v0.163.0

Infisical/infisicalv0.163.0Aug 26, 2026by Thiago-AS

AI Summary

A comprehensive release featuring the migration of project roles and secrets management to v3 UI components, along with significant PAM and PKI improvements.

Key Highlights

  • Migrated project roles access control to v3
  • Enabled IAM authentication for PostgreSQL in PAM
  • Added delete protection for KMS keys
  • Introduced RFC 8693 token exchange grant support
  • Enabled certificate renewal editing and improved secrets GC

New Features

  • Project roles access control v3 migration
  • IAM auth for PostgreSQL
  • KMS delete protection
  • RFC 8693 token exchange grant
  • Certificate renewal editing
  • Secrets garbage collection improvement
  • Machine identity auth on org membership endpoints
  • Project tag editing

Full Release Notes

## What's Changed
* feat: allow to edit cert details on manual renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7592
* feat(ui): migrate project roles access control to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7663
* chore: add upgrade impact for v0.162.23 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7757
* fix: remove redundant toast notifcations when erroring on creating an identity by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7760
* feat(pam): iam auth for postgres by @x032205 in https://github.com/Infisical/infisical/pull/7676
* chore: add upgrade impact for v0.162.24 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7763
* docs(secrets-mgmt): add more guide links by @adkah in https://github.com/Infisical/infisical/pull/7767
* feat: first improvement in gc for secrets by @akhilmhdh in https://github.com/Infisical/infisical/pull/7756
* fix(insights): revive dates to be Date so they are not string by @adilsitos in https://github.com/Infisical/infisical/pull/7773
* feat: allow change policy to apply to machine identities by @mathnogueira in https://github.com/Infisical/infisical/pull/7540
* improvement: add clock skew handling for gw and relay by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7575
* docs(self-hosting): add copy button for env vars by @adkah in https://github.com/Infisical/infisical/pull/7779
* feat(kms): add delete protection for KMS keys by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7771
* docs(vale): fix config and errors by @adkah in https://github.com/Infisical/infisical/pull/7781
* chore: enforce checking at least one type in a pr description by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7764
* docs(secrets-mgmt): fix browser by @adkah in https://github.com/Infisical/infisical/pull/7782
* fix(gateway-helm): pass positional gateway name for default CLI by @victorvhs017 in https://github.com/Infisical/infisical/pull/7775
* fix(frontend): allow data: URIs in CSP font-src by @claude[bot] in https://github.com/Infisical/infisical/pull/7681
* feat(dynamic-secrets): migrate relational and warehouse provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7572
* docs(secrets-mgmt): revert browser fix by @adkah in https://github.com/Infisical/infisical/pull/7786
* fix(identity-lockout): replace Redis SCAN with sorted-set index for list reads by @victorvhs017 in https://github.com/Infisical/infisical/pull/7777
* fix: honor machine identity auth on org membership endpoints by @Thiago-AS in https://github.com/Infisical/infisical/pull/7788
* fix(auth): clear stale MFA attempts warning on successful verification by @claude[bot] in https://github.com/Infisical/infisical/pull/7791
* feat(frontend): identify new accounts in PostHog at signup completion by @claude[bot] in https://github.com/Infisical/infisical/pull/7787
* feat(pam): dedicated folder views by @x032205 in https://github.com/Infisical/infisical/pull/7769
* fix(project-cleanup): batch-delete secret tree and index FK columns by @victorvhs017 in https://github.com/Infisical/infisical/pull/7796
* feat(telemetry): make team invite a queryable signup source by @claude[bot] in https://github.com/Infisical/infisical/pull/7789
* improvement(secrets): migrate create secret flow to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7730
* docs(certificate-mgmt): revamp microsoft intune guide by @adkah in https://github.com/Infisical/infisical/pull/7766
* docs(style): fix padding at bottom of pages by @adkah in https://github.com/Infisical/infisical/pull/7806
* feat(settings): add project tag editing by @andrewhuhh in https://github.com/Infisical/infisical/pull/7750
* feat: brought back the cleanup for license server by @akhilmhdh in https://github.com/Infisical/infisical/pull/7761
* docs(secrets-mgmt): add local dev guide by @adkah in https://github.com/Infisical/infisical/pull/7802
* feat: show renewed certificates as Renewed by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7784
* fix: resolved dev server reloading by @akhilmhdh in https://github.com/Infisical/infisical/pull/7772
* improvement(secrets): unify overview navigation and query state by @andrewhuhh in https://github.com/Infisical/infisical/pull/7738
* feat: add RFC 8693 token exchange grant by @Thiago-AS in https://github.com/Infisical/infisical/pull/7759
* feat(dynamic-secrets): migrate managed-store provider forms by @andrewhuhh in https://github.com/Infisical/infisical/pull/7573
* fix: add multi arch images on dev env by @Thiago-AS in https://github.com/Infisical/infisical/pull/7816
* fix(auth): hide initial signup progress by @andrewhuhh in https://github.com/Infisical/infisical/pull/7783
* fix(api): allow machine identities on approval policy routes by @saifsmailbox98 in https://github.com/Infisical/infisical/pull/7755
* fix(cert-manager): evaluate application permissions consistently across actor types by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7778
* fix(ui): prevent concurrent environment mutations by @andrewhuhh in https://github.com/Infisical/infisical/pull/7751
* improvement(admin): remove unused SAML/OIDC trust-email toggles and wire LDAP trust by @victorvhs017 in https://github.com/Infisical/infisical/pull/7792


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.162.24...v0.163.0