Find the latest versions and releases on Keeper Secrets Manager packages here:

https://github.com/Keeper-Security/Secrets-Manager

KSM Azure Pipeline 1.1.0

• KSM-564: Upgrade to add Node20

KSM Java SDK v17.0.0

• KSM-580: Add PAM-related fields support

• KSM-582: Fix NPE in FileRef casting during file upload

KSM JavaScript SDK v17.0.0

• KSM-574 - Replace Node.js Buffer with Browser-Compatible Alternative

KSM Java SDK v16.6.6

• KSM-560 - Improved error handling when parsing JSON

KSM Python SDK v16.6.6

• KSM-552: Don't generate UIDs starting with "-"

• KSM-554: Add new PAM field types (through Helper 1.0.5)

KSM .NET SDK v16.6.7

• KSM-550: Don't generate UIDs starting with "-"

• KSM-557: Add new PAM field types

KSM Java SDK v16.6.5

• KSM-548: Don't generate UIDs starting with "-"

• KSM-553: Added new field types and updated PAM field types

• Upgraded package dependencies to latest versions and switched to gradle-8.10.1

KSM JavaScript SDK v16.6.3

• KSM-489: Add transaction support for updateSecret

• KSM-521: Dependencies upgrade

• KSM-549: Don't generate UIDs starting with "-"

• KSM-556: Add new PAM field types

KSM GO SDK v16.6.4

• KSM-551: Don't generate UIDs starting with "-"

• KSM-555: Added new field types and updated PAM field types

ServiceNow Plugin

• Added support for WashingtonDC & Xanadu Service Now Releases

• switched to gradle-8.10

Azure Pipeline Extension v1.0.8

• KSM-544: Added search by title

• Update package dependencies

HashiCorp Vault Integration v1.0.4

• Dependency Upgrade to address CVE-2024-41110

KSM HashiCorp Vault Plugin 1.0.3

• KSM-503: Added record delete operation

• KSM-504: Added ExistenceCheck with Validator

• KSM-505: Added UID as path parameter

KSM PowerShell 16.6.6

• Bumping KSM .NET SDK version to 16.6.6

KSM .NET SDK 16.6.6

• KSM-360: GHA to build and release strong named assemblies

• KSM-490: Switch some internal classes to public - for use in plugins

• KSM-515: Update to Bouncy Castle 2.4.0

• KSM-536: Update to System.Text.Json 8.0.4

• KSM-517: Add support for netstandard2.0 target

• KSM-542: Fix PowerShell module to allow dot in title

KSM Python SDK 16.6.5

• KSM-529: Handle broken encryption in records and files

KSM CLI 1.1.5

• Bumping KSM SDK to 16.6.5

KSM CLI v1.1.4

KSM-507: Added ksm secret delete command

KSM-508: Added search by title to ksm secret list command

KSM-509: Added Keeper Secrets Manager CLI folder management commands

• ksm folder list

• ksm folder create

• ksm folder delete

• ksm folder update

Full documentation is posted here.

Delete Records through KSM CLI

• ksm secret delete

Full documentation is posted here.

Search by Title

• ksm secret list

Example:

$ ksm secret list --recursive --folder=KOx3pRkAnODGVWyDuK7ttw -t Stripe

 UID                     Record Type          Title         
 ----------------------- -------------------- --------------
 SNzjw8tM1HsXEzXERCJrNQ  login                Stripe API Key

Full documentation is posted here.

KSM Java SDK v16.6.4

• KSM-501 - Switched to non-strict JSON parser

• KSM-506 - Adding support for Privacy screen in the passkey field type

• Upgraded some dependencies to latest versions and gradle to gradle-8.6

KSM Python SDK v16.6.4

• KSM-488 - Remove unused package dependencies

KSM CLI v1.1.3

• KSM-496: Added upload file option

• KSM-495: Added query option to ksm secret list command

• KSM-494: Added folder support to ksm secret list command

• KSM-493: Added CLI options to update title and notes

• KSM-492: Added clone option

• KSM-485: Added sub-folder support to ksm secret add command

KSM Ansible Plugin v1.2.2

• Now supports retrieving multiple fields from KSM in a single ansible step. See the docs for more information.

KSM JavaScript SDK v16.6.2

• Enhanced system stability and performance through an upgrade of dependencies.

KSM Python SDK v16.6.3

• Eliminated reliance on distutils in response to its removal in Python 3.12, ensuring compatibility with newer Python versions.

KSM Java SDK v16.6.3

• Resolved an issue with the security provider's inability to support AES/CBC/PKCS7Padding encryption.

• Modified the Notation function's accessibility from private to public, enhancing its usability across various modules.

KSM .NET SDK v16.6.5

• Addressed and corrected issues related to public key parsing, enhancing encryption reliability.

• Updated to the latest version of Bouncy Castle, ensuring improved security and functionality.

KSM Release Notes for the year 2023.

