# Infisical changelog > A secrets platform for syncing application credentials across environments. - Vendor: Infisical - Category: Developer Tools - Official site: https://infisical.com - Tracked by: What's New (https://whatsnew.fyi/product/infisical) - Harvested from: GitHub (Infisical/infisical) - Entries below: 11 (newest first) What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. ## Releases ### v0.162.19 - Date: 2026-08-10 - Version: v0.162.19 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.19 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.19 - **changed** — Update create sub org modal to v3 - **added** — Add MI to PAM access - **fixed** — Fix CSR flow on ADCS issuance ##### What's Changed * chore: add upgrade impact for v0.162.18 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7590 * improvement: update creat sub org modal to v3 by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7588 * feat: add mi to pam access by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7513 * fix: csr flow on ADCS issuance by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7608 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.18...v0.162.19 ### v0.162.18 - Date: 2026-08-07 - Version: v0.162.18 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.18 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.18 - **added** — Add gateway support to chef app connection - **changed** — Migrate project settings to v3 components - **added** — Add Modify Role action for project member role rows ##### What's Changed * docs(integrations): rewrite docker guide by @adkah in https://github.com/Infisical/infisical/pull/7571 * improvement: add gateway support to chef app connection by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7557 * improvement(secret-manager): migrate project settings to v3 components by @andrewhuhh in https://github.com/Infisical/infisical/pull/7577 * feat(ui): add Modify Role action for project member role rows by @lobocv in https://github.com/Infisical/infisical/pull/7565 ##### New Contributors * @lobocv made their first contribution in https://github.com/Infisical/infisical/pull/7565 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.17...v0.162.18 ### v0.162.17 - Date: 2026-08-07 - Version: v0.162.17 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.17 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.17 - **added** — Fill account fields from a pasted connection string in PAM - **added** — Redis account type for PAM - **added** — Redis web access for PAM - **added** — Support issuing CA certificates from AWS Private CA in PKI - **added** — Add extraArgs to gateway helm chart - **added** — Remove deprecation banner for self serve customers - **changed** — Re-vamp org selection page - **changed** — Revise access restricted display - **changed** — Truncate org name on invite and display disabled email field - **changed** — Update the access restricted banner to v3 components - **changed** — Revise identity alert UI - **changed** — Show disabled certificate profiles for API enrollment in PKI - **changed** — Move GCP sync regions to an advanced accordion - **fixed** — Delete alerts when deleting identity - **fixed** — Send recovery email to user.email instead of username - **fixed** — Remove text balancing from dialog headers - **fixed** — False secret-approval-policy error when moving folders by dropping implied folder-read gate - **fixed** — Validate certificate id params as UUIDs in cert-manager certificate routes - **fixed** — Avoid interval overflow for expire alerts - **fixed** — Correct project highlight when projects share name - **fixed** — Constrain modal content height in dialog ##### What's Changed * feat(pam): fill account fields from a pasted connection string by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7504 * fix: delete alerts when deleting identity by @Thiago-AS in https://github.com/Infisical/infisical/pull/7507 * docs(style): add dark mode by @adkah in https://github.com/Infisical/infisical/pull/7508 * improvement: re-vamp org selection page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7521 * docs(style): fix icon color on card components by @adkah in https://github.com/Infisical/infisical/pull/7528 * fix(ui): remove text balancing from dialog headers by @andrewhuhh in https://github.com/Infisical/infisical/pull/7533 * fix: send recovery email to user.email instead of username by @Thiago-AS in https://github.com/Infisical/infisical/pull/7537 * docs(secrets-mgmt): audit quickstart by @adkah in https://github.com/Infisical/infisical/pull/7531 * improvement: revise access restricted display by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7534 * feat(pam): redis account type by @x032205 in https://github.com/Infisical/infisical/pull/7447 * feat(pam): redis web access by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7510 * docs(assistant): hide floating bubble by @adkah in https://github.com/Infisical/infisical/pull/7551 * docs(config): add contextual options by @adkah in https://github.com/Infisical/infisical/pull/7552 * improvement: truncate org name on invite and display disabled email field by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7547 * docs: fix broken links by @adkah in https://github.com/Infisical/infisical/pull/7553 * improvement: update the access restricted banner to v3 components by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7548 * fix: fix glob pattern test popover and update docs so glob match is clearer by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7558 * docs(claude): add code comments house style to root CLAUDE.md by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7559 * feat: removed deprecation banner for self serve customers by @akhilmhdh in https://github.com/Infisical/infisical/pull/7561 * improvement: revise identity alert ui by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7532 * feat(pki): support issuing CA certificates from AWS Private CA by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7543 * fix(secret-folder): false secret-approval-policy error when moving folders (drop implied folder-read gate) by @claude[bot] in https://github.com/Infisical/infisical/pull/7556 * fix(api): validate certificate id params as UUIDs in cert-manager certificate routes by @bernie-g in https://github.com/Infisical/infisical/pull/7562 * feat: add extraArgs to gateway helm chart by @bernie-g in https://github.com/Infisical/infisical/pull/7544 * fix: avoid interval overflow for expire alerts by @Thiago-AS in https://github.com/Infisical/infisical/pull/7567 * fix: correct project highlight when projects share name by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7576 * fix(dialog): constrain modal content height by @andrewhuhh in https://github.com/Infisical/infisical/pull/7545 * fix: move gcp sync regions to an advanced accordion by @mathnogueira in https://github.com/Infisical/infisical/pull/7560 * improvement(pki): show disabled certificate profiles for API enrollment by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7535 ##### New Contributors * @adkah made their first contribution in https://github.com/Infisical/infisical/pull/7508 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.16...v0.162.17 ### v0.162.16 - Date: 2026-08-04 - Version: v0.162.16 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.16 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.16 - **fixed** — Normalize iOS input font sizing - **fixed** — Diff API spec against the merge base instead of production - **added** — Add expire alert for machine identity authentication - **added** — Add dedicated 403 forbidden-access error page - **added** — Revamp cert manager UI - **fixed** — Serialize slot claims, isolate e2e cron namespace and fix test flakiness - **fixed** — Let user tokens report proxied-service usage in agent-proxy - **added** — Add spacelift sync - **added** — Add adoption telemetry for proxied services in agent-proxy - **fixed** — Use ms instead of seconds in histogram metric - **fixed** — Restore default input styling - **added** — Add selected action bar in UI - **fixed** — Improve change request approval flow - **added** — Support for API tokens and R2 access keys on Cloudflare in secret rotation - **fixed** — Address deadlock for cert issuance - **fixed** — Bound scan resources and reap stuck scans in secret scanning - **fixed** — Limit process threads for secret scanning - **added** — Migrate gateway and relay UI to v3 - **changed** — Improve verification code input in auth - **added** — Expand onboarding with product selection and metrics - **added** — Revamp personal settings - **fixed** — Improve invalid invitation state in auth - **added** — Add self hosted support for new license server - **added** — Add PKI windows and linux post-sync command support - **added** — Show organization name on invite signup in auth - **added** — Add guided self-hosted bootstrap onboarding in admin - **added** — Use license to enable cross-project secret sharing - **added** — Add WAI telemetry events including Audit Logs Viewed, Secret Sync Updated, and Secret Rotation V2 Updated - **removed** — Remove SSH and Agent Sentinel products - **added** — Report PKI certificate issuance from profile-based flows in telemetry - **added** — Add staleness check for Windows discovery in PAM ##### What's Changed * fix(ui): normalize iOS input font sizing by @andrewhuhh in https://github.com/Infisical/infisical/pull/7468 * chore: add upgrade impact for v0.162.15 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7486 * fix: diff API spec against the merge base instead of production by @Thiago-AS in https://github.com/Infisical/infisical/pull/7436 * feat: add expire alert for machine identity authentication by @Thiago-AS in https://github.com/Infisical/infisical/pull/7384 * feat(frontend): add dedicated 403 forbidden-access error page by @claude[bot] in https://github.com/Infisical/infisical/pull/7455 * feat: cert manager UI revamp by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7391 * fix: serialize slot claims, isolate e2e cron namespace and fix test flakiness by @Thiago-AS in https://github.com/Infisical/infisical/pull/7461 * fix(agent-proxy): let user tokens report proxied-service usage by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7426 * chore(honey-tokens): update node version by @adilsitos in https://github.com/Infisical/infisical/pull/7492 * feat: spacelift sync by @mathnogueira in https://github.com/Infisical/infisical/pull/7453 * feat(agent-proxy): add adoption telemetry for proxied services by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7491 * docs(honey-tokens): update cloudformation by @adilsitos in https://github.com/Infisical/infisical/pull/7493 * fix: use ms instead of seconds in histogram metric by @mathnogueira in