What's Changed
- feat: fallback to worker version API in worker sync by @mathnogueira in #9107
- docs(backend): stop recommending .uuid() for projectId in CODE_QUALITY.md by @andrewhuhh in #9123
- feat(agent-vault): inline access management in the Manage Access sheet by @scott-ray-wilson in #8986
- fix(secrets): keep Overview folder row link inside its row in Safari by @adilsitos in #9126
- fix(pki): disable application certificate actions the user's role doesn't allow by @saifsmailbox98 in #9121
- feat(agent-vault): proxy CA download and E2B guide by @saifsmailbox98 in #9035
- fix(pam): address veria-236 and veria-189 by @lb-vn in #8852
- fix(agent-vault): name the bundle in the Manage Access sheet header by @scott-ray-wilson in #9133
- fix(pki): show code signing access as expired or revoked once its grant ends by @saifsmailbox98 in #9117
- docs: refactor GitHub sync and app connection documentation for permissions by @adilsitos in #9120
- feat(analytics): track Agent Vault redirect clicks from Agent Proxy modal by @claude[bot] in #9127
- fix(overview): let quick-add row grow with multi-line values by @andrewhuhh in #9141
- fix(secrets): check duplicate secret names server-side in quick add and inline rename by @andrewhuhh in #9001
- feat(agent-vault): inline services on sessions by @scott-ray-wilson in #9140
- chore: add upgrade impact for v0.167.5 by @github-actions[bot] in #9096
- feat(pki): reissue DigiCert TLS certificates on the same order by @carlosmonastyrski in #9018
- fix(pam): validate account gateway bindings consistently by @lb-vn in #9137
- fix(overview): top-align secret input row cells by @andrewhuhh in #9143
- improvement(backend): shrink the prod and dev images by @akhilmhdh in #9115
- chore: bump frontend and backend dependencies by @Vligai in #9157
- improvement(agent-vault): sessions take and return one accessBundle by @saifsmailbox98 in #9099
- chore: upgrade posthog-node and posthog-js by @andrewhuhh in #9151
- docs(style): update style guide by @adkah in #9163
- feat(ovhcloud-kms): add token authentication to OVHcloud connections by @trouyer in #7523
- feat: support gateway in databricks app connection and sync by @mathnogueira in #9139
- chore(identity-k8s-auth): treat the token reviewer JWT as write-only by @Vligai in #8966
- fix(frontend): keep Manage Access and Folder Access visible for discoverability by @claude[bot] in #9156
- chore: add upgrade impact for v0.165.11 by @github-actions[bot] in #8151
- chore: add upgrade impact for v0.166.7 by @github-actions[bot] in #8649
- chore(greptile): give reviewer frontend/AGENTS.md as context by @andrewhuhh in #9165
- fix: revoke IAM users from honey tokens by @mathnogueira in #8869
- docs(node-sdk): document Agent Vault proxies, sessions, access bundles and delegations by @scott-ray-wilson in #9110
- docs(python-sdk): document sessions on behalf of users, access bundles, delegations and proxy descriptions by @scott-ray-wilson in #9067
- fix(secret-syncs): shrink source and destination tooltip triggers so the row link stays clickable by @adilsitos in #9181
- feat(pki): support cross-signed certificates for internal CAs by @carlosmonastyrski in #9072
- feat: infisical-managed honey tokens by @mathnogueira in #8864
- fix(pki): intermediate ca csr key usage and path length by @bernie-g in #9023
- fix: remove machine identities from sub-org groups when they leave the sub-org by @Thiago-AS in #9111
- feat(secret-rotation): add ClickHouse credentials rotation by @DimitrisStaratzis in #9088
- improvement(projects): show recently deleted projects as a collapsible group by @DimitrisStaratzis in #9168
- fix(frontend): hide selected input text behind combobox rendered value by @yuvarajsai in #9138
- improvement(frontend): use ConfirmationAlertDialog for typed delete confirmations by @andrewhuhh in #9188
- fix(pam): keep folder and template selected in account edit sheet by @andrewhuhh in #9187
- feat(billing): add metered usage pricing with tiered bands by @akhilmhdh in #9092
- docs(cli): document the secrets-manager command tree by @victorvhs017 in #9177
- fix(secret-replication): do not recreate the reserved folder of a deleted import by @claude[bot] in #9189
- docs(agent-vault): add cursor guide by @adkah in #9179
- docs(agent-vault): add Cursor Cloud Agents and E2B to quickstart and plan your setup by @claude[bot] in #9198
- improvement(billing): simplify annual trial confirmation copy by @andrewhuhh in #9197
- fix(billing): open the upgrade dialog for pricing page trial links by @andrewhuhh in #9201
- improvement(secret-v2-bridge): compress secret cache payloads with zstd by @victorvhs017 in #9182
- feat(agent-vault): support multiple projects per organization by @saifsmailbox98 in #9160
- fix(ui): keep row link overlays inside their row in Safari by @andrewhuhh in #9183
- fix(pki): authenticate EST requests on application-scoped profile URLs by @devin-ai-integration[bot] in #9204
- chore(docker): update the PQC OpenSSL build and apt, refresh tooling lockfiles by @Vligai in #9196
- docs(cli): point export at secrets export and drop agent-proxy CLI reference by @victorvhs017 in #9206
- fix(pki): raise CSR length limit to 128 KB for post-quantum CSRs by @devin-ai-integration[bot] in #9202
- fix(auth-templates): apply the server admin identity check to template updates by @Vligai in #9199
- fix(ui): rerun MFA on RDP reconnect and stop abandoned MFA challenges by @andrewhuhh in #9228
- fix(pki): sign CRLs with the CA certificate subject so externally signed intermediates verify by @carlosmonastyrski in #9234
- improvement(secrets): move view resolved value button into row action bar by @andrewhuhh in #9171
- docs(agent-vault): audit projects page by @adkah in #9238
- fix(pam): cap postgres, mysql and snowflake data explorer results at 16 MB like clickhouse by @saifsmailbox98 in #9190
- feat(agent-vault): let each member sign in to MCP OAuth services by @sheensantoscapadngan in #9208
- docs(agent-vault): update screenshots for projects and add missing ones by @saifsmailbox98 in #9244
- feat(secrets): show resolved values when hovering secret references by @andrewhuhh in #9239
- fix(secrets): support annotations from the quick-add row by @andrewhuhh in #9241
- fix(dashboard): send secret search params in the request body instead of the url by @DimitrisStaratzis in #9240
- feat: updated agent.md for backend and frontend by @akhilmhdh in #9222
- fix(secrets): show secret write errors once, inline where possible by @andrewhuhh in #9173
- fix(projects): return to the product's project list after deleting a project by @DimitrisStaratzis in #9223
- fix(kms): fix CMEK and KMIP bugs found by a new blackbox API suite by @akhilmhdh in #9221
- docs(agent-vault): project page fix by @adkah in #9259
- improvement: plain description on organization overview page by @andrewhuhh in #9269
New Contributors
- @trouyer made their first contribution in #7523
- @yuvarajsai made their first contribution in #9138
Full Changelog: v0.167.6...v0.167.7