What's Changed
- feat: allow to edit cert details on manual renewals by @carlosmonastyrski in #7592
- feat(ui): migrate project roles access control to v3 by @andrewhuhh in #7663
- chore: add upgrade impact for v0.162.23 by @github-actions[bot] in #7757
- fix: remove redundant toast notifcations when erroring on creating an identity by @scott-ray-wilson in #7760
- feat(pam): iam auth for postgres by @x032205 in #7676
- chore: add upgrade impact for v0.162.24 by @github-actions[bot] in #7763
- docs(secrets-mgmt): add more guide links by @adkah in #7767
- feat: first improvement in gc for secrets by @akhilmhdh in #7756
- fix(insights): revive dates to be Date so they are not string by @adilsitos in #7773
- feat: allow change policy to apply to machine identities by @mathnogueira in #7540
- improvement: add clock skew handling for gw and relay by @sheensantoscapadngan in #7575
- docs(self-hosting): add copy button for env vars by @adkah in #7779
- feat(kms): add delete protection for KMS keys by @carlosmonastyrski in #7771
- docs(vale): fix config and errors by @adkah in #7781
- chore: enforce checking at least one type in a pr description by @scott-ray-wilson in #7764
- docs(secrets-mgmt): fix browser by @adkah in #7782
- fix(gateway-helm): pass positional gateway name for default CLI by @victorvhs017 in #7775
- fix(frontend): allow data: URIs in CSP font-src by @claude[bot] in #7681
- feat(dynamic-secrets): migrate relational and warehouse provider forms by @andrewhuhh in #7572
- docs(secrets-mgmt): revert browser fix by @adkah in #7786
- fix(identity-lockout): replace Redis SCAN with sorted-set index for list reads by @victorvhs017 in #7777
- fix: honor machine identity auth on org membership endpoints by @Thiago-AS in #7788
- fix(auth): clear stale MFA attempts warning on successful verification by @claude[bot] in #7791
- feat(frontend): identify new accounts in PostHog at signup completion by @claude[bot] in #7787
- feat(pam): dedicated folder views by @x032205 in #7769
- fix(project-cleanup): batch-delete secret tree and index FK columns by @victorvhs017 in #7796
- feat(telemetry): make team invite a queryable signup source by @claude[bot] in #7789
- improvement(secrets): migrate create secret flow to v3 by @andrewhuhh in #7730
- docs(certificate-mgmt): revamp microsoft intune guide by @adkah in #7766
- docs(style): fix padding at bottom of pages by @adkah in #7806
- feat(settings): add project tag editing by @andrewhuhh in #7750
- feat: brought back the cleanup for license server by @akhilmhdh in #7761
- docs(secrets-mgmt): add local dev guide by @adkah in #7802
- feat: show renewed certificates as Renewed by @carlosmonastyrski in #7784
- fix: resolved dev server reloading by @akhilmhdh in #7772
- improvement(secrets): unify overview navigation and query state by @andrewhuhh in #7738
- feat: add RFC 8693 token exchange grant by @Thiago-AS in #7759
- feat(dynamic-secrets): migrate managed-store provider forms by @andrewhuhh in #7573
- fix: add multi arch images on dev env by @Thiago-AS in #7816
- fix(auth): hide initial signup progress by @andrewhuhh in #7783
- fix(api): allow machine identities on approval policy routes by @saifsmailbox98 in #7755
- fix(cert-manager): evaluate application permissions consistently across actor types by @carlosmonastyrski in #7778
- fix(ui): prevent concurrent environment mutations by @andrewhuhh in #7751
- improvement(admin): remove unused SAML/OIDC trust-email toggles and wire LDAP trust by @victorvhs017 in #7792
Full Changelog: v0.162.24...v0.163.0