Changelog

• 5f130f1 feat(agent-vault): session logs (#407)
• 93cf00f Merge pull request #411 from Infisical/PAM-476
• c119279 fix(gateway): impersonation

What's Changed

• improvement(ci): verify published Linux package repos after release by @victorvhs017 in #410
• fix(adcs): request current CA cert chain by passing PropertyIndex -1 to GetCAProperty by @carlosmonastyrski in #412

Full Changelog: v0.43.136...v0.43.137

What's Changed

• feat: replace gitleaks with betterleaks 1.8.1 by @mathnogueira in #406

Full Changelog: v0.43.135...v0.43.136

What's Changed

• feat(pam): clickhouse by @lb-vn in #402
• refactor(cli): rename [profile new] to [profile create] by @scott-ray-wilson in #408

Full Changelog: v0.43.134...v0.43.135

Changelog

• c9d8427 Merge pull request #400 from Infisical/bernie/platfor-763-support-gcp-authentication-for-gateway
• f9b421e Merge pull request #372 from Infisical/feat/named-profiles
• d5dc793 fix(cli): restore the previous session if a profile write fails
• 45229a2 fix(cli): never send a cached org token from a superseded session
• e2f57aa fix(cli): keep an org session indexed when its token cannot be deleted
• edeaeec fix(cli): keep organization sessions a re-scope does not invalidate
• f2ffaca Merge pull request #403 from Infisical/feat/pam-built-in-masking
• 260e1c6 misc: addressed grep
• 29d9640 misc: addressed
• fa8b414 misc: addressed veria
• fc9a986 fix(cli): only retain a session a kept profile can still use
• 31a8253 misc: addressed feedback
• a6f1532 fix(cli): warn when profile delete cannot remove stored credentials
• af89c55 fix(cli): refuse a wrong-account login before applying the profile's org
• 66cf327 fix(cli): do not strand cached org sessions on re-login
• 840b949 fix(cli): clean up cached org sessions when the main entry is gone
• 8416960 fix(cli): keep a profile per sub-organization
• f4e46e7 fix(cli): resolve gateway/relay/kmip domain from the active profile
• 06dbe6d fix(cli): address review feedback on named login profiles
• 8ec3d97 feat(cli): named login profiles for multi-organization work
• 9d69ea3 Merge remote-tracking branch 'origin/main' into bernie/platfor-763-support-gcp-authentication-for-gateway
• e8c4fab refactor(gateway): one response type and one call for gateway login
• 9bc13bc fix(gateway): name the instance scope cause when signJwt fails
• d58c106 fix(gateway): scope the gcp key file flag to the iam type
• cf98da7 misc: addressed comments
• 42c1446 feat: pam built-in masking
• 76739e8 chore(gateway): trim comments to one line each
• 8c7f90c chore(deps): tidy the e2e module after the grpc bump
• 277c392 chore(deps): bump grpc to v1.83.2
• 5c9b9a2 fix(gateway): bound the signed gcp jwt and validate the systemd key path
• 3e2fe7d feat(gateway): GCP enrollment

Changelog

• 8a3e2fb feat(agent-vault): enforce method and path rules, inject custom headers, substitute placeholders (#397)
• d8d44ba Merge pull request #404 from Infisical/chore/remove-gateway-v1
• e68e598 chore: remove gateway v1
• b0d52df Merge pull request #401 from Infisical/chore/remove-cloudsmith-alerts
• e2ecd00 Update README to reflect migration of Infisical CLI Linux package repository
• 1d0bb5f Update dependencies in go.mod and go.sum
• b3e5400 Update dependencies in go.mod and go.sum
• bb9a25c Remove migration notice from README and related utility functions. Update CLI to no longer display migration notice for the Linux package repository transition from Cloudsmith.
• 2378807 Merge pull request #391 from Infisical/pam-oracle-restore
• 43861c3 Merge pull request #398 from Infisical/PAM-477
• 1624751 Address PR comments
• 55121fa address greptile
• 46b8fe2 improvement(pam): explicitly disable LOCAL INFILE on MySQL backend connections
• 9cbd5d9 Merge branch 'main' into pam-oracle-restore
• 46166a5 Merge pull request #394 from Infisical/PAM-426
• f69fcb6 Fix veria comment
• 910a480 address comments
• a22a970 fix(pam): resolve the stored Oracle username before rotating a credential
• b9a55ba address reviews
• ef3940b address reviews
• 85e860d Address PR comments
• c5458cf tidy
• bc60f96 address reviews
• 4b0fefe feat(pam): snowflake account
• 321a182 Fix go.mod
• 8a69a8c Address greptile comments
• 007d52e feat(pam): add Oracle credential rotation over the gateway

Changelog

• d5d1388 feat(agent-vault): the proxy and infisical av commands (#386)

Changelog

• 6e4e88d Merge pull request #385 from Infisical/bernie/pam-425-simplify-gateway-deployments-for-certificates-and-connectors
• 52adde0 fix(gateway): surface direct listen failures instead of hanging
• ca45fb4 fix(gateway): keep --target-relay-name canonical and quiet relay retries
• 5f47bca Merge pull request #392 from Infisical/bernie/pam-463-investigate-session-recording-endpoint-error-spike
• a1e8f6e refactor(cli): report the version in the user agent
• 660f486 fix(pam): only give up on a token mismatch
• f00f424 fix(pam): stop retrying rejected recording chunks
• 15c7623 test(gateway): cover every ALPN over the direct transport
• ee255e3 refactor(gateway): cut the comments back
• 562c550 fix(gateway): release the handshake slot when the handshake resolves
• 63b4e1e fix(gateway): bound unauthenticated direct connections
• 7f84920 fix(gateway): keep relay failover off a direct-listen gateway
• fe952ca fix(pam): stop retrying a dead direct address per connection
• f2f5c7b feat(gateway): support direct listen connections

What's Changed

• docs: add security policy pointing to the vulnerability disclosure pr… by @Vligai in #384
• improvement(login): treat INFISICAL_DOMAIN env as explicit instance selection for cloud URLs by @victorvhs017 in #390

Full Changelog: v0.43.129...v0.43.130

What's Changed

• feat(pam): default ssh access to interactive shell by @lb-vn in #377
• feat: implement and refactor network request retries by @scott-ray-wilson in #378
• chore(ci): bump Go toolchain to 1.25.14 by @Vligai in #382
• feat(pam): heartbeats by @bernie-g in #379
• chore(goreleaser): change release mode to keep-existing in configurat… by @victorvhs017 in #383

Full Changelog: v0.43.128...v0.43.129