Starstruk Logo MarkStarstruk

v0.162.8

Infisical/infisicalv0.162.8Jul 17, 2026by varonix0

AI Summary

Major architectural changes including the folding of the dynamic-secret registry into the proxy allow-list, significant PAM enhancements (SSH, Unix, Tailscale), and support for HMAC keys in KMS.

Key Highlights

  • Fold dynamic-secret registry into proxy allow-list
  • Add support for HMAC keys in KMS
  • Add Tailscale dynamic secret integration
  • Add Unix discovery for PAM
  • Revamp proxied service create/edit with templates

Breaking Changes

  • Drop redundant secret_versions_v2.envId column
  • Remove agent and agent-proxy default roles
  • Disable public signups after admin setup on self-hosted instances

New Features

  • Proxy Allow-list Integration
  • HMAC Support in KMS
  • Tailscale Dynamic Secret Integration
  • Unix Discovery for PAM
  • SSH Log and CA Certificate Improvements
  • Personal Override Action on Secrets
  • InfisicalStaticSecret Documentation

Full Release Notes

### Changed
- Fold dynamic-secret registry into the proxy allow-list (https://github.com/Infisical/infisical/pull/7322)
- Drop redundant secret_versions_v2.envId column (https://github.com/Infisical/infisical/pull/7277)
- Remove agent and agent-proxy default roles (https://github.com/Infisical/infisical/pull/7297)
- Disable public signups after admin setup on self-hosted instances (https://github.com/Infisical/infisical/pull/7275)

### Added
- Return sequence from approvers (https://github.com/Infisical/infisical/pull/7317)
- Add extra Helm properties for Gateway (https://github.com/Infisical/infisical/pull/7312)
- Add support for HMAC keys in KMS (https://github.com/Infisical/infisical/pull/7302)
- Add org and actor info to log (https://github.com/Infisical/infisical/pull/7300)
- Add SSH log and CA certificate improvements for PAM (https://github.com/Infisical/infisical/pull/7293)
- Improve event filter to not be secrets specific for PAM (https://github.com/Infisical/infisical/pull/7292)
- Add dynamic secret support for proxied services (https://github.com/Infisical/infisical/pull/7288)
- Add domainComponents to PKI certificate fields (https://github.com/Infisical/infisical/pull/7287)
- Add Unix discovery for PAM (https://github.com/Infisical/infisical/pull/7281)
- Add Tailscale dynamic secret integration (https://github.com/Infisical/infisical/pull/7273)
- Prevent signers from approving their own signing requests (https://github.com/Infisical/infisical/pull/7252)
- Add personal override action on secrets resource for roles (https://github.com/Infisical/infisical/pull/7250)
- Document InfisicalStaticSecret with complete examples (https://github.com/Infisical/infisical/pull/7117)

### Fixed
- Fix frontend issues about cross-project secret sharing (https://github.com/Infisical/infisical/pull/7326)
- Update DIGICERT_SERVICES_API_URL_EU to new endpoint (https://github.com/Infisical/infisical/pull/7325)
- Restore original dynamic-secret lease output rendering (https://github.com/Infisical/infisical/pull/7321)
- Add missing index for project deletion (https://github.com/Infisical/infisical/pull/7303)
- Support hardware security keys on FIPS instances for WebAuthn (https://github.com/Infisical/infisical/pull/7301)
- Send email notifications to signing request approvers (https://github.com/Infisical/infisical/pull/7267)

### Changed
- Send email on account exists when changing email (https://github.com/Infisical/infisical/pull/7309)
- Revamp proxied service create/edit with templates and a stepper (https://github.com/Infisical/infisical/pull/7305)
- Document Gateway network architecture diagram (https://github.com/Infisical/infisical/pull/7313)
- Note cross-project secret sharing is in private preview (https://github.com/Infisical/infisical/pull/7328)
- Surface Docker CLI usage in quickstart and embed Docker video (https://github.com/Infisical/infisical/pull/7307)
- Move HSM integration from KMS product to self-host section (https://github.com/Infisical/infisical/pull/7310)