Infisical Releases

What's Changed feat: allow to edit cert details on manual renewals by @carlosmonastyrski in #7592 feat(ui): migrate project roles access control to v3 by @andrewhuhh in #7663 chore: add upgrade impact for v0.162.23 by @github-actions[bot] in #7757 fix: remove redundant toast notifcations when erroring on creating an identity by @scott-ray-wilson in #7760 feat(pam): iam auth for postgres by @x032205 in #7676 chore: add upgrade impact for v0.162.24 by @github-actions[bot] in #7763 docs(secrets-mgmt): add more guide links by @adkah in #7767 feat: first improvement in gc for secrets by @akhilmhdh in #7756 fix(insights): revive dates to be Date so they are not string by @adilsitos in #7773 feat: allow change policy to apply to machine identities by @mathnogueira in #7540 improvement: add clock skew handling for gw and relay by @sheensantoscapadngan in #7575 docs(self-hosting): add copy button for env vars by @adkah in #7779 feat(kms): add delete protection for KMS keys by @carlosmonastyrski in #7771 docs(vale): fix config and errors by @adkah in #7781 chore: enforce checking at least one type in a pr description by @scott-ray-wilson in #7764 docs(secrets-mgmt): fix browser by @adkah in #7782 fix(gateway-helm): pass positional gateway name for default CLI by @victorvhs017 in #7775 fix(frontend): allow data: URIs in CSP font-src by @claude [bot] in #7681 feat(dynamic-secrets): migrate relational and warehouse provider forms by @andrewhuhh in #7572 docs(secrets-mgmt): revert browser fix by @adkah in #7786 fix(identity-lockout): replace Redis SCAN with sorted-set index for list reads by @victorvhs017 in #7777 fix: honor machine identity auth on org membership endpoints by @Thiago-AS in #7788 fix(auth): clear stale MFA attempts warning on successful verification by @claude [bot] in #7791 feat(frontend): identify new accounts in PostHog at signup completion by @claude [bot] in #7787 feat(pam): dedicated folder views by @x032205 in #7769 fix(project-cleanup): batch-delete secret tree and index FK columns by @victorvhs017 in #7796 feat(telemetry): make team invite a queryable signup source by @claude [bot] in #7789 improvement(secrets): migrate create secret flow to v3 by @andrewhuhh in #7730 docs(certificate-mgmt): revamp microsoft intune guide by @adkah in #7766 docs(style): fix padding at bottom of pages by @adkah in #7806 feat(settings): add project tag editing by @andrewhuhh in #7750 feat: brought back the cleanup for license server by @akhilmhdh in #7761 docs(secrets-mgmt): add local dev guide by @adkah in #7802 feat: show renewed certificates as Renewed by @carlosmonastyrski in #7784 fix: resolved dev server reloading by @akhilmhdh in #7772 improvement(secrets): unify overview navigation and query state by @andrewhuhh in #7738 feat: add RFC 8693 token exchange grant by @Thiago-AS in #7759 feat(dynamic-secrets): migrate managed-store provider forms by @andrewhuhh in #7573 fix: add multi arch images on dev env by @Thiago-AS in #7816 fix(auth): hide initial signup progress by @andrewhuhh in #7783 fix(api): allow machine identities on approval policy routes by @saifsmailbox98 in #7755 fix(cert-manager): evaluate application permissions consistently across actor types by @carlosmonastyrski in #7778 fix(ui): prevent concurrent environment mutations by @andrewhuhh in #7751 improvement(admin): remove unused SAML/OIDC trust-email toggles and wire LDAP trust by @victorvhs017 in #7792 Full Changelog : v0.162.24...v0.163.0

What's Changed fix: enforce name constraints, path length, and EKU on identity TLS cert auth by @Thiago-AS in #7717 fix(secret-rotations): allow clearing password complexity number inputs by @claude [bot] in #7719 Full Changelog : v0.162.23...v0.162.24