https://github.com/Infisical/infisical/pull/7477 * fix(ui): restore default input styling by @andrewhuhh in https://github.com/Infisical/infisical/pull/7489 * feat(ui): add selected action bar by @andrewhuhh in https://github.com/Infisical/infisical/pull/7496 * fix(change-requests): improved approval flow by @varonix0 in https://github.com/Infisical/infisical/pull/7212 * feat(secret-rotation): support for api tokens and r2 access keys on cloudflare by @adilsitos in https://github.com/Infisical/infisical/pull/7483 * chore: doc style guide and rules by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7354 * fix: address deadlock for cert issuance by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7495 * fix(secret-scanning): bound scan resources and reap stuck scans by @victorvhs017 in https://github.com/Infisical/infisical/pull/7488 * fix: limit process threads for secret scanning by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7503 * fix: validation and other issues by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7490 * feat(ui): migrate gateway and relay UI to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7379 * improvement(auth): improve verification code input by @andrewhuhh in https://github.com/Infisical/infisical/pull/7470 * feat: expand onboarding with product selection and metrics by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7482 * feat(settings): revamp personal settings by @andrewhuhh in https://github.com/Infisical/infisical/pull/7469 * fix(auth): improve invalid invitation state by @andrewhuhh in https://github.com/Infisical/infisical/pull/7505 * feat: self hosted support for new license server by @akhilmhdh in https://github.com/Infisical/infisical/pull/7502 * improvement(redis): add throttled structured logging for connection errors by @victorvhs017 in https://github.com/Infisical/infisical/pull/7494 * feat: add PKI windows and linux post-sync command support by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7499 * feat(auth): show organization name on invite signup by @andrewhuhh in https://github.com/Infisical/infisical/pull/7506 * feat(admin): add guided self-hosted bootstrap onboarding by @andrewhuhh in https://github.com/Infisical/infisical/pull/7448 * fix(auth): align onboarding form spacing by @andrewhuhh in htt _[Truncated at 4000 characters — full notes: https://github.com/Infisical/infisical/releases/tag/v0.162.16]_ ### v0.162.15 - Date: 2026-07-29 - Version: v0.162.15 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.15 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.15 - **changed** — Improve machine identity template visibility in the UI - **fixed** — Show full secret path in tooltip when truncated in secret approval - **changed** — Scope statement_timeout to transaction and make pool sizes configurable - **changed** — Improve caching and reconcile trial mechanism - **added** — Add connection test for rest of accounts in PAM - **fixed** — Fix personal org creation - **added** — Add SCEP support for Microsoft Intune ##### What's Changed * chore: add upgrade impact for v0.162.14 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7452 * chore: stop rebuilding the FIPS test image on every PR by @Thiago-AS in https://github.com/Infisical/infisical/pull/7451 * feat(ui): improve machine identity template visibility by @andrewhuhh in https://github.com/Infisical/infisical/pull/7409 * docs(org-structure): add product types & org-level resources, fix approval workflow links by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7464 * docs(governance-models): add sub-organizations, cross-project sharing, fix broken links by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7463 * feature(helm): add infisical-nkp chart and cloudsmith release workflow for NKP partner catalog by @0xArshdeep in https://github.com/Infisical/infisical/pull/7467 * fix(secret-approval): show full secret path in tooltip when truncated by @claude[bot] in https://github.com/Infisical/infisical/pull/7474 * chore: scope statement_timeout to transaction and make pool sizes configurable by @Thiago-AS in https://github.com/Infisical/infisical/pull/7472 * feat: improvement in caching and reconcile trial mechanism by @akhilmhdh in https://github.com/Infisical/infisical/pull/7475 * feat(pam): connection test for rest of accounts by @x032205 in https://github.com/Infisical/infisical/pull/7385 * fix: personal org creation fix by @varonix0 in https://github.com/Infisical/infisical/pull/7484 * feat: add SCEP support for Microsoft Intune by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7413 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.14...v0.162.15 ### v0.162.14 - Date: 2026-07-27 - Version: v0.162.14 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.14 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.14 - **added** — Add Google Workspace service template for proxied services - **added** — Add last used timestamp for proxied services in agent-proxy - **added** — Add instance version update check and display - **added** — Add machine identity creation sheet with policy templates in UI - **added** — Add pagination for Cloudflare certificate sync zones - **added** — Enrich secret reminder email with secret details and View secret link - **added** — Add domain account dependency detection and Windows rotation for PAM - **added** — Expand PAM PostHog coverage for access requests, rotation, and