Changed
- Fold dynamic-secret registry into the proxy allow-list (#7322)
- Drop redundant secret_versions_v2.envId column (#7277)
- Remove agent and agent-proxy default roles (#7297)
- Disable public signups after admin setup on self-hosted instances (#7275)
Added
- Return sequence from approvers (#7317)
- Add extra Helm properties for Gateway (#7312)
- Add support for HMAC keys in KMS (#7302)
- Add org and actor info to log (#7300)
- Add SSH log and CA certificate improvements for PAM (#7293)
- Improve event filter to not be secrets specific for PAM (#7292)
- Add dynamic secret support for proxied services (#7288)
- Add domainComponents to PKI certificate fields (#7287)
- Add Unix discovery for PAM (#7281)
- Add Tailscale dynamic secret integration (#7273)
- Prevent signers from approving their own signing requests (#7252)
- Add personal override action on secrets resource for roles (#7250)
- Document InfisicalStaticSecret with complete examples (#7117)
Fixed
- Fix frontend issues about cross-project secret sharing (#7326)
- Update DIGICERT_SERVICES_API_URL_EU to new endpoint (#7325)
- Restore original dynamic-secret lease output rendering (#7321)
- Add missing index for project deletion (#7303)
- Support hardware security keys on FIPS instances for WebAuthn (#7301)
- Send email notifications to signing request approvers (#7267)
Changed
- Send email on account exists when changing email (#7309)
- Revamp proxied service create/edit with templates and a stepper (#7305)
- Document Gateway network architecture diagram (#7313)
- Note cross-project secret sharing is in private preview (#7328)
- Surface Docker CLI usage in quickstart and embed Docker video (#7307)
- Move HSM integration from KMS product to self-host section (#7310)