What's Changed
- chore: add upgrade impact for v0.159.28 by @maidul98 in #6396
- feat(pam): add Oracle DB access support by @saifsmailbox98 in #6134
- feat: updated some conditional checks by @akhilmhdh in #6401
- feat: more updates by @akhilmhdh in #6402
- docs(bullmq): add BullBoard section to developing documentation for queue management by @victorvhs017 in #6389
- docs(encryptionkey): clarify FIPS encryption key requirements by @jakehulberg in #6346
- improvement: add verbose announcement logs by @scott-ray-wilson in #6393
- docs: add secret insights page by @scott-ray-wilson in #6392
- feat: added audit log to group operation by @akhilmhdh in #6386
- fix(pam-oracle): run TLS hostname probe for all SSL Oracle connections by @saifsmailbox98 in #6398
- chore(release): v0.159.24 update description by @victorvhs017 in #6415
- fix: mark password recovery token as consumed by @scott-ray-wilson in #6412
- improvement: always show environment selection when creating secrets by @scott-ray-wilson in #6395
- chore(api): add migration to clean empty strings on k8 auth ca certs by @Thiago-AS in #6413
- docs(honey): add walkthrough video to honey tokens overview by @jakehulberg in #6427
- fix: make saml issuer required on saml form by @scott-ray-wilson in #6434
- chore: pin github workflow dependencies by @varonix0 in #6435
- fix: scope identity access token revocation (PLATFOR-358/359) by @PrestigePvP in #6417
- chore(api): create short lived token in key value store for email sign up by @Thiago-AS in #6419
- improvement: add tooltip to overview environment cols/items and give each more default width by @scott-ray-wilson in #6418
- fix: make scoped identity access token revocation lookup sargable + partial index by @PrestigePvP in #6440
- improvement: bump project max length and add missing validation / update existing validation by @scott-ray-wilson in #6438
- feat: removed reviewer read permission for approval once approval request has closed by @akhilmhdh in #6436
- feat(telemetry): suppress PostHog person creation for anonymous public secret shares by @devin-ai-integration[bot] in #6391
- fix(certificate-manager): save organizational unit and other subject fields in PKI certificates by @saifsmailbox98 in #6433
- chore(api): memoize userDAL.findById on requests and where no mutation occurs by @Thiago-AS in #6453
- feat(dynamic-secrets): added memory db (valkey) support by @varonix0 in #6405
- feat(secret-rotation): add rotation for datadog service account by @adilsitos in #6416
- fix: update oidc upgrade modal to reference enterprise plan, not pro by @scott-ray-wilson in #6456
- fix(sec-4): add privilege boundary check to org membership updates by @PrestigePvP in #6437
- fix: make HoneyTokenTriggered event anonymous for self-hosted privacy by @devin-ai-integration[bot] in #6459
- feat: add gateway pool support across remaining platform areas by @saifsmailbox98 in #6285
- feat(secret-rotation): add verification button by @adilsitos in #6372
- feat(backend): add distributed cron job system with Redis-backed scheduling by @victorvhs017 in #6442
- fix: bump dropdown v2 z index by @scott-ray-wilson in #6464
- feat(gateway): add enrollment flow support to Helm chart and re-add Kubernetes docs by @bernie-g in #6422
- feat(pam-rdp): browser RDP session replay player by @bernie-g in #6351
- fix: pass whether the vault migration config is using a gateway or not by @scott-ray-wilson in #6465
- feat: create audit log for honey token triggers by @mathnogueira in #6457
- fix: add missing snapshot index and chunk deletion in cleanup by @scott-ray-wilson in #6468
- chore: add testing skill for secrets management UI by @devin-ai-integration[bot] in #6476
- fix(frontend): url-encode secret key in API request paths by @devin-ai-integration[bot] in #6475
- fix(api): prevent service token privilege escalation via action and scope checks by @victorvhs017 in #6443
- fix(vault): define default ports for https when not defined by @adilsitos in #6477
- improvement: use buildkit for standalone contenful generation by @scott-ray-wilson in #6478
- feat: added lock and made scim endpoint idempotent by @akhilmhdh in #6471
- docs: update RBAC documentation with accurate built-in roles and new screenshots by @devin-ai-integration[bot] in #6383
New Contributors
- @Thiago-AS made their first contribution in #6413
Full Changelog: v0.159.28...v0.159.29