session ends - **changed** — Cache trusted IP allowlists in Redis for identity access token - **changed** — Cache project secret manager KMS material - **changed** — Cache organization membership in revocation verdict for identity access token - **changed** — Use product color for product activation button and add icon - **changed** — Refine signup step copy and button styling - **changed** — Switch default CA to ECDSA and add RSA to default TLS server policy - **changed** — Add Google Workspace to popular templates and remove Stripe - **changed** — Use Next label on attribution step submit button in signup - **changed** — Update license page based on feedback - **fixed** — Align region selector and update tagline in auth - **fixed** — Add ADCS validation on CA names for External Authorities - **fixed** — Close mobile sidebar after navigation in UI ##### What's Changed * feat(proxied-service): add google workspace service template by @claude[bot] in https://github.com/Infisical/infisical/pull/7407 * fix(auth): align region selector and update tagline by @andrewhuhh in https://github.com/Infisical/infisical/pull/7415 * improvement: use product color for product activation button and add icon by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7412 * chore: add upgrade impact for v0.162.13 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7411 * docs: updated relay systemd installation by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7408 * feat(agent-proxy): last used timestamp for proxied services by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7359 * feat: add a instance version update check and display by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7364 * improvement(identity-access-token): cache trusted IP allowlists in Redis by @victorvhs017 in https://github.com/Infisical/infisical/pull/7368 * improvement(kms): cache project secret manager KMS material by @victorvhs017 in https://github.com/Infisical/infisical/pull/7389 * feat(ui): machine identity creation sheet with policy templates by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7386 * fix: add pagination for cloudflare cert sync zones by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7419 * fix: add ADCS validation on CA names for External Authorities by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7417 * improvement(identity-access-token): cache org membership in revocation verdict by @victorvhs017 in https://github.com/Infisical/infisical/pull/7371 * fix(ui): close mobile sidebar after navigation by @andrewhuhh in https://github.com/Infisical/infisical/pull/7410 * docs: update issue and pull request guidance by @andrewhuhh in https://github.com/Infisical/infisical/pull/7425 * feat(ui): refine signup step copy and button styling by @claude[bot] in https://github.com/Infisical/infisical/pull/7429 * fix(frontend): serve Alliance No. 2 as WOFF2/WOFF for Windows font loading by @claude[bot] in https://github.com/Infisical/infisical/pull/7431 * feat: updated the license page based on feedback by @akhilmhdh in https://github.com/Infisical/infisical/pull/7432 * fix(secret-sharing): branding on sub-orgs by @varonix0 in https://github.com/Infisical/infisical/pull/7420 * docs: fix sidebar/content layout after Mintlify sidebar update by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7435 * fix: signer actor redirection by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7428 * fix: switch default CA to ECDSA and add RSA to default TLS server policy by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7427 * feat(reminder): enrich secret reminder email with secret details and View secret link by @claude[bot] in https://github.com/Infisical/infisical/pull/7439 * feat(pam): domain account dependency detection and Windows rotation (PAM-350) by @bernie-g in https://github.com/Infisical/infisical/pull/7355 * fix(secret-request-change): edit secret name by @adilsitos in https://github.com/Infisical/infisical/pull/7442 * chore(snapshots): completely deprecate snapshots by @adilsitos in https://github.com/Infisical/infisical/pull/7382 * feat(signup): use "Next" label on attribution step submit button by @claude[bot] in https://github.com/Infisical/infisical/pull/7445 * fix(lint): mutation by @adilsitos in https://github.com/Infisical/infisical/pull/7446 * improvement(proxied-service): add google workspace to popular templates, remove stripe by @claude[bot] in https://github.com/Infisical/infisical/pull/7444 * fix(pam): import type by @x032205 in https://github.com/Infisical/infisical/pull/7450 * fix: restructure personal overrides permission into describe secret by @varonix0 in http _[Truncated at 4000 characters — full notes: https://github.com/Infisical/infisical/releases/tag/v0.162.14]_ ### v0.162.13 - Date: 2026-07-24 - Version: v0.162.13 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.13 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.13 - **added** — Azure auto rotate app connection credentials - **added** — LDAP credential rotation - **changed** — Updated the license page - **changed** — Allow user defined regions on replication policy for GCP - **changed** — Migrate organization KMS settings to v3 - **changed** — Redesign auth screens and enforce shared password policy - **changed** — Address billing nits - **fixed** — Keep literal reference when secret does not exist - **fixed** — Show grant-privileges action for org custom roles - **fixed** — Preselect current environment in Request Access modal - **fixed** — Let org admins break-glass into projects they only belong to via a group - **fixed** — Preserve form body stream when forwarding writes to primary ##### What's Changed * chore: add upgrade impact for v0.162.12 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7390 * feat: azure auto rotate app connection credentials by @mathnogueira in https://github.com/Infisical/infisical/pull/7370 * feat: updated the license page by @akhilmhdh in https://github.com/Infisical/infisical/pull/7394 * improvement(secret-syncs): allow user defined regions on replication policy for gcp by @adilsitos in https://github.com/Infisical/infisical/pull/7361 * feat: ldap credential rotation by @mathnogueira in https://github.com/Infisical/infisical/pull/7374 * fix(secret-reference): keep literal reference when secret does not exist by @claude[bot] in https://github.com/Infisical/infisical/pull/7032 * fix: update azure app connection docs for credential rotation by @mathnogueira in https://github.com/Infisical/infisical/pull/7396 * chore: add upgrade impact for v0.161.10 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7070 * chore: add upgrade impact for v0.162.1 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7211 * chore: add upgrade impact for v0.161.13 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7171 * chore: add upgrade impact for v0.161.12 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7147 * fix(ui): show grant-privileges action for org custom roles by @Thiago-AS in https://github.com/Infisical/infisical/pull/7398 * feat(ui): migrate organization KMS settings to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7378 * fix: preselect current environment in Request Access modal by @claude[bot] in https://github.com/Infisical/infisical/pull/7348 * fix(project): let org admins break-glass into projects they only belong to via a group by @Thiago-AS in https://github.com/Infisical/infisical/pull/7395 * docs(agent-proxy): revamp security & quickstart pages, refresh screenshots by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7336 * feat: addressed billing nits by @akhilmhdh in https://github.com/Infisical/infisical/pull/7405 * feat(auth): redesign auth screens and enforce shared password policy by @andrewhuhh in https://github.com/Infisical/infisical/pull/7350 * fix(replica): preserve form body stream when forwarding writes to primary by @victorvhs017 in https://github.com/Infisical/infisical/pull/7406 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.12...v0.162.13 ### v0.162.12 - Date: 2026-07-23 - Version: v0.162.12 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.12 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.12 - **added** — Add PKI sync for KEMP Loadbalancer - **added** — Add connection test for PAM - **added** — Add support for session policies on temporary credentials in dynamic secrets - **added** — Make certificate properties optional for ADCS CAs - **changed** — Migrate encryption project settings to v3 - **changed** — Advance options for secrets and bulk suggestions - **changed** — Audit and migrate workflow integrations to v3 - **fixed** — Update upgrade plan modal link - **fixed** — Base certificate renewal eligibility on the certificate's enrollment method ##### What's Changed * chore: add upgrade impact for v0.162.11 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7372 * feat: add PKI sync for KEMP Loadbalancer by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7329 * improvement(frontend): migrate encryption project settings to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7352 * feat(pam): connection test by @x032205 in https://github.com/Infisical/infisical/pull/7335 * feat(dynamic-secrets): add support for session policies on temporary credentials by @adilsitos in https://github.com/Infisical/infisical/pull/7347 * improvement: advance options secrets and bulk suggestions by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7373 * fix: update upgrade plan modal link by @Thiago-AS in https://github.com/Infisical/infisical/pull/7381 * feat: make certificate properties optional for ADCS CAs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7185 * improvement(ui): audit and migrate workflow integrations to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7367 * fix(pki): base certificate renewal eligibility on the certificate's enrollment method by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7376 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.11...v0.162.12 ### v0.162.11 - Date: 2026-07-21 - Version: v0.162.11 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.11 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.11 - **added** — Add support for Datadog API keys in secret rotation app connector - **added** — Add deep link for PAM access - **added** — Add new flags - **added** — Add Agent Proxy and Agent policy templates in UI - **added** — Support pre-hashed RSA signing for HSM-backed PKCS#11 signers - **added** — Add Snowflake user key secret rotation - **added** — Add optional trust-anchor chain verification for client certificates in identity TLS cert auth - **added** — Add metadata search functionality - **changed** — Validate that the email being used in dynamic secret GCP can only be used inside the same org - **changed** — Polish external migrations modal flow - **changed** — Cache