KSM Ansible Plugin v1.2.1

Note: This also includes Ansible Galaxy

• Added action keeper_remove to remove secrets from the Keeper Vault

• Updated pinned KSM SDK version to 16.6.2

KSM CLI v1.1.1

• Added switch --profile-name to command ksm profile import

KSM Python SDK v16.6.2

• Fixed null fields parsing

• Removed core's dependency on helper

KSM .NET SDK

v16.6.3

• Fixed JSON serializer where characters are replaced with accents

v16.6.4

• Fixed Device Access ExpiresOn conversion from UnixTimeMilliseconds.

KSM GoLang SDK v16.6.2

• Fixed Device Access ExpiresOn conversion from UnixTimeMilliseconds.

KSM PowerShell Module v16.6.5

• Updated KSM .NET SDK Dependency to 16.6.4

KSM .NET SDK v16.6.2

• Added support for .NET 4.7

KSM JavaScript SDK

v16.6.1

• Added support for Folders

• Improved Passkey field type support

• Dependencies upgrade

KSM Java SDK

v16.6.2

• fixed issues when using Java default crypto provider.

• Upgraded kotlin-stdlib-jdk8 dependency scope to api

v16.6.1

• Improved folder support and unit tests

v16.6.0

• Added support for Folders

KSM Python SDK

v16.6.1

• Improved folder support

v16.6.0

• Added support for Folders

• Improved Passkey field type support

KSM .NET SDK

v16.6.1

• Improved folder support

v16.6.0

• Added support for Folders

• Improved Passkey field type support

• Added support for record Transactions

• Upgraded .NET version to net48, netstandard2.1 to make sure we are supporting TLS13

KSM GoLang SDK

v16.6.1

• Added `folderUid` and `innerFolderUid` to Record

• Fixed `subFolderUid` crash on empty string value, related to KA-5587

v16.6.0

• Added support for Folders

• Improved Passkey field type support

KSM PowerShell Module

v16.6.1

• Updates KSM .NET SDK Dependency

v16.6.0

• Updated KSM .NET SDK to use latest version 16.6.0

Ansible Plugin

v1.2.0

• Added action keeper_cache_records to cache Keeper Vault records to reduce API calls.

• Added ability to get records by title for some actions.

• Added array_index and value_key to access individual values in complex values. Alternative to notation.

KSM Java SDK v16.5.4

• Improved Passkey field type support

• Improved Logging

KSM Github Action v1.0.8

• Maintenance releases to bump dependency versions and to clear dependabot warnings

KSM GoLang SDK v16.5.2

• KSM-409 New field type: Passkey

• KSM-404 New filed type: script and modification to some record types

• KSM-384 Support for record Transactions

KSM .NET SDK v16.5.1 along with the PowerShell Module 16.5.1

• KSM-408 New field type: Passkey

• KSM-403 New filed type: script and modification to record types

• KSM-378 Added support for PAM record types

KSM JavaScript SDK v16.5.2

• KSM-407 - New field type: Passkey

• KSM-402 - New filed type: script and modification to record types

• KSM-377 - Added support for PAM record types

KSM Java SDK v16.5.3

• KSM-401 - Added new script field type and oneTimeCode to PAM record types

• KSM-406 - New field type: Passkey

• KSM-382 - Support for record Transactions

KSM Python SDK v16.5.4

• KSM-405 - Added new script field type and oneTimeCode to PAM record types

• KSM-410 - New field type: Passkey

• KSM-394 - Ability to load configuration from AWS Secrets Manager using AWS AIM role in EC2 instance or AWS IAM user

• KSM-416 - Fix OS detection bug

• KSM-400 - Unpinned few dependencies

KSM CLI 1.0.17

• KSM-392 - Ability to update fields where the label is a blank string ("")

• Pinned KSM SDK Core version to 16.5.1

KSM Python SDK v16.5.3

• KSM-393 - Fix file permissions on localized Windows OS

KSM CLI v1.0.16

• KSM-362 - Synchronize secrets to GCP

• Dropped support for Python 3.6 (EOL 2021-12-23)

KSM Python SDK v16.5.2

• KSM-375 - Make HTTPError to be more informative

• KSM-376 - Support for PAM record types

• KSM-381 - Transactions

• Fixed Issue 441 - Bug caused by space in Windows username

KSM Java SDK v16.5.2

• KSM-386 - removed deprecation notice.

