v0.165.1

What's Changed

• feat(pki): windows/linux PKI Syns pre-fetch commands by @carlosmonastyrski in #7694
• fix: make approvals check for validation rules by @mathnogueira in #7837
• feat(pki): expose the latest renewal of a certificate so agents can follow renewals by @carlosmonastyrski in #7820
• chore: add upgrade impact for v0.164.1 by @github-actions[bot] in #7840
• docs: fix grammar in dynamic secrets overview by @devin-ai-integration[bot] in #7847
• fix(ui): reset search input when user gets into folder by @adilsitos in #7844
• docs: linux and windows doc improvements by @sheensantoscapadngan in #7846
• improvement: add port number to Splunk provider by @Thiago-AS in #7843
• fix: add blocks for ca incompatibility by @sheensantoscapadngan in #7848
• docs: add AI agent identities to identity counting by @0xArshdeep in #7845
• feat(permissions): folder rbac by @adilsitos in #7762
• fix(kubernetes-auth): pin direct API requests with safeRequest by @victorvhs017 in #7855
• feat(pki-sync): add GCP Certificate Manager Sync by @carlosmonastyrski in #7737
• fix(docs): route vulnerability reports through the disclosure policy by @Vligai in #7856
• fix(auth): pool https agents and fix gateway sni by @victorvhs017 in #7857
• feat(webhooks): approval and change request webhook events by @lobocv in #7780
• docs(wip): top level ia 2 by @adkah in #7830
• docs(secret-rotation): fix typos by @adkah in #7861
• feat(pam): default ssh access to interactive shell by @lb-vn in #7838
• feat(pam): improve error code for deleting discovery cred acc by @lb-vn in #7854
• feat(docs): add folder rbac docs by @adilsitos in #7862
• docs(footer): fix forum link by @adkah in #7865
• fix(certificate): scope certificate private-key read permission to the certificate subject on v3 issuance by @Vligai in #7549
• fix(cert-v3): route DigiCert requests through external issuance on approval by @devin-ai-integration[bot] in #7870
• improvement(approvals): migrate page shell to v3 by @andrewhuhh in #7836
• docs(folder-rbac): enhancements by @adilsitos in #7874
• feat(abac): add trim suffix by @adilsitos in #7817
• improvement(secrets): migrate Vault import dialogs to v3 by @andrewhuhh in #7794
• feat: add kubernetes MI auth template support by @scott-ray-wilson in #7713
• fix: collapse signer approvals into a single setup card until a policy exists by @carlosmonastyrski in #7875
• feat(ui): select all for vault import secret path Combobox by @claude[bot] in #7878
• fix(pam): re-check session validity when privileged access is granted by @lb-vn in #7852
• feat(docs): add ansible folder operations by @adilsitos in #7871
• docs(secrets-mgmt): clarify dual-phase rotation by @adkah in #7864
• docs(secrets-mgmt): refresh spacelift sync by @adkah in #7896
• feat(dynamic-secrets): cut over to shared provider registry by @andrewhuhh in #7839
• fix: pki ux patches by @sheensantoscapadngan in #7853
• feat: set project retention limits by @varonix0 in #7887
• docs(style): add skill for applying docs style by @adkah in #7907
• feat(secret-manager): revamp replicate secrets workflow by @andrewhuhh in #7793
• fix(identity-ldap-auth): stop returning bind password on GET by @victorvhs017 in #7873
• fix(pki): clear NULL extended key usage elements on certificates by @claude[bot] in #7900
• chore(docker): refresh stale libssl pin and slim the runtime image by @Vligai in #7905
• fix: resolved multi line yaml pasting issue by @akhilmhdh in #7920
• chore: storybook preview by @scott-ray-wilson in #7914
• feat: add helper text for digicert profiles during issuance by @sheensantoscapadngan in #7911
• fix(webhook): render the test event for the webhook's type by @lobocv in #7893
• improvement(integrations): move integrations page header and tabs to v3 by @claude[bot] in #7909
• feature(ui): add generic v3 loader component and migrate branded loader call sites by @claude[bot] in #7895
• improvement: refactor cert profile policy creation to be inline by @scott-ray-wilson in #7908
• chore: comment storybook preview links by @andrewhuhh in #7925
• chore(docker): drop the source tree and recommended packages from the image by @Vligai in #7917
• fix(ui): read the real reduced-motion preference in v3 Loader by @claude[bot] in #7927

Full Changelog: v0.164.1...v0.165.1