v0.43.85

Changelog

• b193c99 feat: add principals flag to cli for ssh dynamic secrets (#238)
• 48d8a35 Merge pull request #196 from Infisical/devin/1777324232-lazy-identify-user
• 89f55cc Merge pull request #236 from Infisical/feat/pam-rdp-recording
• 5f5a8eb Merge branch 'main' into feat/pam-rdp-recording
• b38d001 improvement: decrease gateway health check interval for HA (#231)
• 1ccc772 Merge pull request #227 from Infisical/feat/pam-rdp-browser-client
• 8d4ee9c format
• 7ac3308 remove unused constant
• 6ec5907 split acceptor cert generation from TLS config build
• 498dcb8 remove unnecessary if statement
• 2d9aa09 Merge branch 'main' into feat/pam-rdp-browser-client
• 6a698a6 Merge pull request #235 from Infisical/fix-early-cleanup
• 0bd2056 move cleanup to defer
• a7fea58 fix: early session cleanup that broke proxies
• 99d53a7 Merge pull request #218 from Infisical/feat/pam-rdp-recording
• 1ed1bc2 chore(pam-rdp): shorten Mac FastPath mask comment
• 08c4660 Revert "chore(pam-rdp): drop Mac client FastPath input header mask"
• d1552c2 docs(pam-rdp): expand CR/CC abbreviations in rdcleanpath comment
• f795c1f docs(pam-rdp): document run_mitm_rdcleanpath_inner step-by-step
• 059e6ef docs(pam-rdp): add comments to read_rdcleanpath_pdu_inner and read_tpkt_pdu
• ba8ce28 refactor(pam-rdp): rename MITM entry points for clarity
• a031f0a fix(pam-rdp): silence unused variable warning in ffi.rs
• 8980609 chore(pam-rdp): remove debug logging from bridge
• 40741f0 refactor(pam-rdp): consolidate 4 FFI start functions into 2
• c6dcfb1 refactor(pam-rdp): reuse native bridge path for browser RDP
• f53a670 style(pam-rdp): remove trailing blank line for cargo fmt
• 286b7e2 Merge feat/pam-rdp-recording into feat/pam-rdp-browser-client
• 0155381 fix(pam-rdp): always cleanup on explicit cancellation
• 12e9ea3 chore(pam-rdp): drop Mac client FastPath input header mask
• 0830b7f fix(pam-rdp): keep session alive across RDP disconnects
• 4b25773 fix(relay): fix misleading "packet length too long" error when gateway is unreachable (#234)
• c6e658f Merge remote-tracking branch 'origin/main' into feat/pam-rdp-recording
• c548856 chore(pam-session): drop misleading 'terminal' references from SessionEvent comments
• 8d8f63d chore: pin GitHub workflow dependencies by SHA (#232)
• bd5a8cf chore: retrigger CI
• 7f030f1 fix(pam-rdp): keep recording timeline coherent across rapid reconnects
• 6effef3 fix(telemetry): only persist LastIdentifiedEmail after successful enqueue
• c0991b4 feat(telemetry): make IdentifyUser idempotent and lazy via persisted LastIdentifiedEmail
• 71878ca Merge pull request #197 from Infisical/devin/1777325070-cli-machine-identity-telemetry
• 7ba066c chore(api): drop redundant UploadSessionEvent comment
• 8920437 refactor(pam-session): rename TerminalEvent -> SessionEvent
• 9ab95e1 fix(pam-rdp): capture client input PDUs under TLS-strict clients
• 9ad910b fix(pam): fix SSH e2e test flakes from container readiness races (#228)
• 2d7b1eb fix(pam): eliminate black screen at start of RDP recordings
• d56cde6 style(pam): apply cargo fmt formatting
• 7aeed67 fix(pam): address bot review issues in RDP browser session
• c111230 feat(pam): add browser-based RDP session support and recording
• d422e12 feat(pam): add Oracle DB access support (#192)
• e96b1b2 Merge remote-tracking branch 'origin/main' into feat/pam-rdp-recording
• f81c8cb fix(pam-rdp): address PR review issues
• 795ae05 Merge remote-tracking branch 'origin/fix/cli-rdp-musl-static' into feat/pam-rdp-recording
• 5b44f1a fix(release): ship linux RDP binaries as fully static (musl)
• 3f00ca5 fix(pam-rdp): bypass mstsc TLS cert validation in generated .rdp
• 9357a92 fix(pam-rdp): support FreeRDP + match native clients' protocol advertisement
• e2dd9c0 style(pam-rdp): clippy fixes
• f916494 style(pam-rdp): cargo fmt
• d9e912f fix(pam-rdp): patch capabilities + anchor timestamps for replay
• d290e1b feat(pam-rdp): record RDP sessions through the chunk uploader
• 18f2006 fix(telemetry): prefer logged-in email over env-token identity in distinctId resolution
• ca54d7a feat(telemetry): attribute machine-identity CLI events to identity- persons