What's Changed

• feat: added support to send region to license server by @akhilmhdh in #7975
• docs(app-connections): recapture cloud provider and database connector screenshots by @adkah in #7980
• docs(app-connections): recapture source control and CI connector screenshots by @adkah in #7981
• docs(identities): recapture auth method screenshots and align button labels by @adkah in #7984
• docs(platform): recapture org control screenshots and rewrite SSO & Provisioning navigation by @adkah in #7985
• chore: add upgrade impact for v0.165.4 by @github-actions[bot] in #7991
• docs(pam): credential health by @bernie-g in #7971
• docs(app-connections): recapture token-based connector screenshots by @adkah in #7983
• fix: dont inherit exisitng login browser org when using cli login by @scott-ray-wilson in #7993

Full Changelog: v0.165.4...v0.165.5

What's Changed

• docs(security): remove e2e references by @adkah in #7974
• improvement(secret-syncs): rename disable secret deletion copy by @claude[bot] in #7948
• chore: add upgrade impact for v0.165.3 by @github-actions[bot] in #7973
• fix(frontend): use text-muted for v3 textarea and command placeholders by @claude[bot] in #7962
• fix: bound membership removal and role changes by the target's privileges for legacy system by @Thiago-AS in #7916
• improvement(ui): migrate project upgrade gate to v3 by @andrewhuhh in #7954
• docs(footer): update community link by @adkah in #7988
• chore(deps): base image and dependency updates from a customer contai… by @Vligai in #7957
• docs(app-connections): recapture deploy platform connector screenshots by @adkah in #7982

Full Changelog: v0.165.3...v0.165.4

What's Changed

• improvement(dynamic-secrets): remove legacy provider forms by @andrewhuhh in #7932
• fix: always show cross-project secret sharing in prod settings by @mathnogueira in #7931
• improvement(secrets): normalize honey token v3 interactions by @andrewhuhh in #7735
• docs: remove secret validation rule endpoints from API reference by @claude[bot] in #7938
• chore: add upgrade impact for v0.165.2 by @github-actions[bot] in #7934
• feat: resolved approval ui showing uuid in list by @akhilmhdh in #7945
• docs: refresh secret versioning and point-in-time recovery screenshots by @jakehulberg in #7946
• docs(secrets-mgmt): improve ia by @adkah in #7937
• docs(screenshots): update highest impact screenshots and prose by @adkah in #7949
• chore(ui): establish component deprecation lifecycle by @andrewhuhh in #7929
• feat: removed plan check from the policy delete endpoint by @akhilmhdh in #7950
• feat: added better logging around the tunnel closing and changed the tunnel closing order by @akhilmhdh in #7944
• fix: cert dashboard and signer approval policy improvements by @carlosmonastyrski in #7880
• docs(secrets-mgmt): update most screenshots by @adkah in #7955
• chore(code-agents): license check guidelines by @varonix0 in #7956
• feat(pam): account password viewing with access requests by @lb-vn in #7879
• chore: add upgrade impact for v0.165.1 by @github-actions[bot] in #7933
• feat: add oidc auth template support for MIs by @scott-ray-wilson in #7935
• docs(style): fix contractions + ui buttons by @adkah in #7910
• feat(secret-sync): add Daytona app connection and secret sync by @lobocv in #7866
• feat: sync member email and name from the identity provider when the IdP is authoritative by @Thiago-AS in #7936
• feat(pam): heartbeats by @bernie-g in #7849
• docs(platform): first pass screenshot audit by @adkah in #7968

