Infisical Release Notes

What's Changed

• improvement(ui): remove legacy page header after final consumers migrate by @andrewhuhh in https://github.com/Infisical/infisical/pull/8429
• improvement(kms): migrate signing form controls to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8436
• fix: patch ip usage by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/8491
• docs(audit-logs): deslop event classes by @adkah in https://github.com/Infisical/infisical/pull/8486
• fix: patch server name by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/8493
• fix: hdb by passing servername as undefined by @Thiago-AS in https://github.com/Infisical/infisical/pull/8494
• improvement(ui): migrate secret scanning connection selection to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8430

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.1...v0.166.2

What's Changed

• feat(gateways): display PAM connected resources by @lb-vn in https://github.com/Infisical/infisical/pull/8415
• fix: enforce validation rules when moving secrets and folders by @DimitrisStaratzis in https://github.com/Infisical/infisical/pull/8451
• fix: update sanitized-schema.yaml by @mathnogueira in https://github.com/Infisical/infisical/pull/8461
• docs(agent-vault): add openclaw guides by @adkah in https://github.com/Infisical/infisical/pull/8455
• improvement(kms): migrate export actions and rotation notice to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8434
• improvement(kms): migrate encrypt and decrypt form controls to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8426
• improvement(ui): migrate secret scanning details and review fields to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8428
• fix(frontend): keep Copy Secrets source and destination panels within their columns by @adilsitos in https://github.com/Infisical/infisical/pull/8460
• fix: return 401 when a user session is no longer valid by @Thiago-AS in https://github.com/Infisical/infisical/pull/8466
• feat: add support for restricting to gateway pools by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/8376
• fix(pki): validate Venafi and Azure AD CS signing connections like ADCS by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8446 …

What's Changed

• chore(frontend): upgrade ESLint to v9 while preserving lint policy by @andrewhuhh in https://github.com/Infisical/infisical/pull/8398
• chore(deps): refresh backend lockfile within existing ranges by @Vligai in https://github.com/Infisical/infisical/pull/8472
• feature: implemented dynamic secret oauth 2.0 by @akhilmhdh in https://github.com/Infisical/infisical/pull/8329
• fix: adjust realtime scan concurrency from 5 to 2 jobs by @mathnogueira in https://github.com/Infisical/infisical/pull/8479
• docs(agent-vault): move and clarify session logs docs by @adkah in https://github.com/Infisical/infisical/pull/8481
• improvement(ui): use V3 HoverCard for Coming Soon data source links by @andrewhuhh in https://github.com/Infisical/infisical/pull/8469
• chore(ui): remove orphaned v2 breadcrumb source by @andrewhuhh in https://github.com/Infisical/infisical/pull/8468
• chore: upgraded to node 26 by @akhilmhdh in https://github.com/Infisical/infisical/pull/8408
• chore(integrations): migrate loading presentation to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8467
• feat: add Certificate Manager-wide certificate alerts by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8399

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.0...v0.166.1

What's Changed

• chore: add upgrade impact for v0.165.16 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8279
• fix(org): limit users to one self-created organization by @Vligai in https://github.com/Infisical/infisical/pull/8239
• docs(style): update style guide and skill by @adkah in https://github.com/Infisical/infisical/pull/8281
• fix(ui): restore secrets activation experiment variant routing by @andrewhuhh in https://github.com/Infisical/infisical/pull/8284
• docs(cli): rename [profile new] to [profile create] by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8285
• improvement(ui): make secret reference tree read-only (no rename) by @Vligai in https://github.com/Infisical/infisical/pull/8286
• feat(agent-vault): add a members/available endpoint so the add dialogs offer only unassigned actors by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8246
• docs(syncs): refresh snowflake sync and app connection by @adkah in https://github.com/Infisical/infisical/pull/8282
• fix(frontend): use card surface for project tiles by @andrewhuhh in https://github.com/Infisical/infisical/pull/8299
• feat(table): add opt-in sticky header by @andrewhuhh in https://github.com/Infisical/infisical/pull/8288
• improvement(secret-sharing): overhaul sharing UX across surfaces by @andrewhuhh in https://github.com/Infisical/infisical/pull/8165 …

