v0.162.11

Infisical/infisicalv0.162.11Jul 21, 2026by adilsitos

AI Summary

A major update featuring secret rotation for Datadog API keys and Snowflake user keys, the introduction of metadata search, and several PAM and HSM improvements.

Key Highlights

  • Secret rotation for Datadog API keys
  • Secret rotation for Snowflake user keys
  • Metadata search feature
  • Support for pre-hashed RSA signing for HSM-backed PKCS#11

New Features

  • Datadog API Key Rotation
  • Snowflake User Key Rotation
  • Metadata Search
  • HSM-backed PKCS#11 Pre-hashed RSA Signing
  • Identity TLS Certificate Authentication improvements
  • PAM Deep Link Access

Full Release Notes

## What's Changed
* chore: add upgrade impact for v0.162.9 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7333
* improvement(dynamic-secret-gcp): validate that the email being used can only be used inside the same org by @adilsitos in https://github.com/Infisical/infisical/pull/7299
* fix(telemetry): extend aggregated events cron interval and timeout by @victorvhs017 in https://github.com/Infisical/infisical/pull/7327
* chore: ui/ux adjustments for PAM by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7320
* feat(secret-rotation-app-conn): datadog api keys by @adilsitos in https://github.com/Infisical/infisical/pull/7285
* docs: update Ruby SDK docs for the native v3 gem by @claude[bot] in https://github.com/Infisical/infisical/pull/7337
* chore(docs): update screenshots for api key rotation on datadog  by @adilsitos in https://github.com/Infisical/infisical/pull/7345
* fix(project): chunk-delete environments during project hard delete by @victorvhs017 in https://github.com/Infisical/infisical/pull/7319
* improvement(migration): add FK indexes for permission query joins by @victorvhs017 in https://github.com/Infisical/infisical/pull/7343
* feat: add deep link for pam access by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7349
* improvement(frontend): polish external migrations modal flow by @andrewhuhh in https://github.com/Infisical/infisical/pull/7351
* improvement(secret-v2-bridge): cache permission fingerprint for ETag path by @victorvhs017 in https://github.com/Infisical/infisical/pull/7353
* feat: added new flags in place by @akhilmhdh in https://github.com/Infisical/infisical/pull/7338
* feat: fixed the annual recurring issue not counting by @akhilmhdh in https://github.com/Infisical/infisical/pull/7358
* improvement(ui): add Agent Proxy and Agent policy templates by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7346
* feat: support pre-hashed RSA signing for HSM-backed PKCS#11 signers by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7344
* chore: add upgrade impact for v0.162.7 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7298
* feat(secret-rotation): snowflake user key  by @adilsitos in https://github.com/Infisical/infisical/pull/7290
* fix: consider mode when creating approval commits in /batch by @mathnogueira in https://github.com/Infisical/infisical/pull/7306
* improvement(telemetry): label secret cache ETag misses and fix k8-operator UA detection by @victorvhs017 in https://github.com/Infisical/infisical/pull/7356
* fix(audit-log): skip Postgres prune and query ClickHouse in reports when enabled by @victorvhs017 in https://github.com/Infisical/infisical/pull/7362
* feat(identity-tls-cert-auth): optional trust-anchor chain verification for client certificates by @sinnwise in https://github.com/Infisical/infisical/pull/7021
* feat(search): metadata search  by @adilsitos in https://github.com/Infisical/infisical/pull/7318

## New Contributors
* @andrewhuhh made their first contribution in https://github.com/Infisical/infisical/pull/7351

**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.10...v0.162.11