v0.162.11
Infisical/infisicalv0.162.11Jul 21, 2026by adilsitos
AI Summary
A major update featuring secret rotation for Datadog API keys and Snowflake user keys, the introduction of metadata search, and several PAM and HSM improvements.
Key Highlights
- Secret rotation for Datadog API keys
- Secret rotation for Snowflake user keys
- Metadata search feature
- Support for pre-hashed RSA signing for HSM-backed PKCS#11
New Features
- Datadog API Key Rotation
- Snowflake User Key Rotation
- Metadata Search
- HSM-backed PKCS#11 Pre-hashed RSA Signing
- Identity TLS Certificate Authentication improvements
- PAM Deep Link Access
Full Release Notes
## What's Changed * chore: add upgrade impact for v0.162.9 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7333 * improvement(dynamic-secret-gcp): validate that the email being used can only be used inside the same org by @adilsitos in https://github.com/Infisical/infisical/pull/7299 * fix(telemetry): extend aggregated events cron interval and timeout by @victorvhs017 in https://github.com/Infisical/infisical/pull/7327 * chore: ui/ux adjustments for PAM by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7320 * feat(secret-rotation-app-conn): datadog api keys by @adilsitos in https://github.com/Infisical/infisical/pull/7285 * docs: update Ruby SDK docs for the native v3 gem by @claude[bot] in https://github.com/Infisical/infisical/pull/7337 * chore(docs): update screenshots for api key rotation on datadog by @adilsitos in https://github.com/Infisical/infisical/pull/7345 * fix(project): chunk-delete environments during project hard delete by @victorvhs017 in https://github.com/Infisical/infisical/pull/7319 * improvement(migration): add FK indexes for permission query joins by @victorvhs017 in https://github.com/Infisical/infisical/pull/7343 * feat: add deep link for pam access by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7349 * improvement(frontend): polish external migrations modal flow by @andrewhuhh in https://github.com/Infisical/infisical/pull/7351 * improvement(secret-v2-bridge): cache permission fingerprint for ETag path by @victorvhs017 in https://github.com/Infisical/infisical/pull/7353 * feat: added new flags in place by @akhilmhdh in https://github.com/Infisical/infisical/pull/7338 * feat: fixed the annual recurring issue not counting by @akhilmhdh in https://github.com/Infisical/infisical/pull/7358 * improvement(ui): add Agent Proxy and Agent policy templates by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7346 * feat: support pre-hashed RSA signing for HSM-backed PKCS#11 signers by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7344 * chore: add upgrade impact for v0.162.7 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7298 * feat(secret-rotation): snowflake user key by @adilsitos in https://github.com/Infisical/infisical/pull/7290 * fix: consider mode when creating approval commits in /batch by @mathnogueira in https://github.com/Infisical/infisical/pull/7306 * improvement(telemetry): label secret cache ETag misses and fix k8-operator UA detection by @victorvhs017 in https://github.com/Infisical/infisical/pull/7356 * fix(audit-log): skip Postgres prune and query ClickHouse in reports when enabled by @victorvhs017 in https://github.com/Infisical/infisical/pull/7362 * feat(identity-tls-cert-auth): optional trust-anchor chain verification for client certificates by @sinnwise in https://github.com/Infisical/infisical/pull/7021 * feat(search): metadata search by @adilsitos in https://github.com/Infisical/infisical/pull/7318 ## New Contributors * @andrewhuhh made their first contribution in https://github.com/Infisical/infisical/pull/7351 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.10...v0.162.11