Starstruk Logo MarkStarstruk

v0.165.0

Infisical/infisicalv0.165.0Sep 1, 2026by maidul98

AI Summary

This release introduces Folder RBAC, PKI enhancements including GCP Certificate Manager sync and renewal tracking, and expanded webhook events for approvals and change requests. It also migrates dynamic secrets to a shared provider registry and improves PAM capabilities.

Key Highlights

  • Folder-level Role-Based Access Control (RBAC)
  • PKI sync for GCP Certificate Manager
  • Webhook events for approval and change requests
  • Dynamic secrets switch to shared provider registry
  • PAM improvements including SSH access and error handling

New Features

  • Folder RBAC implementation
  • GCP Certificate Manager Sync
  • Approval and Change Request Webhooks
  • Shared Provider Registry for Dynamic Secrets
  • PAM SSH access support
  • Lazy segfault catch for error code 139

Full Release Notes

## What's Changed
* feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7694
* fix: make approvals check for validation rules by @mathnogueira in https://github.com/Infisical/infisical/pull/7837
* feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7820
* feat: conditionally handlebar compilation and secret cache as binary by @akhilmhdh in https://github.com/Infisical/infisical/pull/7828
* chore: add upgrade impact for v0.164.1 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/7840
* docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7847
* fix(ui): reset search input when user gets into folder by @adilsitos in https://github.com/Infisical/infisical/pull/7844
* docs: linux and windows doc improvements by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7846
* improvement: add port number to Splunk provider by @Thiago-AS in https://github.com/Infisical/infisical/pull/7843
* fix: add blocks for ca incompatibility by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7848
* docs: add AI agent identities to identity counting by @0xArshdeep in https://github.com/Infisical/infisical/pull/7845
* feat(permissions): folder rbac by @adilsitos in https://github.com/Infisical/infisical/pull/7762
* fix(kubernetes-auth): pin direct API requests with safeRequest by @victorvhs017 in https://github.com/Infisical/infisical/pull/7855
* feat(pki-sync): add GCP Certificate Manager Sync by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7737
* fix(docs): route vulnerability reports through the disclosure policy by @Vligai in https://github.com/Infisical/infisical/pull/7856
* fix(auth): pool https agents and fix gateway sni by @victorvhs017 in https://github.com/Infisical/infisical/pull/7857
* feat: reverted gc patch 2 by @akhilmhdh in https://github.com/Infisical/infisical/pull/7858
* feat(webhooks): approval and change request webhook events by @lobocv in https://github.com/Infisical/infisical/pull/7780
* feat: add lazy segfault catch for error code 139 by @akhilmhdh in https://github.com/Infisical/infisical/pull/7859
* docs(wip): top level ia 2 by @adkah in https://github.com/Infisical/infisical/pull/7830
* docs(secret-rotation): fix typos by @adkah in https://github.com/Infisical/infisical/pull/7861
* feat(pam): default ssh access to interactive shell by @lb-vn in https://github.com/Infisical/infisical/pull/7838
* feat(pam): improve error code for deleting discovery cred acc by @lb-vn in https://github.com/Infisical/infisical/pull/7854
* feat(docs): add folder rbac docs by @adilsitos in https://github.com/Infisical/infisical/pull/7862
* docs(footer): fix forum link by @adkah in https://github.com/Infisical/infisical/pull/7865
* Revert "feat: reverted gc patch 2" by @akhilmhdh in https://github.com/Infisical/infisical/pull/7869
* fix(certificate): scope certificate private-key read permission to the certificate subject on v3 issuance by @Vligai in https://github.com/Infisical/infisical/pull/7549
* fix(cert-v3): route DigiCert requests through external issuance on approval by @devin-ai-integration[bot] in https://github.com/Infisical/infisical/pull/7870
* improvement(approvals): migrate page shell to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7836
* docs(folder-rbac): enhancements by @adilsitos in https://github.com/Infisical/infisical/pull/7874
* feat(abac): add trim suffix  by @adilsitos in https://github.com/Infisical/infisical/pull/7817
* improvement(secrets): migrate Vault import dialogs to v3 by @andrewhuhh in https://github.com/Infisical/infisical/pull/7794
* feat: add kubernetes MI auth template support by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7713
* fix: collapse signer approvals into a single setup card until a policy exists by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/7875
* feat(ui): select all for vault import secret path Combobox by @claude[bot] in https://github.com/Infisical/infisical/pull/7878
* fix(pam): re-check session validity when privileged access is granted by @lb-vn in https://github.com/Infisical/infisical/pull/7852
* feat(docs): add ansible folder operations  by @adilsitos in https://github.com/Infisical/infisical/pull/7871
* docs(secrets-mgmt): clarify dual-phase rotation by @adkah in https://github.com/Infisical/infisical/pull/7864
* chore(backend): dependency updates by @Vligai in https://github.com/Infisical/infisical/pull/7898
* docs(secrets-mgmt): refresh spacelift sync by @adkah in https://github.com/Infisical/infisical/pull/7896
* feat(dynamic-secrets): cut over to shared provider registry by @andrewhuhh in https://github.com/Infisical/infisical/pull/7839
* fix: pki ux patches by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7853
* feat: set project retention limits by @varonix0 in https://github.com/Infisical/infisical/pull/7887
* docs(style): add skill for applying docs style by @adkah in https://github.com/Infisical/infisical/pull/7907
* feat(secret-manager): revamp replicate secrets workflow by @andrewhuhh in https://github.com/Infisical/infisical/pull/7793
* fix(identity-ldap-auth): stop returning bind password on GET by @victorvhs017 in https://github.com/Infisical/infisical/pull/7873
* fix(pki): clear NULL extended key usage elements on certificates by @claude[bot] in https://github.com/Infisical/infisical/pull/7900
* chore(docker): refresh stale libssl pin and slim the runtime image by @Vligai in https://github.com/Infisical/infisical/pull/7905
* fix: resolved multi line yaml pasting issue by @akhilmhdh in https://github.com/Infisical/infisical/pull/7920
* chore(backend): dependency updates by @Vligai in https://github.com/Infisical/infisical/pull/7913
* chore: storybook preview by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7914
* feat: add helper text for digicert profiles during issuance by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7911
* fix(webhook): render the test event for the webhook's type by @lobocv in https://github.com/Infisical/infisical/pull/7893


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.164.1...v0.165.0