What's Changed

• feat: block certificate deletion until expiry by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8213
• fix: prevent renewal identity bypass via ambiguous DN comparison by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8223
• feature(gateway): gcp enrollment by @bernie-g in https://github.com/Infisical/infisical/pull/8143
• docs(audit-logs): audit audit logs by @adkah in https://github.com/Infisical/infisical/pull/8240
• chore: add upgrade impact for v0.165.12 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8176
• chore: add upgrade impact for v0.165.14 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8232
• fix(ci): skip open upgrade-impact PRs and alert when review is blocked by @victorvhs017 in https://github.com/Infisical/infisical/pull/8256
• improvement(secrets): simplify resource creation menu by @andrewhuhh in https://github.com/Infisical/infisical/pull/8206
• chore: add upgrade impact for v0.165.15 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8252
• improvement(ui): simplify secret name sort trigger by @andrewhuhh in https://github.com/Infisical/infisical/pull/8260
• fix(secrets): use eye icon for generated credentials by @andrewhuhh in https://github.com/Infisical/infisical/pull/8258
• improvement(ui): show root slash in folder breadcrumb by @andrewhuhh in https://github.com/Infisical/infisical/pull/8259 …

What's Changed

• fix(agent-vault): expose agent vault routes in the openapi spec by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8224
• docs: drop redundant "sync" from Secret Syncs sidebar labels by @claude[bot] in https://github.com/Infisical/infisical/pull/8234
• feat: removed license deprecation banner from usage and billing by @akhilmhdh in https://github.com/Infisical/infisical/pull/8236
• fix: return 204 from delete and resolve users by any alias by @Thiago-AS in https://github.com/Infisical/infisical/pull/8154
• feat(ui): add card explaining that additional privileges were moved by @adilsitos in https://github.com/Infisical/infisical/pull/8095
• fix(auth): enforce dark mode on auth pages by @andrewhuhh in https://github.com/Infisical/infisical/pull/8238
• feat: built-in PAM masking by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/8196
• feat(ui): add navbar theme toggle by @andrewhuhh in https://github.com/Infisical/infisical/pull/8244
• feat: remove stuck timeout env var by @mathnogueira in https://github.com/Infisical/infisical/pull/8241
• fix(ui): focus alert dialog inputs on open by @andrewhuhh in https://github.com/Infisical/infisical/pull/8243
• fix(frontend): align expanded secret manager rows by @andrewhuhh in https://github.com/Infisical/infisical/pull/8242
• fix(ui): match Anthropic and OpenAI logos across themes by @andrewhuhh in https://github.com/Infisical/infisical/pull/8248 …

What's Changed

• chore: add upgrade impact for v0.165.13 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8217
• feat(api): implement billing v2 usage breakdown and organization listing by @victorvhs017 in https://github.com/Infisical/infisical/pull/8099
• feat: add PowerDNS as a DNS-01 provider for ACME certificate authorities by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8139
• fix(ui): remove autofill seams around rounded inputs by @andrewhuhh in https://github.com/Infisical/infisical/pull/8219
• fix(ui): improve Agent Vault contrast in light mode by @andrewhuhh in https://github.com/Infisical/infisical/pull/8220
• feat(agent-vault): method and path rules, custom headers, and substitutions by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8130
• fix(ui): prevent detail cards from collapsing by @andrewhuhh in https://github.com/Infisical/infisical/pull/8216
• improvement(secrets): simplify bulk selection and add clipboard copying by @andrewhuhh in https://github.com/Infisical/infisical/pull/8189
• feat: add transactional event outbox and event-triggered alerts by @Thiago-AS in https://github.com/Infisical/infisical/pull/8072
• fix(storybook): support app themes and product accents by @andrewhuhh in https://github.com/Infisical/infisical/pull/8227

Full Changelog: https://github.com/Infisical/infisical/compare/v0.165.13...v0.165.14

