v0.161.6

Infisical/infisicalv0.161.6Jun 24, 2026by mathnogueira

AI Summary

This update fixes AWS workload identity federation issues and enhances PAM by adding MongoDB and MS SQL Server account types along with registry-driven template policies. It also improves PKI with HSM connectors and SAN validation.

Key Highlights

  • AWS workload identity federation fixes
  • New PAM account types (MongoDB, MS SQL Server)
  • Registry-driven template policies for PAM
  • HSM connector for PKI code signing
  • SAN validation for workload identity

New Features

  • MongoDB and MS SQL Server PAM support
  • Registry-driven PAM policies
  • HSM PKI connector
  • Trigger.dev app connection and secret sync
  • SAN validation for workload identity

Full Release Notes

### Changed
- Resolve AWS workload identity federation on Fargate/Lambda/EKS (https://github.com/Infisical/infisical/pull/6990)
- Address certificate profile defaults behavior (https://github.com/Infisical/infisical/pull/6991)

### Added
- Add registry-driven template policies for PAM (https://github.com/Infisical/infisical/pull/6981)
- Add MongoDB and MS SQL Server account types to PAM (https://github.com/Infisical/infisical/pull/6956)
- Add HSM connector to PKI code signing (https://github.com/Infisical/infisical/pull/6938)
- Add SAN validation for workload identity (https://github.com/Infisical/infisical/pull/6957)
- Add Trigger.dev app connection and secret sync (https://github.com/Infisical/infisical/pull/6712)
- Get membership by project id and user id (https://github.com/Infisical/infisical/pull/6976)

### Fixed
- Block no access users from approval review (https://github.com/Infisical/infisical/pull/6988)
- Correct license server v2 customer portal behavior (https://github.com/Infisical/infisical/pull/6973)
- Check all orgs before failing request (https://github.com/Infisical/infisical/pull/6975)
- Allow user added through groups in approval policy (https://github.com/Infisical/infisical/pull/6929)
- Block last super admin from self-deleting (https://github.com/Infisical/infisical/pull/6288)
- Always label add button "Add Secret" in secret overview (https://github.com/Infisical/infisical/pull/7005)