Starstruk Logo MarkStarstruk

v0.161.0

gristlabs/grist-corev0.161.0Jun 12, 2026by akhilmhdh

AI Summary

A comprehensive update focusing on UI component migration to v3, the addition of Infisical OAuth 2.0 support, and improvements to AWS and Azure integrations. Security features like KMIP client CSR signing and dynamic secret rotations are also included.

Key Highlights

  • Migrated to v3 components for modals and settings tabs
  • Added Infisical OAuth 2.0 support
  • Enabled AWS STS endpoint on app connections
  • Added Azure Key Vault gateway support
  • Implemented KMIP client CSR signing

New Features

  • Infisical OAuth 2.0 support
  • License Client SDK for License Server v2
  • KMIP client CSR signing
  • Support for multiple GitHub apps per organization

Full Release Notes

### Changed
- Update invite modal product and project selection flow (https://github.com/Infisical/infisical/pull/6820)
- Migrate create service token modal to v3 components and sheet (https://github.com/Infisical/infisical/pull/6804)
- Improve toast validation/forbid modal handling and update forbid modal UI (https://github.com/Infisical/infisical/pull/6801)
- Improve checks (https://github.com/Infisical/infisical/pull/6798)
- Add STS endpoint on AWS app connection (https://github.com/Infisical/infisical/pull/6791)
- Change route creation to avoid memory stack exceeded error (https://github.com/Infisical/infisical/pull/6784)
- Allow gateway on Azure Key Vault (https://github.com/Infisical/infisical/pull/6775)
- Migrate toast to v3, improve behavior, and add stories (https://github.com/Infisical/infisical/pull/6760)
- Migrate general, product and security settings tabs to v3 and update org settings title based on tab (https://github.com/Infisical/infisical/pull/6753)

### Added
- Add KMIP client CSR signing (https://github.com/Infisical/infisical/pull/6825)
- Add overview video to certificate management page (https://github.com/Infisical/infisical/pull/6824)
- Add license-client SDK for License Server v2 (https://github.com/Infisical/infisical/pull/6782)
- Hide all-projects view from users without request-access permission (https://github.com/Infisical/infisical/pull/6774)
- Support dynamic secrets and rotations in validation rules (https://github.com/Infisical/infisical/pull/6773)
- Add Infisical OAuth 2.0 support (https://github.com/Infisical/infisical/pull/6772)
- Detect duplicate secret values in secrets insight (https://github.com/Infisical/infisical/pull/6747)
- Remove machine identities from KMIP server registration (https://github.com/Infisical/infisical/pull/6740)
- Support Convex secret rotation (https://github.com/Infisical/infisical/pull/6730)
- Allow multiple GitHub apps per organization (https://github.com/Infisical/infisical/pull/6490)

### Removed
- Remove machine identities from KMIP server registration (https://github.com/Infisical/infisical/pull/6740)

### Fixed
- Fix additional privileges support for group members (https://github.com/Infisical/infisical/pull/6822)
- Fix use gateway in case of private GHE server (https://github.com/Infisical/infisical/pull/6803)
- Fix telemetry to attach orgId as flat property on aggregated events (https://github.com/Infisical/infisical/pull/6800)
- Fix application list shows not more than 20 entries (https://github.com/Infisical/infisical/pull/6792)
- Fix telemetry to group PKI Sync aggregation by destination for clean PostHog breakdowns (https://github.com/Infisical/infisical/pull/6786)
- Fix gatewayPicker not showing the dropdown inside modals (https://github.com/Infisical/infisical/pull/6776)
- Fix certificate manager to default to member role and enforce admin/member-only (https://github.com/Infisical/infisical/pull/6761)
- Fix PKI application members have to be product users to be added to an app (https://github.com/Infisical/infisical/pull/6750)
- Fix clean up app permissions when entities are removed (https://github.com/Infisical/infisical/pull/6744)
- Document domain in .infisical.json and INFISICAL_DOMAIN (https://github.com/Infisical/infisical/pull/6797)
- Add warning for token visibility in Ansible login task (https://github.com/Infisical/infisical/pull/6789)


**Full Changelog**: https://github.com/Infisical/infisical/compare/v0.160.12...v0.161.0