What's Changed

• feat(analytics): track paywall-to-billing funnel by @andrewhuhh in https://github.com/Infisical/infisical/pull/8144
• docs(style): migrate icons to lucide by @adkah in https://github.com/Infisical/infisical/pull/8175
• feat(pki-syncs): choose sync certificates by filter by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8107
• fix: truncate long custom extensions by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8173
• feat(project): limit secret scanning to one project per organization by @claude[bot] in https://github.com/Infisical/infisical/pull/8174
• docs(agent-vault): fit into product model by @adkah in https://github.com/Infisical/infisical/pull/8178
• fix(ldap-auth): enforce bind password when changing LDAP URL by @victorvhs017 in https://github.com/Infisical/infisical/pull/8160
• improvement(agent-vault): collapse proxy settings under advanced options by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8138
• feat(agent-vault): add product intro modal by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8141
• fix(api): allow non-uuid project IDs in projectId validators by @claude[bot] in https://github.com/Infisical/infisical/pull/8180
• fix(frontend): drop removed showSlugField prop from ProjectOverviewChangeSection call site by @claude[bot] in https://github.com/Infisical/infisical/pull/8188 …

What's Changed

• feat(pam): restore Oracle Database account support by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8035
• fix(cert-management): fix dupe member issue by @lb-vn in https://github.com/Infisical/infisical/pull/8147
• fix: oracle cli version by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8152
• improvement(frontend): migrate server admins modal to v3 components by @claude[bot] in https://github.com/Infisical/infisical/pull/8045
• improvement(admin): migrate remaining server console UI to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/8149
• docs(agent-vault): revamp agent vault docs by @adkah in https://github.com/Infisical/infisical/pull/8128
• improvement(ui): modernize secrets overview and project list by @andrewhuhh in https://github.com/Infisical/infisical/pull/7748
• fix: point MFA and Google SSO enforcement upgrade gates at the Advanced plan by @Thiago-AS in https://github.com/Infisical/infisical/pull/8156
• fix(project-roles): unblock duplicating the built-in Admin role by @claude[bot] in https://github.com/Infisical/infisical/pull/8157
• feat: add PostHog trial events for cloud billing trials by @0xArshdeep in https://github.com/Infisical/infisical/pull/8145
• fix(identity-gcp-auth): enforce GCE project and zone restrictions by @victorvhs017 in https://github.com/Infisical/infisical/pull/8148 …

What's Changed

• improvement(frontend): migrate kmip server details page to v3 by @claude[bot] in https://github.com/Infisical/infisical/pull/8067
• improvement(secret-sync): pin sync behaviour with end-to-end tests and a runnable test harness by @lobocv in https://github.com/Infisical/infisical/pull/8062
• fix(queue): log job failures and make PINO_LOG_LEVEL work by @lobocv in https://github.com/Infisical/infisical/pull/8089
• improvement(frontend): test secrets activation modal versus card by @claude[bot] in https://github.com/Infisical/infisical/pull/8060
• chore(ui): add semantic z-index registry by @andrewhuhh in https://github.com/Infisical/infisical/pull/8082
• fix(auth): preserve password autofill styling and signup username targeting by @andrewhuhh in https://github.com/Infisical/infisical/pull/8084
• improvement(secret-syncs): modernize forms and harden destination selection by @andrewhuhh in https://github.com/Infisical/infisical/pull/7902
• fix(ui): disable autocomplete for resource names by @andrewhuhh in https://github.com/Infisical/infisical/pull/8086
• chore(auth): revert grouped input autofill styling and signup form restructure by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/8102
• feat(gateways): make relay optional by @bernie-g in https://github.com/Infisical/infisical/pull/7992
• feat(agent-vault): agents that run without credentials by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/8000 …

