v0.162.16

Infisical/infisicalv0.162.16Aug 4, 2026by sheensantoscapadngan

AI Summary

This release focuses on UI improvements, including a dedicated 403 error page and a settings revamp, alongside backend enhancements like expire alerts for machine identities and support for Cloudflare secret rotation.

Key Highlights

  • UI improvements: dedicated 403 error page and settings revamp
  • Machine identity expire alerts
  • Secret rotation support for Cloudflare
  • Cert manager UI revamp
  • Spacelift sync feature

New Features

  • Add expire alert for machine identity authentication
  • Add dedicated 403 forbidden-access error page
  • Cert manager UI revamp
  • Support for API tokens and R2 access keys on Cloudflare
  • Migrate gateway and relay UI to v3
  • Expand onboarding with product selection and metrics
  • Revamp personal settings
  • Self hosted support for new license server
  • Add PKI windows and linux post-sync command support
  • Use license to enable cross-project secret sharing
  • Show organization name on invite signup

Full Release Notes

## What's Changed
* fix(ui): normalize iOS input font sizing by @andrewhuhh in https://github.com/Infisical/infisical/pull/7468
* chore: add upgrade impact for v0.162.15 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7486
* fix: diff API spec against the merge base instead of production by @Thiago-AS in https://github.com/Infisical/infisical/pull/7436
* feat: add expire alert for machine identity authentication by @Thiago-AS in https://github.com/Infisical/infisical/pull/7384
* feat(frontend): add dedicated 403 forbidden-access error page by @claude[bot] in https://github.com/Infisical/infisical/pull/7455
* feat: cert manager UI revamp by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7391
* fix: serialize slot claims, isolate e2e cron namespace and fix test flakiness by @Thiago-AS in https://github.com/Infisical/infisical/pull/7461
* fix(agent-proxy): let user tokens report proxied-service usage by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7426
* chore(honey-tokens): update node version  by @adilsitos in https://github.com/Infisical/infisical/pull/7492
* feat: spacelift sync by @mathnogueira in https://github.com/Infisical/infisical/pull/7453
* feat(agent-proxy): add adoption telemetry for proxied services by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7491
* docs(honey-tokens): update cloudformation  by @adilsitos in https://github.com/Infisical/infisical/pull/7493
* fix: use ms instead of seconds in histogram metric by @mathnogueira in https://github.com/Infisical/infisical/pull/7477
* fix(ui): restore default input styling by @andrewhuhh in https://github.com/Infisical/infisical/pull/7489
* feat(ui): add selected action bar by @andrewhuhh in https://github.com/Infisical/infisical/pull/7496
* fix(change-requests): improved approval flow by @varonix0 in https://github.com/Infisical/infisical/pull/7212
* feat(secret-rotation): support for api tokens and r2 access keys on cloudflare by @adilsitos in https://github.com/Infisical/infisical/pull/7483
* chore: doc style guide and rules by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7354
* fix: address deadlock for cert issuance by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7495
* fix(secret-scanning): bound scan resources and reap stuck scans by @victorvhs017 in https://github.com/Infisical/infisical/pull/7488
* fix: limit process threads for secret scanning by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7503
* fix: validation and other issues by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7490
* feat(ui): migrate gateway and relay UI to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7379
* improvement(auth): improve verification code input by @andrewhuhh in https://github.com/Infisical/infisical/pull/7470
* feat: expand onboarding with product selection and metrics by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7482
* feat(settings): revamp personal settings by @andrewhuhh in https://github.com/Infisical/infisical/pull/7469
* fix(auth): improve invalid invitation state by @andrewhuhh in https://github.com/Infisical/infisical/pull/7505
* feat: self hosted support for new license server by @akhilmhdh in https://github.com/Infisical/infisical/pull/7502
* improvement(redis): add throttled structured logging for connection errors by @victorvhs017 in https://github.com/Infisical/infisical/pull/7494
* feat: add PKI windows and linux post-sync command support by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7499
* feat(auth): show organization name on invite signup by @andrewhuhh in https://github.com/Infisical/infisical/pull/7506
* feat(admin): add guided self-hosted bootstrap onboarding by @andrewhuhh in https://github.com/Infisical/infisical/pull/7448
* fix(auth): align onboarding form spacing by @andrewhuhh in https://github.com/Infisical/infisical/pull/7520
* docs: servicenow infisical approval workflow docs by @akhilmhdh in https://github.com/Infisical/infisical/pull/7512
* feat: use license to enable cross-project secret sharing by @mathnogueira in https://github.com/Infisical/infisical/pull/7404
* feat(telemetry): add WAI telemetry events (Audit Logs Viewed, Secret Sync Updated, Secret Rotation V2 Updated) by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7466
* chore: remove SSH and Agent Sentinel (AI MCP) products by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7518
* feat(telemetry): report PKI certificate issuance from profile-based flows by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7514
* feat(pam): staleness check for Windows discovery by @x032205 in https://github.com/Infisical/infisical/pull/7500
* docs(agent-proxy): document the canceled decision and the agent's own sandbox layer by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7524


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.15...v0.162.16