v0.158.3
Infisical/infisicalv0.158.3Feb 17, 2026by varonix0
AI Summary
A major release with extensive features including secret reference dependency tracking, secret version redaction, PKI Network Discovery, PAM improvements, and infrastructure enhancements like durable queue for Redis and ClickHouse audit logs.
Key Highlights
- Added secret reference dependency tracking
- Implemented secret version value redaction
- Added PKI Network Discovery feature
- Implemented durable queue for Redis with PostgreSQL persistence
- Added ClickHouse audit log configuration and querying
- Added secret sharing functionality
- Added in-browser web access terminal for PAM PostgreSQL accounts
- Added AD server resource and account support for PAM
- Added support for vault KV engine v1 in secret sync
- Added wildcard email domain support for OIDC SSO
New Features
- Secret reference dependency tracking
- Secret version value redaction
- PKI Network Discovery
- Durable queue for Redis
- ClickHouse audit logs
- Secret sharing API
- PAM web launcher for PostgreSQL
- AD server integration
- Vault KV v1 support
- OIDC wildcard email domains
- Fly.io automatic redeployment
- Inline search filter for audit logs
Full Release Notes
## What's Changed * feat: added logger to vault app connection for debug by @akhilmhdh in https://github.com/Infisical/infisical/pull/5403 * fix: gateway v2 support for hashicorp vault connection by @varonix0 in https://github.com/Infisical/infisical/pull/5410 * improvement(frontend): enhance secret diff view and commit handling by @victorvhs017 in https://github.com/Infisical/infisical/pull/5364 * feat(sso): support wildcard email domains for OIDC by @IgorHorta in https://github.com/Infisical/infisical/pull/5409 * fix(permissions): add a check for empty glob paths by @victorvhs017 in https://github.com/Infisical/infisical/pull/5415 * feat: updated permission error message by @akhilmhdh in https://github.com/Infisical/infisical/pull/5414 * feat: implement durable queue for redis queues that needs persistence in PG by @akhilmhdh in https://github.com/Infisical/infisical/pull/5380 * feat: add secret reminder support to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5387 * feat: remove folders from PAM by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5390 * feat(pam): windows server by @x032205 in https://github.com/Infisical/infisical/pull/5396 * fix: address pam account mutation response issue by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5421 * feat(pam): add web launcher for browser-based terminal access to PostgreSQL accounts by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5399 * feat(pam): simplify resource accounts table and add rotation badge by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5419 * docs: updates after pam restructuring by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5420 * fix(server): use SITE_URL in bootstrap startup message by @themavik in https://github.com/Infisical/infisical/pull/5436 * fix(docker): exclude test private keys and BDD files from production images by @themavik in https://github.com/Infisical/infisical/pull/5439 * feat(flyio): support automatic redeployment on Fly.io after secret ch… by @IgorHorta in https://github.com/Infisical/infisical/pull/5447 * fix(secret-sync): fixed Render Secret Sync deletion bugs by @victorvhs017 in https://github.com/Infisical/infisical/pull/5448 * fix(app-connection): hashicorp vault https gateway usage by @varonix0 in https://github.com/Infisical/infisical/pull/5457 * feat(secret-sync): support for vault KV engine v1 by @varonix0 in https://github.com/Infisical/infisical/pull/5460 * improvement(api): add config for sending audit logs to clickhouse by @fangpenlin in https://github.com/Infisical/infisical/pull/5458 * feat(frontend): add support for personal overrides on overview page and split override view by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5417 * improvement(api): update local dev env to use infisical for the db name and credentials by @fangpenlin in https://github.com/Infisical/infisical/pull/5462 * chore: removed lint stage check by @akhilmhdh in https://github.com/Infisical/infisical/pull/5434 * feat(pki): add pagerduty channel to PKI alerting and split alerting docs by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5433 * chore: added redis reconnect on error by @akhilmhdh in https://github.com/Infisical/infisical/pull/5466 * feat(ui): add inline search filter bar to audit logs page by @maidul98 in https://github.com/Infisical/infisical/pull/5465 * feat(pam): in-browser web access terminal for PAM postgres accounts by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5425 * feature: add PKI Network Discovery by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5428 * feat(frontend): add secret share action to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5426 * feat(frontend): add upload support to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5459 * improvement(api): query audit logs with clickhouse by @fangpenlin in https://github.com/Infisical/infisical/pull/5463 * docs: sprig for export command by @varonix0 in https://github.com/Infisical/infisical/pull/5468 * improvement(api): disable wait_for_async_insert for clickhouse audit logs insert now by @fangpenlin in https://github.com/Infisical/infisical/pull/5469 * feat(secret-sharing): cleaned up API and exposed publicly by @varonix0 in https://github.com/Infisical/infisical/pull/5427 * Update envkey.mdx by @kneuens-lab in https://github.com/Infisical/infisical/pull/5471 * docs(cli): removed cloudsmith links cli by @victorvhs017 in https://github.com/Infisical/infisical/pull/5467 * chore: add Certificate Import API Reference by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5476 * feat(pam): ad server resource & account by @x032205 in https://github.com/Infisical/infisical/pull/5464 * docs: improve linking on PAM overview page by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5356 * feat(vault): reusable gateway by @varonix0 in https://github.com/Infisical/infisical/pull/5481 * improvement(api): fix default value not actually updated if no value provided for the i… by @fangpenlin in https://github.com/Infisical/infisical/pull/5482 * feat: secret version value redaction by @varonix0 in https://github.com/Infisical/infisical/pull/5392 * feat(frontend): add single environment overview display and expand overview functionality by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5473 * feat: v4 secrets router refactor by @varonix0 in https://github.com/Infisical/infisical/pull/5404 * docs(changelog): redirect changelog page to docs overview page by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5497 * docs(pam): add docs for postgres web access by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5498 * feat(overview): add commit history access to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5484 * fix: remove extra vault migration validation by @varonix0 in https://github.com/Infisical/infisical/pull/5499 * improvement(frontend): update styling of bulk select to match v3 components by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5483 * feat: removed the check in rotation and also added useSudo capability in unix linux account rotation by @akhilmhdh in https://github.com/Infisical/infisical/pull/5495 * fix: increase PKI Sync name length by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5504 * fix: sendApprovalEmailsFn wrong end of url symbol by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5506 * docs: update network discovery reference by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5505 * chore: add support for PKI DNS CNAME delegation by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5501 * fix: updated ldap auth lockout to be like ua lockout by @akhilmhdh in https://github.com/Infisical/infisical/pull/5503 * feat(ui): refactor secret dependency tree view by @varonix0 in https://github.com/Infisical/infisical/pull/5502 * fix: unblock e2e tests by @varonix0 in https://github.com/Infisical/infisical/pull/5508 ## New Contributors * @themavik made their first contribution in https://github.com/Infisical/infisical/pull/5436 * @kneuens-lab made their first contribution in https://github.com/Infisical/infisical/pull/5471 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.158.2...v0.158.3