v0.154.0

Infisical/infisicalv0.154.0Nov 18, 2025by maidul98

AI Summary

A major feature release focusing on PKI V3 documentation, LDAP gateway support, project identities, and ACME external CA support with PKCS12 export.

Key Highlights

  • PKI V3 documentation and PKCS12 export support
  • LDAP gateway support added
  • Project identities feature introduced
  • ACME external CA support with license check
  • Gateway and Relay systemd deployment option

New Features

  • PKI V3 documentation
  • LDAP gateway support
  • Project identities
  • ACME external CA support
  • PKCS12 export support for PKI

Full Release Notes

## What's Changed
* Documentation for Infisical PKI V3 by @dangtony98 in https://github.com/Infisical/infisical/pull/4828
* docs(agent): credentials revocation by @DanielHougaard in https://github.com/Infisical/infisical/pull/4836
* misc: endpoint for fetching latest active bundle of profile by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4833
* fix reviewed time & lint by @x032205 in https://github.com/Infisical/infisical/pull/4837
* misc: add delete protection for projects on create by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4844
* make --relay flag optional & add sudo to gateway start examples by @x032205 in https://github.com/Infisical/infisical/pull/4818
* Fix CSR KU/EKU check by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4834
* Do not expose redis by default in the prod docker-compose. by @Peter-Maguire in https://github.com/Infisical/infisical/pull/4843
* fix: approval policy org check by @x032205 in https://github.com/Infisical/infisical/pull/4527
* Update Documentation for Certificate Alerting by @dangtony98 in https://github.com/Infisical/infisical/pull/4841
* Fix aws-sdk import on PKI sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4850
* PKI: add support to export certs in PKCS12 format by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4846
* pam: fix ssl issue by @x032205 in https://github.com/Infisical/infisical/pull/4851
* hotfix: event subscription not working with identity token by @victorvhs017 in https://github.com/Infisical/infisical/pull/4852
* pam: mcp resource type preview by @x032205 in https://github.com/Infisical/infisical/pull/4854
* feature: secret reference shortcut by @victorvhs017 in https://github.com/Infisical/infisical/pull/4804
* mics: support no KID in header during OIDC login by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4849
* PAM: add more resource type previews by @x032205 in https://github.com/Infisical/infisical/pull/4859
* [PKI-33] Add more automatic tests to cover the PKI ACME security focused corner cases by @fangpenlin in https://github.com/Infisical/infisical/pull/4829
* [PKI-34] Add license check for PKI ACME feature by @fangpenlin in https://github.com/Infisical/infisical/pull/4848
* feat: project identities by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4785
* [ENG-3456] fix: toast interaction with modal and drawer by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4862
* Chore: contributing docs update and broken links fixes by @victorvhs017 in https://github.com/Infisical/infisical/pull/4847
* fix: patched old project membership behavoir by @akhilmhdh in https://github.com/Infisical/infisical/pull/4824
* [PKI-30] Acme external ca support by @fangpenlin in https://github.com/Infisical/infisical/pull/4853
* Add PKI docs for ACME Infrastructure Integrations by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4866
* Fix docs.json by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4870
* chore: Enhance Slack integration documentation by @victorvhs017 in https://github.com/Infisical/infisical/pull/4835
* feat(roles): add transparent error message when attempting to delete a role that is used by a membership by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4861
* [PLATFRM-87] feat: adds secret sharing validity info by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4864
* Add PKI template presets by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4867
* Make commit message optional by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4869
* Add user login and select organization audit logs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/4865
* [ENG-3008] fix: app-connections and secret-sync response tab title by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4863
* fix: move nock to devDependencies by @DanielHougaard in https://github.com/Infisical/infisical/pull/4873
* feat: custom image for gateway helm chart by @DanielHougaard in https://github.com/Infisical/infisical/pull/4876
* feature: ldap gateway support by @victorvhs017 in https://github.com/Infisical/infisical/pull/4825
* systemd interactive deployment option for Gateway & Relay by @x032205 in https://github.com/Infisical/infisical/pull/4877
* Update Infisical PKI Documentation for ACME-Compatible External CAs by @dangtony98 in https://github.com/Infisical/infisical/pull/4884
* [ENG-3887] fix: enables infisical app mobile view with basic responsiveness by @gupta-piyush19 in https://github.com/Infisical/infisical/pull/4871
* fix total counts for change requests by @x032205 in https://github.com/Infisical/infisical/pull/4872
* Add Infisical PKI Documentation for ACME Enrollment Method by @dangtony98 in https://github.com/Infisical/infisical/pull/4880
* docs: added compliance documentation by @DanielHougaard in https://github.com/Infisical/infisical/pull/4886
* docs: add documentation for project identities by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/4887

## New Contributors
* @Peter-Maguire made their first contribution in https://github.com/Infisical/infisical/pull/4843

**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.153.4...v0.154.0