v0.153.0

Infisical/infisicalv0.153.0Oct 29, 2025by sheensantoscapadngan

AI Summary

Adds MySQL PAM, GitHub PAT integration, and PKI certificate auto-renewal, along with a CLI interactive helper for gateway and relay deployment.

Key Highlights

  • MySQL PAM support added
  • GitHub PAT integration added
  • PKI certificate auto-renewal and manual workflows
  • Gateway and Relay CLI interactive helper
  • GovCloud (US) ARN support

New Features

  • MySQL PAM
  • GitHub PAT to GitHub integration
  • PKI certificate auto-renewal
  • Gateway/Relay CLI interactive helper

Full Release Notes

## What's Changed
* Improve SecretDropzone to add all imported values to pending changes by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4707
* Check identitiesUsed instead of identityLimit on getPlan by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4713
* fix: Remove fixed height on sign up invite step components by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4715
* [ENG-3867] fix: RBAC link in machine identities docs by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4720
* [ENG-3950] fix: SDK contribution docs by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4722
* Fix: getImportReplicatedFolder function now retrieve only the id of the replicated folder by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4723
* fix: aws auth identity assume role by @DanielHougaard in https://github.com/Infisical/infisical/pull/4724
* fix: aws auth with sts assume role by @DanielHougaard in https://github.com/Infisical/infisical/pull/4725
* docs: enhance login documentation by @victorvhs017 in https://github.com/Infisical/infisical/pull/4710
* fix(aws-auth): better error logging by @DanielHougaard in https://github.com/Infisical/infisical/pull/4731
* misc: added handling for non-string vault values for migration by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4712
* feat(gateways): gateway and relay deployment CLI command interactive helper by @x032205 in https://github.com/Infisical/infisical/pull/4687
* fix: backwards compatibility for assumed roles as role formatting by @DanielHougaard in https://github.com/Infisical/infisical/pull/4735
* Fix missing membership from SAML mapped groups by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4733
* feat: add storybook and new badge component with stories by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4734
* feat(pam): ui improvements by @x032205 in https://github.com/Infisical/infisical/pull/4691
* chore: update login command documentation to include organization-id by @victorvhs017 in https://github.com/Infisical/infisical/pull/4732
* fix: update cli version by @DanielHougaard in https://github.com/Infisical/infisical/pull/4738
* fix: validate secret names before import by @victorvhs017 in https://github.com/Infisical/infisical/pull/4737
* Fix certificate list issuance modal not showing algorithm options by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4740
* [ENG-3974] fix: update paywall to show correct plan: team -> pro/enterprise by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4736
* [ENG-3823] fix: pricing calculation on billing page by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4721
* fix: support GovCloud (US) ARNs by @victorvhs017 in https://github.com/Infisical/infisical/pull/4742
* fix: self-hosting experience improvements by @DanielHougaard in https://github.com/Infisical/infisical/pull/4703
* [ENG-3913] Add mysql pam by @fangpenlin in https://github.com/Infisical/infisical/pull/4655
* feat: adds PAT to GitHub integration by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4743
* fix: allow rotation account credentials to be removed from resources by @x032205 in https://github.com/Infisical/infisical/pull/4727
* docs: add EC2 terraform deployment docs for relay by @x032205 in https://github.com/Infisical/infisical/pull/4729
* fix(front-end): add optional chain operator to fix enterprise check from throwing error by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4748
* Add Link to Video Tutorial for the Infisical CLI in Local Development to Docs by @dangtony98 in https://github.com/Infisical/infisical/pull/4754
* PKI: Add support for certificate auto-renewal and manual renewal workflows by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4728
* fix: vite update by @DanielHougaard in https://github.com/Infisical/infisical/pull/4744
* fix: add bypass for instance relay heartbeat by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4758
* feat(helm): gateway auth delegator setup by @DanielHougaard in https://github.com/Infisical/infisical/pull/4741
* docs: API versioning info by @x032205 in https://github.com/Infisical/infisical/pull/4752
* Add org option to block duplicate destinations on secret syncs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4746
* feature: update TTL validation to allow a maximum of 10 years by @victorvhs017 in https://github.com/Infisical/infisical/pull/4759
* fix: Pro/Enterprise plan clarification in ui popup by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4757
* small typo fixes for error messages by @x032205 in https://github.com/Infisical/infisical/pull/4769
* [ENG-3998] fix: folder navigation ui bug by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4766
* feat: add dynamic secret kube role vault migration by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4711
* [ENG-4007] chore: adds unique slug check when creating project by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4745
* feature(front-end): v3 Badge migration, additional stories/variants, and misc styling fixes/improvements by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4749
* fix: addressed outdated org permission usage by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4771
* misc: added health and ready probe endpoints by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4760
* [ENG-3962] feat: adds group access token support to GitLab app-connection by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4761
* Revert "misc: added health and ready probe endpoints" by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4773
* feat: resolved locking of membership table by @akhilmhdh in https://github.com/Infisical/infisical/pull/4719
* misc: add kmip metadata to the other kmip routes by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4775

## New Contributors
* @victorvhs017 made their first contribution in https://github.com/Infisical/infisical/pull/4710

**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.152.0...v0.153.0