v0.39.3

Infisical/agent-vaultv0.39.3Sep 1, 2026by github-actions[bot]

AI Summary

This release patches a security advisory for nanoid and optimizes the web build by splitting the framework into vendor chunks to improve performance.

Key Highlights

  • Patched nanoid security advisory
  • Split framework into vendor chunks
  • Build optimization for web component

Full Release Notes

## Changelog
* e9515fef8bbec2744344b0c8e9e80f79e2651a1d chore(web): patch nanoid advisory and split framework into vendor chunks (#389)

## Verify

```bash
# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.39.3 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"
```