Skip to content

chore(deps): update dependency @infisical/cli to v0.44.8 - #40

Closed
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/infisical-cli-0.x
Closed

chore(deps): update dependency @infisical/cli to v0.44.8#40
renovate[bot] wants to merge 2 commits into
mainfrom
renovate/infisical-cli-0.x

Conversation

@renovate

@renovate renovate Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
@infisical/cli 0.43.120 → 0.44.8 age confidence

Release Notes

Infisical/cli (@​infisical/cli)

v0.44.8

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.44.7...v0.44.8

v0.44.7

Compare Source

Changelog

v0.44.6

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.44.5...v0.44.6

v0.44.5

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.44.4...v0.44.5

v0.44.4

Compare Source

What's Changed

Full Changelog: Infisical/cli@0.44.3...v0.44.4

v0.44.3

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.44.2...v0.44.3

v0.44.2

Compare Source

Changelog

  • 777fdd8 Merge pull request #​440 from Infisical/fix/agent-state-hash-written-content
  • e40b1b6 improvement(agent-vault): read the session token and access bundle from the environment (#​395)
  • aa65b8a fix(cert-agent): hash written certificate output
  • bb178e4 Merge pull request #​433 from Infisical/calvin/secrets-677-add-infisical-logout-command-to-cli
  • e4c2624 feat(cli): clear secrets backup and org session index on logout

v0.44.1

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.44.0...v0.44.1

v0.44.0

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.145...v0.44.0

v0.43.145

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.144...v0.43.145

v0.43.144

Compare Source

What's Changed

New Contributors

Full Changelog: Infisical/cli@v0.43.143...v0.43.144

v0.43.143

Compare Source

What's Changed

  • feat: allow infisical secrets set without requiring readValue permission by @​varonix0 in #​431

Full Changelog: Infisical/cli@v0.43.142...v0.43.143

v0.43.142

Compare Source

Changelog

  • 72f31eb improvement(agent-vault): put the IV in the session log object (#​422)
  • 2b0a7b9 Merge pull request #​425 from Infisical/matheus/cli-vulnerabilities
  • 4299b39 use new go in scan test
  • 7a3d4bd Merge branch 'main' of github.com:Infisical/cli into matheus/cli-vulnerabilities
  • a55f5da use net.JoinHostPort
  • f33ef75 remove govulncheck toolchain_blocked
  • 7848ac8 update Go to 1.26.9

v0.43.141

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.140...v0.43.141

v0.43.140

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.139...v0.43.140

v0.43.139

Compare Source

Changelog

  • f728c42 Merge pull request #​414 from Infisical/bernie/pam-509-add-native-protocol-support-for-clickhouse-pam
  • a6554f7 Merge pull request #​413 from Infisical/ak-new-commands
  • af300fa chore: pick up the depth-based nesting bound
  • 830482f refactor(clickhouse): name the memory budget and idle timer plainly
  • a29cd07 chore: pick up the enum label fix in the nesting bound
  • e468674 fix(clickhouse): refuse a column type too deeply nested to infer
  • f072b27 fix(clickhouse): reserve only for a byte that is really there
  • 7341cfe fix(clickhouse): reserve before a byte leaves the reader
  • 32a7d9a fix(clickhouse): give a charge back before the raw relay starts
  • 54b779d fix(clickhouse): charge a tap before it grows, not after
  • 40df24b test(clickhouse): follow the renamed refusal outcome
  • e01a506 fix(clickhouse): record a refusal the gateway made itself
  • 61613df fix(clickhouse): charge the bytes a tap is holding
  • d64e0a0 fix(clickhouse): bound the protocol sniff on a relayed session
  • f67e1d3 fix(clickhouse): bound the server direction and stop holding bytes twice
  • d30d8c3 fix(clickhouse): ignore a stall guard firing its packet already left
  • 9c40100 fix(clickhouse): cut off a stalled packet without the transport
  • 4f7090c fix(clickhouse): charge a packet's memory as it arrives
  • 2ab3d0a fix(clickhouse): bound a session rather than reserving a gateway's share
  • 458ac28 chore: pick up the ch-go string batch allocation fix
  • 2baad19 fix(e2e): point the test module at the patched ch-go too
  • f456c54 fix(clickhouse): bound the handshake and refuse a redirected probe
  • 8718528 fix(clickhouse): bound what a native session may allocate
  • 455038b remove projects
  • 11e2b11 address veria
  • 103040e add hint for profile binding after non interactive init
  • 227af4f suggest editing workspaceId when init is already linked
  • 5876551 fix endpoint for project creation
  • b57242a remove force flag and reformat
  • 65724ad remove json flag form org and projects
  • 599886d chore(clickhouse): explain the bounded decoder and fix a truncated comment
  • f33020f test(clickhouse): restore the session-level oversized block check
  • fd88e90 fix(clickhouse): enforce data block limits inside the decoder
  • 851b6e9 chore(clickhouse): trim comments to one line
  • 4e3c369 fix(clickhouse): bound the data block and stop losing outcomes on a panic
  • c3d89e1 fix(clickhouse): bound the whole packet and close the session on both races
  • 650ec02 test(clickhouse): drop the e2e test until the backend is on main
  • b0f0a5b fix(clickhouse): wait for the e2e database before seeding it
  • b0e19a6 fix(clickhouse): bound every declared length in a native packet
  • 5adc23b fix(clickhouse): check the executable SQL against the blocking policy
  • 2162877 test(clickhouse): move live-server tests to the e2e suite
  • 4c44bb3 fix(clickhouse): harden the native handshake and probe classification
  • 5340855 remove unnecessary import command
  • b43bb35 fix(clickhouse): refuse http clearly on a native-only account
  • f978cb9 refactor(clickhouse): drop the HTTP-to-native bridge
  • 7f838fa chore(clickhouse): trim comments
  • 45f20f5 feat(pam): clickhouse native protocol
  • 6d3155d once again
  • f057207 address even more comments
  • de5bab1 address greptile again
  • 330095c address review comments
  • e2c9c96 feat(cli): add bootstrap verbs for AI-agent quickstart
  • f3ad484 fix(cli/login): make browser flow subprocess-safe