What's Changed chore: add upgrade impact for v0.162.22 by @github-actions[bot] in #7743 fix(ui): make machine identity auth method menu scrollable by @andrewhuhh in #7742 fix(dashboard): don't drop deep search queries containing a slash by @claude [bot] in #7733 fix(pki): apply certificate profile defaults before policy validation on CSR flows by @saifsmailbox98 in #7696 feat(pki): raise the post-sync command limit to 8192 characters by @bernie-g in #7620 docs(secrets-mgmt): overhaul github actions guide by @adkah in #7741 feat(pki): add PKCS#12 keystore import to certificate manager by @saifsmailbox98 in #7697 fix(docs): remove dead deprecating-api-keys blog link by @claude [bot] in #7753 docs(style): switch prereqs to subheadings by @adkah in #7754 improvement: add region prefix to request ID for cloud instances by @scott-ray-wilson in #7710 fix(ui): match radio indicator color to button variant by @andrewhuhh in #7747 Full Changelog : v0.162.22...v0.162.23

What's Changed chore: add upgrade impact for v0.162.21 by @github-actions[bot] in #7699 feat(native-integrations): add banners and email sending about the deprecation by @adilsitos in #7501 fix(frontend): ship Alliance No. 2 font to the CDN by @claude [bot] in #7679 feat(ui): migrate project access control groups to v3 by @andrewhuhh in #7636 improvement(secret-rotations): migrate setup flow to v3 by @andrewhuhh in #7596 fix(identity): guard instance admin identities on v2 and UA client-secret paths by @victorvhs017 in #7705 docs(ia): overhaul secrets management IA + add new landing page by @adkah in #7683 improvement: revamp commit history ui by @scott-ray-wilson in #7665 fix(docs): hotfix for landing page assets by @adkah in #7712 feat(insights): secret manager product by @adilsitos in #7589 fix(frontend): make dashboard project cards, category tiles and folder crumbs real links by @claude [bot] in #7671 fix: handle blank access notes, AWS tag values, and GitHub org names by @claude [bot] in #7672 docs(secrets): update dynamic secrets pricing callout by @adkah in #7720 docs(cli): fix infisical.json typo by @adkah in #7721 feat: use new CF's bulk update endpoint for worker secrets by @mathnogueira in #7686 docs: added PKI reference architecture by @sheensantoscapadngan in #7709 fix: use Redis stream for telemetry batching events by @Thiago-AS in #7707 docs(search): decrease api priority by @adkah in #7724 fix: issue bootstrap instance admin token with an exp claim by @scott-ray-wilson in #7716 improvement(projects): make project list table rows real links by @claude [bot] in #7714 feature(helm): bump infisical-nkp to 0.2.0 with valkey and extraEnv support by @0xArshdeep in #7725 docs(secrets-mgmt): update docker guide by @adkah in #7726 docs(style): migrate to sentence case by @adkah in #7727 feat(ui): add edge-aware Base UI combobox by @andrewhuhh in #7669 docs(style): landing page + style revisions by @adkah in #7723 improvement: revamp access restricted display by @scott-ray-wilson in #7693 feat(access-control): migrate machine identities to v3 by @andrewhuhh in #7660 feat(gateway): add Kubernetes auth for gateway enrollment by @bernie-g in #7525 fix(insights): remove uuid verification by @adilsitos in #7729 docs(landing-page): address feedback by @adkah in #7732 feat: scope code-signing approvals to a signing situation by @carlosmonastyrski in #7536 fix: serve the OpenAPI spec from a pre-built cached payload by @Thiago-AS in #7734 improvement(ui): migrate project users access control to v3 by @andrewhuhh in #7662 feat(frontend): add dismissable informational banner component by @claude [bot] in #7449 feat: split the seat count dal from get plan by @akhilmhdh in #7695 feat(pam): fix legacy ssh log rendering and move new logging to gateway by @x032205 in #7706 docs(style): add vale by @adkah in #7736 docs: document GitHub Actions immutable OIDC subject claims by @claude [bot] in #7618 chore(db): add additional privileges analytics view by @maidul98 in #7739 fix(dashboard): paginate deep search instead of capping at 25 per type by @claude [bot] in #7722 Full Changelog : v0.162.21...v0.162.22

What's Changed feat(pam): access control improvements by @x032205 in #7598 chore: add upgrade impact for v0.162.20 by @github-actions[bot] in #7688 fix: patches by @sheensantoscapadngan in #7658 fix: make product nullish instead of optional by @scott-ray-wilson in #7689 feat(telemetry): expand certificate manager PostHog coverage by @devin-ai-integration [bot] in #7583 chore: only limit cloud discovery jobs by @carlosmonastyrski in #7684 improvement(ui): migrate project service tokens to v3 by @andrewhuhh in #7661 Full Changelog : v0.162.20...v0.162.21

