feat(code-signing): use an existing DigiCert certificate and its HSM key in a signer by @carlosmonastyrski in #8743
feat(cert-manager): add Copy ID to alert and approval policy row menus by @carlosmonastyrski in #8776
feat(secrets): show last edited time in the single-environment overview by @andrewhuhh in #8596
fix(identity-auth): require a trust binding for AWS and GCP machine identities by @lobocv in #8760
fix(agent-vault): github template covers git over https by @saifsmailbox98 in #8792

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.9...v0.167.0

`v0.166.9`

Compare Source

What's Changed

chore: add upgrade impact for v0.166.8 by @github-actions[bot] in #8681
docs: note that Palo Alto Networks syncs need the certificate's private key by @carlosmonastyrski in #8669
fix(ui): keep the org name visible in project and product scope by @andrewhuhh in #8676
fix(ui): right-align sheet footers with Cancel before the primary action by @andrewhuhh in #8675
docs(cert-agent): combined certificate chain output by @bernie-g in #8660
feat(pam): store session recordings in S3-compatible storage by @lb-vn in #8485
docs(cli): note that logout deletes the offline secrets backup by @lobocv in #8648
chore: validate freeze flag before release by @Thiago-AS in #8699
fix: remove PAM from project templates list by @mathnogueira in #8710
feat(pki): add AWS KMS-backed signing keys for internal CAs by @carlosmonastyrski in #8637
fix(identity-access-token): expire the uses-remaining counter with its token by @scott-ray-wilson in #8654
fix(deps): upgrade backend mail, template, telemetry and native hashing packages by @andrewhuhh in #8679
fix(cert-manager): validate certificate profile name inline and keep wizard on the failing step by @andrewhuhh in #8664
chore(frontend): upgrade TypeScript to 5.9 and drop TS 7-removed options by @andrewhuhh in #8682
improvement(ui): migrate CLI redirect page to V3 and align its layout by @andrewhuhh in #8671
fix(billing): show self-hosted billing guidance by license state by @andrewhuhh in #8680
fix(ui): use sub-org scope color for sub-org actions by @andrewhuhh in #8690
fix(secrets-overview): keep row action bar visible while a focused row is hovered by @andrewhuhh in #8696
improvement(frontend): group Add Machine Identity to Project options by product by @andrewhuhh in #8701
improvement(insights): show a blurred preview when Insights is not on the plan by @andrewhuhh in #8703
feat(agent-vault): move variables from access bundles to Agent Vault as a whole by @scott-ray-wilson in #8581
feat(ui): suggested values for naming inputs, starting with secret sync names by @andrewhuhh in #8702
fix(ui): clean up org Product Settings tab by @andrewhuhh in #8713
docs(agent-vault): the session token and access bundle can come from the environment by @saifsmailbox98 in #8104
improvement(ui): move org general and security settings cards to footer layout by @andrewhuhh in #8725
docs(kms): overhaul section by @adkah in #8686
feat(ui): shared EmailInput chip field and email validation by @andrewhuhh in #8663
fix(litellm): accept proxy master keys when validating connections by @victorvhs017 in #8712
improvement(secret-sharing): separator collapse and sticky sheet footer by @andrewhuhh in #8732
improvement(ui): migrate remaining v2 confirm modals to DeleteConfirmDialog by @andrewhuhh in #8716
feat(ui): offer folder access on Pro from the custom role upgrade gate by @andrewhuhh in #8720
improvement(frontend): default Add Machine Identity sheet to Assign Existing by @andrewhuhh in #8722
feat(ui): suggest app connection names from provider and auth method by @andrewhuhh in #8723
feat(ui): suggest honey token names from type and environment by @andrewhuhh in #8727
feat(ui): suggest certificate authority names from CA type, common name, and issuer by @andrewhuhh in #8728
feat(ui): suggest approval policy names from type, environments, and path by @andrewhuhh in #8729
feat(ui): suggest certificate policy names from the selected preset by @andrewhuhh in #8731
docs: migration from legacy InfiscialSecret k8s CRD's by @varonix0 in #8736
feat(signup): open the chosen plan's trial after signup from the pricing page by @andrewhuhh in #8705
fix(secrets): secret name cell focus, scroll, and empty-state fixes by @andrewhuhh in #8735
fix(ui): drop h-full from org page roots so bottom padding survives scroll by @andrewhuhh in #8739
feat(signup): open the pricing trial prompt for signed-in users by @andrewhuhh in #8738
improvement(secrets): make the overview Manage Access button easier to find by @andrewhuhh in #8718
feat: findings revamp by @mathnogueira in #8577
feat: data store list revamp by @mathnogueira in #8631
feat: redesign data source flow by @mathnogueira in #8641
improvement(ui): rename DeleteConfirmDialog to ConfirmationAlertDialog by @andrewhuhh in #8717
feat(db): add audit_log_streams table to sanitized schema by @victorvhs017 in #8746
fix(secret-scanning): reject data sources that reuse an app connection by @claude[bot] in #8758
improvement(pki): pkcs12 password policy by @bernie-g in #8674
fix(webhook): stop delete endpoint from returning encrypted columns by @Arunkoo in #8643
fix: use write op instead of delete in metrics by @mathnogueira in #8764
docs(cli): add troubleshooting guide for failed API requests by @victorvhs017 in #8697
chore(frontend): migrate to React 19 by @andrewhuhh in #8721
improvement(groups): auto-populate group slug from name by @andrewhuhh in #8766
docs(yaml-migration): update docs to reflect the new behavior of the CLI by @adilsitos in #8762
fix(secrets): explain disabled edit and block move for managed secrets by @andrewhuhh in #8704
improvement(auth): name login button in SSO enforcement toast on select-org by @victorvhs017 in #8763
improvement(frontend): consistent slug auto-fill from name across create forms by @andrewhuhh in #8768
docs(ax): agentic quickstart by @adkah in #8324
docs(cli): add sm projects commands by @adkah in #8737
docs(cli): clarify av env variables by @adkah in #8761
fix(approvals): show request folder path in change requests list by @andrewhuhh in #8678
fix(agent-vault): drop discard confirmation from Create Session dialog by @scott-ray-wilson in #8770
docs(agent-vault): mention env variables in the quickstart by @adkah in #8771
docs: add new plans rate limiting values by @Thiago-AS in #8775
feat: added API E2E for scim by @akhilmhdh in #8687
docs(readme): add Agent Vault section by @adkah in #8782
feat(onboarding): add explicit telemetry for onboarding resource links by @andrewhuhh in #8774
feat(ui): show page breadcrumbs in the top navigation on every route by @andrewhuhh in #8747
chore(data-migration): secret access by @adilsitos in #8783
chore(data-migration): secret change by @adilsitos in #8784
improvement(secrets): surface secret imports in Add New dropdown by @andrewhuhh in #8769
fix(docs): improve agentic quickstart styling by @adkah in #8785
docs(readme): audit README for accuracy and product coverage by @adkah in #8787
feat(billing-v2): show offline license usage on unified billing page by @victorvhs017 in #8777

