Infisical Release Notes

What's Changed

• feat: add validation rules for LDAP, SQL and linux by @mathnogueira in https://github.com/Infisical/infisical/pull/7568
• docs(cli): add note about --recursive by @adkah in https://github.com/Infisical/infisical/pull/7832
• chore: add upgrade impact for v0.164.0 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7829
• feature(helm): require config.siteUrl in infisical-nkp chart by @0xArshdeep in https://github.com/Infisical/infisical/pull/7834
• feat(pam): postgres account discovery by @x032205 in https://github.com/Infisical/infisical/pull/7790
• docs(style): add custom vale ci check by @adkah in https://github.com/Infisical/infisical/pull/7835
• feat(gateway-pools): load balancing by @bernie-g in https://github.com/Infisical/infisical/pull/7703
• fix: resolve provisioning identifiers through SSO user aliases by @Thiago-AS in https://github.com/Infisical/infisical/pull/7827
• feat(dynamic-secrets): migrate identity and access provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7569
• chore(secrets): remove deprecated IP allowlist frontend by @andrewhuhh in https://github.com/Infisical/infisical/pull/7799
• feat(dynamic-secrets): migrate data-service and protocol provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7574
• improvement(auth): harden signup and account recovery email dispatch by @victorvhs017 in https://github.com/Infisical/infisical/pull/7833 …

What's Changed

• fix(pam): show orphan sessions to product admins by @x032205 in https://github.com/Infisical/infisical/pull/7811
• feat: allow creation of cert profiles from inside applications by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7768
• chore: add upgrade impact for v0.163.0 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7825
• fix(pam): send cancellation signal to gateway when a session expires by @x032205 in https://github.com/Infisical/infisical/pull/7813
• improvement(ui): migrate email service setup modal to v3 Dialog by @claude[bot] in https://github.com/Infisical/infisical/pull/7807
• improvement(settings): gate cross-project sharing actions by @andrewhuhh in https://github.com/Infisical/infisical/pull/7746
• feat(encryption): implement root encryption key rotation by @victorvhs017 in https://github.com/Infisical/infisical/pull/7744
• fix(ui): restore wheel scrolling in select menus rendered inside dialogs by @claude[bot] in https://github.com/Infisical/infisical/pull/7819

Full Changelog: https://github.com/Infisical/infisical/compare/v0.163.0...v0.164.0

What's Changed

• feat: allow to edit cert details on manual renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7592
• feat(ui): migrate project roles access control to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7663
• chore: add upgrade impact for v0.162.23 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7757
• fix: remove redundant toast notifcations when erroring on creating an identity by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7760
• feat(pam): iam auth for postgres by @x032205 in https://github.com/Infisical/infisical/pull/7676
• chore: add upgrade impact for v0.162.24 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7763
• docs(secrets-mgmt): add more guide links by @adkah in https://github.com/Infisical/infisical/pull/7767
• feat: first improvement in gc for secrets by @akhilmhdh in https://github.com/Infisical/infisical/pull/7756
• fix(insights): revive dates to be Date so they are not string by @adilsitos in https://github.com/Infisical/infisical/pull/7773
• feat: allow change policy to apply to machine identities by @mathnogueira in https://github.com/Infisical/infisical/pull/7540
• improvement: add clock skew handling for gw and relay by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7575
• docs(self-hosting): add copy button for env vars by @adkah in https://github.com/Infisical/infisical/pull/7779 …

What's Changed

• fix: enforce name constraints, path length, and EKU on identity TLS cert auth by @Thiago-AS in https://github.com/Infisical/infisical/pull/7717
• fix(secret-rotations): allow clearing password complexity number inputs by @claude[bot] in https://github.com/Infisical/infisical/pull/7719

Full Changelog: https://github.com/Infisical/infisical/compare/v0.162.23...v0.162.24

What's Changed

• chore: add upgrade impact for v0.162.22 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7743
• fix(ui): make machine identity auth method menu scrollable by @andrewhuhh in https://github.com/Infisical/infisical/pull/7742
• fix(dashboard): don't drop deep search queries containing a slash by @claude[bot] in https://github.com/Infisical/infisical/pull/7733
• fix(pki): apply certificate profile defaults before policy validation on CSR flows by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7696
• feat(pki): raise the post-sync command limit to 8192 characters by @bernie-g in https://github.com/Infisical/infisical/pull/7620
• docs(secrets-mgmt): overhaul github actions guide by @adkah in https://github.com/Infisical/infisical/pull/7741
• feat(pki): add PKCS#12 keystore import to certificate manager by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7697
• fix(docs): remove dead deprecating-api-keys blog link by @claude[bot] in https://github.com/Infisical/infisical/pull/7753
• docs(style): switch prereqs to subheadings by @adkah in https://github.com/Infisical/infisical/pull/7754
• improvement: add region prefix to request ID for cloud instances by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7710
• fix(ui): match radio indicator color to button variant by @andrewhuhh in https://github.com/Infisical/infisical/pull/7747 …

What's Changed

• chore: add upgrade impact for v0.162.21 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7699
• feat(native-integrations): add banners and email sending about the deprecation by @adilsitos in https://github.com/Infisical/infisical/pull/7501
• fix(frontend): ship Alliance No. 2 font to the CDN by @claude[bot] in https://github.com/Infisical/infisical/pull/7679
• feat(ui): migrate project access control groups to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7636
• improvement(secret-rotations): migrate setup flow to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7596
• fix(identity): guard instance admin identities on v2 and UA client-secret paths by @victorvhs017 in https://github.com/Infisical/infisical/pull/7705
• docs(ia): overhaul secrets management IA + add new landing page by @adkah in https://github.com/Infisical/infisical/pull/7683
• improvement: revamp commit history ui by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7665
• fix(docs): hotfix for landing page assets by @adkah in https://github.com/Infisical/infisical/pull/7712
• feat(insights): secret manager product by @adilsitos in https://github.com/Infisical/infisical/pull/7589
• fix(frontend): make dashboard project cards, category tiles and folder crumbs real links by @claude[bot] in https://github.com/Infisical/infisical/pull/7671 …

