v0.40.0

Changelog

• 45f227c deps: bump @tanstack/react-router from 1.170.18 to 1.170.32 in /web (#403)
• 910c5dc deps: bump @vitejs/plugin-react from 6.0.3 to 6.1.1 in /web (#405)
• 2b42ca5 deps: bump github.com/posthog/posthog-go from 1.24.0 to 1.24.4 (#396)
• aa99a34 deps: bump golang from 1.27.0-alpine to 1.27.1-alpine (#397)
• 6a7a053 deps: bump node from aadf416 to 2d984a1 (#393)
• ef1c202 deps: bump react-dom and @types/react-dom in /web (#398)
• 8b2c4e9 deps: bump vite from 8.1.5 to 8.2.2 in /web (#402)
• f0cdfac feat(skills): add per-vault Skills tab with markdown instructions (#391)
• bd1a325 fix(docs): vulnerability disclosure reporting (#392)
• 872578e fix(netguard): fall back across resolved addresses (#374)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.40.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"