Full Changelog: v0.165.2...v0.165.3

What's Changed

• feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in #7694
• fix: make approvals check for validation rules by @mathnogueira in #7837
• feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in #7820
• chore: add upgrade impact for v0.164.1 by @github-actions[bot] in #7840
• docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in #7847
• fix(ui): reset search input when user gets into folder by @adilsitos in #7844
• docs: linux and windows doc improvements by @sheensantoscapadngan in #7846
• improvement: add port number to Splunk provider by @Thiago-AS in #7843
• fix: add blocks for ca incompatibility by @sheensantoscapadngan in #7848
• docs: add AI agent identities to identity counting by @0xArshdeep in #7845
• feat(permissions): folder rbac by @adilsitos in #7762
• fix(kubernetes-auth): pin direct API requests with safeRequest by @victorvhs017 in #7855
• feat(pki-sync): add GCP Certificate Manager Sync by @carlosmonastyrski in #7737
• fix(docs): route vulnerability reports through the disclosure policy by @Vligai in #7856
• fix(auth): pool https agents and fix gateway sni by @victorvhs017 in #7857
• feat(webhooks): approval and change request webhook events by @lobocv in #7780
• docs(wip): top level ia 2 by @adkah in #7830
• docs(secret-rotation): fix typos by @adkah in #7861
• feat(pam): default ssh access to interactive shell by @lb-vn in #7838
• feat(pam): improve error code for deleting discovery cred acc by @lb-vn in #7854
• feat(docs): add folder rbac docs by @adilsitos in #7862
• docs(footer): fix forum link by @adkah in #7865
• fix(certificate): scope certificate private-key read permission to the certificate subject on v3 issuance by @Vligai in #7549
• fix(cert-v3): route DigiCert requests through external issuance on approval by @devin-ai-integration[bot] in #7870
• improvement(approvals): migrate page shell to v3 by @andrewhuhh in #7836
• docs(folder-rbac): enhancements by @adilsitos in #7874
• feat(abac): add trim suffix by @adilsitos in #7817
• improvement(secrets): migrate Vault import dialogs to v3 by @andrewhuhh in #7794
• feat: add kubernetes MI auth template support by @scott-ray-wilson in #7713
• fix: collapse signer approvals into a single setup card until a policy exists by @carlosmonastyrski in #7875
• feat(ui): select all for vault import secret path Combobox by @claude[bot] in #7878
• fix(pam): re-check session validity when privileged access is granted by @lb-vn in #7852
• feat(docs): add ansible folder operations by @adilsitos in #7871
• docs(secrets-mgmt): clarify dual-phase rotation by @adkah in #7864
• docs(secrets-mgmt): refresh spacelift sync by @adkah in #7896
• feat(dynamic-secrets): cut over to shared provider registry by @andrewhuhh in #7839
• fix: pki ux patches by @sheensantoscapadngan in #7853
• feat: set project retention limits by @varonix0 in #7887
• docs(style): add skill for applying docs style by @adkah in #7907
• feat(secret-manager): revamp replicate secrets workflow by @andrewhuhh in #7793
• fix(identity-ldap-auth): stop returning bind password on GET by @victorvhs017 in #7873
• fix(pki): clear NULL extended key usage elements on certificates by @claude[bot] in #7900
• chore(docker): refresh stale libssl pin and slim the runtime image by @Vligai in #7905
• fix: resolved multi line yaml pasting issue by @akhilmhdh in #7920
• chore: storybook preview by @scott-ray-wilson in #7914
• feat: add helper text for digicert profiles during issuance by @sheensantoscapadngan in #7911
• fix(webhook): render the test event for the webhook's type by @lobocv in #7893
• improvement(integrations): move integrations page header and tabs to v3 by @claude[bot] in #7909
• feature(ui): add generic v3 loader component and migrate branded loader call sites by @claude[bot] in #7895
• improvement: refactor cert profile policy creation to be inline by @scott-ray-wilson in #7908
• chore: comment storybook preview links by @andrewhuhh in #7925
• chore(docker): drop the source tree and recommended packages from the image by @Vligai in #7917
• fix(ui): read the real reduced-motion preference in v3 Loader by @claude[bot] in #7927

