v0.158.1

## What's Changed
* feat: revamped event architecture by @akhilmhdh in https://github.com/Infisical/infisical/pull/5271
* fix(secret-approval): stable pagination for change requests list (V2) by @IgorHorta in https://github.com/Infisical/infisical/pull/5312
* chore: add basic constraints deduction for sign certificate by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5313
* improvement: use placeholder color for empty value on secret input by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5317
* docs: improve Kubernetes Helm deployment guide by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5301
* docs: improve docker-compose self-hosting guide by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5297
* docs: add Infisical Secrets Management YouTube video to overview page by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5321
* docs: make secrets management video responsive by @dangtony98 in https://github.com/Infisical/infisical/pull/5322
* fix: resolved failing approval generation on update and delete with metadata by @akhilmhdh in https://github.com/Infisical/infisical/pull/5304
* docs: add sub-organization authentication support to CLI and Go SDK by @akhilmhdh in https://github.com/Infisical/infisical/pull/5326
* fix(ui): openrouter branding in docs (SECRETS-102) by @IgorHorta in https://github.com/Infisical/infisical/pull/5328
* feature: add secret comment support to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5319
* feat(ui): allow change request submitter to cancel their own request by @IgorHorta in https://github.com/Infisical/infisical/pull/5330
* improvement: add skeleton loading transitions to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5320
* feat(ui): add app connection id permission condition to secret syncs by @IgorHorta in https://github.com/Infisical/infisical/pull/5325
* feat(pki): add support for csr based certificate issuance from web ui by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5308
* fix: added more cleanup for event service by @akhilmhdh in https://github.com/Infisical/infisical/pull/5341
* feature(frontend): manage tags on overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5335
* fix: add not-before and not-after check in sign CSR by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5342
* fix(pki): return helpful error for malformed JSON on certificate endpoint for CSR by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5331
* chore: improve CA details page and migrate to V3 components by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5332
* docs: fix inconsistent security email address by @njg7194 in https://github.com/Infisical/infisical/pull/5339
* feat(ui): move App Connections to Integrations tab by @IgorHorta in https://github.com/Infisical/infisical/pull/5347
* docs: add Okta OIDC SSO step-by-step guide by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5316
* improvement: clarify authorized emails must have an infisical account for secret sharing by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5343
* feat: dbt app connection & service token secret rotation by @varonix0 in https://github.com/Infisical/infisical/pull/5307
* feature(frontend): manage secret metadata from overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5337
* chore: update CA details images on docs by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5348
* feature: add PKI Cloudflare Sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5311
* fix(backend): correct SAML user complete check & always verify email on provision by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5358
* docs: update releases docs by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5357
* docs(operator): infisicalsecret crd syncConfig by @varonix0 in https://github.com/Infisical/infisical/pull/5360
* feature(frontend): toggle multi-line encoding from overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5338
* improvement(frontend): update change request label depending on review/merge status by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5361
* docs: add sub-organizations documentation by @IgorHorta in https://github.com/Infisical/infisical/pull/5359
* docs: add comprehensive AWS ECS self-hosting guide by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5302
* docs: add comprehensive GCP GKE self-hosting guide by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5303
* feat(pki): add webhooks to alerts by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5327
* docs: add AWS and GCP native deployment guides to navigation by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5305
* docs: fix self-hosting overview page GCP link and card descriptions by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5296
* docs: clarify single-instance vs dual-phase rotation per provider by @IgorHorta in https://github.com/Infisical/infisical/pull/5354
* feature: add AWS load balancer PKI sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5285
* feat: add requestId query parameter to notification URLs for secret approval requests by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5370
* feat: automatically update references when secrets are moved or updated by @varonix0 in https://github.com/Infisical/infisical/pull/5344
* fix(ui): add secret approval request role to allow users view CR other than theirs by @IgorHorta in https://github.com/Infisical/infisical/pull/5345
* feat(frontend): secret version history on overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5363
* fix(frontend): remove secret ID being set as secret comment by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5375
* feat(pki): add slack webhook to alerts by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5369
* feature(api): add display name support for sub-organizations by @IgorHorta in https://github.com/Infisical/infisical/pull/5362
* feat: add access insights to overview page  by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5373
* docs: update Linux HA deployment to use new Infisical repository URL by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5378
* fix(secrets): resolve rename validation error for skipMultilineEncoding by @IgorHorta in https://github.com/Infisical/infisical/pull/5379
* fix: queue PKI Alert V2 run once a day by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5384
* feat(pam): individual resource & account pages by @x032205 in https://github.com/Infisical/infisical/pull/5376
* fix(api): include create secrets when resolving tags in bulk upsert by @MuzzaiyyanHussain in https://github.com/Infisical/infisical/pull/5324
* fix(rotation): use local auth for Windows local account verification by @victorvhs017 in https://github.com/Infisical/infisical/pull/5386

## New Contributors
* @njg7194 made their first contribution in https://github.com/Infisical/infisical/pull/5339
* @MuzzaiyyanHussain made their first contribution in https://github.com/Infisical/infisical/pull/5324

**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.158.0...v0.158.1