v0.163.0
Infisical/infisicalv0.163.0Aug 26, 2026by Thiago-AS
AI Summary
A comprehensive release featuring the migration of project roles and secrets management to v3 UI components, along with significant PAM and PKI improvements.
Key Highlights
- Migrated project roles access control to v3
- Enabled IAM authentication for PostgreSQL in PAM
- Added delete protection for KMS keys
- Introduced RFC 8693 token exchange grant support
- Enabled certificate renewal editing and improved secrets GC
New Features
- Project roles access control v3 migration
- IAM auth for PostgreSQL
- KMS delete protection
- RFC 8693 token exchange grant
- Certificate renewal editing
- Secrets garbage collection improvement
- Machine identity auth on org membership endpoints
- Project tag editing
Full Release Notes
## What's Changed * feat: allow to edit cert details on manual renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7592 * feat(ui): migrate project roles access control to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7663 * chore: add upgrade impact for v0.162.23 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7757 * fix: remove redundant toast notifcations when erroring on creating an identity by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7760 * feat(pam): iam auth for postgres by @x032205 in https://github.com/Infisical/infisical/pull/7676 * chore: add upgrade impact for v0.162.24 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7763 * docs(secrets-mgmt): add more guide links by @adkah in https://github.com/Infisical/infisical/pull/7767 * feat: first improvement in gc for secrets by @akhilmhdh in https://github.com/Infisical/infisical/pull/7756 * fix(insights): revive dates to be Date so they are not string by @adilsitos in https://github.com/Infisical/infisical/pull/7773 * feat: allow change policy to apply to machine identities by @mathnogueira in https://github.com/Infisical/infisical/pull/7540 * improvement: add clock skew handling for gw and relay by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7575 * docs(self-hosting): add copy button for env vars by @adkah in https://github.com/Infisical/infisical/pull/7779 * feat(kms): add delete protection for KMS keys by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7771 * docs(vale): fix config and errors by @adkah in https://github.com/Infisical/infisical/pull/7781 * chore: enforce checking at least one type in a pr description by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7764 * docs(secrets-mgmt): fix browser by @adkah in https://github.com/Infisical/infisical/pull/7782 * fix(gateway-helm): pass positional gateway name for default CLI by @victorvhs017 in https://github.com/Infisical/infisical/pull/7775 * fix(frontend): allow data: URIs in CSP font-src by @claude[bot] in https://github.com/Infisical/infisical/pull/7681 * feat(dynamic-secrets): migrate relational and warehouse provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7572 * docs(secrets-mgmt): revert browser fix by @adkah in https://github.com/Infisical/infisical/pull/7786 * fix(identity-lockout): replace Redis SCAN with sorted-set index for list reads by @victorvhs017 in https://github.com/Infisical/infisical/pull/7777 * fix: honor machine identity auth on org membership endpoints by @Thiago-AS in https://github.com/Infisical/infisical/pull/7788 * fix(auth): clear stale MFA attempts warning on successful verification by @claude[bot] in https://github.com/Infisical/infisical/pull/7791 * feat(frontend): identify new accounts in PostHog at signup completion by @claude[bot] in https://github.com/Infisical/infisical/pull/7787 * feat(pam): dedicated folder views by @x032205 in https://github.com/Infisical/infisical/pull/7769 * fix(project-cleanup): batch-delete secret tree and index FK columns by @victorvhs017 in https://github.com/Infisical/infisical/pull/7796 * feat(telemetry): make team invite a queryable signup source by @claude[bot] in https://github.com/Infisical/infisical/pull/7789 * improvement(secrets): migrate create secret flow to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7730 * docs(certificate-mgmt): revamp microsoft intune guide by @adkah in https://github.com/Infisical/infisical/pull/7766 * docs(style): fix padding at bottom of pages by @adkah in https://github.com/Infisical/infisical/pull/7806 * feat(settings): add project tag editing by @andrewhuhh in https://github.com/Infisical/infisical/pull/7750 * feat: brought back the cleanup for license server by @akhilmhdh in https://github.com/Infisical/infisical/pull/7761 * docs(secrets-mgmt): add local dev guide by @adkah in https://github.com/Infisical/infisical/pull/7802 * feat: show renewed certificates as Renewed by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7784 * fix: resolved dev server reloading by @akhilmhdh in https://github.com/Infisical/infisical/pull/7772 * improvement(secrets): unify overview navigation and query state by @andrewhuhh in https://github.com/Infisical/infisical/pull/7738 * feat: add RFC 8693 token exchange grant by @Thiago-AS in https://github.com/Infisical/infisical/pull/7759 * feat(dynamic-secrets): migrate managed-store provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7573 * fix: add multi arch images on dev env by @Thiago-AS in https://github.com/Infisical/infisical/pull/7816 * fix(auth): hide initial signup progress by @andrewhuhh in https://github.com/Infisical/infisical/pull/7783 * fix(api): allow machine identities on approval policy routes by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7755 * fix(cert-manager): evaluate application permissions consistently across actor types by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7778 * fix(ui): prevent concurrent environment mutations by @andrewhuhh in https://github.com/Infisical/infisical/pull/7751 * improvement(admin): remove unused SAML/OIDC trust-email toggles and wire LDAP trust by @victorvhs017 in https://github.com/Infisical/infisical/pull/7792 **Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.24...v0.163.0