v0.162.8

vercel/chatbotv0.162.8Jul 17, 2026by varonix0

AI Summary

A substantial update featuring dynamic secret integrations (Tailscale), KMS enhancements (HMAC keys), and security updates for self-hosted instances. It also includes a revamped UI for proxied services and improved logging capabilities.

Key Highlights

  • Added support for Tailscale dynamic secrets
  • Added HMAC keys support in KMS
  • Disabled public signups on self-hosted instances after admin setup
  • Revamped proxied service creation/editing interface

Breaking Changes

  • Disable public signups after admin setup on self-hosted instances
  • Remove agent and agent-proxy default roles

New Features

  • Support for Tailscale dynamic secrets
  • HMAC keys support in KMS
  • Dynamic secret support for proxied services
  • Personal override action on secrets resource for roles
  • Unix discovery for PAM
  • Return sequence from approvers
  • Extra Helm properties for Gateway

Full Release Notes

### Changed
- Fold dynamic-secret registry into the proxy allow-list (https://github.com/Infisical/infisical/pull/7322)
- Drop redundant secret_versions_v2.envId column (https://github.com/Infisical/infisical/pull/7277)
- Remove agent and agent-proxy default roles (https://github.com/Infisical/infisical/pull/7297)
- Disable public signups after admin setup on self-hosted instances (https://github.com/Infisical/infisical/pull/7275)

### Added
- Return sequence from approvers (https://github.com/Infisical/infisical/pull/7317)
- Add extra Helm properties for Gateway (https://github.com/Infisical/infisical/pull/7312)
- Add support for HMAC keys in KMS (https://github.com/Infisical/infisical/pull/7302)
- Add org and actor info to log (https://github.com/Infisical/infisical/pull/7300)
- Add SSH log and CA certificate improvements for PAM (https://github.com/Infisical/infisical/pull/7293)
- Improve event filter to not be secrets specific for PAM (https://github.com/Infisical/infisical/pull/7292)
- Add dynamic secret support for proxied services (https://github.com/Infisical/infisical/pull/7288)
- Add domainComponents to PKI certificate fields (https://github.com/Infisical/infisical/pull/7287)
- Add Unix discovery for PAM (https://github.com/Infisical/infisical/pull/7281)
- Add Tailscale dynamic secret integration (https://github.com/Infisical/infisical/pull/7273)
- Prevent signers from approving their own signing requests (https://github.com/Infisical/infisical/pull/7252)
- Add personal override action on secrets resource for roles (https://github.com/Infisical/infisical/pull/7250)
- Document InfisicalStaticSecret with complete examples (https://github.com/Infisical/infisical/pull/7117)

### Fixed
- Fix frontend issues about cross-project secret sharing (https://github.com/Infisical/infisical/pull/7326)
- Update DIGICERT_SERVICES_API_URL_EU to new endpoint (https://github.com/Infisical/infisical/pull/7325)
- Restore original dynamic-secret lease output rendering (https://github.com/Infisical/infisical/pull/7321)
- Add missing index for project deletion (https://github.com/Infisical/infisical/pull/7303)
- Support hardware security keys on FIPS instances for WebAuthn (https://github.com/Infisical/infisical/pull/7301)
- Send email notifications to signing request approvers (https://github.com/Infisical/infisical/pull/7267)

### Changed
- Send email on account exists when changing email (https://github.com/Infisical/infisical/pull/7309)
- Revamp proxied service create/edit with templates and a stepper (https://github.com/Infisical/infisical/pull/7305)
- Document Gateway network architecture diagram (https://github.com/Infisical/infisical/pull/7313)
- Note cross-project secret sharing is in private preview (https://github.com/Infisical/infisical/pull/7328)
- Surface Docker CLI usage in quickstart and embed Docker video (https://github.com/Infisical/infisical/pull/7307)
- Move HSM integration from KMS product to self-host section (https://github.com/Infisical/infisical/pull/7310)