New Contributors

@Arunkoo made their first contribution in #8643

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.8...v0.166.9

`v0.166.8`

Compare Source

What's Changed

feat: add semantic Secrets Overview telemetry by @andrewhuhh in #8636
feat(billing): add optional cancellation comment to the Billing V2 cancel reason event by @andrewhuhh in #8634
docs(secret-scanning): overhaul section by @adkah in #8650
feat(alerts): add authentication and custom headers to webhook channels by @Thiago-AS in #8582
feat(audit-log-stream): alert when a stream starts dropping logs by @lobocv in #8526
feat: added test for saml in api e2e by @akhilmhdh in #8638
improvement(cert-manager): migrate CaInstallCertModal to v3 Dialog by @andrewhuhh in #8592
fix: remove mention of "project" from secret scanning by @mathnogueira in #8568
improvement(secret-manager): migrate native integration creation pages to V3 (S11) by @andrewhuhh in #8614
improvement(secret-manager): migrate native integration creation pages to V3 (S12) by @andrewhuhh in #8617
improvement(integrations): port native provider creation pages to V3 (S13) by @andrewhuhh in #8616
improvement(integrations): port native provider creation pages to V3 (S14) by @andrewhuhh in #8618
fix(auth): allow retry after MFA organization selection fails by @andrewhuhh in #8620
improvement(ui): support Sheet and in-place Combobox creation by @andrewhuhh in #8621
fix(cert-manager): anchor signing configuration sheet footers by @andrewhuhh in #8623
fix(ui): compose machine identity dialog body and footer by @andrewhuhh in #8624
fix(pam): anchor detail sheet headers and action footers by @andrewhuhh in #8625
fix(ui): use canonical Sheet footers in reusable wizard forms by @andrewhuhh in #8626
fix(cert-manager): use canonical Sheet footers by @andrewhuhh in #8627
chore(ui): delete orphan notice family and dead admin adapters by @andrewhuhh in #8630
improvement(ui): compose KMS signing dialogs with V3 shells by @andrewhuhh in #8646
improvement(cert-manager): migrate clear PKI overlays to v3 by @andrewhuhh in #8647
improvement(secret-sharing): masked share value, name prefill, and constraint count by @andrewhuhh in #8633
chore(ui): remove unused V2 SecretPathInput source by @andrewhuhh in #8656
improvement(auth): use V3 alert for passkey failures by @andrewhuhh in #8655
fix(ui): reserve toast close-button space and default bulk bar to icon clear by @andrewhuhh in #8661
improvement(proxied-services): migrate surface picker to Combobox by @andrewhuhh in #8659
fix(cron): dedup fires on a per-job key and skip a new job's first due fire by @lobocv in #8587
fix(identity-ua): compare client secret usage counts as numbers by @lobocv in #8644
fix: resovled test failing due to ci contraint by @akhilmhdh in #8667
feat(query): return all tags for evaluation by @adilsitos in #8576
fix(ui): match quick-add secret key input weight to secret rows by @andrewhuhh in #8670
fix(ui): secret reference selector scrolling, search, and dismissal by @andrewhuhh in #8662
feat(secret-sync-app-connection): support for portainer by @zenato in #7670

New Contributors

@zenato made their first contribution in #7670

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.7...v0.166.8

`v0.166.7`

Compare Source

What's Changed

feat(secrets): edit secret sheet and comment preview in single-environment view by @andrewhuhh in #8607
fix(billing): show credit invoices as Credit and format negative amounts as -$X.XX by @andrewhuhh in #8603
improvement(secret-manager): move Access Control up in the project sidebar by @andrewhuhh in #8601
feat(billing): require a cancellation reason in Billing V2 cancel dialogs by @andrewhuhh in #8606
improvement(kms): migrate signing algorithm selects to v3 by @andrewhuhh in #8454
fix(ui): match pending loaders to button variants by @andrewhuhh in #8619
chore: add upgrade impact for v0.166.5 by @github-actions[bot] in #8574
chore: add upgrade impact for v0.166.6 by @github-actions[bot] in #8628
feat(dynamic-secrets): add Kafka support by @DimitrisStaratzis in #8538
fix(project-membership): use the org default role when inviting to a project via v2 by @lobocv in #8593
improvement(rate-limit): remove unused self-hosted rate limit config by @lobocv in #8546
docs(cli): document secrets management under infisical sm by @victorvhs017 in #8629
fix(secret-sync): reject reserved id key in Chef sync by @claude[bot] in #8579
docs(pki): update cert management ia and content by @adkah in #8622
fix(agent-vault): zero-pad day and hour in session timestamps by @claude[bot] in #8639
improvement(agent-vault): remove Credential column from access bundle services table by @claude[bot] in #8640
improvement(ui): make announcement modal navigation obvious by @andrewhuhh in #8635
fix(ui): keep Select Escape from dismissing parent overlays by @andrewhuhh in #8632
feat(pam): move to alerting module by @lb-vn in #8462

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.6...v0.166.7

`v0.166.6`

Compare Source

What's Changed

breaking(agent-vault): revoke members with DELETE and change roles in bulk by @scott-ray-wilson in #8547
breaking(agent-vault): make every variable secret by @scott-ray-wilson in #8550
improvement(ui): migrate org access pages and KMS settings off V2 primitives by @andrewhuhh in #8569
fix: require the fine-grained identity action everywhere and gate auth template edits by @Thiago-AS in #8509
feat(openrouter-rotation): workspace support by @varonix0 in #8573
docs(secrets-mgmt): ia updates by @adkah in #8572
feat(secret-sync): support encrypted data bags in Chef sync by @DimitrisStaratzis in #8556
fix(insights): read project access volume and auth methods from ClickHouse when enabled by @DimitrisStaratzis in #8560
chore: remove mention of PKI projects by @sheensantoscapadngan in #8539
feat(billing): meter-tile product cards with inline usage details by @andrewhuhh in #8492
docs(secret-scanning): reflect single-project structure in org guide by @mintlify[bot] in #8584
feat(pam): mssql discovery by @lb-vn in #8511
fix(agent-vault): confirm discard before returning to the template step by @devin-ai-integration[bot] in #8588
fix(cert-manager): allow creating a connection inline when installing an intermediate CA via external CA by @claude[bot] in #8564
feat(ui): split project templates by product type by @andrewhuhh in #8563
improvement(table): add V3 skeleton rows and opt-in cell wrapping by @andrewhuhh in #8567
improvement(ui): add V3 overlay layer contract and migrate first Modal and DeleteActionModal consumers by @andrewhuhh in #8570
docs(folder-rbac): match folder access entry points to current UI by @andrewhuhh in #8589
improvement(ui): add 1Password ignore default to V3 Input and text slot to PageLoader by @andrewhuhh in #8571
feat(pki-syncs): add Palo Alto Networks app connection and certificate syncs by @carlosmonastyrski in #8534
improvement(agent-vault): hide reveal toggle over stored secret values by @devin-ai-integration[bot] in #8594
improvement(kms): migrate key operation dialogs to V3 overlays by @andrewhuhh in #8608
improvement(secret-manager): migrate S08 Secret Manager core, integration management and rotation UI to V3 by @andrewhuhh in #8599
improvement(cert-manager): migrate PKI tables, menus and form fields to V3 by @andrewhuhh in #8597
chore: change severity logs in a couple of places by @Thiago-AS in #8602
docs(migration): add a way to migrate the .infisical.json to .infisical.yaml by @adilsitos in #8580
fix(ui): forward V3 SelectTrigger refs by @andrewhuhh in #8613
improvement(ui): migrate rotation, integration management and PAM overlays to V3 by @andrewhuhh in #8610
improvement(ui): migrate org access, settings, auth and project template overlays to V3 by @andrewhuhh in #8611
improvement(ui): migrate shared components, auth entry pages and PAM loaders to V3 by @andrewhuhh in #8612
improvement(cert-manager): migrate CA and certificate detail overlays to V3 by @andrewhuhh in #8615
fix(audit-log): treat "No limit" retention as unlimited instead of dropping every log by @scott-ray-wilson in #8595
improvement(frontend): route cmd+f to the page's / search input by @andrewhuhh in #8565

