chore(patch): update openbao/openbao to v2.5.5 #patch

[public-glueops-renovatebot]

This PR contains the following updates:

Package	Update	Change
openbao/openbao	patch	2.5.4 → 2.5.5

---

Release Notes

openbao/openbao (openbao/openbao)

v2.5.5

Compare Source

SECURITY

• auth/ldap: Prevent unlikely post-bind LDAP injection via bind DN to group resolution. GHSA-6mwx-4547-5vc9. [GH-3306]
• secrets/ldap: Prevent potential LDAP injection with unsanitized DNs for service accounts. GHSA-6mwx-4547-5vc9. [GH-3306]
• secrets/transit: Prevent server crash due to unlock of unlocked mutex for RSA keys created with derived=true. GHSA-8w8f-r2xv-4q4j. [GH-3309]
• core/leases: Fix unauthorized cross-namespace lease revocation via leaked lease identifiers. GHSA-c36x-h252-g9x2. [GH-3307]
• core/namespaces: Fix namespace path canonicalization of "root" enabling unauthorized operations on the parent namespace. GHSA-mwr2-wmgp-crj6. [GH-3308]

BUG FIXES

• core/ha: Return to read-enabled standby mode instead of read-disabled standby mode after stepping down from active mode when standby reads are enabled. This also fixes SIGHUPs crashing standby nodes if they've previously stepped down from active. [GH-3223]
• auth/mfa: Correctly forward two-phase MFA validations on standby nodes. [GH-3246]
• sys/namespaces: Support clearing a namespace's custom_metadata by providing a patch that sets custom_metadata to null at the top-level. [GH-3273]
• sys/plugins: Fix /sys/plugins/catalog and /sys/plugins/catalog/<type> not returning versioned plugins. [GH-3186]

What's Changed

• fix: versioned plugins missing in catalog response (#​3186 by @​phil9909) backported by @​phil9909 in #​3219
• Replace zlint Docker container with go run (#​3187 by @​tsaarni) backported by @​phil9909 in #​3227
• fix two-phase MFA failure on standby node (#​3246 by @​phil9909) backported by @​phil9909 in #​3248
• Close the HA loop (#​3223 by @​satoqz) backported by @​phil9909 in #​3247
• Refactor namespace patch & support top-level clear (#​3273 by @​satoqz) backported by @​satoqz in #​3279
• Remove expired certs in cassandra tests (#​3256 by @​tsaarni) backported by @​satoqz in #​3278
• v2.5.5 dependency bumps by @​satoqz in #​3303
• Fix panic due to unlock of unlocked mutex in Transit (#​3309 by @​cipherboy) backported by @​cipherboy in #​3312
• Fix LDAP bind DN lookups in auth, secrets engine (#​3306 by @​cipherboy) backported by @​cipherboy in #​3313
• Fix namespace path canonicalization (#​3308 by @​satoqz) backported by @​satoqz in #​3311
• Fix cross-namespace lease lookup routing (#​3307 by @​satoqz) backported by @​satoqz in #​3310
• Add changelog for v2.5.5 by @​satoqz in #​3314

Full Changelog: openbao/openbao@v2.5.4...v2.5.5

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.