Full Changelog

v0.164.1...v0.165.1

What's Changed

• feat: add validation rules for LDAP, SQL and linux by @mathnogueira in #7568
• docs(cli): add note about --recursive by @adkah in #7832
• chore: add upgrade impact for v0.164.0 by @github-actions[bot] in #7829
• feature(helm): require config.siteUrl in infisical-nkp chart by @0xArshdeep in #7834
• feat(pam): postgres account discovery by @x032205 in #7790
• docs(style): add custom vale ci check by @adkah in #7835
• feat(gateway-pools): load balancing by @bernie-g in #7703
• fix: resolve provisioning identifiers through SSO user aliases by @Thiago-AS in #7827
• feat(dynamic-secrets): migrate identity and access provider forms by @andrewhuhh in #7569
• chore(secrets): remove deprecated IP allowlist frontend by @andrewhuhh in #7799
• feat(dynamic-secrets): migrate data-service and protocol provider forms by @andrewhuhh in #7574
• improvement(auth): harden signup and account recovery email dispatch by @victorvhs017 in #7833

Full Changelog: v0.164.0...v0.164.1

What's Changed

• fix(pam): show orphan sessions to product admins by @x032205 in #7811
• feat: allow creation of cert profiles from inside applications by @sheensantoscapadngan in #7768
• chore: add upgrade impact for v0.163.0 by @github-actions[bot] in #7825
• fix(pam): send cancellation signal to gateway when a session expires by @x032205 in #7813
• improvement(ui): migrate email service setup modal to v3 Dialog by @claude[bot] in #7807
• improvement(settings): gate cross-project sharing actions by @andrewhuhh in #7746
• feat(encryption): implement root encryption key rotation by @victorvhs017 in #7744
• fix(ui): restore wheel scrolling in select menus rendered inside dialogs by @claude[bot] in #7819

Full Changelog: v0.163.0...v0.164.0

What's Changed

• feat: allow to edit cert details on manual renewals by @carlosmonastyrski in #7592
• feat(ui): migrate project roles access control to v3 by @andrewhuhh in #7663
• chore: add upgrade impact for v0.162.23 by @github-actions[bot] in #7757
• fix: remove redundant toast notifcations when erroring on creating an identity by @scott-ray-wilson in #7760
• feat(pam): iam auth for postgres by @x032205 in #7676
• chore: add upgrade impact for v0.162.24 by @github-actions[bot] in #7763
• docs(secrets-mgmt): add more guide links by @adkah in #7767
• feat: first improvement in gc for secrets by @akhilmhdh in #7756
• fix(insights): revive dates to be Date so they are not string by @adilsitos in #7773
• feat: allow change policy to apply to machine identities by @mathnogueira in #7540
• improvement: add clock skew handling for gw and relay by @sheensantoscapadngan in #7575
• docs(self-hosting): add copy button for env vars by @adkah in #7779
• feat(kms): add delete protection for KMS keys by @carlosmonastyrski in #7771
• docs(vale): fix config and errors by @adkah in #7781
• chore: enforce checking at least one type in a pr description by @scott-ray-wilson in #7764
• docs(secrets-mgmt): fix browser by @adkah in #7782
• fix(gateway-helm): pass positional gateway name for default CLI by @victorvhs017 in #7775
• fix(frontend): allow data: URIs in CSP font-src by @claude[bot] in #7681
• feat(dynamic-secrets): migrate relational and warehouse provider forms by @andrewhuhh in #7572
• docs(secrets-mgmt): revert browser fix by @adkah in #7786
• fix(identity-lockout): replace Redis SCAN with sorted-set index for list reads by @victorvhs017 in #7777
• fix: honor machine identity auth on org membership endpoints by @Thiago-AS in #7788
• fix(auth): clear stale MFA attempts warning on successful verification by @claude[bot] in #7791
• feat(frontend): identify new accounts in PostHog at signup completion by @claude[bot] in #7787
• feat(pam): dedicated folder views by @x032205 in #7769
• fix(project-cleanup): batch-delete secret tree and index FK columns by @victorvhs017 in #7796
• feat(telemetry): make team invite a queryable signup source by @claude[bot] in #7789
• improvement(secrets): migrate create secret flow to v3 by @andrewhuhh in #7730
• docs(certificate-mgmt): revamp microsoft intune guide by @adkah in #7766
• docs(style): fix padding at bottom of pages by @adkah in #7806
• feat(settings): add project tag editing by @andrewhuhh in #7750
• feat: brought back the cleanup for license server by @akhilmhdh in #7761
• docs(secrets-mgmt): add local dev guide by @adkah in #7802
• feat: show renewed certificates as Renewed by @carlosmonastyrski in #7784
• fix: resolved dev server reloading by @akhilmhdh in #7772
• improvement(secrets): unify overview navigation and query state by @andrewhuhh in #7738
• feat: add RFC 8693 token exchange grant by @Thiago-AS in #7759
• feat(dynamic-secrets): migrate managed-store provider forms by @andrewhuhh in #7573
• fix: add multi arch images on dev env by @Thiago-AS in #7816
• fix(auth): hide initial signup progress by @andrewhuhh in #7783
• fix(api): allow machine identities on approval policy routes by @saifsmailbox98 in #7755
• fix(cert-manager): evaluate application permissions consistently across actor types by @carlosmonastyrski in #7778
• fix(ui): prevent concurrent environment mutations by @andrewhuhh in #7751
• improvement(admin): remove unused SAML/OIDC trust-email toggles and wire LDAP trust by @victorvhs017 in #7792

