What's Changed
- improvement(frontend): migrate kmip server details page to v3 by @claude[bot] in #8067
- improvement(secret-sync): pin sync behaviour with end-to-end tests and a runnable test harness by @lobocv in #8062
- fix(queue): log job failures and make PINO_LOG_LEVEL work by @lobocv in #8089
- improvement(frontend): test secrets activation modal versus card by @claude[bot] in #8060
- chore(ui): add semantic z-index registry by @andrewhuhh in #8082
- fix(auth): preserve password autofill styling and signup username targeting by @andrewhuhh in #8084
- improvement(secret-syncs): modernize forms and harden destination selection by @andrewhuhh in #7902
- fix(ui): disable autocomplete for resource names by @andrewhuhh in #8086
- chore(auth): revert grouped input autofill styling and signup form restructure by @scott-ray-wilson in #8102
- feat(gateways): make relay optional by @bernie-g in #7992
- feat(agent-vault): agents that run without credentials by @saifsmailbox98 in #8000
- chore: resolved personal override failure by @akhilmhdh in #8106
- docs(get-started): overhaul get started section by @adkah in #8098
- docs(get-started): remove dupe heading by @adkah in #8113
- improvement(agent-vault): mark agent vault as preview by @saifsmailbox98 in #8111
- feat: support custom X.509 extensions on certificate policies and profiles by @carlosmonastyrski in #7943
- fix(ui): render project access errors during route loading by @andrewhuhh in #8103
- fix(kms): block cross-project key deletion via project cleanup by @bernie-g in #8112
- feat: added support for self serve upgrade by @akhilmhdh in #8088
- fix(pki-sync): enforce project boundary when resolving app connections by @carlosmonastyrski in #8118
- feat(ui): track command menu usage by @andrewhuhh in #8115
- feat(pam): snowflake account by @lb-vn in #8044
- patch(pam): snowflake cli version by @lb-vn in #8119
- fix(auth): move invalid credentials to password field by @andrewhuhh in #8114
- improvement(ui): adopt shared z-index values across v3 primitives by @andrewhuhh in #8083
- improvement(frontend): migrate org settings headers and tabs to v3 by @claude[bot] in #8070
- fix: allow group-derived project members as approval policy approvers and bypassers by @claude[bot] in #8075
- feat(secrets): implement copy secrets workflow by @andrewhuhh in #7951
- fix(auth): restore signup form ownership and autofill by @andrewhuhh in #8101
- improvement(frontend): focus dominant search inputs with the / hotkey by @claude[bot] in #8069
- improvement(admin): migrate server console headers to v3 by @andrewhuhh in #8131
- improvement(project): redesign general settings by @andrewhuhh in #8116
- fix(api): preserve glob braces in identity auth claims by @andrewhuhh in #8096
- docs(readme): refresh hero image, fix broken links, move community to forum by @jakehulberg in #8135
- docs(trim-suffix): enhance-docs by @adilsitos in #7892
- chore: add upgrade impact for v0.165.10 by @github-actions[bot] in #8090
- feat(refac): move old modal to v3 by @adilsitos in #8133
- fix(secret-rotation): retry Azure client secret revoke and clean up on failure by @claude[bot] in #8048
- fix(webhook): prevent webhook events from being lost during long runs by @lobocv in #8122
- fix: resolved loosing invoice on losing sub by @akhilmhdh in #8142
- chore(deps): refresh Debian security pins and update socks to 2.8.10 by @Vligai in #8140
- fix: webhook registration when github radar is not configured by @mathnogueira in #8136
- feat: add time units to secret scanning env variables by @mathnogueira in #8132
Full Changelog: v0.165.10...v0.165.11