From bcb1be4983c816359dbdf9956ccf384fefb62cd0 Mon Sep 17 00:00:00 2001
From: Ben Ash <32777270+benashz@users.noreply.github.com>
Date: Thu, 4 Dec 2025 17:31:52 -0500
Subject: [PATCH] Updates for v5.6.0 release (#2690)

* Updates for v5.6.0 release

* Drop duplicated FieldTokenTTL

* Bump Go version

Bump release version
---
 .go-version               |  2 +-
 CHANGELOG.md              | 13 ++++++++++---
 internal/consts/consts.go |  1 -
 version/VERSION           |  2 +-
 4 files changed, 12 insertions(+), 6 deletions(-)

diff --git a/.go-version b/.go-version
index 5bb76b57..b45fe310 100644
--- a/.go-version
+++ b/.go-version
@@ -1 +1 @@
-1.25.3
+1.25.5
diff --git a/CHANGELOG.md b/CHANGELOG.md
index d329e5c4..908a1343 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,12 +1,19 @@
-## Unreleased
+## 5.6.0 (December 19, 2025)
+
 FEATURES:
-* Add support for `self_managed` parameter in `vault_database_secret_backend_connection` resource for rootless config for static roles in Oracle database engine. ([#2661] (https://github.com/hashicorp/terraform-provider-vault/pull/2661))
-* Add support for `password_wo`, and `password_wo_version` parameters in `vault_database_secret_backend_static_role` resource for Oracle database engine. Requires Vault 1.19+. Deprecates `self_managed_password` which was introduced in Vault 1.18. ([#2661] (https://github.com/hashicorp/terraform-provider-vault/pull/2661))
+* Add support for self managed workflow for rootless static roles in Oracle Secret Engine: ([#2661](https://github.com/hashicorp/terraform-provider-vault/pull/2661))
+* Add AWS access creds ephemeral resource: ([#2659](https://github.com/hashicorp/terraform-provider-vault/pull/2659))
+* Add AWS static access credentials ephemeral resource.: ([#2657](https://github.com/hashicorp/terraform-provider-vault/pull/2657))
+* Add Azure access credentials ephemeral resource: ([#2654](https://github.com/hashicorp/terraform-provider-vault/pull/2654))
+
+IMPROVEMENTS:
+* Added fields related to namespace used to create a role in kubernetes auth method: ([#2644](https://github.com/hashicorp/terraform-provider-vault/pull/2644))
 
 BUGS:
 
 * Fix LDAP auth tune block read failure caused by extra /tune segment in the API request path ([#2676](https://github.com/hashicorp/terraform-provider-vault/pull/2676))
 
+
 ## 5.5.0 (Nov 19, 2025)
 
 BEHAVIOR CHANGES: With v5.5.0, the default value for `deny_null_bind` in the `vault_ldap_auth_backend` resource has changed from `false` to `true` 
diff --git a/internal/consts/consts.go b/internal/consts/consts.go
index 0d65eadf..5e72c2b0 100644
--- a/internal/consts/consts.go
+++ b/internal/consts/consts.go
@@ -570,7 +570,6 @@ const (
 	FieldBoundServiceAccountNamespaceSelector = "bound_service_account_namespace_selector"
 	FieldAudience                             = "audience"
 	FieldTokenMaxTTL                          = "token_max_ttl"
-	FieldTokenTTL                             = "token_ttl"
 	FieldTokenPeriod                          = "token_period"
 
 	/*
diff --git a/version/VERSION b/version/VERSION
index d50359de..1bc788d3 100644
--- a/version/VERSION
+++ b/version/VERSION
@@ -1 +1 @@
-5.5.0
+5.6.0