# Infisical v0.165.1 - Product: Infisical (https://whatsnew.fyi/product/infisical) - Vendor: Infisical - Date: 2026-09-01 - Version: v0.165.1 - Original notes: https://github.com/Infisical/infisical/releases/tag/v0.165.1 - Permalink: https://whatsnew.fyi/product/infisical/releases/v0.165.1 What's New is an index, not a publisher: every entry below links to the vendor's own release notes, which are the authoritative source. Entries are labelled where they are hand-curated sample data, pre-releases, or drawn from a secondary source such as a developer blog. Reuse: the summaries, labels and curation here are © What's New. Quote freely with attribution and a link back; wholesale republication of the corpus is not permitted — terms: https://whatsnew.fyi/terms. The vendors' own release notes remain their publishers'. --- - **added** — Add Windows/Linux PKI Syns pre-fetch commands - **added** — Expose the latest renewal of a certificate so agents can follow renewals - **added** — Add folder RBAC permissions - **added** — Add GCP Certificate Manager Sync - **added** — Add approval and change request webhook events - **added** — Default SSH access to interactive shell in PAM - **added** — Add Kubernetes MI auth template support - **added** — Add trim suffix to ABAC - **added** — Add select all for Vault import secret path Combobox - **added** — Add Ansible folder operations documentation - **added** — Set project retention limits - **added** — Revamp replicate secrets workflow - **added** — Add helper text for DigiCert profiles during issuance - **fixed** — Make approvals check for validation rules - **fixed** — Reset search input when user gets into folder - **fixed** — Add blocks for CA incompatibility - **fixed** — Pin Kubernetes auth direct API requests with safeRequest - **fixed** — Pool HTTPS agents and fix gateway SNI - **fixed** — Scope certificate private-key read permission to the certificate subject on v3 issuance - **fixed** — Route DigiCert requests through external issuance on approval ##### What's Changed * feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7694 * fix: make approvals check for validation rules by @mathnogueira in https://github.com/Infisical/infisical/pull/7837 * feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7820 * chore: add upgrade impact for v0.164.1 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7840 * docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7847 * fix(ui): reset search input when user gets into folder by @adilsitos in https://github.com/Infisical/infisical/pull/7844 * docs: linux and windows doc improvements by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7846 * improvement: add port number to Splunk provider by @Thiago-AS in https://github.com/Infisical/infisical/pull/7843 * fix: add blocks for ca incompatibility by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7848 * docs: add AI agent identities to identity counting by @0xArshdeep in https://github.com/Infisical/infisical/pull/7845 * feat(permissions): folder rbac by @adilsitos in https://github.com/Infisical/infisical/pull/7762 * fix(kubernetes-auth): pin direct API requests with safeRequest by @victorvhs017 in https://github.com/Infisical/infisical/pull/7855 * feat(pki-sync): add GCP Certificate Manager Sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7737 * fix(docs): route vulnerability reports through the disclosure policy by @Vligai in https://github.com/Infisical/infisical/pull/7856 * fix(auth): pool https agents and fix gateway sni by @victorvhs017 in https://github.com/Infisical/infisical/pull/7857 * feat(webhooks): approval and change request webhook events by @lobocv in https://github.com/Infisical/infisical/pull/7780 * docs(wip): top level ia 2 by @adkah in https://github.com/Infisical/infisical/pull/7830 * docs(secret-rotation): fix typos by @adkah in https://github.com/Infisical/infisical/pull/7861 * feat(pam): default ssh access to interactive shell by @lb-vn in https://github.com/Infisical/infisical/pull/7838 * feat(pam): improve error code for deleting discovery cred acc by @lb-vn in https://github.com/Infisical/infisical/pull/7854 * feat(docs): add folder rbac docs by @adilsitos in https://github.com/Infisical/infisical/pull/7862 * docs(footer): fix forum link by @adkah in https://github.com/Infisical/infisical/pull/7865 * fix(certificate): scope certificate private-key read permission to the certificate subject on v3 issuance by @Vligai in https://github.com/Infisical/infisical/pull/7549 * fix(cert-v3): route DigiCert requests through external issuance on approval by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7870 * improvement(approvals): migrate page shell to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7836 * docs(folder-rbac): enhancements by @adilsitos in https://github.com/Infisical/infisical/pull/7874 * feat(abac): add trim suffix by @adilsitos in https://github.com/Infisical/infisical/pull/7817 * improvement(secrets): migrate Vault import dialogs to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7794 * feat: add kubernetes MI auth template support by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7713 * fix: collapse signer approvals into a single setup card until a policy exists by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7875 * feat(ui): select all for vault import secret path Combobox by @claude[bot] in https://github.com/Infisical/infisical/pull/7878 * fix(pam): re-check session validity when privileged access is granted by @lb-vn in https://github.com/Infisical/infisical/pull/7852 * feat(docs): add ansible f _[Truncated at 4000 characters — full notes: https://github.com/Infisical/infisical/releases/tag/v0.165.1]_