v0.43.138

Compare Source

Changelog

v0.43.137

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.136...v0.43.137

v0.43.136

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.135...v0.43.136

v0.43.135

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.134...v0.43.135

v0.43.134

Compare Source

Changelog

  • c9d8427 Merge pull request #​400 from Infisical/bernie/platfor-763-support-gcp-authentication-for-gateway
  • f9b421e Merge pull request #​372 from Infisical/feat/named-profiles
  • d5dc793 fix(cli): restore the previous session if a profile write fails
  • 45229a2 fix(cli): never send a cached org token from a superseded session
  • e2f57aa fix(cli): keep an org session indexed when its token cannot be deleted
  • edeaeec fix(cli): keep organization sessions a re-scope does not invalidate
  • f2ffaca Merge pull request #​403 from Infisical/feat/pam-built-in-masking
  • 260e1c6 misc: addressed grep
  • 29d9640 misc: addressed
  • fa8b414 misc: addressed veria
  • fc9a986 fix(cli): only retain a session a kept profile can still use
  • 31a8253 misc: addressed feedback
  • a6f1532 fix(cli): warn when profile delete cannot remove stored credentials
  • af89c55 fix(cli): refuse a wrong-account login before applying the profile's org
  • 66cf327 fix(cli): do not strand cached org sessions on re-login
  • 840b949 fix(cli): clean up cached org sessions when the main entry is gone
  • 8416960 fix(cli): keep a profile per sub-organization
  • f4e46e7 fix(cli): resolve gateway/relay/kmip domain from the active profile
  • 06dbe6d fix(cli): address review feedback on named login profiles
  • 8ec3d97 feat(cli): named login profiles for multi-organization work
  • 9d69ea3 Merge remote-tracking branch 'origin/main' into bernie/platfor-763-support-gcp-authentication-for-gateway
  • e8c4fab refactor(gateway): one response type and one call for gateway login
  • 9bc13bc fix(gateway): name the instance scope cause when signJwt fails
  • d58c106 fix(gateway): scope the gcp key file flag to the iam type
  • cf98da7 misc: addressed comments
  • 42c1446 feat: pam built-in masking
  • 76739e8 chore(gateway): trim comments to one line each
  • 8c7f90c chore(deps): tidy the e2e module after the grpc bump
  • 277c392 chore(deps): bump grpc to v1.83.2
  • 5c9b9a2 fix(gateway): bound the signed gcp jwt and validate the systemd key path
  • 3e2fe7d feat(gateway): GCP enrollment