permission fingerprint for ETag path in secret v2 bridge - **changed** — Extend aggregated events cron interval and timeout for telemetry - **changed** — Add FK indexes for permission query joins in migration - **changed** — Label secret cache ETag misses and fix k8-operator UA detection in telemetry - **fixed** — Fix annual recurring issue not counting - **fixed** — Chunk-delete environments during project hard delete - **fixed** — Consider mode when creating approval commits in /batch - **fixed** — Skip Postgres prune and query ClickHouse in audit log reports when enabled ##### What's Changed * chore: add upgrade impact for v0.162.9 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7333 * improvement(dynamic-secret-gcp): validate that the email being used can only be used inside the same org by @adilsitos in https://github.com/Infisical/infisical/pull/7299 * fix(telemetry): extend aggregated events cron interval and timeout by @victorvhs017 in https://github.com/Infisical/infisical/pull/7327 * chore: ui/ux adjustments for PAM by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7320 * feat(secret-rotation-app-conn): datadog api keys by @adilsitos in https://github.com/Infisical/infisical/pull/7285 * docs: update Ruby SDK docs for the native v3 gem by @claude[bot] in https://github.com/Infisical/infisical/pull/7337 * chore(docs): update screenshots for api key rotation on datadog by @adilsitos in https://github.com/Infisical/infisical/pull/7345 * fix(project): chunk-delete environments during project hard delete by @victorvhs017 in https://github.com/Infisical/infisical/pull/7319 * improvement(migration): add FK indexes for permission query joins by @victorvhs017 in https://github.com/Infisical/infisical/pull/7343 * feat: add deep link for pam access by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7349 * improvement(frontend): polish external migrations modal flow by @andrewhuhh in https://github.com/Infisical/infisical/pull/7351 * improvement(secret-v2-bridge): cache permission fingerprint for ETag path by @victorvhs017 in https://github.com/Infisical/infisical/pull/7353 * feat: added new flags in place by @akhilmhdh in https://github.com/Infisical/infisical/pull/7338 * feat: fixed the annual recurring issue not counting by @akhilmhdh in https://github.com/Infisical/infisical/pull/7358 * improvement(ui): add Agent Proxy and Agent policy templates by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7346 * feat: support pre-hashed RSA signing for HSM-backed PKCS#11 signers by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7344 * chore: add upgrade impact for v0.162.7 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7298 * feat(secret-rotation): snowflake user key by @adilsitos in https://github.com/Infisical/infisical/pull/7290 * fix: consider mode when creating approval commits in /batch by @mathnogueira in https://github.com/Infisical/infisical/pull/7306 * improvement(telemetry): label secret cache ETag misses and fix k8-operator UA detection by @victorvhs017 in https://github.com/Infisical/infisical/pull/7356 * fix(audit-log): skip Postgres prune and query ClickHouse in reports when enabled by @victorvhs017 in https://github.com/Infisical/infisical/pull/7362 * feat(identity-tls-cert-auth): optional trust-anchor chain verification for client certificates by @sinnwise in https://github.com/Infisical/infisical/pull/7021 * feat(search): metadata search by @adilsitos in https://github.com/Infisical/infisical/pull/7318 ##### New Contributors * @andrewhuhh made their first contribution in https://github.com/Infisical/infisical/pull/7351 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.10...v0.162.11 ### v0.162.10 - Date: 2026-07-20 - Version: v0.162.10 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.10 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.10 - **fixed** — Use standard upgrade plan modal for gateway pools gate - **changed** — Update billing UI - **added** — Add Nutanix Prism Central as a PKI sync destination - **added** — Add --domain flag on CLI access command - **fixed** — Add skipHsmLicenseCheck on add-mfa-recovery-codes migration ##### What's Changed * fix: use standard upgrade plan modal for gateway pools gate by @bernie-g in https://github.com/Infisical/infisical/pull/7334 * feat: billing ui updates by @akhilmhdh in https://github.com/Infisical/infisical/pull/7323 * feat(pki): add Nutanix Prism Central as a PKI sync destination by @tuxtof in https://github.com/Infisical/infisical/pull/6610 * feat(pam): --domain on cli access cmd by @x032205 in https://github.com/Infisical/infisical/pull/7339 * fix: add skipHsmLicenseCheck on add-mfa-recovery-codes migration by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7341 ##### New Contributors * @tuxtof made their first contribution in https://github.com/Infisical/infisical/pull/6610 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.9...v0.162.10 ### v0.162.9 - Date: 2026-07-17 - Version: v0.162.9 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.162.9 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.162.9 - **added** — Return secretPath in imported secrets - **fixed** — Allow spaces in project search name filter ###### Added - Return secretPath in imported secrets (https://github.com/Infisical/infisical/pull/7331) ###### Fixed - Allow spaces in project search name filter (https://github.com/Infisical/infisical/pull/7330)