v0.159.23

Infisical/infisicalv0.159.23Apr 29, 2026by adilsitos

AI Summary

This release adds support for Supabase secret rotation and Venafi TPP external CA integration. It also introduces gateway high-availability pools and per-tab Postgres connections for PAM.

Key Highlights

  • Support for Supabase secret rotation
  • Venafi TPP external CA integration
  • Gateway pools for high-availability failover
  • Per-tab Postgres connections with isolated transactions
  • Gateway v2 support for vault migration

New Features

  • Supabase rotation support
  • Venafi TPP integration
  • HA Gateway pools
  • Isolated PAM transactions
  • Gateway v2 migration support

Full Release Notes

## What's Changed
* feat: updated secret sharing delete to have 7 day grace by @akhilmhdh in https://github.com/Infisical/infisical/pull/6160
* fix(vercel-sync): filter team shared env vars to sync-owned set by @victorvhs017 in https://github.com/Infisical/infisical/pull/6144
* chore(cache-keys): move cache keys to single file  by @adilsitos in https://github.com/Infisical/infisical/pull/6162
* feat(secret-rotation): support supabase by @mathnogueira in https://github.com/Infisical/infisical/pull/6130
* improvement(secrets-overview): remove tooltip delay duration on overview page table actions and add more options tooltip by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/6145
* feat(frontend): add button to reveal secret reference values by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/6143
* fix(pki): reject EST simple re-enroll with revoked client cert by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/6163
* docs(pki-discovery): document ALLOW_INTERNAL_IP_CONNECTIONS option by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/6157
* fix(pki): report correct enrollment type in auto-renewal error by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/6159
* fix(signup): restore "Team Invite" attribution source for invited users by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6141
* docs: rename Agent Sentinel to Agent Vault with external link in Products nav by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6176
* fix(ui): brighten "Create New Connection" option in connection dropdown by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6192
* fix(ui): auto-switch environment view after uploading secrets by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6188
* chore: delete .github/workflows/one-time-secrets.yaml by @maidul98 in https://github.com/Infisical/infisical/pull/6203
* fix(db): gate OAuth verified migration on accepted users by @victorvhs017 in https://github.com/Infisical/infisical/pull/6173
* fix(scim): preserve orgId when listing groups by @victorvhs017 in https://github.com/Infisical/infisical/pull/6207
* improvement: add rotation icon to rotated secrets in single env display by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/6053
* docs: remove projectName from audit log documentation by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6209
* chore: removed dependencies and api key service by @akhilmhdh in https://github.com/Infisical/infisical/pull/6161
* docs: add Prevent Value Reuse constraint to secret validation rules by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6212
* feat: add gateway pools for high-availability failover by @bernie-g in https://github.com/Infisical/infisical/pull/6050
* improvement: unrevert upgrade aws-sdk v2 to v3 by @PrestigePvP in https://github.com/Infisical/infisical/pull/5905
* feat(pam): per-tab Postgres connections with isolated transactions by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/6154
* feat: add Venafi TPP external CA integration by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/6032
* improvement(eng-4874): memoize org findByID by @PrestigePvP in https://github.com/Infisical/infisical/pull/6164
* improvement(frontend): update secret sharing UI by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/6121
* fix(docs): replace broken Kubernetes icon URL with Font Awesome dharmachakra by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6217
* feat(e2e-tests): fips mode by @varonix0 in https://github.com/Infisical/infisical/pull/6214
* feat(secrets-overview): add tag, metadata and multiline encoding support to csv upload by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/6156
* fix(email): include confirmation code in email subject line by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/6218
* feat: added filter to audit log and improves the crypto by @akhilmhdh in https://github.com/Infisical/infisical/pull/6155
* feat(auth): store machine identity auth as identity actor by @mathnogueira in https://github.com/Infisical/infisical/pull/6101
* feat: user controlled ssl rejection option for dynamic secret by @akhilmhdh in https://github.com/Infisical/infisical/pull/6204
* feat: resolved hashedPassword not set for bootstrap admin by @akhilmhdh in https://github.com/Infisical/infisical/pull/6221
* improvement(secret-migration): add more paths in vault migration by @adilsitos in https://github.com/Infisical/infisical/pull/6215
* fix: fail on Schema generation for analytics by @maidul98 in https://github.com/Infisical/infisical/pull/6223
* improvement(frontend): add design.md and new batch of component stories by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/6211
* fix(gateway): add support for gateway v2 on vault migration by @adilsitos in https://github.com/Infisical/infisical/pull/6227
* improvement(secrets-rotation): allow move between environments and folders by @adilsitos in https://github.com/Infisical/infisical/pull/6220
* fix: missing gateway-v2 handling on venafi tpp by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/6226
* feat(smtp): add SMTP_HELO_HOST to set the EHLO/HELO hostname by @quarckster in https://github.com/Infisical/infisical/pull/6229

## New Contributors
* @quarckster made their first contribution in https://github.com/Infisical/infisical/pull/6229

**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.159.22...v0.159.23