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.5...v0.166.6

`v0.166.5`

Compare Source

What's Changed

feat: move secret scanning to be a single project product by @mathnogueira in #8512
docs: link new Infisical CLI video in local development guide and CLI quickstart by @devin-ai-integration[bot] in #8553
chore: add upgrade impact for v0.166.4 by @github-actions[bot] in #8561
feat(global-approval): secret change by @adilsitos in #8478
fix(secrets): improve search all folders scoping and results by @andrewhuhh in #8166
docs(cli): update cert-manager agent by @mintlify[bot] in #8559
docs(agent-vault): add setup planner by @adkah in #8548
feature: added banner for subscription payment by @akhilmhdh in #8458
feat: added secrets testcases for api e2e test by @akhilmhdh in #8541
fix(ui): sheet overscroll by @bernie-g in #8514
fix(agent-vault): show contact us instead of billing in upgrade prompts by @andrewhuhh in #8554
fix(frontend): stop secrets overview re-rendering every row while resizing by @andrewhuhh in #8543
feat(secrets): import nested JSON objects as folders by @claude[bot] in #8414
docs(style): square the corners of the Agent Vault preview badge by @adkah in #8562
fix(telemetry): preserve secret quantities by pull channel by @andrewhuhh in #8544
improvement(agent-vault): serve session logs from S3 instead of a chunks table by @saifsmailbox98 in #8497
fix: normalize damaged PEM input on certificate import by @carlosmonastyrski in #8566

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.4...v0.166.5

`v0.166.4`

Compare Source

What's Changed

docs(agent-vault): clarify proxy enrollment steps by @adkah in #8528
docs(agent-vault): fix dynamic link styling in quickstart by @adkah in #8529
fix(frontend): close product plans popover on View Billing click by @andrewhuhh in #8531
docs(agent-vault): add programmatic guides by @adkah in #8524
fix(billing): use secrets_manager product key for Secrets Management by @andrewhuhh in #8535
feat(agent-vault): use the org ID as the AWS External ID and show it by @saifsmailbox98 in #8375
feat(reminders): deliver secret reminders through alert channels by @lobocv in #8356
feat(secrets-sync): add Cloudflare Secrets Store integration by @DimitrisStaratzis in #8500
chore: add upgrade impact for v0.166.3 by @github-actions[bot] in #8530
fix: block DNS rebinding by @carlosmonastyrski in #8515
feature(pki): audit log certificate issuance failures by @bernie-g in #8480
fix(frontend): block secret uploads that exceed the 1 MB request limit by @andrewhuhh in #8533
breaking(agent-vault): flatten member responses and drop the membership id by @scott-ray-wilson in #8373
feat(pam): allow org admins to join any folder by @sheensantoscapadngan in #8510
feat(secret-sync): keeper by @adilsitos in #8518
chore: record resource name in alert audit events by @carlosmonastyrski in #8545
feat(frontend): virtualize secret preview tables in bulk actions by @andrewhuhh in #8542
fix(secrets-overview): keep expanded row chevron stable in multi-env view by @andrewhuhh in #8549
improvement(ui): standardize Loader on the yellow brand mark by @andrewhuhh in #8555
fix: resolved failing honey token for unlimited mode by @akhilmhdh in #8557
feat: address greptile comments in honey token fix by @akhilmhdh in #8558

Full Changelog: https://github.com/Infisical/infisical/compare/v0.166.3...v0.166.4