Changed Refactor add member to sub-org to v3 and share role selection ( #7591 ) Remove legacy environment dashboard ( #7624 ) Switch lock in Redis for create folder operation ( #7635 ) Change secret validation API contract ( #7526 ) Added Add v3 page header component ( #7625 ) Add KMIP auto certificate renewal ( #7542 ) Add shared provider form contract for dynamic secrets ( #7563 ) Dismiss selected actions with escape key ( #7638 ) Fixed Fix legacy boundary ignore read on secret folders ( #7680 ) Fix paginated endpoint for listing groups ( #7678 ) Fix secret scanning report when message is too long ( #7664 ) Fix derive streaming timestamp from audit log when streaming to Splunk ( #7641 ) Fix send raw bytes for HEC so Axios doesn't stringify the request ( #7637 ) Fix gate auth method config behind edit-auth and guard instance admin identities ( #7626 ) Fix allow suborgs to create GitHub app connection ( #7623 ) Fix return inputs from PATCH /dynamic-secrets endpoint ( #7615 ) Fix CSR flow on ADCS issuance ( #7608 ) Fix prevent Alert from collapsing below its content height ( #7675 ) Fix use TableCell for skeleton rows in Secret Sharing tables ( #7604 ) Fix constrain bulk delete dialog width ( #7595 ) Fix correct tooltip behavior in select menus ( #7594 ) Fix stop recording high-cardinality meters when drop flag is set ( #7564 ) Fix post-sync command UI improvements ( #7555 ) Fix enforce domain component order in certificate policies ( #7550 ) Fix debounce membership last-login writes ( #7650 ) Fix improve command input accessibility ( #7639 )

What's Changed chore: add upgrade impact for v0.162.18 by @github-actions[bot] in #7590 improvement: update creat sub org modal to v3 by @scott-ray-wilson in #7588 feat: add mi to pam access by @sheensantoscapadngan in #7513 fix: csr flow on ADCS issuance by @carlosmonastyrski in #7608 Full Changelog : v0.162.18...v0.162.19

What's Changed docs(integrations): rewrite docker guide by @adkah in #7571 improvement: add gateway support to chef app connection by @scott-ray-wilson in #7557 improvement(secret-manager): migrate project settings to v3 components by @andrewhuhh in #7577 feat(ui): add Modify Role action for project member role rows by @lobocv in #7565 New Contributors @lobocv made their first contribution in #7565 Full Changelog : v0.162.17...v0.162.18

What's Changed feat(pam): fill account fields from a pasted connection string by @saifsmailbox98 in #7504 fix: delete alerts when deleting identity by @Thiago-AS in #7507 docs(style): add dark mode by @adkah in #7508 improvement: re-vamp org selection page by @scott-ray-wilson in #7521 docs(style): fix icon color on card components by @adkah in #7528 fix(ui): remove text balancing from dialog headers by @andrewhuhh in #7533 fix: send recovery email to user.email instead of username by @Thiago-AS in #7537 docs(secrets-mgmt): audit quickstart by @adkah in #7531 improvement: revise access restricted display by @scott-ray-wilson in #7534 feat(pam): redis account type by @x032205 in #7447 feat(pam): redis web access by @saifsmailbox98 in #7510 docs(assistant): hide floating bubble by @adkah in #7551 docs(config): add contextual options by @adkah in #7552 improvement: truncate org name on invite and display disabled email field by @scott-ray-wilson in #7547 docs: fix broken links by @adkah in #7553 improvement: update the access restricted banner to v3 components by @scott-ray-wilson in #7548 fix: fix glob pattern test popover and update docs so glob match is clearer by @scott-ray-wilson in #7558 docs(claude): add code comments house style to root CLAUDE.md by @saifsmailbox98 in #7559 feat: removed deprecation banner for self serve customers by @akhilmhdh in #7561 improvement: revise identity alert ui by @scott-ray-wilson in #7532 feat(pki): support issuing CA certificates from AWS Private CA by @saifsmailbox98 in #7543 fix(secret-folder): false secret-approval-policy error when moving folders (drop implied folder-read gate) by @claude [bot] in #7556 fix(api): validate certificate id params as UUIDs in cert-manager certificate routes by @bernie-g in #7562 feat: add extraArgs to gateway helm chart by @bernie-g in #7544 fix: avoid interval overflow for expire alerts by @Thiago-AS in #7567 fix: correct project highlight when projects share name by @scott-ray-wilson in #7576 fix(dialog): constrain modal content height by @andrewhuhh in #7545 fix: move gcp sync regions to an advanced accordion by @mathnogueira in #7560 improvement(pki): show disabled certificate profiles for API enrollment by @saifsmailbox98 in #7535 New Contributors @adkah made their first contribution in #7508 Full Changelog : v0.162.16...v0.162.17

