v0.165.9

Infisical/infisicalv0.165.9Sep 10, 2026by carlosmonastyrski

AI Summary

This release introduces INFISICAL_RUN_MODES and enhances security by deriving cookie signing keys from KMS, alongside UI improvements like a global command menu and updated onboarding flows. It also resolves bugs in PKI management and ensures safe syncing for large GitHub organizations.

Key Highlights

  • Security improvement: Derive cookie signing key from KMS root key
  • New Feature: Introduce INFISICAL_RUN_MODES
  • New Feature: Add global command menu
  • UI Upgrade: Migrate framer-motion to motion
  • Fix: Safely sync teams for large GitHub orgs

New Features

  • Detect duplicate Daytona syncs by organization
  • Add global command menu
  • Add PKI license gating
  • Introduce INFISICAL_RUN_MODES
  • Allow read operations in cross project secret sharing

Full Release Notes

## What's Changed
* chore: add upgrade impact for v0.165.8 by @github-actions[bot] in https://github.com/Infisical/infisical/pull/8039
* fix(dynamic-secrets): add missing provider logos by @andrewhuhh in https://github.com/Infisical/infisical/pull/8032
* chore(deps): bump the bundled CLI to 0.43.129 by @Vligai in https://github.com/Infisical/infisical/pull/8026
* improvement(security): derive cookie signing key from KMS root key by @victorvhs017 in https://github.com/Infisical/infisical/pull/8029
* feat(secret-sync): detect duplicate Daytona syncs by organization by @lobocv in https://github.com/Infisical/infisical/pull/7994
* improvement(frontend): upgrade framer-motion to motion by @claude[bot] in https://github.com/Infisical/infisical/pull/8033
* improvement(ui): point onboarding CTA to community instead of Slack by @claude[bot] in https://github.com/Infisical/infisical/pull/8009
* fix(github-org-sync): safely sync teams for large orgs by @scott-ray-wilson in https://github.com/Infisical/infisical/pull/7998
* fix(secrets-access-requests): auto open review sheet when request ID present by @varonix0 in https://github.com/Infisical/infisical/pull/8041
* feat(ui): add global command menu by @andrewhuhh in https://github.com/Infisical/infisical/pull/7877
* docs(integrations): poc for app connections and integrations format revamp by @adkah in https://github.com/Infisical/infisical/pull/8028
* improvement(frontend): flatten pki sidebar general section into top-level items by @claude[bot] in https://github.com/Infisical/infisical/pull/8049
* improvement(frontend): render server console banners inside sidebar inset by @claude[bot] in https://github.com/Infisical/infisical/pull/8050
* feat: add pki license gating by @sheensantoscapadngan in https://github.com/Infisical/infisical/pull/7939
* improvement(frontend): migrate add machine identity to project dialog to v3 by @claude[bot] in https://github.com/Infisical/infisical/pull/8047
* improvement(frontend): lower bulk action bar and add shadow by @claude[bot] in https://github.com/Infisical/infisical/pull/8059
* chore(project-cleanup): clarify concurrent worker deletion log message by @victorvhs017 in https://github.com/Infisical/infisical/pull/8053
* feat: introduce INFISICAL_RUN_MODES by @mathnogueira in https://github.com/Infisical/infisical/pull/8031
* improvement(frontend): rename v3 switch component to toggle by @claude[bot] in https://github.com/Infisical/infisical/pull/8065
* fix: allow read operations in cross project secret sharing by @mathnogueira in https://github.com/Infisical/infisical/pull/7966
* improvement(frontend): use Alert and Combobox in Doppler import modal by @andrewhuhh in https://github.com/Infisical/infisical/pull/8058
* fix(pki): set intermediate CA parentCaId to null instead of cascading on parent delete by @carlosmonastyrski in https://github.com/Infisical/infisical/pull/8063


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.165.8...v0.165.9