Full Changelog: v0.162.24...v0.163.0

What's Changed

• chore: add upgrade impact for v0.162.22 by @github-actions[bot] in #7743
• fix(ui): make machine identity auth method menu scrollable by @andrewhuhh in #7742
• fix(dashboard): don't drop deep search queries containing a slash by @claude[bot] in #7733
• fix(pki): apply certificate profile defaults before policy validation on CSR flows by @saifsmailbox98 in #7696
• feat(pki): raise the post-sync command limit to 8192 characters by @bernie-g in #7620
• docs(secrets-mgmt): overhaul github actions guide by @adkah in #7741
• feat(pki): add PKCS#12 keystore import to certificate manager by @saifsmailbox98 in #7697
• fix(docs): remove dead deprecating-api-keys blog link by @claude[bot] in #7753
• docs(style): switch prereqs to subheadings by @adkah in #7754
• improvement: add region prefix to request ID for cloud instances by @scott-ray-wilson in #7710
• fix(ui): match radio indicator color to button variant by @andrewhuhh in #7747

Full Changelog: v0.162.22...v0.162.23

What's Changed

chore: add upgrade impact for v0.162.21 by @github-actions[bot] in #7699
feat(native-integrations): add banners and email sending about the deprecation by @adilsitos in #7501
fix(frontend): ship Alliance No. 2 font to the CDN by @claude[bot] in #7679
feat(ui): migrate project access control groups to v3 by @andrewhuhh in #7636
improvement(secret-rotations): migrate setup flow to v3 by @andrewhuhh in #7596
fix(identity): guard instance admin identities on v2 and UA client-secret paths by @victorvhs017 in #7705
docs(ia): overhaul secrets management IA + add new landing page by @adkah in #7683
improvement: revamp commit history ui by @scott-ray-wilson in #7665
fix(docs): hotfix for landing page assets by @adkah in #7712
feat(insights): secret manager product by @adilsitos in #7589
fix(frontend): make dashboard project cards, category tiles and folder crumbs real links by @claude[bot] in #7671
fix: handle blank access notes, AWS tag values, and GitHub org names by @claude[bot] in #7672
docs(secrets): update dynamic secrets pricing callout by @adkah in #7720
docs(cli): fix infisical.json typo by @adkah in #7721
feat: use new CF's bulk update endpoint for worker secrets by @mathnogueira in #7686
docs: added PKI reference architecture by @sheensantoscapadngan in #7709
fix: use Redis stream for telemetry batching events by @Thiago-AS in #7707
docs(search): decrease api priority by @adkah in #7724
fix: issue bootstrap instance admin token with an exp claim by @scott-ray-wilson in #7716
improvement(projects): make project list table rows real links by @claude[bot] in #7714
feature(helm): bump infisical-nkp to 0.2.0 with valkey and extraEnv support by @0xArshdeep in #7725
docs(secrets-mgmt): update docker guide by @adkah in #7726
docs(style): migrate to sentence case by @adkah in #7727
feat(ui): add edge-aware Base UI combobox by @andrewhuhh in #7669
docs(style): landing page + style revisions by @adkah in #7723
improvement: revamp access restricted display by @scott-ray-wilson in #7693
feat(access-control): migrate machine identities to v3 by @andrewhuhh in #7660
