v0.43.115

Changelog

• 0503399 feat(agent-proxy): add sandboxed local run mode (#335)
• 5869ed5 Merge pull request #337 from Infisical/fix/govulncheck-bump-compress-grpc
• 4b42382 Merge remote-tracking branch 'origin/main' into fix/govulncheck-bump-compress-grpc
• f81a058 Merge pull request #328 from Infisical/PAM-362
• 83b11b7 address reviews
• 1c062c4 fix: tidy e2e go.mod to match root dependency bumps
• 741e3f7 fix: bump pion/dtls to v3.1.4 for CVE-2026-54908
• e47a4c9 fix: bump klauspost/compress and grpc to patch GO-2026-5841 and GO-2026-6061
• 508be96 Merge branch 'main' into PAM-362
• 691b877 Merge pull request #321 from Infisical/bernie/pam-350-implement-support-for-domain-account-dependency-detection
• 0942108 fix(gateway): require password in validate-credential handler
• ffdba8a chore(pam): condense winrm comments
• cd815c9 tidy
• d2c8a35 gateway: literal IIS app-pool path and single-write credential update
• 23bc324 review fixes
• 679b919 feat(pam): conn test for other accs
• 33549b1 gateway: qualify scheduled-task principals and decode CLIXML errors
• 48e6e2d fix(gateway): local credential validation + enumeration hardening
• ba64b36 fix(gateway): harden PAM WinRM operations from review
• 8d63ec2 feat(gateway): hardcoded WinRM operations for PAM discovery and rotation (PAM-350)

Changelog

• 0503399 feat(agent-proxy): add sandboxed local run mode (#335)
• 5869ed5 Merge pull request #337 from Infisical/fix/govulncheck-bump-compress-grpc
• 4b42382 Merge remote-tracking branch 'origin/main' into fix/govulncheck-bump-compress-grpc
• f81a058 Merge pull request #328 from Infisical/PAM-362
• 83b11b7 address reviews
• 1c062c4 fix: tidy e2e go.mod to match root dependency bumps
• 741e3f7 fix: bump pion/dtls to v3.1.4 for CVE-2026-54908
• e47a4c9 fix: bump klauspost/compress and grpc to patch GO-2026-5841 and GO-2026-6061
• 508be96 Merge branch 'main' into PAM-362
• 691b877 Merge pull request #321 from Infisical/bernie/pam-350-implement-support-for-domain-account-dependency-detection
• 0942108 fix(gateway): require password in validate-credential handler
• ffdba8a chore(pam): condense winrm comments
• cd815c9 tidy
• d2c8a35 gateway: literal IIS app-pool path and single-write credential update
• 23bc324 review fixes
• 679b919 feat(pam): conn test for other accs
• 33549b1 gateway: qualify scheduled-task principals and decode CLIXML errors
• 48e6e2d fix(gateway): local credential validation + enumeration hardening
• ba64b36 fix(gateway): harden PAM WinRM operations from review
• 8d63ec2 feat(gateway): hardcoded WinRM operations for PAM discovery and rotation (PAM-350)

Changelog

• 0503399 feat(agent-proxy): add sandboxed local run mode (#335)
• 5869ed5 Merge pull request #337 from Infisical/fix/govulncheck-bump-compress-grpc
• 4b42382 Merge remote-tracking branch 'origin/main' into fix/govulncheck-bump-compress-grpc
• f81a058 Merge pull request #328 from Infisical/PAM-362
• 83b11b7 address reviews
• 1c062c4 fix: tidy e2e go.mod to match root dependency bumps
• 741e3f7 fix: bump pion/dtls to v3.1.4 for CVE-2026-54908
• e47a4c9 fix: bump klauspost/compress and grpc to patch GO-2026-5841 and GO-2026-6061
• 508be96 Merge branch 'main' into PAM-362
• 691b877 Merge pull request #321 from Infisical/bernie/pam-350-implement-support-for-domain-account-dependency-detection
• 0942108 fix(gateway): require password in validate-credential handler
• ffdba8a chore(pam): condense winrm comments
• cd815c9 tidy
• d2c8a35 gateway: literal IIS app-pool path and single-write credential update
• 23bc324 review fixes
• 679b919 feat(pam): conn test for other accs
• 33549b1 gateway: qualify scheduled-task principals and decode CLIXML errors
• 48e6e2d fix(gateway): local credential validation + enumeration hardening
• ba64b36 fix(gateway): harden PAM WinRM operations from review
• 8d63ec2 feat(gateway): hardcoded WinRM operations for PAM discovery and rotation (PAM-350)