 100644
index 0000000..efd4f00
--- /dev/null
+++ b/v1.14.6/changelog/_1659.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+storage/raft (enterprise): Reading a non-existent auto snapshot config now returns 404.
+```
diff --git a/v1.14.6/changelog/_1663.txt b/v1.14.6/changelog/_1663.txt
new file mode 100644
index 0000000..e9dee0d
--- /dev/null
+++ b/v1.14.6/changelog/_1663.txt
@@ -0,0 +1,4 @@
+```release-note: bug
+storage/raft (enterprise): Automated snapshots with Azure required specifying
+`azure_blob_environment`, which should have had as a default `AZUREPUBLICCLOUD`.
+```
diff --git a/v1.14.6/changelog/_1680.txt b/v1.14.6/changelog/_1680.txt
new file mode 100644
index 0000000..8f2681a
--- /dev/null
+++ b/v1.14.6/changelog/_1680.txt
@@ -0,0 +1,5 @@
+```release-note: improvement
+storage/raft (enterprise): Listing of peers is now allowed on DR secondary
+cluster nodes, as an update operation that takes in DR operation token for
+authenticating the request.
+```
diff --git a/v1.14.6/changelog/_1691.txt b/v1.14.6/changelog/_1691.txt
new file mode 100644
index 0000000..b721b8b
--- /dev/null
+++ b/v1.14.6/changelog/_1691.txt
@@ -0,0 +1,5 @@
+```release-note: improvement
+replication (enterprise): The log shipper is now memory
+as well as length bound, and length and size can be
+separately configured.
+```
diff --git a/v1.14.6/changelog/_1705.txt b/v1.14.6/changelog/_1705.txt
new file mode 100644
index 0000000..1a72a1e
--- /dev/null
+++ b/v1.14.6/changelog/_1705.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+replication (enterprise): Fix bug with not starting merkle sync while requests are in progress
+```
diff --git a/v1.14.6/changelog/_1712.txt b/v1.14.6/changelog/_1712.txt
new file mode 100644
index 0000000..d355ed7
--- /dev/null
+++ b/v1.14.6/changelog/_1712.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+quotas/lease-count (enterprise) : Fix quotas enforcing old lease count quota paths
+```
diff --git a/v1.14.6/changelog/_1739.txt b/v1.14.6/changelog/_1739.txt
new file mode 100644
index 0000000..0046676
--- /dev/null
+++ b/v1.14.6/changelog/_1739.txt
@@ -0,0 +1,6 @@
+```release-note:feature
+secrets/keymgmt (enterprise): Adds general availability for distributing and managing keys in Azure Key Vault.
+```
+```release-note:feature
+secrets/keymgmt (enterprise): Adds beta support for distributing and managing keys in AWS KMS.
+```
diff --git a/v1.14.6/changelog/_1757.txt b/v1.14.6/changelog/_1757.txt
new file mode 100644
index 0000000..0362a1d
--- /dev/null
+++ b/v1.14.6/changelog/_1757.txt
@@ -0,0 +1,4 @@
+```release-note: bug
+transform (enterprise): Fix an issue with malformed transform configuration
+storage when upgrading from 1.5 to 1.6.  See Upgrade Notes for 1.6.x.
+```
diff --git a/v1.14.6/changelog/_1792.txt b/v1.14.6/changelog/_1792.txt
new file mode 100644
index 0000000..a1f7bc9
--- /dev/null
+++ b/v1.14.6/changelog/_1792.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Fix orphan return value from auth methods executed on performance standby nodes.
+```
diff --git a/v1.14.6/changelog/_1819.txt b/v1.14.6/changelog/_1819.txt
new file mode 100644
index 0000000..9e6cb90
--- /dev/null
+++ b/v1.14.6/changelog/_1819.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+core: Add controlled capabilities to control group policy stanza
+```
diff --git a/v1.14.6/changelog/_2021Jan20.txt b/v1.14.6/changelog/_2021Jan20.txt
new file mode 100644
index 0000000..1ffaa8d
--- /dev/null
+++ b/v1.14.6/changelog/_2021Jan20.txt
@@ -0,0 +1,12 @@
+```release-note:security
+Mount Path Disclosure: Vault previously returned different HTTP status codes for
+existent and non-existent mount paths. This behavior would allow unauthenticated
+brute force attacks to reveal which paths had valid mounts. This issue affects
+Vault and Vault Enterprise and is fixed in 1.6.2 (CVE-2020-25594).
