What's Changed
- feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in #7694
- fix: make approvals check for validation rules by @mathnogueira in #7837
- feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in #7820
- chore: add upgrade impact for v0.164.1 by @github-actions[bot] in #7840
- docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in #7847
- fix(ui): reset search input when user gets into folder by @adilsitos in #7844
- docs: linux and windows doc improvements by @sheensantoscapadngan in #7846
- improvement: add port number to Splunk provider by @Thiago-AS in #7843
- fix: add blocks for ca incompatibility by @sheensantoscapadngan in #7848
- docs: add AI agent identities to identity counting by @0xArshdeep in #7845
- feat(permissions): folder rbac by @adilsitos in #7762
- fix(kubernetes-auth): pin direct API requests with safeRequest by @victorvhs017 in #7855
- feat(pki-sync): add GCP Certificate Manager Sync by @carlosmonastyrski in #7737
- fix(docs): route vulnerability reports through the disclosure policy by @Vligai in #7856
- fix(auth): pool https agents and fix gateway sni by @victorvhs017 in #7857
- feat(webhooks): approval and change request webhook events by @lobocv in #7780
- docs(wip): top level ia 2 by @adkah in #7830
- docs(secret-rotation): fix typos by @adkah in #7861
- feat(pam): default ssh access to interactive shell by @lb-vn in #7838
- feat(pam): improve error code for deleting discovery cred acc by @lb-vn in #7854
- feat(docs): add folder rbac docs by @adilsitos in #7862
- docs(footer): fix forum link by @adkah in #7865
- fix(certificate): scope certificate private-key read permission to the certificate subject on v3 issuance by @Vligai in #7549
- fix(cert-v3): route DigiCert requests through external issuance on approval by @devin-ai-integration[bot] in #7870
- improvement(approvals): migrate page shell to v3 by @andrewhuhh in #7836
- docs(folder-rbac): enhancements by @adilsitos in #7874
- feat(abac): add trim suffix by @adilsitos in #7817
- improvement(secrets): migrate Vault import dialogs to v3 by @andrewhuhh in #7794
- feat: add kubernetes MI auth template support by @scott-ray-wilson in #7713
- fix: collapse signer approvals into a single setup card until a policy exists by @carlosmonastyrski in #7875
- feat(ui): select all for vault import secret path Combobox by @claude[bot] in #7878
- fix(pam): re-check session validity when privileged access is granted by @lb-vn in #7852
- feat(docs): add ansible folder operations by @adilsitos in #7871
- docs(secrets-mgmt): clarify dual-phase rotation by @adkah in #7864
- docs(secrets-mgmt): refresh spacelift sync by @adkah in #7896
- feat(dynamic-secrets): cut over to shared provider registry by @andrewhuhh in #7839
- fix: pki ux patches by @sheensantoscapadngan in #7853
- feat: set project retention limits by @varonix0 in #7887
- docs(style): add skill for applying docs style by @adkah in #7907
- feat(secret-manager): revamp replicate secrets workflow by @andrewhuhh in #7793
- fix(identity-ldap-auth): stop returning bind password on GET by @victorvhs017 in #7873
- fix(pki): clear NULL extended key usage elements on certificates by @claude[bot] in #7900
- chore(docker): refresh stale libssl pin and slim the runtime image by @Vligai in #7905
- fix: resolved multi line yaml pasting issue by @akhilmhdh in #7920
- chore: storybook preview by @scott-ray-wilson in #7914
- feat: add helper text for digicert profiles during issuance by @sheensantoscapadngan in #7911
- fix(webhook): render the test event for the webhook's type by @lobocv in #7893
- improvement(integrations): move integrations page header and tabs to v3 by @claude[bot] in #7909
- feature(ui): add generic v3 loader component and migrate branded loader call sites by @claude[bot] in #7895
- improvement: refactor cert profile policy creation to be inline by @scott-ray-wilson in #7908
- chore: comment storybook preview links by @andrewhuhh in #7925
- chore(docker): drop the source tree and recommended packages from the image by @Vligai in #7917
- fix(ui): read the real reduced-motion preference in v3 Loader by @claude[bot] in #7927
Full Changelog: v0.164.1...v0.165.1