What's Changed
- chore(ui): remove the react-select dependency by @andrewhuhh in #8914
- chore(ui): remove the dead react-select portal exception and @headlessui/react by @andrewhuhh in #8917
- fix(frontend): open the right Certificate Manager and Secret Scanning instance from org-level links by @andrewhuhh in #8919
- improvement(ui): show the active sort icon beside the Name column header (PLATFOR-893) by @andrewhuhh in #8913
- feat(overview): reveal values on open in overview by @adilsitos in #8853
- improvement(ui): make the secret comment popover draggable (SECRETS-843) by @andrewhuhh in #8915
- fix(api): add the change request slug to the batch commit audit event by @andrewhuhh in #8874
- feature: revoke project access when someone loses their last path into an org by @Thiago-AS in #8797
- fix(secret-import): add local secrets into the the dedupe map by @adilsitos in #8891
- fix(ui): clear quick-add focus after save and pin newest secrets first by @andrewhuhh in #8925
- fix(ui): use secure randomness for regex password generation by @andrewhuhh in #8926
- fix(ui): preserve secret path input form and keyboard behavior by @andrewhuhh in #8923
- chore(frontend): replace react-helmet with React 19 native document metadata by @andrewhuhh in #8912
- fix(overview): preserve focus when autosaving pending secrets by @andrewhuhh in #8928
- fix(ui): honor secret input read-only and reference keyboard contracts by @andrewhuhh in #8927
- fix(ui): label password generator icon actions by @andrewhuhh in #8929
- chore(ui): remove unused lexical and @dnd-kit/modifiers dependencies by @andrewhuhh in #8922
- improvement(ui): use real links for go-to-secret navigation by @andrewhuhh in #8933
- fix(frontend): standardize browser titles and correct page labels by @andrewhuhh in #8931
- improvement(ui): use real links for certificate dashboard cards and legends by @andrewhuhh in #8935
- improvement(ui): use real links for notifications, navbar and product switcher by @andrewhuhh in #8934
- fix(ui): link version history actors to the org-prefixed access pages by @andrewhuhh in #8938
- improvement(cert-manager): make simple table rows real links by @andrewhuhh in #8930
- fix(pam): let the browser complete MFA challenges raised by the CLI by @carlosmonastyrski in #8861
- improvement(ui): make certificate and signing operation rows real links by @andrewhuhh in #8932
- improvement(ui): make PAM folder rows real links by @andrewhuhh in #8937
- improvement(ui): make access approval request rows real links by @andrewhuhh in #8939
- improvement(ui): use real row links for Agent Vault and PAM tables by @andrewhuhh in #8940
- improvement(ui): use real row links for KMIP, networking and template usage rows by @andrewhuhh in #8941
- improvement(ui): use real row links for Secret Scanning data sources by @andrewhuhh in #8942
- improvement(ui): use real links for access control row menus and role rows by @andrewhuhh in #8943
- improvement(ui): use real row links for Secrets Management tables by @andrewhuhh in #8944
- feat(secrets): emit secret, folder and import events through the outbox by @lobocv in #8780
- docs(cli): label .infisical.json code tabs as deprecated by @adilsitos in #8959
- fix: resolved ts error by @akhilmhdh in #8964
- docs(agent-vault): add modal guide by @adkah in #8825
- feat: agent vault mcp server by @sheensantoscapadngan in #8672
- docs(agent-vault): fix substitution link in modal guide by @mintlify[bot] in #8970
- chore: improved aws auth checks by @akhilmhdh in #8962
- fix(pki-syncs): reuse the existing destination item on renewal by @carlosmonastyrski in #8955
- docs(link-rot): fix broken links by @adkah in #8974
- feat(agent-vault): guided setup checklist and a sample session by @scott-ray-wilson in #8872
- docs: improve PKI alerts docs by @carlosmonastyrski in #8900
- chore(deps): refresh backend dependencies, Go modules and image pins by @Vligai in #8790
- improvement(auth): explain an access token from another instance by @saifsmailbox98 in #8781
- fix(secret-sync): enhancements on query and vercel/netlify syncs by @adilsitos in #8924
- feat(agent-vault): optional label on sessions by @scott-ray-wilson in #8793
- docs(agent-vault): add daytona guide by @adkah in #8906
- fix(rotations): rename stripe permissions by @adilsitos in #8982
- feat(api): make Infisical an OIDC issuer by @DimitrisStaratzis in #8956
- fix(agent-vault): require a license for session logs on self-hosted by @saifsmailbox98 in #8990
- feat(audit-log): normalize free text in audit events by @Vligai in #8202
- improvement(ui): make secrets quick search results real links by @andrewhuhh in #8945
- feat(servicenow): servicenow app connection and data model by @adilsitos in #8683
- improvement(secrets): mention .env paste in quick-add placeholder by @andrewhuhh in #8998
- fix(ui): keep project creation footer outside scrolling fields by @andrewhuhh in #8994
- feat: boosted eslint local perf with caching and ts boost with fastify by @akhilmhdh in #8977
- fix(pam): refresh account list after rotating an account by @lb-vn in #9003
- feat(delegated-approvals): policy creation by @adilsitos in #8733
- feat(delegated-approvals): implement mechanism to approve external requests by @adilsitos in #8818
- docs(servicenow): revamp servicenow by @adilsitos in #8947
- feat(telemetry): expand secrets lifecycle metrics and fix dynamic-secret revocation handoff by @victorvhs017 in #8871
- fix(dynamic-secret): quote SAP ASE connection string values by @Vligai in #8967