What's Changed

• feat(pam): access control improvements by @x032205 in https://github.com/Infisical/infisical/pull/7598
• chore: add upgrade impact for v0.162.20 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7688
• fix: patches by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7658
• fix: make product nullish instead of optional by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7689
• feat(telemetry): expand certificate manager PostHog coverage by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7583
• chore: only limit cloud discovery jobs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7684
• improvement(ui): migrate project service tokens to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7661

Full Changelog: https://github.com/Infisical/infisical/compare/v0.162.20...v0.162.21

Changed

• Refactor add member to sub-org to v3 and share role selection (https://github.com/Infisical/infisical/pull/7591)
• Remove legacy environment dashboard (https://github.com/Infisical/infisical/pull/7624)
• Switch lock in Redis for create folder operation (https://github.com/Infisical/infisical/pull/7635)
• Change secret validation API contract (https://github.com/Infisical/infisical/pull/7526)

Added

• Add v3 page header component (https://github.com/Infisical/infisical/pull/7625)
• Add KMIP auto certificate renewal (https://github.com/Infisical/infisical/pull/7542)
• Add shared provider form contract for dynamic secrets (https://github.com/Infisical/infisical/pull/7563)
• Dismiss selected actions with escape key (https://github.com/Infisical/infisical/pull/7638)

Fixed

• Fix legacy boundary ignore read on secret folders (https://github.com/Infisical/infisical/pull/7680)
• Fix paginated endpoint for listing groups (https://github.com/Infisical/infisical/pull/7678)
• Fix secret scanning report when message is too long (https://github.com/Infisical/infisical/pull/7664)
• Fix derive streaming timestamp from audit log when streaming to Splunk (https://github.com/Infisical/infisical/pull/7641)
• Fix send raw bytes for HEC so Axios doesn't stringify the request (https://github.com/Infisical/infisical/pull/7637)
• Fix gate auth method config behind edit-auth and guard instance admin identities (https://github.com/Infisical/infisical/pull/7626) …

What's Changed

• chore: add upgrade impact for v0.162.18 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7590
• improvement: update creat sub org modal to v3 by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7588
• feat: add mi to pam access by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7513
• fix: csr flow on ADCS issuance by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7608

Full Changelog: https://github.com/Infisical/infisical/compare/v0.162.18...v0.162.19

What's Changed

• docs(integrations): rewrite docker guide by @adkah in https://github.com/Infisical/infisical/pull/7571
• improvement: add gateway support to chef app connection by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7557
• improvement(secret-manager): migrate project settings to v3 components by @andrewhuhh in https://github.com/Infisical/infisical/pull/7577
• feat(ui): add Modify Role action for project member role rows by @lobocv in https://github.com/Infisical/infisical/pull/7565

New Contributors

• @lobocv made their first contribution in https://github.com/Infisical/infisical/pull/7565

Full Changelog: https://github.com/Infisical/infisical/compare/v0.162.17...v0.162.18

What's Changed

• feat(pam): fill account fields from a pasted connection string by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7504
• fix: delete alerts when deleting identity by @Thiago-AS in https://github.com/Infisical/infisical/pull/7507
• docs(style): add dark mode by @adkah in https://github.com/Infisical/infisical/pull/7508
• improvement: re-vamp org selection page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7521
• docs(style): fix icon color on card components by @adkah in https://github.com/Infisical/infisical/pull/7528
• fix(ui): remove text balancing from dialog headers by @andrewhuhh in https://github.com/Infisical/infisical/pull/7533
• fix: send recovery email to user.email instead of username by @Thiago-AS in https://github.com/Infisical/infisical/pull/7537
• docs(secrets-mgmt): audit quickstart by @adkah in https://github.com/Infisical/infisical/pull/7531
• improvement: revise access restricted display by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7534
• feat(pam): redis account type by @x032205 in https://github.com/Infisical/infisical/pull/7447
• feat(pam): redis web access by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7510
• docs(assistant): hide floating bubble by @adkah in https://github.com/Infisical/infisical/pull/7551
• docs(config): add contextual options by @adkah in https://github.com/Infisical/infisical/pull/7552 …

What's Changed

• fix(ui): normalize iOS input font sizing by @andrewhuhh in https://github.com/Infisical/infisical/pull/7468
• chore: add upgrade impact for v0.162.15 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7486
• fix: diff API spec against the merge base instead of production by @Thiago-AS in https://github.com/Infisical/infisical/pull/7436
• feat: add expire alert for machine identity authentication by @Thiago-AS in https://github.com/Infisical/infisical/pull/7384
• feat(frontend): add dedicated 403 forbidden-access error page by @claude[bot] in https://github.com/Infisical/infisical/pull/7455
• feat: cert manager UI revamp by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7391
• fix: serialize slot claims, isolate e2e cron namespace and fix test flakiness by @Thiago-AS in https://github.com/Infisical/infisical/pull/7461
• fix(agent-proxy): let user tokens report proxied-service usage by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7426
• chore(honey-tokens): update node version by @adilsitos in https://github.com/Infisical/infisical/pull/7492
• feat: spacelift sync by @mathnogueira in https://github.com/Infisical/infisical/pull/7453
• feat(agent-proxy): add adoption telemetry for proxied services by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7491
• docs(honey-tokens): update cloudformation by @adilsitos in https://github.com/Infisical/infisical/pull/7493 …