v0.158.8
Infisical/infisicalv0.158.8Mar 9, 2026by victorvhs017
AI Summary
A major feature release introducing Privileged Access Management (PAM) enhancements, ClickHouse dynamic secrets, and secret replication capabilities.
Key Highlights
- PAM resources now support metadata and RBAC filtering
- Added ClickHouse dynamic secret provider
- Added HashiCorp Vault import capability
- Secret replication support added to the overview page
- Overview page revamped with dynamic lease management
New Features
- PAM metadata and RBAC
- ClickHouse dynamic secret provider
- HashiCorp Vault import
- Secret replication
- Overview page UI/UX updates (reveal, redact, leases)
- Sub-organization menu UI improvements
- PKI metadata support
- FIPS support
Full Release Notes
## What's Changed * improvement(pam): add metadata support, metadata based RBAC and filtering capabilities to PAM resources and accounts by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5561 * fix: gtm tag being added to the body instead the head of the document by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5584 * fix(secret-syncs): improve secret sync errors by @x032205 in https://github.com/Infisical/infisical/pull/5577 * feat: resolved rotation and dynamic lease mail not working. by @akhilmhdh in https://github.com/Infisical/infisical/pull/5591 * feat(secrets-17): add clickhouse dynamic secret provider by @PrestigePvP in https://github.com/Infisical/infisical/pull/5574 * fix(docs): correct broken project groups API reference links by @IgorHorta in https://github.com/Infisical/infisical/pull/5597 * feat: changed from promise.all to sequence for batch secret update operation by @akhilmhdh in https://github.com/Infisical/infisical/pull/5596 * feat(secrets-overview): add hashicorp vault import capability by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5579 * feat(secrets-overview): display env/path approval protection status and request actions alert on overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5573 * fix(secret-sync): improve bitbucket repos fetch by @x032205 in https://github.com/Infisical/infisical/pull/5594 * fix: add missing CSP checks for GTM by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5603 * feat: add delete environment action to env col dropdown on overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5567 * feat(pam): windows discovery base by @x032205 in https://github.com/Infisical/infisical/pull/5517 * feat(frontend): add secret replication support to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5516 * feat(secrets-overview): overview page dynamic secret leases and notification reference by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5592 * feat(secrets-overview): add reveal values toggle to single env view by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5607 * feat: add redact secret functionality to the overview page and update redacted display by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5605 * chore: order secrets for batch endpoint by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5612 * feat(pam): add support for ssh web access by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5521 * improvement(pam): add dynamic operation id by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5608 * feat(eng-4621): add recent login awareness to login page by @PrestigePvP in https://github.com/Infisical/infisical/pull/5583 * fix: resolved template discriminated union error by @akhilmhdh in https://github.com/Infisical/infisical/pull/5618 * fix: remove unnecessary UserEncryptionKey INNER JOIN that breaks project user deletion for SCIM users by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5615 * feat(secrets-overview): re-vamp create secret form by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5611 * fix: use atomic postgres updates by @PrestigePvP in https://github.com/Infisical/infisical/pull/5620 * feat(sub-org): sub-organization menu selector UI/UX improvements by @IgorHorta in https://github.com/Infisical/infisical/pull/5599 * chore: add mising index for secret versions by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5619 * feat: add Digicert External CA documentation by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5622 * docs: add Node.js version requirements for Node.js SDK v5 by @IgorHorta in https://github.com/Infisical/infisical/pull/5621 * feat(permission): add AssignRole/AssignAdditionalPrivileges with conditions for Members, Identities, and Groups by @victorvhs017 in https://github.com/Infisical/infisical/pull/5593 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.158.7...v0.158.8