+```
+```release-note:security
+IP Address Disclosure: We fixed a vulnerability where, under some error
+conditions, Vault would return an error message disclosing internal IP
+addresses. This vulnerability affects Vault and Vault Enterprise and is fixed in
+1.6.2 (CVE-2021-3024).
+```
diff --git a/v1.14.6/changelog/_2021Jan26.txt b/v1.14.6/changelog/_2021Jan26.txt
new file mode 100644
index 0000000..96506e9
--- /dev/null
+++ b/v1.14.6/changelog/_2021Jan26.txt
@@ -0,0 +1,8 @@
+```release-note:security
+Limited Unauthenticated Remove Peer: As of Vault 1.6, the remove-peer command
+on DR secondaries did not require authentication. This issue impacts the
+stability of HA architecture, as a bad actor could remove all standby
+nodes from a DR
+secondary. This issue affects Vault Enterprise 1.6.0 and 1.6.1, and is fixed in
+1.6.2 (CVE-2021-3282).
+```
diff --git a/v1.14.6/changelog/_2071.txt b/v1.14.6/changelog/_2071.txt
new file mode 100644
index 0000000..7168d22
--- /dev/null
+++ b/v1.14.6/changelog/_2071.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+core (enterprise): Disallow autogenerated licenses to be used in diagnose even when config is specified
+```
diff --git a/v1.14.6/changelog/_22733.txt b/v1.14.6/changelog/_22733.txt
new file mode 100644
index 0000000..039e423
--- /dev/null
+++ b/v1.14.6/changelog/_22733.txt
@@ -0,0 +1,3 @@
+```release-note:bug
+ui: fixes long namespace names overflow in the sidebar
+```
diff --git a/v1.14.6/changelog/_go-ver-1120.txt b/v1.14.6/changelog/_go-ver-1120.txt
new file mode 100644
index 0000000..bbb2cf7
--- /dev/null
+++ b/v1.14.6/changelog/_go-ver-1120.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.19.2.
+```
diff --git a/v1.14.6/changelog/_go-ver-1130.txt b/v1.14.6/changelog/_go-ver-1130.txt
new file mode 100644
index 0000000..c63e249
--- /dev/null
+++ b/v1.14.6/changelog/_go-ver-1130.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.20.
+```
diff --git a/v1.14.6/changelog/_go-ver-1140.txt b/v1.14.6/changelog/_go-ver-1140.txt
new file mode 100644
index 0000000..052a277
--- /dev/null
+++ b/v1.14.6/changelog/_go-ver-1140.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.20.5.
+```
diff --git a/v1.14.6/changelog/_go-ver-1142.txt b/v1.14.6/changelog/_go-ver-1142.txt
new file mode 100644
index 0000000..8e2216b
--- /dev/null
+++ b/v1.14.6/changelog/_go-ver-1142.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.20.7.
+```
diff --git a/v1.14.6/changelog/_go-ver-1143.txt b/v1.14.6/changelog/_go-ver-1143.txt
new file mode 100644
index 0000000..3d84c23
--- /dev/null
+++ b/v1.14.6/changelog/_go-ver-1143.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.20.8.
+```
diff --git a/v1.14.6/changelog/_go-ver-1144.txt b/v1.14.6/changelog/_go-ver-1144.txt
new file mode 100644
index 0000000..cafce67
--- /dev/null
+++ b/v1.14.6/changelog/_go-ver-1144.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.20.10.
