v0.167.9

What's Changed

• feat(agent-vault): service discovery, service descriptions, and a built-in skill by @scott-ray-wilson in #9219
• improvement(agent-vault): count session log requests by decision in PostHog by @saifsmailbox98 in #9325
• fix(identity-auth): pin JWKS fetches by @maidul98 in #9353
• fix(billing): hide usage meter for unlimited entitlements in plan sheet by @andrewhuhh in #9356
• chore(secret-change): remove legacy implementation and removes bridge by @adilsitos in #9294
• feat: implement blind index for secret scanning findings by @mathnogueira in #9320
• fix(pam): drop 'Optional' from reason placeholder when reason is required by @devin-ai-integration[bot] in #8715
• feat(agent-vault): add MCP templates for six more providers by @sheensantoscapadngan in #9368
• feat(access-approval): gate policy and request writes on plan entitlement by @claude[bot] in #8245
• improvement(agent-vault): remove the sample session from the Sessions page by @scott-ray-wilson in #9357
• feature(agent-vault): add PostgreSQL, MySQL and SSH services by @saifsmailbox98 in #9235
• fix: move includeAllSubFolders in sync root object by @mathnogueira in #9225
• chore: add upgrade impact for v0.167.8 by @github-actions[bot] in #9351
• fix(billing): drop empty chevron column in usage breakdown rows by @andrewhuhh in #9360
• fix(secrets): create secrets with one batch per environment in the create drawer by @claude[bot] in #9367
• feat(frontend): submit folder form with Cmd/Ctrl+Enter by @claude[bot] in #9389
• feat(kms): publish sign-verify keys' public keys as a JWKS by @lb-vn in #9174
• feat(pki): link certificate alerts straight to the certificate by @dawson-infisical in #9365
• fix: use secret scanning wording in secret scanning role descriptions by @claude[bot] in #9392
• fix(pki): apply certificate request approval policies to renewals and SCEP on external CAs by @carlosmonastyrski in #9090
• feat(secrets): add viewSecretValue to get secret by ID by @varonix0 in #9396
• fix: pin outbound connections to validated IPs for user-configured URLs by @akhilmhdh in #9394
• chore(docker): upgrade zlib and verify the FIPS OpenSSL download by @Vligai in #9366
• fix(honey-tokens): use project color and "Continue" label in create flow by @claude[bot] in #9399
• feat(agent-vault): services are project resources added to access bundles by @scott-ray-wilson in #9375
• feat(agent-vault): show request counts in session logs by @saifsmailbox98 in #9401
• feat: configure CRL validity per internal CA and regenerate CRLs on demand by @carlosmonastyrski in #9192
• feat(pki): add configurable bundle method to Cloudflare certificate sync by @sinnwise in #9395
• fix(agent-vault): update create session flow by @adkah in #9371
• chore: paginate project and membership listings and reduce DB load by @Thiago-AS in #9405
• fix: index envId on snapshot and folder version tables by @Thiago-AS in #9407
• improvement(secret-folder): check content on rename and delete by @adilsitos in #9318
• feat(secret-rotation): send rotation failure alerts through the shared alerting module by @DimitrisStaratzis in #9154
• fix: skip large files in secret scanning by @mathnogueira in #9411
• fix: delete last-member orgs with the account and block deleting the last org admin by @Thiago-AS in #9398
• fix: send no User-Agent on JWKS fetches by @akhilmhdh in #9414
• fix(frontend): open the first permitted tab on org Access Control by @andrewhuhh in #9412
• feat(frontend): show user access by product on the user detail page by @andrewhuhh in #9413
• feat(secrets-overview): add annotation telemetry by @andrewhuhh in #9415
• feat(pam): add virtual My Accounts folder to accounts page by @lb-vn in #9242
• feat(secret-sync): add jenkins app connection and secret sync by @DimitrisStaratzis in #9308
• fix(access-approval): filter list requests in SQL by requester and env slug by @victorvhs017 in #9435
• feat(agent-vault): hooks on services by @saifsmailbox98 in #9408
• feat(agent-vault): limit an inline MCP server to some of its tools by @scott-ray-wilson in #9418
• feat(frontend): show machine identity and group access by product by @andrewhuhh in #9426
• fix(frontend): hide sub-organizations section in org switcher when unusable by @andrewhuhh in #9450

Full Changelog: v0.167.8...v0.167.9