v0.158.8

Infisical/infisicalv0.158.8Mar 9, 2026by victorvhs017

AI Summary

A major feature release introducing Privileged Access Management (PAM) enhancements, ClickHouse dynamic secrets, and secret replication capabilities.

Key Highlights

  • PAM resources now support metadata and RBAC filtering
  • Added ClickHouse dynamic secret provider
  • Added HashiCorp Vault import capability
  • Secret replication support added to the overview page
  • Overview page revamped with dynamic lease management

New Features

  • PAM metadata and RBAC
  • ClickHouse dynamic secret provider
  • HashiCorp Vault import
  • Secret replication
  • Overview page UI/UX updates (reveal, redact, leases)
  • Sub-organization menu UI improvements
  • PKI metadata support
  • FIPS support

Full Release Notes

## What's Changed
* improvement(pam): add metadata support, metadata based RBAC and filtering capabilities to PAM resources and accounts by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5561
* fix: gtm tag being added to the body instead the head of the document by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5584
* fix(secret-syncs): improve secret sync errors by @x032205 in https://github.com/Infisical/infisical/pull/5577
* feat: resolved rotation and dynamic lease  mail not working. by @akhilmhdh in https://github.com/Infisical/infisical/pull/5591
* feat(secrets-17): add clickhouse dynamic secret provider by @PrestigePvP in https://github.com/Infisical/infisical/pull/5574
* fix(docs): correct broken project groups API reference links by @IgorHorta in https://github.com/Infisical/infisical/pull/5597
* feat: changed from promise.all to sequence for batch secret update operation by @akhilmhdh in https://github.com/Infisical/infisical/pull/5596
* feat(secrets-overview): add hashicorp vault import capability by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5579
* feat(secrets-overview): display env/path approval protection status and request actions alert on overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5573
* fix(secret-sync): improve bitbucket repos fetch by @x032205 in https://github.com/Infisical/infisical/pull/5594
* fix: add missing CSP checks for GTM by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5603
* feat: add delete environment action to env col dropdown on overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5567
* feat(pam): windows discovery base by @x032205 in https://github.com/Infisical/infisical/pull/5517
* feat(frontend): add secret replication support to overview page by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5516
* feat(secrets-overview): overview page dynamic secret leases and notification reference by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5592
* feat(secrets-overview): add reveal values toggle to single env view by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5607
* feat: add redact secret functionality to the overview page and update redacted display by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5605
* chore: order secrets for batch endpoint by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5612
* feat(pam): add support for ssh web access by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5521
* improvement(pam): add dynamic operation id by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/5608
* feat(eng-4621): add recent login awareness to login page by @PrestigePvP in https://github.com/Infisical/infisical/pull/5583
* fix: resolved template discriminated union error by @akhilmhdh in https://github.com/Infisical/infisical/pull/5618
* fix: remove unnecessary UserEncryptionKey INNER JOIN that breaks project user deletion for SCIM users by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/5615
* feat(secrets-overview): re-vamp create secret form by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/5611
* fix: use atomic postgres updates by @PrestigePvP in https://github.com/Infisical/infisical/pull/5620
* feat(sub-org): sub-organization menu selector UI/UX improvements by @IgorHorta in https://github.com/Infisical/infisical/pull/5599
* chore: add mising index for secret versions by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/5619
* feat: add Digicert External CA documentation by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/5622
* docs: add Node.js version requirements for Node.js SDK v5 by @IgorHorta in https://github.com/Infisical/infisical/pull/5621
* feat(permission): add AssignRole/AssignAdditionalPrivileges with conditions for Members, Identities, and Groups by @victorvhs017 in https://github.com/Infisical/infisical/pull/5593


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.158.7...v0.158.8