v0.162.8
vercel/chatbotv0.162.8Jul 17, 2026by varonix0
AI Summary
A substantial update featuring dynamic secret integrations (Tailscale), KMS enhancements (HMAC keys), and security updates for self-hosted instances. It also includes a revamped UI for proxied services and improved logging capabilities.
Key Highlights
- Added support for Tailscale dynamic secrets
- Added HMAC keys support in KMS
- Disabled public signups on self-hosted instances after admin setup
- Revamped proxied service creation/editing interface
Breaking Changes
- Disable public signups after admin setup on self-hosted instances
- Remove agent and agent-proxy default roles
New Features
- Support for Tailscale dynamic secrets
- HMAC keys support in KMS
- Dynamic secret support for proxied services
- Personal override action on secrets resource for roles
- Unix discovery for PAM
- Return sequence from approvers
- Extra Helm properties for Gateway
Full Release Notes
### Changed - Fold dynamic-secret registry into the proxy allow-list (https://github.com/Infisical/infisical/pull/7322) - Drop redundant secret_versions_v2.envId column (https://github.com/Infisical/infisical/pull/7277) - Remove agent and agent-proxy default roles (https://github.com/Infisical/infisical/pull/7297) - Disable public signups after admin setup on self-hosted instances (https://github.com/Infisical/infisical/pull/7275) ### Added - Return sequence from approvers (https://github.com/Infisical/infisical/pull/7317) - Add extra Helm properties for Gateway (https://github.com/Infisical/infisical/pull/7312) - Add support for HMAC keys in KMS (https://github.com/Infisical/infisical/pull/7302) - Add org and actor info to log (https://github.com/Infisical/infisical/pull/7300) - Add SSH log and CA certificate improvements for PAM (https://github.com/Infisical/infisical/pull/7293) - Improve event filter to not be secrets specific for PAM (https://github.com/Infisical/infisical/pull/7292) - Add dynamic secret support for proxied services (https://github.com/Infisical/infisical/pull/7288) - Add domainComponents to PKI certificate fields (https://github.com/Infisical/infisical/pull/7287) - Add Unix discovery for PAM (https://github.com/Infisical/infisical/pull/7281) - Add Tailscale dynamic secret integration (https://github.com/Infisical/infisical/pull/7273) - Prevent signers from approving their own signing requests (https://github.com/Infisical/infisical/pull/7252) - Add personal override action on secrets resource for roles (https://github.com/Infisical/infisical/pull/7250) - Document InfisicalStaticSecret with complete examples (https://github.com/Infisical/infisical/pull/7117) ### Fixed - Fix frontend issues about cross-project secret sharing (https://github.com/Infisical/infisical/pull/7326) - Update DIGICERT_SERVICES_API_URL_EU to new endpoint (https://github.com/Infisical/infisical/pull/7325) - Restore original dynamic-secret lease output rendering (https://github.com/Infisical/infisical/pull/7321) - Add missing index for project deletion (https://github.com/Infisical/infisical/pull/7303) - Support hardware security keys on FIPS instances for WebAuthn (https://github.com/Infisical/infisical/pull/7301) - Send email notifications to signing request approvers (https://github.com/Infisical/infisical/pull/7267) ### Changed - Send email on account exists when changing email (https://github.com/Infisical/infisical/pull/7309) - Revamp proxied service create/edit with templates and a stepper (https://github.com/Infisical/infisical/pull/7305) - Document Gateway network architecture diagram (https://github.com/Infisical/infisical/pull/7313) - Note cross-project secret sharing is in private preview (https://github.com/Infisical/infisical/pull/7328) - Surface Docker CLI usage in quickstart and embed Docker video (https://github.com/Infisical/infisical/pull/7307) - Move HSM integration from KMS product to self-host section (https://github.com/Infisical/infisical/pull/7310)