v0.154.0
Infisical/infisicalv0.154.0Nov 18, 2025by maidul98
AI Summary
A major feature release focusing on PKI V3 documentation, LDAP gateway support, project identities, and ACME external CA support with PKCS12 export.
Key Highlights
- PKI V3 documentation and PKCS12 export support
- LDAP gateway support added
- Project identities feature introduced
- ACME external CA support with license check
- Gateway and Relay systemd deployment option
New Features
- PKI V3 documentation
- LDAP gateway support
- Project identities
- ACME external CA support
- PKCS12 export support for PKI
Full Release Notes
## What's Changed * Documentation for Infisical PKI V3 by @dangtony98 in https://github.com/Infisical/infisical/pull/4828 * docs(agent): credentials revocation by @DanielHougaard in https://github.com/Infisical/infisical/pull/4836 * misc: endpoint for fetching latest active bundle of profile by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4833 * fix reviewed time & lint by @x032205 in https://github.com/Infisical/infisical/pull/4837 * misc: add delete protection for projects on create by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4844 * make --relay flag optional & add sudo to gateway start examples by @x032205 in https://github.com/Infisical/infisical/pull/4818 * Fix CSR KU/EKU check by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4834 * Do not expose redis by default in the prod docker-compose. by @Peter-Maguire in https://github.com/Infisical/infisical/pull/4843 * fix: approval policy org check by @x032205 in https://github.com/Infisical/infisical/pull/4527 * Update Documentation for Certificate Alerting by @dangtony98 in https://github.com/Infisical/infisical/pull/4841 * Fix aws-sdk import on PKI sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4850 * PKI: add support to export certs in PKCS12 format by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4846 * pam: fix ssl issue by @x032205 in https://github.com/Infisical/infisical/pull/4851 * hotfix: event subscription not working with identity token by @victorvhs017 in https://github.com/Infisical/infisical/pull/4852 * pam: mcp resource type preview by @x032205 in https://github.com/Infisical/infisical/pull/4854 * feature: secret reference shortcut by @victorvhs017 in https://github.com/Infisical/infisical/pull/4804 * mics: support no KID in header during OIDC login by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4849 * PAM: add more resource type previews by @x032205 in https://github.com/Infisical/infisical/pull/4859 * [PKI-33] Add more automatic tests to cover the PKI ACME security focused corner cases by @fangpenlin in https://github.com/Infisical/infisical/pull/4829 * [PKI-34] Add license check for PKI ACME feature by @fangpenlin in https://github.com/Infisical/infisical/pull/4848 * feat: project identities by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4785 * [ENG-3456] fix: toast interaction with modal and drawer by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4862 * Chore: contributing docs update and broken links fixes by @victorvhs017 in https://github.com/Infisical/infisical/pull/4847 * fix: patched old project membership behavoir by @akhilmhdh in https://github.com/Infisical/infisical/pull/4824 * [PKI-30] Acme external ca support by @fangpenlin in https://github.com/Infisical/infisical/pull/4853 * Add PKI docs for ACME Infrastructure Integrations by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4866 * Fix docs.json by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4870 * chore: Enhance Slack integration documentation by @victorvhs017 in https://github.com/Infisical/infisical/pull/4835 * feat(roles): add transparent error message when attempting to delete a role that is used by a membership by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4861 * [PLATFRM-87] feat: adds secret sharing validity info by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4864 * Add PKI template presets by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4867 * Make commit message optional by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4869 * Add user login and select organization audit logs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4865 * [ENG-3008] fix: app-connections and secret-sync response tab title by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4863 * fix: move nock to devDependencies by @DanielHougaard in https://github.com/Infisical/infisical/pull/4873 * feat: custom image for gateway helm chart by @DanielHougaard in https://github.com/Infisical/infisical/pull/4876 * feature: ldap gateway support by @victorvhs017 in https://github.com/Infisical/infisical/pull/4825 * systemd interactive deployment option for Gateway & Relay by @x032205 in https://github.com/Infisical/infisical/pull/4877 * Update Infisical PKI Documentation for ACME-Compatible External CAs by @dangtony98 in https://github.com/Infisical/infisical/pull/4884 * [ENG-3887] fix: enables infisical app mobile view with basic responsiveness by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4871 * fix total counts for change requests by @x032205 in https://github.com/Infisical/infisical/pull/4872 * Add Infisical PKI Documentation for ACME Enrollment Method by @dangtony98 in https://github.com/Infisical/infisical/pull/4880 * docs: added compliance documentation by @DanielHougaard in https://github.com/Infisical/infisical/pull/4886 * docs: add documentation for project identities by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4887 ## New Contributors * @Peter-Maguire made their first contribution in https://github.com/Infisical/infisical/pull/4843 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.153.4...v0.154.0