+```
diff --git a/v1.14.6/changelog/changelog.tmpl b/v1.14.6/changelog/changelog.tmpl
new file mode 100644
index 0000000..648160c
--- /dev/null
+++ b/v1.14.6/changelog/changelog.tmpl
@@ -0,0 +1,56 @@
+{{- if index .NotesByType "breaking-change" -}}
+BREAKING CHANGES:
+
+{{range index .NotesByType "breaking-change" -}}
+* {{ template "note" .}}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.security }}
+SECURITY:
+
+{{range .NotesByType.security -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.change }}
+CHANGES:
+
+{{range .NotesByType.change -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.feature }}
+FEATURES:
+
+{{range .NotesByType.feature -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.improvement }}
+IMPROVEMENTS:
+
+{{range .NotesByType.improvement -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.deprecation }}
+DEPRECATIONS:
+
+{{range .NotesByType.deprecation -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
+{{- if .NotesByType.bug }}
+BUG FIXES:
+
+{{range .NotesByType.bug -}}
+* {{ template "note" . }}
+{{ end -}}
+{{- end -}}
+
diff --git a/v1.14.6/changelog/client-counts-1.11.txt b/v1.14.6/changelog/client-counts-1.11.txt
new file mode 100644
index 0000000..2de278e
--- /dev/null
+++ b/v1.14.6/changelog/client-counts-1.11.txt
@@ -0,0 +1,2 @@
+```release-note:feature
+**UI Client Count Improvements**: Show monthly client count changes for the billing period, including new clients within a single, historical month
diff --git a/v1.14.6/changelog/client-counts.txt b/v1.14.6/changelog/client-counts.txt
new file mode 100644
index 0000000..271414e
--- /dev/null
+++ b/v1.14.6/changelog/client-counts.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**UI Client Count Improvements**: Restructures client count dashboard, making use of billing start date to improve accuracy. Adds mount-level distribution and filtering.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/diagnose.txt b/v1.14.6/changelog/diagnose.txt
new file mode 100644
index 0000000..335a70c
--- /dev/null
+++ b/v1.14.6/changelog/diagnose.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+operator diagnose: a new vault operator command to detect common issues with vault server setups.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/go-ver-1110.txt b/v1.14.6/changelog/go-ver-1110.txt
new file mode 100644
index 0000000..7f43e9f
--- /dev/null
+++ b/v1.14.6/changelog/go-ver-1110.txt
@@ -0,0 +1,3 @@
+```release-note:change
+core: Bump Go version to 1.17.9.
+```
diff --git a/v1.14.6/changelog/mount-migration.txt b/v1.14.6/changelog/mount-migration.txt
new file mode 100644
index 0000000..1e0eec3
--- /dev/null
+++ b/v1.14.6/changelog/mount-migration.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Mount Migration**: Vault supports moving secrets and auth mounts both within and across namespaces.
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/note.tmpl b/v1.14.6/changelog/note.tmpl
new file mode 100644
index 0000000..022546f
--- /dev/null
+++ b/v1.14.6/changelog/note.tmpl
@@ -0,0 +1,3 @@
+{{- define "note" -}}
+{{.Body}}{{if not (stringHasPrefix .Issue "_")}} [[GH-{{- .Issue -}}](https://github.com/hashicorp/vault/pull/{{- .Issue -}})]{{end}}
+{{- end -}}
diff --git a/v1.14.6/changelog/pki-ui-improvements.txt b/v1.14.6/changelog/pki-ui-improvements.txt
new file mode 100644
index 0000000..d824033
--- /dev/null
+++ b/v1.14.6/changelog/pki-ui-improvements.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**NEW PKI Workflow in UI**: Completes generally available rollout of new PKI UI that provides smoother mount configuration and a more guided user experience
+```
\ No newline at end of file
diff --git a/v1.14.6/changelog/plugin-versioning.txt b/v1.14.6/changelog/plugin-versioning.txt
new file mode 100644
index 0000000..cfd77a4
--- /dev/null
+++ b/v1.14.6/changelog/plugin-versioning.txt
@@ -0,0 +1,3 @@
+```release-note:feature
+**Plugin Versioning**: Vault supports registering, managing, and running plugins with semantic versions specified.
+```
\ No newline at end of file