Breaking Changes
- CLI subcommands renamed to singular nouns — e.g.
vault credentials → vault credential, vault agents → vault agent (#41)
login and register moved under auth — agent-vault login → agent-vault auth login, agent-vault register → agent-vault auth register (#36)
Features
vault init — bind a directory to a vault via agent-vault.json (#37)--role flag for vault run — specify vault role when launching an agent (#40)- Vault credentials readable by members and admins via
credential get / credential list --reveal (#39)
- CLI install screen in post-registration onboarding flow (#38)
- Resend verification code endpoint and UI (#25)
- Rename policies/rules to services (#26)
Fixes
- URL-encode user-supplied path segments in CLI API calls
Dependencies
- Bump vite 6.4.1 → 6.4.2 (security) (#35)
- Bump modernc.org/sqlite 1.48.0 → 1.48.1 (#34)
- Bump @tanstack/react-router 1.168.8 → 1.168.10 (#33)
- Bump github.com/jedib0t/go-pretty/v6 6.7.8 → 6.7.9 (#32)
- Bump actions/setup-go 6.3.0 → 6.4.0 (#31)
- Bump docker/setup-buildx-action 3.10.0 → 4.0.0 (#30)
- Bump docker/login-action 3.4.0 → 4.1.0 (#29)
- Bump docker/setup-qemu-action 3.6.0 → 4.0.0 (#28)
Verify
# Verify checksum
sha256sum --check checksums.txt
# Verify signature (requires cosign)
cosign verify-blob \
--bundle checksums.txt.bundle \
--certificate-identity-regexp "github.com/Infisical/agent-vault" \
--certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
checksums.txt