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [infisical/infisical](https://infisical.com) ([source](https://github.com/Infisical/infisical)) | minor | `v0.166.3` → `v0.167.0` | --- > ⚠️ **Warning** > > Some dependencies could not be looked up. Check the [Dependency Dashboard](issues/12) for more information. Updates for stacks in `docker/containers/infisical`. --- ### Release Notes <details> <summary>Infisical/infisical (infisical/infisical)</summary> ### [`v0.167.0`](https://github.com/Infisical/infisical/releases/tag/v0.167.0) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.9...v0.167.0) #### What's Changed - feat(code-signing): use an existing DigiCert certificate and its HSM key in a signer by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8743](https://github.com/Infisical/infisical/pull/8743) - feat(cert-manager): add Copy ID to alert and approval policy row menus by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8776](https://github.com/Infisical/infisical/pull/8776) - feat(secrets): show last edited time in the single-environment overview by [@andrewhuhh](https://github.com/andrewhuhh) in [#8596](https://github.com/Infisical/infisical/pull/8596) - fix(identity-auth): require a trust binding for AWS and GCP machine identities by [@lobocv](https://github.com/lobocv) in [#8760](https://github.com/Infisical/infisical/pull/8760) - fix(agent-vault): github template covers git over https by [@saifsmailbox98](https://github.com/saifsmailbox98) in [#8792](https://github.com/Infisical/infisical/pull/8792) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.9...v0.167.0> ### [`v0.166.9`](https://github.com/Infisical/infisical/releases/tag/v0.166.9) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.8...v0.166.9) #### What's Changed - chore: add upgrade impact for v0.166.8 by [@github-actions](https://github.com/github-actions)\[bot] in [#8681](https://github.com/Infisical/infisical/pull/8681) - docs: note that Palo Alto Networks syncs need the certificate's private key by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8669](https://github.com/Infisical/infisical/pull/8669) - fix(ui): keep the org name visible in project and product scope by [@andrewhuhh](https://github.com/andrewhuhh) in [#8676](https://github.com/Infisical/infisical/pull/8676) - fix(ui): right-align sheet footers with Cancel before the primary action by [@andrewhuhh](https://github.com/andrewhuhh) in [#8675](https://github.com/Infisical/infisical/pull/8675) - docs(cert-agent): combined certificate chain output by [@bernie-g](https://github.com/bernie-g) in [#8660](https://github.com/Infisical/infisical/pull/8660) - feat(pam): store session recordings in S3-compatible storage by [@lb-vn](https://github.com/lb-vn) in [#8485](https://github.com/Infisical/infisical/pull/8485) - docs(cli): note that logout deletes the offline secrets backup by [@lobocv](https://github.com/lobocv) in [#8648](https://github.com/Infisical/infisical/pull/8648) - chore: validate freeze flag before release by [@Thiago-AS](https://github.com/Thiago-AS) in [#8699](https://github.com/Infisical/infisical/pull/8699) - fix: remove PAM from project templates list by [@mathnogueira](https://github.com/mathnogueira) in [#8710](https://github.com/Infisical/infisical/pull/8710) - feat(pki): add AWS KMS-backed signing keys for internal CAs by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8637](https://github.com/Infisical/infisical/pull/8637) - fix(identity-access-token): expire the uses-remaining counter with its token by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8654](https://github.com/Infisical/infisical/pull/8654) - fix(deps): upgrade backend mail, template, telemetry and native hashing packages by [@andrewhuhh](https://github.com/andrewhuhh) in [#8679](https://github.com/Infisical/infisical/pull/8679) - fix(cert-manager): validate certificate profile name inline and keep wizard on the failing step by [@andrewhuhh](https://github.com/andrewhuhh) in [#8664](https://github.com/Infisical/infisical/pull/8664) - chore(frontend): upgrade TypeScript to 5.9 and drop TS 7-removed options by [@andrewhuhh](https://github.com/andrewhuhh) in [#8682](https://github.com/Infisical/infisical/pull/8682) - improvement(ui): migrate CLI redirect page to V3 and align its layout by [@andrewhuhh](https://github.com/andrewhuhh) in [#8671](https://github.com/Infisical/infisical/pull/8671) - fix(billing): show self-hosted billing guidance by license state by [@andrewhuhh](https://github.com/andrewhuhh) in [#8680](https://github.com/Infisical/infisical/pull/8680) - fix(ui): use sub-org scope color for sub-org actions by [@andrewhuhh](https://github.com/andrewhuhh) in [#8690](https://github.com/Infisical/infisical/pull/8690) - fix(secrets-overview): keep row action bar visible while a focused row is hovered by [@andrewhuhh](https://github.com/andrewhuhh) in [#8696](https://github.com/Infisical/infisical/pull/8696) - improvement(frontend): group Add Machine Identity to Project options by product by [@andrewhuhh](https://github.com/andrewhuhh) in [#8701](https://github.com/Infisical/infisical/pull/8701) - improvement(insights): show a blurred preview when Insights is not on the plan by [@andrewhuhh](https://github.com/andrewhuhh) in [#8703](https://github.com/Infisical/infisical/pull/8703) - feat(agent-vault): move variables from access bundles to Agent Vault as a whole by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8581](https://github.com/Infisical/infisical/pull/8581) - feat(ui): suggested values for naming inputs, starting with secret sync names by [@andrewhuhh](https://github.com/andrewhuhh) in [#8702](https://github.com/Infisical/infisical/pull/8702) - fix(ui): clean up org Product Settings tab by [@andrewhuhh](https://github.com/andrewhuhh) in [#8713](https://github.com/Infisical/infisical/pull/8713) - docs(agent-vault): the session token and access bundle can come from the environment by [@saifsmailbox98](https://github.com/saifsmailbox98) in [#8104](https://github.com/Infisical/infisical/pull/8104) - improvement(ui): move org general and security settings cards to footer layout by [@andrewhuhh](https://github.com/andrewhuhh) in [#8725](https://github.com/Infisical/infisical/pull/8725) - docs(kms): overhaul section by [@adkah](https://github.com/adkah) in [#8686](https://github.com/Infisical/infisical/pull/8686) - feat(ui): shared EmailInput chip field and email validation by [@andrewhuhh](https://github.com/andrewhuhh) in [#8663](https://github.com/Infisical/infisical/pull/8663) - fix(litellm): accept proxy master keys when validating connections by [@victorvhs017](https://github.com/victorvhs017) in [#8712](https://github.com/Infisical/infisical/pull/8712) - improvement(secret-sharing): separator collapse and sticky sheet footer by [@andrewhuhh](https://github.com/andrewhuhh) in [#8732](https://github.com/Infisical/infisical/pull/8732) - improvement(ui): migrate remaining v2 confirm modals to DeleteConfirmDialog by [@andrewhuhh](https://github.com/andrewhuhh) in [#8716](https://github.com/Infisical/infisical/pull/8716) - feat(ui): offer folder access on Pro from the custom role upgrade gate by [@andrewhuhh](https://github.com/andrewhuhh) in [#8720](https://github.com/Infisical/infisical/pull/8720) - improvement(frontend): default Add Machine Identity sheet to Assign Existing by [@andrewhuhh](https://github.com/andrewhuhh) in [#8722](https://github.com/Infisical/infisical/pull/8722) - feat(ui): suggest app connection names from provider and auth method by [@andrewhuhh](https://github.com/andrewhuhh) in [#8723](https://github.com/Infisical/infisical/pull/8723) - feat(ui): suggest