v0.9.0

Infisical/agent-vaultv0.9.0Apr 21, 2026by github-actions[bot]

AI Summary

This release adds broker service management with enable/disable toggles, per-request logging for proxy and MITM traffic, service catalog presets, and tiered rate limiting. It also includes dependency updates and a fix for local vault run rate limiting.

Key Highlights

  • Added enable/disable toggle for broker services
  • Added per-request logs for proxy and MITM traffic
  • Added service catalog presets to Add Service UI
  • Added tiered rate limiting with owner-tunable settings
  • Fix: exempt loopback from TierAuth to prevent local vault run 429 errors

New Features

  • Broker services enable/disable toggle
  • Per-request logging for proxy and MITM traffic
  • Service catalog presets
  • Tiered rate limiting
  • Short URL (get.agent-vault.dev) with anonymous install beacon

Full Release Notes

## Changelog
* 52559e9a24888510e7244bc30b084089b370c54d deps: bump @tanstack/react-router from 1.168.19 to 1.168.23 in /web (#90)
* 5c65f3db7e3b8fe731d5bef01d2599a0ef4f5382 deps: bump modernc.org/sqlite from 1.48.2 to 1.49.1 (#89)
* 17252c15205dc204c7207da494accc3881895e52 deps: bump typescript from 5.9.3 to 6.0.3 in /web (#91)
* 97e4566fc7a5c6c5be38f9e90924f22905c4f8a5 docs(ga4) : add GA4 analytics to Mintlify site (#92)
* 35a60da782cf356ea0f646bf17cb4b6fe1ad3c79 feat: add enable/disable toggle for broker services (#93)
* df9a76d5956faedeb0ec48abbfd66cabcd60d209 feat: add per-request logs for proxy and MITM traffic (#98)
* 452a0de228d22972daae234960c5da5a50a69359 feat: add service catalog presets to Add Service UI (#96)
* a73b56e3b0f62dec2ea5d4c58de3e8b2b991d777 feat: add tiered rate limiting with owner-tunable settings (#94)
* 4aab10272816884c819a455e410fbed3de38dca5 feat: use get.agent-vault.dev short URL and add anonymous install beacon (#95)
* 5de88a16a3c4d1d219eb2476979f6b7050bffd86 fix: exempt loopback from TierAuth so local vault run doesn't get 429'd (#97)

## Verify

```bash
# Verify checksum
sha256sum --check checksums.txt

# Verify signature (requires cosign)
cosign verify-blob \
  --bundle checksums.txt.bundle \
  --certificate-identity-regexp "github.com/Infisical/agent-vault" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt
```