v0.158.14

Infisical/infisicalv0.158.14Mar 17, 2026by varonix0

AI Summary

This release introduces significant enhancements to telemetry, security automation, and user interface. It includes new features for credential rotation, automated certificate management, and batch operations for secrets.

Key Highlights

Add machine identity PostHog telemetry events for better observability
Implement credential rotations for app connections
Rework CA intermediate flow with external signature support (Venafi) and auto-renewal
Add automated job to rebuild CA CRL
Update login and sign up flow UI to v3 components

New Features

Relative import secret references
Azure SCIM token secret sync + app connection
Audit log token metadata
Auto tidy feature for expired certificates

Full Release Notes

## What's Changed
* fix: bdd tests timeout by @varonix0 in https://github.com/Infisical/infisical/pull/5678
* fix: pass distinctId to groupIdentify to prevent phantom PostHog persons by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5679
* feat: add machine identity PostHog telemetry events by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5664
* feat(secrets-overview): overview batch operations - single environment by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5655
* improvement: default to first env in new projects by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5693
* feat: enrich PostHog person records for machine identities with Redis-based dedup by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5689
* feat(app-connections): credential rotations by @varonix0 in https://github.com/Infisical/infisical/pull/5562
* feat: changed audit log pushing to only push to one source by @akhilmhdh in https://github.com/Infisical/infisical/pull/5686
* fix: send new device login email only after MFA verification by @IgorHorta in https://github.com/Infisical/infisical/pull/5702
* feat: add automated job to rebuild CA CRL by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5625
* fix: allow string for scim user response active property by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5681
* fix(auth): skip OIDC re-auth redirect when user is already authenticated via OIDC by @IgorHorta in https://github.com/Infisical/infisical/pull/5717
* feat: rework CA intermediate flow, added external signature support with Venafi, CA certificates auto-renew process by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5587
* fix(platform-230): use SSO platform identifiers by @PrestigePvP in https://github.com/Infisical/infisical/pull/5638
* docs(pam): add postgresql and mysql resources to PAM docs by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5703
* feat: add actorType indicator for machine identities in PostHog by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5716
* feat: audit log token metadata by @varonix0 in https://github.com/Infisical/infisical/pull/5721
* improvement(helm): switch helm chart release to OCI push by @victorvhs017 in https://github.com/Infisical/infisical/pull/5691
* feat: azure scim token secret sync + app connection by @varonix0 in https://github.com/Infisical/infisical/pull/5669
* improvement(frontend): update login and sign up flow ui to v3 components by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5680
* docs: update agent templating functions by @varonix0 in https://github.com/Infisical/infisical/pull/5727
* docs: local dev guide for PAM by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5724
* feat: add auto tidy feature for expired certificates by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5732
* feat: relative import secret references by @varonix0 in https://github.com/Infisical/infisical/pull/5576


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.158.13...v0.158.14