What's Changed
- chore: add upgrade impact for v0.166.8 by @github-actions[bot] in #8681
- docs: note that Palo Alto Networks syncs need the certificate's private key by @carlosmonastyrski in #8669
- fix(ui): keep the org name visible in project and product scope by @andrewhuhh in #8676
- fix(ui): right-align sheet footers with Cancel before the primary action by @andrewhuhh in #8675
- docs(cert-agent): combined certificate chain output by @bernie-g in #8660
- feat(pam): store session recordings in S3-compatible storage by @lb-vn in #8485
- docs(cli): note that logout deletes the offline secrets backup by @lobocv in #8648
- chore: validate freeze flag before release by @Thiago-AS in #8699
- fix: remove PAM from project templates list by @mathnogueira in #8710
- feat(pki): add AWS KMS-backed signing keys for internal CAs by @carlosmonastyrski in #8637
- fix(identity-access-token): expire the uses-remaining counter with its token by @scott-ray-wilson in #8654
- fix(deps): upgrade backend mail, template, telemetry and native hashing packages by @andrewhuhh in #8679
- fix(cert-manager): validate certificate profile name inline and keep wizard on the failing step by @andrewhuhh in #8664
- chore(frontend): upgrade TypeScript to 5.9 and drop TS 7-removed options by @andrewhuhh in #8682
- improvement(ui): migrate CLI redirect page to V3 and align its layout by @andrewhuhh in #8671
- fix(billing): show self-hosted billing guidance by license state by @andrewhuhh in #8680
- fix(ui): use sub-org scope color for sub-org actions by @andrewhuhh in #8690
- fix(secrets-overview): keep row action bar visible while a focused row is hovered by @andrewhuhh in #8696
- improvement(frontend): group Add Machine Identity to Project options by product by @andrewhuhh in #8701
- improvement(insights): show a blurred preview when Insights is not on the plan by @andrewhuhh in #8703
- feat(agent-vault): move variables from access bundles to Agent Vault as a whole by @scott-ray-wilson in #8581
- feat(ui): suggested values for naming inputs, starting with secret sync names by @andrewhuhh in #8702
- fix(ui): clean up org Product Settings tab by @andrewhuhh in #8713
- docs(agent-vault): the session token and access bundle can come from the environment by @saifsmailbox98 in #8104
- improvement(ui): move org general and security settings cards to footer layout by @andrewhuhh in #8725
- docs(kms): overhaul section by @adkah in #8686
- feat(ui): shared EmailInput chip field and email validation by @andrewhuhh in #8663
- fix(litellm): accept proxy master keys when validating connections by @victorvhs017 in #8712
- improvement(secret-sharing): separator collapse and sticky sheet footer by @andrewhuhh in #8732
- improvement(ui): migrate remaining v2 confirm modals to DeleteConfirmDialog by @andrewhuhh in #8716
- feat(ui): offer folder access on Pro from the custom role upgrade gate by @andrewhuhh in #8720
- improvement(frontend): default Add Machine Identity sheet to Assign Existing by @andrewhuhh in #8722
- feat(ui): suggest app connection names from provider and auth method by @andrewhuhh in #8723
- feat(ui): suggest honey token names from type and environment by @andrewhuhh in #8727
- feat(ui): suggest certificate authority names from CA type, common name, and issuer by @andrewhuhh in #8728
- feat(ui): suggest approval policy names from type, environments, and path by @andrewhuhh in #8729
- feat(ui): suggest certificate policy names from the selected preset by @andrewhuhh in #8731
- docs: migration from legacy InfiscialSecret k8s CRD's by @varonix0 in #8736
- feat(signup): open the chosen plan's trial after signup from the pricing page by @andrewhuhh in #8705
- fix(secrets): secret name cell focus, scroll, and empty-state fixes by @andrewhuhh in #8735
- fix(ui): drop h-full from org page roots so bottom padding survives scroll by @andrewhuhh in #8739
- feat(signup): open the pricing trial prompt for signed-in users by @andrewhuhh in #8738
- improvement(secrets): make the overview Manage Access button easier to find by @andrewhuhh in #8718
- feat: findings revamp by @mathnogueira in #8577
- feat: data store list revamp by @mathnogueira in #8631
- feat: redesign data source flow by @mathnogueira in #8641
- improvement(ui): rename DeleteConfirmDialog to ConfirmationAlertDialog by @andrewhuhh in #8717
- feat(db): add audit_log_streams table to sanitized schema by @victorvhs017 in #8746
- fix(secret-scanning): reject data sources that reuse an app connection by @claude[bot] in #8758
- improvement(pki): pkcs12 password policy by @bernie-g in #8674
- fix(webhook): stop delete endpoint from returning encrypted columns by @Arunkoo in #8643
- fix: use write op instead of delete in metrics by @mathnogueira in #8764
- docs(cli): add troubleshooting guide for failed API requests by @victorvhs017 in #8697
- chore(frontend): migrate to React 19 by @andrewhuhh in #8721
- improvement(groups): auto-populate group slug from name by @andrewhuhh in #8766
- docs(yaml-migration): update docs to reflect the new behavior of the CLI by @adilsitos in #8762
- fix(secrets): explain disabled edit and block move for managed secrets by @andrewhuhh in #8704
- improvement(auth): name login button in SSO enforcement toast on select-org by @victorvhs017 in #8763
- improvement(frontend): consistent slug auto-fill from name across create forms by @andrewhuhh in #8768
- docs(ax): agentic quickstart by @adkah in #8324
- docs(cli): add sm projects commands by @adkah in #8737
- docs(cli): clarify av env variables by @adkah in #8761
- fix(approvals): show request folder path in change requests list by @andrewhuhh in #8678
- fix(agent-vault): drop discard confirmation from Create Session dialog by @scott-ray-wilson in #8770
- docs(agent-vault): mention env variables in the quickstart by @adkah in #8771
- docs: add new plans rate limiting values by @Thiago-AS in #8775
- feat: added API E2E for scim by @akhilmhdh in #8687
- docs(readme): add Agent Vault section by @adkah in #8782
- feat(onboarding): add explicit telemetry for onboarding resource links by @andrewhuhh in #8774
- feat(ui): show page breadcrumbs in the top navigation on every route by @andrewhuhh in #8747
- chore(data-migration): secret access by @adilsitos in #8783
- chore(data-migration): secret change by @adilsitos in #8784
- improvement(secrets): surface secret imports in Add New dropdown by @andrewhuhh in #8769
- fix(docs): improve agentic quickstart styling by @adkah in #8785
- docs(readme): audit README for accuracy and product coverage by @adkah in #8787
- feat(billing-v2): show offline license usage on unified billing page by @victorvhs017 in #8777
New Contributors
Full Changelog: v0.166.8...v0.166.9