What's Changed

• fix(group-service): block sub-org membership changes on parent-owned groups by @victorvhs017 in https://github.com/Infisical/infisical/pull/8030
• fix(pki): issue only policy-validated subject and SAN values by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8056
• fix(pam): atomic recording secret mint by @bernie-g in https://github.com/Infisical/infisical/pull/8043
• docs(nav): restore Agent Vault as an external link by @claude[bot] in https://github.com/Infisical/infisical/pull/8077
• feat: validation rule api revamp by @varonix0 in https://github.com/Infisical/infisical/pull/8046
• improvement(frontend): migrate kmip servers page to v3 components by @claude[bot] in https://github.com/Infisical/infisical/pull/8066
• improvement(signup): streamline onboarding and workspace navigation by @claude[bot] in https://github.com/Infisical/infisical/pull/8007
• fix(announcements): stabilize modal height and image loading by @andrewhuhh in https://github.com/Infisical/infisical/pull/8042
• chore: add upgrade impact for v0.165.9 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8071
• feat(pki): manage imported certificates by attaching a certificate profile by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7961
• chore(dep): node base and npm bump by @Vligai in https://github.com/Infisical/infisical/pull/8051 …

What's Changed

• chore: add upgrade impact for v0.165.8 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8039
• fix(dynamic-secrets): add missing provider logos by @andrewhuhh in https://github.com/Infisical/infisical/pull/8032
• chore(deps): bump the bundled CLI to 0.43.129 by @Vligai in https://github.com/Infisical/infisical/pull/8026
• improvement(security): derive cookie signing key from KMS root key by @victorvhs017 in https://github.com/Infisical/infisical/pull/8029
• feat(secret-sync): detect duplicate Daytona syncs by organization by @lobocv in https://github.com/Infisical/infisical/pull/7994
• improvement(frontend): upgrade framer-motion to motion by @claude[bot] in https://github.com/Infisical/infisical/pull/8033
• improvement(ui): point onboarding CTA to community instead of Slack by @claude[bot] in https://github.com/Infisical/infisical/pull/8009
• fix(github-org-sync): safely sync teams for large orgs by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7998
• fix(secrets-access-requests): auto open review sheet when request ID present by @varonix0 in https://github.com/Infisical/infisical/pull/8041
• feat(ui): add global command menu by @andrewhuhh in https://github.com/Infisical/infisical/pull/7877
• docs(integrations): poc for app connections and integrations format revamp by @adkah in https://github.com/Infisical/infisical/pull/8028 …

What's Changed

• chore: add upgrade impact for v0.165.7 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8027
• fix(telemetry): bound HTTP metric cardinality and add core request counter by @victorvhs017 in https://github.com/Infisical/infisical/pull/7995
• docs(pam): rework postgres discovery guide by @adkah in https://github.com/Infisical/infisical/pull/8034
• fix(secret-rotation): accept iLO 7 "hpeiLO->" prompt in HP iLO rotation by @claude[bot] in https://github.com/Infisical/infisical/pull/7977

Full Changelog: https://github.com/Infisical/infisical/compare/v0.165.7...v0.165.8

What's Changed

• fix: make many-to-one aws sm sync only target one secret by @mathnogueira in https://github.com/Infisical/infisical/pull/7999
• chore: add upgrade impact for v0.165.6 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8004
• docs(platform): additional screenshot pass by @adkah in https://github.com/Infisical/infisical/pull/7997
• improvement(frontend): reduce mobile padding on overview and dashboard pages by @claude[bot] in https://github.com/Infisical/infisical/pull/8005
• feat: allow one LDAP connection to back many Linux and Windows syncs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7867
• fix: coalesce concurrent secret reference folder loads by @maidul98 in https://github.com/Infisical/infisical/pull/8011
• fix: split query into 3 ones to reduce duplicate alloc by joins by @mathnogueira in https://github.com/Infisical/infisical/pull/8012
• improvement(audit-log): tag stale-claim drops with stream provider by @victorvhs017 in https://github.com/Infisical/infisical/pull/8001
• fix(app-connections): standardize add sheet discard handling by @andrewhuhh in https://github.com/Infisical/infisical/pull/7942
• improvement(approvals): add create-policy CTA to change requests empty state when no policies exist by @claude[bot] in https://github.com/Infisical/infisical/pull/8008 …

