v0.161.0

Zaneham/Boothv0.161.0Jun 12, 2026by akhilmhdh

AI Summary

A major update for Infisical featuring a complete migration to v3 UI components, the addition of OAuth 2.0 support, and various security improvements.

Key Highlights

  • Migrated general, product, and security settings tabs to v3 components.
  • Added Infisical OAuth 2.0 support.
  • Added KMIP client CSR signing and License Server v2 SDK.
  • Support for dynamic secrets and rotations in validation rules.

New Features

  • Infisical OAuth 2.0 support
  • KMIP client CSR signing
  • Convex secret rotation support
  • License-client SDK for License Server v2
  • Dynamic secrets in validation rules

Full Release Notes

### Changed
- Update invite modal product and project selection flow (https://github.com/Infisical/infisical/pull/6820)
- Migrate create service token modal to v3 components and sheet (https://github.com/Infisical/infisical/pull/6804)
- Improve toast validation/forbid modal handling and update forbid modal UI (https://github.com/Infisical/infisical/pull/6801)
- Improve checks (https://github.com/Infisical/infisical/pull/6798)
- Add STS endpoint on AWS app connection (https://github.com/Infisical/infisical/pull/6791)
- Change route creation to avoid memory stack exceeded error (https://github.com/Infisical/infisical/pull/6784)
- Allow gateway on Azure Key Vault (https://github.com/Infisical/infisical/pull/6775)
- Migrate toast to v3, improve behavior, and add stories (https://github.com/Infisical/infisical/pull/6760)
- Migrate general, product and security settings tabs to v3 and update org settings title based on tab (https://github.com/Infisical/infisical/pull/6753)

### Added
- Add KMIP client CSR signing (https://github.com/Infisical/infisical/pull/6825)
- Add overview video to certificate management page (https://github.com/Infisical/infisical/pull/6824)
- Add license-client SDK for License Server v2 (https://github.com/Infisical/infisical/pull/6782)
- Hide all-projects view from users without request-access permission (https://github.com/Infisical/infisical/pull/6774)
- Support dynamic secrets and rotations in validation rules (https://github.com/Infisical/infisical/pull/6773)
- Add Infisical OAuth 2.0 support (https://github.com/Infisical/infisical/pull/6772)
- Detect duplicate secret values in secrets insight (https://github.com/Infisical/infisical/pull/6747)
- Remove machine identities from KMIP server registration (https://github.com/Infisical/infisical/pull/6740)
- Support Convex secret rotation (https://github.com/Infisical/infisical/pull/6730)
- Allow multiple GitHub apps per organization (https://github.com/Infisical/infisical/pull/6490)

### Removed
- Remove machine identities from KMIP server registration (https://github.com/Infisical/infisical/pull/6740)

### Fixed
- Fix additional privileges support for group members (https://github.com/Infisical/infisical/pull/6822)
- Fix use gateway in case of private GHE server (https://github.com/Infisical/infisical/pull/6803)
- Fix telemetry to attach orgId as flat property on aggregated events (https://github.com/Infisical/infisical/pull/6800)
- Fix application list shows not more than 20 entries (https://github.com/Infisical/infisical/pull/6792)
- Fix telemetry to group PKI Sync aggregation by destination for clean PostHog breakdowns (https://github.com/Infisical/infisical/pull/6786)
- Fix gatewayPicker not showing the dropdown inside modals (https://github.com/Infisical/infisical/pull/6776)
- Fix certificate manager to default to member role and enforce admin/member-only (https://github.com/Infisical/infisical/pull/6761)
- Fix PKI application members have to be product users to be added to an app (https://github.com/Infisical/infisical/pull/6750)
- Fix clean up app permissions when entities are removed (https://github.com/Infisical/infisical/pull/6744)
- Document domain in .infisical.json and INFISICAL_DOMAIN (https://github.com/Infisical/infisical/pull/6797)
- Add warning for token visibility in Ansible login task (https://github.com/Infisical/infisical/pull/6789)


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.160.12...v0.161.0