v0.155.2
Infisical/infisicalv0.155.2Jan 13, 2026by varonix0
AI Summary
A major feature release focused on Privileged Access Management (PAM), introducing WebAuthn and PAM session MFA, Redis resource access, and SCIM support. The Agentic Manager has been rebranded to Agent Sentinel.
Key Highlights
- WebAuthn and PAM session MFA support
- Redis resource access for PAM
- SCIM support for SCIM events
- Rebrand Agentic Manager to Agent Sentinel
- Removal of feature flags for AI and PAM
New Features
- WebAuthn and PAM session MFA
- Redis resource access for PAM
- SCIM support for SCIM events
- Vault migration for multiple dynamic secrets
- Secrets rotation for Databricks
- Export support for KMS keys
Full Release Notes
## What's Changed * feat(pam): add options dropdown to accounts card view by @x032205 in https://github.com/Infisical/infisical/pull/5109 * feat: webauthn and PAM session mfa by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/4896 * fix: add member to project not using the organization default role by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5112 * docs: template metadata for infisical secret k8 resource by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5107 * feat(frontend): update org identity membership page UI by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5110 * feature: add redis resource access for PAM by @fangpenlin in https://github.com/Infisical/infisical/pull/5085 * fix: nextUpdate on CRLs default to seven days by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5119 * feat(secrets-management): disallow editing privileges that were granted via access request by @x032205 in https://github.com/Infisical/infisical/pull/5113 * chore: add small tip on GCP app connection documentation for impersonation by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5116 * feat: warn users when they're already part of an org and are trying to accept an invite by @x032205 in https://github.com/Infisical/infisical/pull/5120 * docs: update helm values example by @varonix0 in https://github.com/Infisical/infisical/pull/5122 * feat(approval-policies): ensure proper path syntax by @x032205 in https://github.com/Infisical/infisical/pull/5124 * feat(frontend): update org/sub-org user membership page UI by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5117 * improvement(frontend): update org/sub-org group membership ui to v3 components by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5123 * feat: removed feature flag for ai and pam by @akhilmhdh in https://github.com/Infisical/infisical/pull/5118 * feat: add telemetry for kmip operations by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5129 * fix: getGitHubGatewayConnectionDetails filter path by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5130 * feat(scim): support for scim events by @akhilmhdh in https://github.com/Infisical/infisical/pull/5114 * feat(ssh): hide ssh product by @x032205 in https://github.com/Infisical/infisical/pull/5125 * feat: added new section in issue for feature request and other discussions by @akhilmhdh in https://github.com/Infisical/infisical/pull/5135 * feat: updated documentation bug report template by @akhilmhdh in https://github.com/Infisical/infisical/pull/5136 * chore: Rename bug report template from .md to .yml by @akhilmhdh in https://github.com/Infisical/infisical/pull/5137 * chore: fix formatting in documentation bug report template by @akhilmhdh in https://github.com/Infisical/infisical/pull/5138 * docs: add redis PAM document by @fangpenlin in https://github.com/Infisical/infisical/pull/5133 * fix(backend): update key schema match handling to account for nested pathing by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5142 * docs: better security docs by @varonix0 in https://github.com/Infisical/infisical/pull/5132 * fix: resolved scim service failing when there is already non joined email user by @akhilmhdh in https://github.com/Infisical/infisical/pull/5140 * docs: agent injector security context by @varonix0 in https://github.com/Infisical/infisical/pull/5143 * feat(vault-migration): multiple dynamic secrets by @x032205 in https://github.com/Infisical/infisical/pull/5131 * docs: security doc improvement by @varonix0 in https://github.com/Infisical/infisical/pull/5146 * fix: updateScimGroup SCIM logic not handling multiple concurrent requests by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5145 * improvement(api): reduce identity access token delete time by @fangpenlin in https://github.com/Infisical/infisical/pull/5093 * improvement(api): increase frequency of deleting expired identity tokens to hourly instead by @fangpenlin in https://github.com/Infisical/infisical/pull/5149 * feat(api): removed gateway plan restriction for pam and added check in app connection, identity k8s auth by @akhilmhdh in https://github.com/Infisical/infisical/pull/5144 * feature: add secrets rotation for Databricks by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5128 * feat: add export support for kms keys by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5153 * chore(ui): rebrand Agentic Manager to Agent Sentinel by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5155 * chore(api): dependency updates by @akhilmhdh in https://github.com/Infisical/infisical/pull/5152 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.155.1...v0.155.2