What's Changed fix(ui): normalize iOS input font sizing by @andrewhuhh in #7468 chore: add upgrade impact for v0.162.15 by @github-actions[bot] in #7486 fix: diff API spec against the merge base instead of production by @Thiago-AS in #7436 feat: add expire alert for machine identity authentication by @Thiago-AS in #7384 feat(frontend): add dedicated 403 forbidden-access error page by @claude [bot] in #7455 feat: cert manager UI revamp by @carlosmonastyrski in #7391 fix: serialize slot claims, isolate e2e cron namespace and fix test flakiness by @Thiago-AS in #7461 fix(agent-proxy): let user tokens report proxied-service usage by @saifsmailbox98 in #7426 chore(honey-tokens): update node version by @adilsitos in #7492 feat: spacelift sync by @mathnogueira in #7453 feat(agent-proxy): add adoption telemetry for proxied services by @saifsmailbox98 in #7491 docs(honey-tokens): update cloudformation by @adilsitos in #7493 fix: use ms instead of seconds in histogram metric by @mathnogueira in #7477 fix(ui): restore default input styling by @andrewhuhh in #7489 feat(ui): add selected action bar by @andrewhuhh in #7496 fix(change-requests): improved approval flow by @varonix0 in #7212 feat(secret-rotation): support for api tokens and r2 access keys on cloudflare by @adilsitos in #7483 chore: doc style guide and rules by @sheensantoscapadngan in #7354 fix: address deadlock for cert issuance by @sheensantoscapadngan in #7495 fix(secret-scanning): bound scan resources and reap stuck scans by @victorvhs017 in #7488 fix: limit process threads for secret scanning by @scott-ray-wilson in #7503 fix: validation and other issues by @sheensantoscapadngan in #7490 feat(ui): migrate gateway and relay UI to v3 by @andrewhuhh in #7379 improvement(auth): improve verification code input by @andrewhuhh in #7470 feat: expand onboarding with product selection and metrics by @scott-ray-wilson in #7482 feat(settings): revamp personal settings by @andrewhuhh in #7469 fix(auth): improve invalid invitation state by @andrewhuhh in #7505 feat: self hosted support for new license server by @akhilmhdh in #7502 improvement(redis): add throttled structured logging for connection errors by @victorvhs017 in #7494 feat: add PKI windows and linux post-sync command support by @carlosmonastyrski in #7499 feat(auth): show organization name on invite signup by @andrewhuhh in #7506 feat(admin): add guided self-hosted bootstrap onboarding by @andrewhuhh in #7448 fix(auth): align onboarding form spacing by @andrewhuhh in #7520 docs: servicenow infisical approval workflow docs by @akhilmhdh in #7512 feat: use license to enable cross-project secret sharing by @mathnogueira in #7404 feat(telemetry): add WAI telemetry events (Audit Logs Viewed, Secret Sync Updated, Secret Rotation V2 Updated) by @devin-ai-integration [bot] in #7466 chore: remove SSH and Agent Sentinel (AI MCP) products by @scott-ray-wilson in #7518 feat(telemetry): report PKI certificate issuance from profile-based flows by @saifsmailbox98 in #7514 feat(pam): staleness check for Windows discovery by @x032205 in #7500 docs(agent-proxy): document the canceled decision and the agent's own sandbox layer by @saifsmailbox98 in #7524 Full Changelog : v0.162.15...v0.162.16