infisical

Changed

• Fold dynamic-secret registry into the proxy allow-list (https://github.com/Infisical/infisical/pull/7322)
• Drop redundant secret_versions_v2.envId column (https://github.com/Infisical/infisical/pull/7277)
• Remove agent and agent-proxy default roles (https://github.com/Infisical/infisical/pull/7297)
• Disable public signups after admin setup on self-hosted instances (https://github.com/Infisical/infisical/pull/7275)

Added

• Return sequence from approvers (https://github.com/Infisical/infisical/pull/7317)
• Add extra Helm properties for Gateway (https://github.com/Infisical/infisical/pull/7312)
• Add support for HMAC keys in KMS (https://github.com/Infisical/infisical/pull/7302)
• Add org and actor info to log (https://github.com/Infisical/infisical/pull/7300)
• Add SSH log and CA certificate improvements for PAM (https://github.com/Infisical/infisical/pull/7293)
• Improve event filter to not be secrets specific for PAM (https://github.com/Infisical/infisical/pull/7292)
• Add dynamic secret support for proxied services (https://github.com/Infisical/infisical/pull/7288)
• Add domainComponents to PKI certificate fields (https://github.com/Infisical/infisical/pull/7287)
• Add Unix discovery for PAM (https://github.com/Infisical/infisical/pull/7281)
• Add Tailscale dynamic secret integration (https://github.com/Infisical/infisical/pull/7273)
• Prevent signers from approving their own signing requests (https://github.com/Infisical/infisical/pull/7252)
• Add personal override action on secrets resource for roles (https://github.com/Infisical/infisical/pull/7250)
• Document InfisicalStaticSecret with complete examples (https://github.com/Infisical/infisical/pull/7117)

Fixed

• Fix frontend issues about cross-project secret sharing (https://github.com/Infisical/infisical/pull/7326)
• Update DIGICERT_SERVICES_API_URL_EU to new endpoint (https://github.com/Infisical/infisical/pull/7325)
• Restore original dynamic-secret lease output rendering (https://github.com/Infisical/infisical/pull/7321)
• Add missing index for project deletion (https://github.com/Infisical/infisical/pull/7303)
• Support hardware security keys on FIPS instances for WebAuthn (https://github.com/Infisical/infisical/pull/7301)
• Send email notifications to signing request approvers (https://github.com/Infisical/infisical/pull/7267)

Changed

• Send email on account exists when changing email (https://github.com/Infisical/infisical/pull/7309)
• Revamp proxied service create/edit with templates and a stepper (https://github.com/Infisical/infisical/pull/7305)
• Document Gateway network architecture diagram (https://github.com/Infisical/infisical/pull/7313)
• Note cross-project secret sharing is in private preview (https://github.com/Infisical/infisical/pull/7328)
• Surface Docker CLI usage in quickstart and embed Docker video (https://github.com/Infisical/infisical/pull/7307)
• Move HSM integration from KMS product to self-host section (https://github.com/Infisical/infisical/pull/7310)