feat(gateway): add Kubernetes auth for gateway enrollment by @bernie-g in #7525
fix(insights): remove uuid verification by @adilsitos in #7729
docs(landing-page): address feedback by @adkah in #7732
feat: scope code-signing approvals to a signing situation by @carlosmonastyrski in #7536
fix: serve the OpenAPI spec from a pre-built cached payload by @Thiago-AS in #7734
improvement(ui): migrate project users access control to v3 by @andrewhuhh in #7662
feat(frontend): add dismissable informational banner component by @claude[bot] in #7449
feat: split the seat count dal from get plan by @akhilmhdh in #7695
feat(pam): fix legacy ssh log rendering and move new logging to gateway by @x032205 in #7706
docs(style): add vale by @adkah in #7736
docs: document GitHub Actions immutable OIDC subject claims by @claude[bot] in #7618
chore(db): add additional privileges analytics view by @maidul98 in #7739
fix(dashboard): paginate deep search instead of capping at 25 per type by @claude[bot] in #7722

Full Changelog: v0.162.21...v0.162.22

What's Changed

• feat(pam): access control improvements by @x032205 in #7598
• chore: add upgrade impact for v0.162.20 by @github-actions[bot] in #7688
• fix: patches by @sheensantoscapadngan in #7658
• fix: make product nullish instead of optional by @scott-ray-wilson in #7689
• feat(telemetry): expand certificate manager PostHog coverage by @devin-ai-integration[bot] in #7583
• chore: only limit cloud discovery jobs by @carlosmonastyrski in #7684
• improvement(ui): migrate project service tokens to v3 by @andrewhuhh in #7661

Full Changelog: v0.162.20...v0.162.21

Changed

Refactor add member to sub-org to v3 and share role selection (#7591)

Remove legacy environment dashboard (#7624)

Switch lock in Redis for create folder operation (#7635)

Change secret validation API contract (#7526)

Added

Add v3 page header component (#7625)

Add KMIP auto certificate renewal (#7542)

Add shared provider form contract for dynamic secrets (#7563)

Dismiss selected actions with escape key (#7638)

Fixed

Fix legacy boundary ignore read on secret folders (#7680)

Fix paginated endpoint for listing groups (#7678)

Fix secret scanning report when message is too long (#7664)

Fix derive streaming timestamp from audit log when streaming to Splunk (#7641)

Fix send raw bytes for HEC so Axios doesn't stringify the request (#7637)

Fix gate auth method config behind edit-auth and guard instance admin identities (#7626)

Fix allow suborgs to create GitHub app connection (#7623)

Fix return inputs from PATCH /dynamic-secrets endpoint (#7615)

Fix CSR flow on ADCS issuance (#7608)

Fix prevent Alert from collapsing below its content height (#7675)

Fix use TableCell for skeleton rows in Secret Sharing tables (#7604)

Fix constrain bulk delete dialog width (#7595)

Fix correct tooltip behavior in select menus (#7594)

Fix stop recording high-cardinality meters when drop flag is set (#7564)

Fix post-sync command UI improvements (#7555)

Fix enforce domain component order in certificate policies (#7550)

Fix debounce membership last-login writes (#7650)

Fix improve command input accessibility (#7639)