v0.161.1

Changed

• Allow external account Google Cloud authentication (#6890)
• Move project templates to advanced and add external KMS shortcut to new project modal (#6879)
• Re-structure organization navigation and move secret sharing to secrets management scope (#6870)
• Make GCP IAM token OAuth scopes configurable for dynamic secrets (#6849)
• Migrate networking gateway and relay cards to v3 and stabilize sub-tab layout (#6838)
• Migrate error page to v3 components (#6836)
• Migrate create/link organization group modal to v3 components (#6828)
• Only verify SSO emails if the provider reports them unverified (#6830)
• Migrate add members to project modal to v3 (#6807)
• Add fallback to list only authorized paths on Vault migration (#6814)
• Adjust padding when in grid card view on project selection page (#6889)
• Refactor secrets buttons (#6858)
• Update 404 styling and flavor (#6875)
• Change secret request copy on overview page (#6796)

Added

• Use organization ID as ExternalID for certificate manager AWS connections (#6883)
• Auto-create a personal organization on sign-up from SSO (#6877)
• Add unexportable flag to KMS keys (#6848)
• Group certificate resources under a navigation section (#6839)
• Add support for revoking certificates using thumbprints (#6833)
• Add get-by-id route to webhooks and allow machine identity authentication (#6818)
• Add ability to clone certificate profiles (#6816)
• Add PKI Signer connect helper (#6811)
• Add handlebar templates for permissions (#6809)
• Add new template function for Kubernetes operator (#6790)
• Add webhook type for triggered honey tokens (#6759)
• Implement usage metering pipeline for License Server v2 (#6827)
• Revamp PAM checkpoint 4 (#6853)
• Revamp PAM checkpoint 2 (#6795)
• Fix shadow mismatches in Go and Node.js (#6863)
• Ensure only versions under v1 can be made to release in GitHub (#6886)
• Document CLI migration guide for Cloudsmith repository transition to artifacts-cli.infisical.com (#6881)
• Add secrets management walkthrough videos to documentation (#6788)
• Update README to reflect full product positioning and product lineup (#6857)
• Update README to reflect full product positioning and product lineup (#6819)

Fixed

• Add ServiceConfig SCIM endpoint and resolve duplicate user error (#6885)
• Validate and normalize generated usernames for dynamic secrets (#6878)
• Fix React Select component spread to not overwrite styling (#6876)
• Run 5 processBucketEvents in parallel (#6869)
• Handle NetScaler certificate sync race conditions when same certificate is used across multiple syncs (#6850)
• Preserve certificate subject attributes across ACME issuance and discovery (#6845)
• Resolve failing Go parsing for no-verify (#6841)
• Add redirects for moved PKI certificate-syncs pages in documentation (#6835)
• Bump validation and forbidden modal z-indexes to not compete with v2 modals (#6831)
• Resolve email not sending for an edge case in SSO (#6826)
• Gate certificate manager request access on request-access permission (#6810)
• Fix empty environments on overview page (#6847)
• Guard createOnUpdateTrigger in add-certificate-requests migration (#6763)
• Guard webauthn down() trigger drop with hasTable check (#6707)
• Guard against missing organization row in validateJWT (#6694)
• Guard JSON.parse on attacker-controlled RelayState in SAML (#6691)
• Show 'Connection Required' instead of 'Expected object, received null' when cancelling new connection dialog (#6496)

New Contributors

• @jaydeep-pipaliya made their first contribution in #6707
• @cody9swann made their first contribution in #6838
• @Manibharadwaj made their first contribution in #6763
• @MohdFaizan097 made their first contribution in #6496
• @Vligai made their first contribution in #6878

Full Changelog: v0.161.0...v0.161.1