honey token names from type and environment by [@andrewhuhh](https://github.com/andrewhuhh) in [#8727](https://github.com/Infisical/infisical/pull/8727) - feat(ui): suggest certificate authority names from CA type, common name, and issuer by [@andrewhuhh](https://github.com/andrewhuhh) in [#8728](https://github.com/Infisical/infisical/pull/8728) - feat(ui): suggest approval policy names from type, environments, and path by [@andrewhuhh](https://github.com/andrewhuhh) in [#8729](https://github.com/Infisical/infisical/pull/8729) - feat(ui): suggest certificate policy names from the selected preset by [@andrewhuhh](https://github.com/andrewhuhh) in [#8731](https://github.com/Infisical/infisical/pull/8731) - docs: migration from legacy InfiscialSecret k8s CRD's by [@varonix0](https://github.com/varonix0) in [#8736](https://github.com/Infisical/infisical/pull/8736) - feat(signup): open the chosen plan's trial after signup from the pricing page by [@andrewhuhh](https://github.com/andrewhuhh) in [#8705](https://github.com/Infisical/infisical/pull/8705) - fix(secrets): secret name cell focus, scroll, and empty-state fixes by [@andrewhuhh](https://github.com/andrewhuhh) in [#8735](https://github.com/Infisical/infisical/pull/8735) - fix(ui): drop h-full from org page roots so bottom padding survives scroll by [@andrewhuhh](https://github.com/andrewhuhh) in [#8739](https://github.com/Infisical/infisical/pull/8739) - feat(signup): open the pricing trial prompt for signed-in users by [@andrewhuhh](https://github.com/andrewhuhh) in [#8738](https://github.com/Infisical/infisical/pull/8738) - improvement(secrets): make the overview Manage Access button easier to find by [@andrewhuhh](https://github.com/andrewhuhh) in [#8718](https://github.com/Infisical/infisical/pull/8718) - feat: findings revamp by [@mathnogueira](https://github.com/mathnogueira) in [#8577](https://github.com/Infisical/infisical/pull/8577) - feat: data store list revamp by [@mathnogueira](https://github.com/mathnogueira) in [#8631](https://github.com/Infisical/infisical/pull/8631) - feat: redesign data source flow by [@mathnogueira](https://github.com/mathnogueira) in [#8641](https://github.com/Infisical/infisical/pull/8641) - improvement(ui): rename DeleteConfirmDialog to ConfirmationAlertDialog by [@andrewhuhh](https://github.com/andrewhuhh) in [#8717](https://github.com/Infisical/infisical/pull/8717) - feat(db): add audit\_log\_streams table to sanitized schema by [@victorvhs017](https://github.com/victorvhs017) in [#8746](https://github.com/Infisical/infisical/pull/8746) - fix(secret-scanning): reject data sources that reuse an app connection by [@claude](https://github.com/claude)\[bot] in [#8758](https://github.com/Infisical/infisical/pull/8758) - improvement(pki): pkcs12 password policy by [@bernie-g](https://github.com/bernie-g) in [#8674](https://github.com/Infisical/infisical/pull/8674) - fix(webhook): stop delete endpoint from returning encrypted columns by [@Arunkoo](https://github.com/Arunkoo) in [#8643](https://github.com/Infisical/infisical/pull/8643) - fix: use write op instead of delete in metrics by [@mathnogueira](https://github.com/mathnogueira) in [#8764](https://github.com/Infisical/infisical/pull/8764) - docs(cli): add troubleshooting guide for failed API requests by [@victorvhs017](https://github.com/victorvhs017) in [#8697](https://github.com/Infisical/infisical/pull/8697) - chore(frontend): migrate to React 19 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8721](https://github.com/Infisical/infisical/pull/8721) - improvement(groups): auto-populate group slug from name by [@andrewhuhh](https://github.com/andrewhuhh) in [#8766](https://github.com/Infisical/infisical/pull/8766) - docs(yaml-migration): update docs to reflect the new behavior of the CLI by [@adilsitos](https://github.com/adilsitos) in [#8762](https://github.com/Infisical/infisical/pull/8762) - fix(secrets): explain disabled edit and block move for managed secrets by [@andrewhuhh](https://github.com/andrewhuhh) in [#8704](https://github.com/Infisical/infisical/pull/8704) - improvement(auth): name login button in SSO enforcement toast on select-org by [@victorvhs017](https://github.com/victorvhs017) in [#8763](https://github.com/Infisical/infisical/pull/8763) - improvement(frontend): consistent slug auto-fill from name across create forms by [@andrewhuhh](https://github.com/andrewhuhh) in [#8768](https://github.com/Infisical/infisical/pull/8768) - docs(ax): agentic quickstart by [@adkah](https://github.com/adkah) in [#8324](https://github.com/Infisical/infisical/pull/8324) - docs(cli): add sm projects commands by [@adkah](https://github.com/adkah) in [#8737](https://github.com/Infisical/infisical/pull/8737) - docs(cli): clarify av env variables by [@adkah](https://github.com/adkah) in [#8761](https://github.com/Infisical/infisical/pull/8761) - fix(approvals): show request folder path in change requests list by [@andrewhuhh](https://github.com/andrewhuhh) in [#8678](https://github.com/Infisical/infisical/pull/8678) - fix(agent-vault): drop discard confirmation from Create Session dialog by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8770](https://github.com/Infisical/infisical/pull/8770) - docs(agent-vault): mention env variables in the quickstart by [@adkah](https://github.com/adkah) in [#8771](https://github.com/Infisical/infisical/pull/8771) - docs: add new plans rate limiting values by [@Thiago-AS](https://github.com/Thiago-AS) in [#8775](https://github.com/Infisical/infisical/pull/8775) - feat: added API E2E for scim by [@akhilmhdh](https://github.com/akhilmhdh) in [#8687](https://github.com/Infisical/infisical/pull/8687) - docs(readme): add Agent Vault section by [@adkah](https://github.com/adkah) in [#8782](https://github.com/Infisical/infisical/pull/8782) - feat(onboarding): add explicit telemetry for onboarding resource links by [@andrewhuhh](https://github.com/andrewhuhh) in [#8774](https://github.com/Infisical/infisical/pull/8774) - feat(ui): show page breadcrumbs in the top navigation on every route by [@andrewhuhh](https://github.com/andrewhuhh) in [#8747](https://github.com/Infisical/infisical/pull/8747) - chore(data-migration): secret access by [@adilsitos](https://github.com/adilsitos) in [#8783](https://github.com/Infisical/infisical/pull/8783) - chore(data-migration): secret change by [@adilsitos](https://github.com/adilsitos) in [#8784](https://github.com/Infisical/infisical/pull/8784) - improvement(secrets): surface secret imports in Add New dropdown by [@andrewhuhh](https://github.com/andrewhuhh) in [#8769](https://github.com/Infisical/infisical/pull/8769) - fix(docs): improve agentic quickstart styling by [@adkah](https://github.com/adkah) in [#8785](https://github.com/Infisical/infisical/pull/8785) - docs(readme): audit README for accuracy and product coverage by [@adkah](https://github.com/adkah) in [#8787](https://github.com/Infisical/infisical/pull/8787) - feat(billing-v2): show offline license usage on unified billing page by [@victorvhs017](https://github.com/victorvhs017) in [#8777](https://github.com/Infisical/infisical/pull/8777) #### New Contributors - [@Arunkoo](https://github.com/Arunkoo) made their first contribution in [#8643](https://github.com/Infisical/infisical/pull/8643) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.8...v0.166.9> ### [`v0.166.8`](https://github.com/Infisical/infisical/releases/tag/v0.166.8) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.7...v0.166.8) #### What's Changed - feat: add semantic Secrets Overview telemetry by [@andrewhuhh](https://github.com/andrewhuhh) in [#8636](https://github.com/Infisical/infisical/pull/8636) - feat(billing): add optional cancellation comment to the Billing V2 cancel reason event by [@andrewhuhh](https://github.com/andrewhuhh) in [#8634](https://github.com/Infisical/infisical/pull/8634) - docs(secret-scanning): overhaul section by [@adkah](https://github.com/adkah) in [#8650](https://github.com/Infisical/infisical/pull/8650) - feat(alerts): add authentication and custom headers to webhook channels by [@Thiago-AS](https://github.com/Thiago-AS) in [#8582](https://github.com/Infisical/infisical/pull/8582) - feat(audit-log-stream): alert when a stream starts dropping logs by [@lobocv](https://github.com/lobocv) in [#8526](https://github.com/Infisical/infisical/pull/8526) - feat: added test for saml in api e2e by [@akhilmhdh](https://github.com/akhilmhdh) in [#8638](https://github.com/Infisical/infisical/pull/8638) - improvement(cert-manager): migrate CaInstallCertModal to v3 Dialog by [@andrewhuhh](https://github.com/andrewhuhh) in [#8592](https://github.com/Infisical/infisical/pull/8592) - fix: remove mention of "project" from secret scanning by [@mathnogueira](https://github.com/mathnogueira) in [#8568](https://github.com/Infisical/infisical/pull/8568) - improvement(secret-manager): migrate native integration creation pages to V3 (S11) by [@andrewhuhh](https://github.com/andrewhuhh) in [#8614](https://github.com/Infisical/infisical/pull/8614) - improvement(secret-manager): migrate native integration creation pages to V3 (S12) by [@andrewhuhh](https://github.com/andrewhuhh) in [#8617](https://github.com/Infisical/infisical/pull/8617) - improvement(integrations): port native provider creation pages to V3 (S13) by [@andrewhuhh](https://github.com/andrewhuhh) in [#8616](https://github.com/Infisical/infisical/pull/8616) - improvement(integrations): port native provider creation pages to V3 (S14) by [@andrewhuhh](https://github.com/andrewhuhh) in [#8618](https://github.com/Infisical/infisical/pull/8618) - fix(auth): allow retry after MFA organization selection fails by [@andrewhuhh](https://github.com/andrewhuhh) in [#8620](https://github.com/Infisical/infisical/pull/8620) - improvement(ui): support Sheet and in-place Combobox creation by [@andrewhuhh](https://github.com/andrewhuhh) in [#8621](https://github.com/Infisical/infisical/pull/8621) - fix(cert-manager): anchor signing configuration sheet footers by [@andrewhuhh](https://github.com/andrewhuhh) in [#8623](https://github.com/Infisical/infisical/pull/8623) - fix(ui): compose machine identity dialog body and footer by [@andrewhuhh](https://github.com/andrewhuhh) in [#8624](https://github.com/Infisical/infisical/pull/8624) - fix(pam): anchor detail sheet headers and action footers by [@andrewhuhh](https://github.com/andrewhuhh) in [#8625](https://github.com/Infisical/infisical/pull/8625) - fix(ui): use canonical Sheet footers in reusable wizard forms by [@andrewhuhh](https://github.com/andrewhuhh) in [#8626](https://github.com/Infisical/infisical/pull/8626) - fix(cert-manager): use canonical Sheet footers by [@andrewhuhh](https://github.com/andrewhuhh) in [#8627](https://github.com/Infisical/infisical/pull/8627) - chore(ui): delete orphan notice family and dead admin adapters by [@andrewhuhh](https://github.com/andrewhuhh) in [#8630](https://github.com/Infisical/infisical/pull/8630) - improvement(ui): compose KMS signing dialogs with V3 shells by [@andrewhuhh](https://github.com/andrewhuhh) in [#8646](https://github.com/Infisical/infisical/pull/8646) - improvement(cert-manager): migrate clear PKI overlays to v3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8647](https://github.com/Infisical/infisical/pull/8647) - improvement(secret-sharing): masked share value, name prefill, and constraint count by [@andrewhuhh](https://github.com/andrewhuhh) in [#8633](https://github.com/Infisical/infisical/pull/8633) - chore(ui): remove unused V2 SecretPathInput source by [@andrewhuhh](https://github.com/andrewhuhh) in [#8656](https://github.com/Infisical/infisical/pull/8656) - improvement(auth): use V3 alert for passkey failures by [@andrewhuhh](https://github.com/andrewhuhh) in [#8655](https://github.com/Infisical/infisical/pull/8655) - fix(ui): reserve toast close-button space and default bulk bar to icon clear by [@andrewhuhh](https://github.com/andrewhuhh) in [#8661](https://github.com/Infisical/infisical/pull/8661) - improvement(proxied-services): migrate surface picker to Combobox by [@andrewhuhh](https://github.com/andrewhuhh) in [#8659](https://github.com/Infisical/infisical/pull/8659) - fix(cron): dedup fires on a per-job key and skip a new job's first due fire by [@lobocv](https://github.com/lobocv) in [#8587](https://github.com/Infisical/infisical/pull/8587) - fix(identity-ua): compare client secret usage counts as numbers by [@lobocv](https://github.com/lobocv) in [#8644](https://github.com/Infisical/infisical/pull/8644) - fix: resovled test failing due to ci contraint by [@akhilmhdh](https://github.com/akhilmhdh) in [#8667](https://github.com/Infisical/infisical/pull/8667) - feat(query): return all tags for evaluation by [@adilsitos](https://github.com/adilsitos) in [#8576](https://github.com/Infisical/infisical/pull/8576) - fix(ui): match quick-add secret key input weight to secret rows by [@andrewhuhh](https://github.com/andrewhuhh) in [#8670](https://github.com/Infisical/infisical/pull/8670) - fix(ui): secret reference selector scrolling, search, and dismissal by [@andrewhuhh](https://github.com/andrewhuhh) in [#8662](https://github.com/Infisical/infisical/pull/8662) - feat(secret-sync-app-connection): support for portainer by [@zenato](https://github.com/zenato) in [#7670](https://github.com/Infisical/infisical/pull/7670) #### New Contributors - [@zenato](https://github.com/zenato) made their first contribution in [#7670](https://github.com/Infisical/infisical/pull/7670) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.7...v0.166.8> ### [`v0.166.7`](https://github.com/Infisical/infisical/releases/tag/v0.166.7) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.6...v0.166.7) #### What's Changed - feat(secrets): edit secret sheet and comment preview in single-environment view by [@andrewhuhh](https://github.com/andrewhuhh) in [#8607](https://github.com/Infisical/infisical/pull/8607) - fix(billing): show credit invoices as Credit and format negative amounts as -$X.XX by [@andrewhuhh](https://github.com/andrewhuhh) in [#8603](https://github.com/Infisical/infisical/pull/8603) - improvement(secret-manager): move Access Control up in the project sidebar by [@andrewhuhh](https://github.com/andrewhuhh) in [#8601](https://github.com/Infisical/infisical/pull/8601) - feat(billing): require a cancellation reason in Billing V2 cancel dialogs by [@andrewhuhh](https://github.com/andrewhuhh) in [#8606](https://github.com/Infisical/infisical/pull/8606) - improvement(kms): migrate signing algorithm selects to v3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8454](https://github.com/Infisical/infisical/pull/8454) - fix(ui): match pending loaders to button variants by [@andrewhuhh](https://github.com/andrewhuhh) in [#8619](https://github.com/Infisical/infisical/pull/8619) - chore: add upgrade impact for v0.166.5 by [@github-actions](https://github.com/github-actions)\[bot] in [#8574](https://github.com/Infisical/infisical/pull/8574) - chore: add upgrade impact for v0.166.6 by [@github-actions](https://github.com/github-actions)\[bot] in [#8628](https://github.com/Infisical/infisical/pull/8628) - feat(dynamic-secrets): add Kafka support by [@DimitrisStaratzis](https://github.com/DimitrisStaratzis) in [#8538](https://github.com/Infisical/infisical/pull/8538) - fix(project-membership): use the org default role when inviting to a project via v2 by [@lobocv](https://github.com/lobocv) in [#8593](https://github.com/Infisical/infisical/pull/8593) - improvement(rate-limit): remove unused self-hosted rate limit config by [@lobocv](https://github.com/lobocv) in [#8546](https://github.com/Infisical/infisical/pull/8546) - docs(cli): document secrets management under infisical sm by [@victorvhs017](https://github.com/victorvhs017) in [#8629](https://github.com/Infisical/infisical/pull/8629) - fix(secret-sync): reject reserved `id` key in Chef sync by [@claude](https://github.com/claude)\[bot] in [#8579](https://github.com/Infisical/infisical/pull/8579) - docs(pki): update cert management ia and content by [@adkah](https://github.com/adkah) in [#8622](https://github.com/Infisical/infisical/pull/8622) - fix(agent-vault): zero-pad day and hour in session timestamps by [@claude](https://github.com/claude)\[bot] in [#8639](https://github.com/Infisical/infisical/pull/8639) - improvement(agent-vault): remove Credential column from access bundle services table by [@claude](https://github.com/claude)\[bot] in [#8640](https://github.com/Infisical/infisical/pull/8640) - improvement(ui): make announcement modal navigation obvious by [@andrewhuhh](https://github.com/andrewhuhh) in [#8635](https://github.com/Infisical/infisical/pull/8635) - fix(ui): keep Select Escape from dismissing parent overlays by [@andrewhuhh](https://github.com/andrewhuhh) in [#8632](https://github.com/Infisical/infisical/pull/8632) - feat(pam): move to alerting module by [@lb-vn](https://github.com/lb-vn) in [#8462](https://github.com/Infisical/infisical/pull/8462) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.6...v0.166.7> ### [`v0.166.6`](https://github.com/Infisical/infisical/releases/tag/v0.166.6) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.5...v0.166.6) #### What's Changed - breaking(agent-vault): revoke members with DELETE and change roles in bulk by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8547](https://github.com/Infisical/infisical/pull/8547) - breaking(agent-vault): make every variable secret by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8550](https://github.com/Infisical/infisical/pull/8550) - improvement(ui): migrate org access pages and KMS settings off V2 primitives by [@andrewhuhh](https://github.com/andrewhuhh) in [#8569](https://github.com/Infisical/infisical/pull/8569) - fix: require the fine-grained identity action everywhere and gate auth template edits by [@Thiago-AS](https://github.com/Thiago-AS) in [#8509](https://github.com/Infisical/infisical/pull/8509) - feat(openrouter-rotation): workspace support by [@varonix0](https://github.com/varonix0) in [#8573](https://github.com/Infisical/infisical/pull/8573) - docs(secrets-mgmt): ia updates by [@adkah](https://github.com/adkah) in [#8572](https://github.com/Infisical/infisical/pull/8572) - feat(secret-sync): support encrypted data bags in Chef sync by [@DimitrisStaratzis](https://github.com/DimitrisStaratzis) in [#8556](https://github.com/Infisical/infisical/pull/8556) - fix(insights): read project access volume and auth methods from ClickHouse when enabled by [@DimitrisStaratzis](https://github.com/DimitrisStaratzis) in [#8560](https://github.com/Infisical/infisical/pull/8560) - chore: remove mention of PKI projects by [@sheensantoscapadngan](https://github.com/sheensantoscapadngan) in [#8539](https://github.com/Infisical/infisical/pull/8539) - feat(billing): meter-tile product cards with inline usage details by [@andrewhuhh](https://github.com/andrewhuhh) in [#8492](https://github.com/Infisical/infisical/pull/8492) - docs(secret-scanning): reflect single-project structure in org guide by [@mintlify](https://github.com/mintlify)\[bot] in [#8584](https://github.com/Infisical/infisical/pull/8584) - feat(pam): mssql discovery by [@lb-vn](https://github.com/lb-vn) in [#8511](https://github.com/Infisical/infisical/pull/8511) - fix(agent-vault): confirm discard before returning to the template step by [@devin-ai-integration](https://github.com/devin-ai-integration)\[bot] in [#8588](https://github.com/Infisical/infisical/pull/8588) - fix(cert-manager): allow creating a connection inline when installing an intermediate CA via external CA by [@claude](https://github.com/claude)\[bot] in [#8564](https://github.com/Infisical/infisical/pull/8564) - feat(ui): split project templates by product type by [@andrewhuhh](https://github.com/andrewhuhh) in [#8563](https://github.com/Infisical/infisical/pull/8563) - improvement(table): add V3 skeleton rows and opt-in cell wrapping by [@andrewhuhh](https://github.com/andrewhuhh) in [#8567](https://github.com/Infisical/infisical/pull/8567) - improvement(ui): add V3 overlay layer contract and migrate first Modal and DeleteActionModal consumers by [@andrewhuhh](https://github.com/andrewhuhh) in [#8570](https://github.com/Infisical/infisical/pull/8570) - docs(folder-rbac): match folder access entry points to current UI by [@andrewhuhh](https://github.com/andrewhuhh) in [#8589](https://github.com/Infisical/infisical/pull/8589) - improvement(ui): add 1Password ignore default to V3 Input and text slot to PageLoader by [@andrewhuhh](https://github.com/andrewhuhh) in [#8571](https://github.com/Infisical/infisical/pull/8571) - feat(pki-syncs): add Palo Alto Networks app connection and certificate syncs by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8534](https://github.com/Infisical/infisical/pull/8534) - improvement(agent-vault): hide reveal toggle over stored secret values by [@devin-ai-integration](https://github.com/devin-ai-integration)\[bot] in [#8594](https://github.com/Infisical/infisical/pull/8594) - improvement(kms): migrate key operation dialogs to V3 overlays by [@andrewhuhh](https://github.com/andrewhuhh) in [#8608](https://github.com/Infisical/infisical/pull/8608) - improvement(secret-manager): migrate S08 Secret Manager core, integration management and rotation UI to V3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8599](https://github.com/Infisical/infisical/pull/8599) - improvement(cert-manager): migrate PKI tables, menus and form fields to V3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8597](https://github.com/Infisical/infisical/pull/8597) - chore: change severity logs in a couple of places by [@Thiago-AS](https://github.com/Thiago-AS) in [#8602](https://github.com/Infisical/infisical/pull/8602) - docs(migration): add a way to migrate the .infisical.json to .infisical.yaml by [@adilsitos](https://github.com/adilsitos) in [#8580](https://github.com/Infisical/infisical/pull/8580) - fix(ui): forward V3 SelectTrigger refs by [@andrewhuhh](https://github.com/andrewhuhh) in [#8613](https://github.com/Infisical/infisical/pull/8613) - improvement(ui): migrate rotation, integration management and PAM overlays to V3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8610](https://github.com/Infisical/infisical/pull/8610) - improvement(ui): migrate org access, settings, auth and project template overlays to V3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8611](https://github.com/Infisical/infisical/pull/8611) - improvement(ui): migrate shared components, auth entry pages and PAM loaders to V3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8612](https://github.com/Infisical/infisical/pull/8612) - improvement(cert-manager): migrate CA and certificate detail overlays to V3 by [@andrewhuhh](https://github.com/andrewhuhh) in [#8615](https://github.com/Infisical/infisical/pull/8615) - fix(audit-log): treat "No limit" retention as unlimited instead of dropping every log by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8595](https://github.com/Infisical/infisical/pull/8595) - improvement(frontend): route cmd+f to the page's / search input by [@andrewhuhh](https://github.com/andrewhuhh) in [#8565](https://github.com/Infisical/infisical/pull/8565) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.5...v0.166.6> ### [`v0.166.5`](https://github.com/Infisical/infisical/releases/tag/v0.166.5) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.4...v0.166.5) #### What's Changed - feat: move secret scanning to be a single project product by [@mathnogueira](https://github.com/mathnogueira) in [#8512](https://github.com/Infisical/infisical/pull/8512) - docs: link new Infisical CLI video in local development guide and CLI quickstart by [@devin-ai-integration](https://github.com/devin-ai-integration)\[bot] in [#8553](https://github.com/Infisical/infisical/pull/8553) - chore: add upgrade impact for v0.166.4 by [@github-actions](https://github.com/github-actions)\[bot] in [#8561](https://github.com/Infisical/infisical/pull/8561) - feat(global-approval): secret change by [@adilsitos](https://github.com/adilsitos) in [#8478](https://github.com/Infisical/infisical/pull/8478) - fix(secrets): improve search all folders scoping and results by [@andrewhuhh](https://github.com/andrewhuhh) in [#8166](https://github.com/Infisical/infisical/pull/8166) - docs(cli): update cert-manager agent by [@mintlify](https://github.com/mintlify)\[bot] in [#8559](https://github.com/Infisical/infisical/pull/8559) - docs(agent-vault): add setup planner by [@adkah](https://github.com/adkah) in [#8548](https://github.com/Infisical/infisical/pull/8548) - feature: added banner for subscription payment by [@akhilmhdh](https://github.com/akhilmhdh) in [#8458](https://github.com/Infisical/infisical/pull/8458) - feat: added secrets testcases for api e2e test by [@akhilmhdh](https://github.com/akhilmhdh) in [#8541](https://github.com/Infisical/infisical/pull/8541) - fix(ui): sheet overscroll by [@bernie-g](https://github.com/bernie-g) in [#8514](https://github.com/Infisical/infisical/pull/8514) - fix(agent-vault): show contact us instead of billing in upgrade prompts by [@andrewhuhh](https://github.com/andrewhuhh) in [#8554](https://github.com/Infisical/infisical/pull/8554) - fix(frontend): stop secrets overview re-rendering every row while resizing by [@andrewhuhh](https://github.com/andrewhuhh) in [#8543](https://github.com/Infisical/infisical/pull/8543) - feat(secrets): import nested JSON objects as folders by [@claude](https://github.com/claude)\[bot] in [#8414](https://github.com/Infisical/infisical/pull/8414) - docs(style): square the corners of the Agent Vault preview badge by [@adkah](https://github.com/adkah) in [#8562](https://github.com/Infisical/infisical/pull/8562) - fix(telemetry): preserve secret quantities by pull channel by [@andrewhuhh](https://github.com/andrewhuhh) in [#8544](https://github.com/Infisical/infisical/pull/8544) - improvement(agent-vault): serve session logs from S3 instead of a chunks table by [@saifsmailbox98](https://github.com/saifsmailbox98) in [#8497](https://github.com/Infisical/infisical/pull/8497) - fix: normalize damaged PEM input on certificate import by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8566](https://github.com/Infisical/infisical/pull/8566) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.4...v0.166.5> ### [`v0.166.4`](https://github.com/Infisical/infisical/releases/tag/v0.166.4) [Compare Source](https://github.com/Infisical/infisical/compare/v0.166.3...v0.166.4) #### What's Changed - docs(agent-vault): clarify proxy enrollment steps by [@adkah](https://github.com/adkah) in [#8528](https://github.com/Infisical/infisical/pull/8528) - docs(agent-vault): fix dynamic link styling in quickstart by [@adkah](https://github.com/adkah) in [#8529](https://github.com/Infisical/infisical/pull/8529) - fix(frontend): close product plans popover on View Billing click by [@andrewhuhh](https://github.com/andrewhuhh) in [#8531](https://github.com/Infisical/infisical/pull/8531) - docs(agent-vault): add programmatic guides by [@adkah](https://github.com/adkah) in [#8524](https://github.com/Infisical/infisical/pull/8524) - fix(billing): use secrets\_manager product key for Secrets Management by [@andrewhuhh](https://github.com/andrewhuhh) in [#8535](https://github.com/Infisical/infisical/pull/8535) - feat(agent-vault): use the org ID as the AWS External ID and show it by [@saifsmailbox98](https://github.com/saifsmailbox98) in [#8375](https://github.com/Infisical/infisical/pull/8375) - feat(reminders): deliver secret reminders through alert channels by [@lobocv](https://github.com/lobocv) in [#8356](https://github.com/Infisical/infisical/pull/8356) - feat(secrets-sync): add Cloudflare Secrets Store integration by [@DimitrisStaratzis](https://github.com/DimitrisStaratzis) in [#8500](https://github.com/Infisical/infisical/pull/8500) - chore: add upgrade impact for v0.166.3 by [@github-actions](https://github.com/github-actions)\[bot] in [#8530](https://github.com/Infisical/infisical/pull/8530) - fix: block DNS rebinding by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8515](https://github.com/Infisical/infisical/pull/8515) - feature(pki): audit log certificate issuance failures by [@bernie-g](https://github.com/bernie-g) in [#8480](https://github.com/Infisical/infisical/pull/8480) - fix(frontend): block secret uploads that exceed the 1 MB request limit by [@andrewhuhh](https://github.com/andrewhuhh) in [#8533](https://github.com/Infisical/infisical/pull/8533) - breaking(agent-vault): flatten member responses and drop the membership id by [@scott-ray-wilson](https://github.com/scott-ray-wilson) in [#8373](https://github.com/Infisical/infisical/pull/8373) - feat(pam): allow org admins to join any folder by [@sheensantoscapadngan](https://github.com/sheensantoscapadngan) in [#8510](https://github.com/Infisical/infisical/pull/8510) - feat(secret-sync): keeper by [@adilsitos](https://github.com/adilsitos) in [#8518](https://github.com/Infisical/infisical/pull/8518) - chore: record resource name in alert audit events by [@carlosmonastyrski](https://github.com/carlosmonastyrski) in [#8545](https://github.com/Infisical/infisical/pull/8545) - feat(frontend): virtualize secret preview tables in bulk actions by [@andrewhuhh](https://github.com/andrewhuhh) in [#8542](https://github.com/Infisical/infisical/pull/8542) - fix(secrets-overview): keep expanded row chevron stable in multi-env view by [@andrewhuhh](https://github.com/andrewhuhh) in [#8549](https://github.com/Infisical/infisical/pull/8549) - improvement(ui): standardize Loader on the yellow brand mark by [@andrewhuhh](https://github.com/andrewhuhh) in [#8555](https://github.com/Infisical/infisical/pull/8555) - fix: resolved failing honey token for unlimited mode by [@akhilmhdh](https://github.com/akhilmhdh) in [#8557](https://github.com/Infisical/infisical/pull/8557) - feat: address greptile comments in honey token fix by [@akhilmhdh](https://github.com/akhilmhdh) in [#8558](https://github.com/Infisical/infisical/pull/8558) **Full Changelog**: <https://github.com/Infisical/infisical/compare/v0.166.3...v0.166.4> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).

Renovate1001 added the

renovate

minor

labels

2026-10-22 01:04:03 -04:00

Renovate1001 added 1 commit

2026-10-22 01:04:03 -04:00

Update infisical/infisical Docker tag in stack docker/containers/infisical from v0.166.3 to v0.167.0 c46ebc2167