KSM Python SDK v16.5.0

• KSM-313 - Improved Keeper Notations. New parser, new escape characters, Notation URI, search records by title and other meta data values in the record

• KSM-319 - KEY_CLIENT_KEY in configurations is missing in certain situations

• KSM-356 - Ability to create new custom field in the records using KSM SDK

KSM JavaScript SDK v16.5.0

• KSM-315 - Notation improvements

• KSM-356 - Create custom fields

• KSM-369 - Improved logging

• Upgraded dependencies

KSM Java SDK v16.5.0

• KSM-314 - Notation improvements

• KSM-356 - Create custom fields

KSM GoLang SDK v1.5.0 (client version mg16.5.0)

• KSM-317 - Notation improvements

• KSM-356 - Create custom fields

• KSM-365 - Fixed KEY_CLINET_KEY is missing error

• KSM-366 - Avoid exceptions/panics and return errors instead

• KSM-367 - Fixed license not shown on pkg.go.dev

KSM JavaScript SDK v16.5.1

• Updating dependencies version

• Restoring some missing methods from the Notation improvements release

KSM Python SDK v16.5.1

• KSM-371 - Improved Windows Config file permissions check

• KSM-370 - Upgrade to latest cryptography>=39.0.1 library

KSM GitHub Action v1.0.7

• Upgraded to run on node16

• Upgraded KSM SDK to 16.5.1

• Upgraded dependencies

KSM .NET SDK + PowerShell Module v16.5.0

• Updated Keeper Notation to support more robust operations

• Update to PowerShell Module to support new Keeper Notation as well as GetSecrets to use inMemoryStorage

• Dropped support for the outdated .NET 5 Framework

Coming next: Integration with Octopus

KSM Terraform plugin v1.1.3:

• Added support for the JP and CA regions

• Improved password generation entropy

• Improved error handling and logging

Python SDK v16.4.2

Bug Fixes

• The version of the Python SDK is now determined dynamically and will display correctly

Python SDK v16.4.1

• Upgraded the cryptography module to incorporate OpenSSL 3.0.7

  • This change affects the Python SDK, the KSM CLI (version 1.0.15), and the Ansible Plugin (version 1.1.5)

SDK Improvements

SDK Regions

Japan and Canada have been added as region options across the KSM SDKs (Java, Javascript, Python, .NET, GoLang)

Record Deletion

You can now delete records using the KSM SDKs. To delete a record, the KSM application must have edit access to the shared folder the record is contained in, and refer to the UID of the record.

Java SDK v16.4.0

• Added support for the JP and CA regions

• Added support for record deletion

• Improved password generation entropy

• Added support for JDK 16+

JavaScript SDK v16.4.0

• Added support for the JP and CA regions

• Added support for record deletion

• Improved password generation entropy

Python SDK v16.4.0

• Added support for the JP and CA regions

• Added support for record deletion

• Improved password generation entropy

• The KSM CLI will now only use KSM configuration files owned by the current user

.NET SDK v16.4.0

• Added support for the JP and CA regions

• Added support for record deletion

• Improved password generation entropy

GoLang SDK v16.4.0

• Added support for the JP and CA regions

• Added support for record deletion

• Improved password generation entropy

KSM GitHub Action v1.0.6

• Updated dependancies to move deprecation warnings

Integrations

XSOAR integration

Use Keeper Secrets Manager with Cortex XSOAR to facilitate workflow automations.

See the documentation page for more details: https://docs.keeper.io/secrets-manager/secrets-manager/integrations/xsoar

SDK Improvements

Record Creation

Records can now be created using all Secrets Manager SDKs.

See the documentation for details: https://docs.keeper.io/secrets-manager/secrets-manager/developer-sdk-library#create-a-secret

Improvements

KSM CLI Sync

The new Sync command added to the Secrets Manager CLI tool allows you to push secret credentials from you Keeper Vault to AWS Secrets Manager or Azure Key Vaults. Use Keeper as the source of truth for all you secrets without needing to update your existing scripts and processes.

See the documentation: https://docs.keeper.io/secrets-manager/secrets-manager/secrets-manager-command-line-interface/sync-command

Manage KSM with PowerShell

Secrets Manager commands have been added to PowerCommander. You can now create and manage Secrets Manager Applications and Devices with the Keeper PowerShell Tool.

See the PowerCommander documentation: https://github.com/Keeper-Security/keeper-sdk-dotnet/tree/master/PowerCommander#reference-keeper-commander-powershell-module

Improvements

SDKs: Fetch Secrets by Record Title

• Secrets can now be found by record Title in all Keeper Secrets Manager SDKs

  • Check out the docs for more information: https://docs.keeper.io/secrets-manager/secrets-manager/developer-sdk-library#get-secrets-by-record-title

SDKs: Upload File Attachments

• File attachments can now be uploaded to records from all Keeper Secrets Manager SDKs

  • Check out the docs for more information: https://docs.keeper.io/secrets-manager/secrets-manager/developer-sdk-library#upload-a-file-attachment

Terraform Record Creation

• Records can now be created with the Keeper Secrets Manager Terraform integration

  • See the docs: https://docs.keeper.io/secrets-manager/secrets-manager/integrations/terraform#creating-records-with-resources

April 2022

• Released Bitbucket integration

• Released Hashicorp Vault integration

• Added ability to find records by title in the SDKs and CLI

March 2022

• Added ability to use configuration files with the PowerShell plugin

• Added ability to create records with the CLI

February 2022

• Added caching functionality to Ansible Plugin

• Added ability to create records with the SDKs

January 2022

• GithHub Actions Integration Released

• Jenkins Integration Released