v0.21.0

Infisical/agent-vaultv0.21.0May 19, 2026by github-actions[bot]

AI Summary

Removed the agent invite ceremony in favor of direct agent creation and rotation, and enabled Single Page Application serving for specific user routes.

Key Highlights

Removed agent invite ceremony
Added direct agent creation and rotation
Added SPA serving for /users, /agents, /forgot-password

Breaking Changes

Removed agent invite ceremony

New Features

Direct agent creation and rotation
SPA serving for /users, /agents, /forgot-password

Full Release Notes

## Changelog
* d31ac3068a88b9bd6d83c4d05f5d15d17330fca9 Update catalog to include NPM (#174)
* b8cb82e3b0208cb3ed96c288f5644c39c6745111 agents: remove invite ceremony, add direct create + rotate (#176)
* a2663bc0e5914e6416268a567f53a06eac189f1c deps: bump @tailwindcss/vite from 4.2.4 to 4.3.0 in /web (#184)
* 50293b13eadf9df6e697b08e30d91cc65066a58b deps: bump @tanstack/react-router from 1.169.1 to 1.169.2 in /web (#188)
* b235d4ea6edb3d03a12da0cf32414deb07e2eb55 deps: bump golang from `5caaf1c` to `8d22e29` (#187)
* 44819bb6f1acbbe254204958e2d3096f657a2bc9 deps: bump golang.org/x/crypto from 0.50.0 to 0.51.0 (#183)
* 934d03b4f2dfbdd7a439ef110e2ff63c029bcdca deps: bump golang.org/x/term from 0.42.0 to 0.43.0 (#185)
* 41d5bcdd9bae5a4053d8dff8914d7547a1c358a3 deps: bump modernc.org/sqlite from 1.50.0 to 1.50.1 (#180)
* 4787636b9ea19278097967c19fb3efdd399bc004 deps: bump node from `8ea2348` to `968df39` (#181)
* 22e2ac138695166553db8bc8c5a3578926f99824 deps: bump node from `9f6d597` to `689c110` in /internal/isolation/assets (#182)
* dd1b2c49bbea55e21cac697b7eba5ba0130213ff deps: bump react-dom from 19.2.5 to 19.2.6 in /web (#191)
* 149e45a7c8929fa2cc87af22ac79d5a13f569104 deps: bump tailwindcss from 4.2.4 to 4.3.0 in /web (#190)
* f6453063ba7665406c8c05a3e55044930dd32f2e docs(vpsugide): add hermes vps with agent vault guide (#179)
* fa888ca6ecac50064ae0e62fca4150442fa09fde server: serve SPA index.html for /users, /agents, /forgot-password (#137)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```