What's Changed

• feat: added support to send region to license server by @akhilmhdh in https://github.com/Infisical/infisical/pull/7975
• docs(app-connections): recapture cloud provider and database connector screenshots by @adkah in https://github.com/Infisical/infisical/pull/7980
• docs(app-connections): recapture source control and CI connector screenshots by @adkah in https://github.com/Infisical/infisical/pull/7981
• docs(identities): recapture auth method screenshots and align button labels by @adkah in https://github.com/Infisical/infisical/pull/7984
• docs(platform): recapture org control screenshots and rewrite SSO & Provisioning navigation by @adkah in https://github.com/Infisical/infisical/pull/7985
• chore: add upgrade impact for v0.165.4 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7991
• docs(pam): credential health by @bernie-g in https://github.com/Infisical/infisical/pull/7971
• docs(app-connections): recapture token-based connector screenshots by @adkah in https://github.com/Infisical/infisical/pull/7983
• fix: dont inherit exisitng login browser org when using cli login by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7993

Full Changelog: https://github.com/Infisical/infisical/compare/v0.165.4...v0.165.5

What's Changed

• docs(security): remove e2e references by @adkah in https://github.com/Infisical/infisical/pull/7974
• improvement(secret-syncs): rename disable secret deletion copy by @claude[bot] in https://github.com/Infisical/infisical/pull/7948
• chore: add upgrade impact for v0.165.3 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7973
• fix(frontend): use text-muted for v3 textarea and command placeholders by @claude[bot] in https://github.com/Infisical/infisical/pull/7962
• fix: bound membership removal and role changes by the target's privileges for legacy system by @Thiago-AS in https://github.com/Infisical/infisical/pull/7916
• improvement(ui): migrate project upgrade gate to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7954
• docs(footer): update community link by @adkah in https://github.com/Infisical/infisical/pull/7988
• chore(deps): base image and dependency updates from a customer contai… by @Vligai in https://github.com/Infisical/infisical/pull/7957
• docs(app-connections): recapture deploy platform connector screenshots by @adkah in https://github.com/Infisical/infisical/pull/7982

Full Changelog: https://github.com/Infisical/infisical/compare/v0.165.3...v0.165.4

What's Changed

• improvement(dynamic-secrets): remove legacy provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7932
• fix: always show cross-project secret sharing in prod settings by @mathnogueira in https://github.com/Infisical/infisical/pull/7931
• improvement(secrets): normalize honey token v3 interactions by @andrewhuhh in https://github.com/Infisical/infisical/pull/7735
• docs: remove secret validation rule endpoints from API reference by @claude[bot] in https://github.com/Infisical/infisical/pull/7938
• chore: add upgrade impact for v0.165.2 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7934
• feat: resolved approval ui showing uuid in list by @akhilmhdh in https://github.com/Infisical/infisical/pull/7945
• docs: refresh secret versioning and point-in-time recovery screenshots by @jakehulberg in https://github.com/Infisical/infisical/pull/7946
• docs(secrets-mgmt): improve ia by @adkah in https://github.com/Infisical/infisical/pull/7937
• docs(screenshots): update highest impact screenshots and prose by @adkah in https://github.com/Infisical/infisical/pull/7949
• chore(ui): establish component deprecation lifecycle by @andrewhuhh in https://github.com/Infisical/infisical/pull/7929
• feat: removed plan check from the policy delete endpoint by @akhilmhdh in https://github.com/Infisical/infisical/pull/7950 …

What's Changed

• feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7694
• fix: make approvals check for validation rules by @mathnogueira in https://github.com/Infisical/infisical/pull/7837
• feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7820
• chore: add upgrade impact for v0.164.1 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7840
• docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7847
• fix(ui): reset search input when user gets into folder by @adilsitos in https://github.com/Infisical/infisical/pull/7844
• docs: linux and windows doc improvements by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7846
• improvement: add port number to Splunk provider by @Thiago-AS in https://github.com/Infisical/infisical/pull/7843
• fix: add blocks for ca incompatibility by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7848
• docs: add AI agent identities to identity counting by @0xArshdeep in https://github.com/Infisical/infisical/pull/7845
• feat(permissions): folder rbac by @adilsitos in https://github.com/Infisical/infisical/pull/7762 …