- fix(ldap): check the LDAP URL on test connection by @Vligai in #9004
- feat(secrets-tests): harness and prerequisites for testing framework by @varonix0 in #8948
- feat(secrets-tests): core secrets tests by @varonix0 in #8949
- feat(secrets-tests): governance tests by @varonix0 in #8951
- feat(secrets-tests): automation tests by @varonix0 in #8952
- feat(secrets-tests): syncs, rotations, webhooks by @varonix0 in #8953
- feat(pki-discovery): windows server discovery by @bernie-g in #8862
- feat(insights): unused secret access and secret read activity by @DimitrisStaratzis in #8724
- docs(agent-vault): update quickstart and ia by @adkah in #9008
- docs(agent-vault): add docker guide by @adkah in #9009
- fix(pam): align gcp service account validation with app connections by @lb-vn in #8989
- docs(alerting): add alerting API reference by @carlosmonastyrski in #8992
- fix(helm): make updatedAt rollout annotation opt-out and fix its date format by @devin-ai-integration[bot] in #9010
- fix: do not re-prompt MFA when switching between a root org and its sub-orgs by @Thiago-AS in #9021
- Delete company directory by @maidul98 in #9024
- chore(ui): retire V3 migration ledger and audit scaffolding by @andrewhuhh in #8946
- feat(pki): make edit certificate profile/policy wizard steps clickable by @devin-ai-integration[bot] in #9016
- chore: migrated frontend ts 7 and oxc by @akhilmhdh in #9014
- docs(ui): document form with footer outside in Dialog stories by @andrewhuhh in #9000
- chore(frontend): remove unused lint disable directives and enforce it by @andrewhuhh in #9028
- fix(frontend): show error states on blank OAuth callback and login error pages by @andrewhuhh in #9026
- fix(pki): submit policy-required key usages and EKUs on certificate renewal by @devin-ai-integration[bot] in #9029
- feat(secret-sync): add codespace and dependabot as possible syncs inside github by @adilsitos in #8827
- docs(python-sdk): document Agent Vault sessions and proxies by @scott-ray-wilson in #8988
- fix(pki): disable key pair reuse on renewal when Infisical holds neither the key nor the CSR by @devin-ai-integration[bot] in #9025
- fix(pki): show the disabled key-pair reason on click and tap in the renewal wizard by @devin-ai-integration[bot] in #9032
- feat(pki): support ML-DSA keys for HSM-backed internal CAs by @carlosmonastyrski in #8904
- docs(servicenow): improve docs with more setup details by @adilsitos in #9015
- feat(agent-vault): add skills to access bundles by @saifsmailbox98 in #8981
- chore: remove V2-era overlay z-index overrides by @andrewhuhh in #9036
- fix(secrets): show and resolve existing-key conflicts when uploading secrets by @andrewhuhh in #9038
- fix(secrets): keep each Overview tab's environment selection when another tab writes it by @andrewhuhh in #9046
- feat(frontend): add project or product context to page titles by @andrewhuhh in #9037
- feat(admin): move environment overrides save into a floating action bar by @andrewhuhh in #9039
- improvement(org-home): make product tiles real links for members by @andrewhuhh in #9048
- improvement(ui): make project template rows real links by @andrewhuhh in #8936
- fix(secrets): make Overview folder rows native links by @andrewhuhh in #9051
- feat(databricks): allow configuring connection oauth scopes by @DimitrisStaratzis in #8899
- chore(secret-sharing): keep share and request ids out of telemetry by @Vligai in #9012
- chore(deps): update backend dependencies and npm's bundled packages by @Vligai in #9022
- feat(tls-cert-auth): certificate-bound access tokens by @bernie-g in #9041
- docs(agent-vault): add Kubernetes overview and setup guide by @jakehulberg in #9019
- docs(agent-vault): add python sdk examples to modal and daytona by @adkah in #9055
- fix(agent-vault): open linked files from the skill preview and skills from any cell by @saifsmailbox98 in #9053
- feat: optimized get secrets heap allocation by @akhilmhdh in #9058
- docs(agent-vault): use any host traffic policy in sandbox guides by @adkah in #9061
- fix(dynamic-secrets): apply the IRSA setting to AWS IAM temporary credentials by @Vligai in #9056
- feat: github PR scan in secret scanning by @mathnogueira in #9020
- feat(app-connections): add managed identity method to Azure Key Vault connections by @DimitrisStaratzis in #9013
- fix(salesforce): accept only instance paths for links in Salesforce responses by @Vligai in #9054
- improvement(overview): move all secret annotations to the name cell by @andrewhuhh in #9002
- fix(ui): keep top of tall secret values scrollable in secret input by @andrewhuhh in #9059
- feat(agent-vault): sessions on behalf of users by @scott-ray-wilson in #8773
- feature(pki): imperva certificate sync by @bernie-g in #8954
- feat(secrets): offer Share in the toast after creating secrets by @andrewhuhh in #9044
- feat: disable creation of proxied services by @varonix0 in #9070
- docs(k8s-operator): explain cluster-wide vs namespace-scoped security models by @varonix0 in #9071
- feat: soft delete certificates by @carlosmonastyrski in #8828
- chore(helm): update post-install NOTES description to match README tagline by @claude[bot] in #9085
- fix(tests): wait on both statuses in delegated access request tests by @akhilmhdh in #9081
- fix(agent-vault): raise OAuth scope limit to 200 by @dangtony98 in #9086
- fix(dashboard-api): remove unused endpoint by @varonix0 in #9089
- chore: bump the bundled CLI to 0.44.12, patch backend dependencies and drop npm test folders by @Vligai in #9091
Full Changelog: v0.167.4...v0.167.5