v0.43.133

Compare Source

Changelog

  • 8a3e2fb feat(agent-vault): enforce method and path rules, inject custom headers, substitute placeholders (#​397)
  • d8d44ba Merge pull request #​404 from Infisical/chore/remove-gateway-v1
  • e68e598 chore: remove gateway v1
  • b0d52df Merge pull request #​401 from Infisical/chore/remove-cloudsmith-alerts
  • e2ecd00 Update README to reflect migration of Infisical CLI Linux package repository
  • 1d0bb5f Update dependencies in go.mod and go.sum
  • b3e5400 Update dependencies in go.mod and go.sum
  • bb9a25c Remove migration notice from README and related utility functions. Update CLI to no longer display migration notice for the Linux package repository transition from Cloudsmith.
  • 2378807 Merge pull request #​391 from Infisical/pam-oracle-restore
  • 43861c3 Merge pull request #​398 from Infisical/PAM-477
  • 1624751 Address PR comments
  • 55121fa address greptile
  • 46b8fe2 improvement(pam): explicitly disable LOCAL INFILE on MySQL backend connections
  • 9cbd5d9 Merge branch 'main' into pam-oracle-restore
  • 46166a5 Merge pull request #​394 from Infisical/PAM-426
  • f69fcb6 Fix veria comment
  • 910a480 address comments
  • a22a970 fix(pam): resolve the stored Oracle username before rotating a credential
  • b9a55ba address reviews
  • ef3940b address reviews
  • 85e860d Address PR comments
  • c5458cf tidy
  • bc60f96 address reviews
  • 4b0fefe feat(pam): snowflake account
  • 321a182 Fix go.mod
  • 8a69a8c Address greptile comments
  • 007d52e feat(pam): add Oracle credential rotation over the gateway

v0.43.132

Compare Source

Changelog

  • d5d1388 feat(agent-vault): the proxy and infisical av commands (#​386)

v0.43.131

Compare Source

Changelog

  • 6e4e88d Merge pull request #​385 from Infisical/bernie/pam-425-simplify-gateway-deployments-for-certificates-and-connectors
  • 52adde0 fix(gateway): surface direct listen failures instead of hanging
  • ca45fb4 fix(gateway): keep --target-relay-name canonical and quiet relay retries
  • 5f47bca Merge pull request #​392 from Infisical/bernie/pam-463-investigate-session-recording-endpoint-error-spike
  • a1e8f6e refactor(cli): report the version in the user agent
  • 660f486 fix(pam): only give up on a token mismatch
  • f00f424 fix(pam): stop retrying rejected recording chunks
  • 15c7623 test(gateway): cover every ALPN over the direct transport
  • ee255e3 refactor(gateway): cut the comments back
  • 562c550 fix(gateway): release the handshake slot when the handshake resolves
  • 63b4e1e fix(gateway): bound unauthenticated direct connections
  • 7f84920 fix(gateway): keep relay failover off a direct-listen gateway
  • fe952ca fix(pam): stop retrying a dead direct address per connection
  • f2f5c7b feat(gateway): support direct listen connections

v0.43.130

Compare Source

What's Changed

  • docs: add security policy pointing to the vulnerability disclosure pr… by @​Vligai in #​384
  • improvement(login): treat INFISICAL_DOMAIN env as explicit instance selection for cloud URLs by @​victorvhs017 in #​390

Full Changelog: Infisical/cli@v0.43.129...v0.43.130

v0.43.129

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.128...v0.43.129

v0.43.128

Compare Source

Changelog

  • 7a8fece Merge pull request #​376 from Infisical/bernie/pam-rdp-mstsc-cert
  • 2256469 fix(pam-rdp): cap sspi logging under RUST_LOG overrides
  • 3270a04 chore(pam-rdp): trim comments
  • 2046d0b fix(pam-rdp): stable acceptor certificate

v0.43.127

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.126...v0.43.127

Changelog

  • 6c40ac0 Merge pull request #​374 from Infisical/PKI-372
  • c8181cb Address PR comments
  • cc0fefc feat(agent): add lifecycle.use-latest so certificate-id follows server-side renewals

v0.43.126

Compare Source

Changelog

  • 78e46d9 Merge pull request #​370 from Infisical/bernie/pam-375-gateway-load-reporting
  • 82d3323 fix(gateway): count channels in the receive loop, not the handler
  • 4e4a92b fix(gateway): scope channel releases to their connection, report on start
  • 37c4648 fix(gateway): bound the active channel count and back off failed reports
  • d9c4392 chore(gateway): trim comments and correct the reporting note
  • 5e9ed35 chore(deps): sync the e2e module with the stun bump
  • f5b073a chore(deps): bump pion/stun to v3.1.5
  • 1d66d56 refactor(gateway): rename the load report endpoint to /metrics
  • 6210b36 fix(gateway): bound the load report request
  • 90e25b4 feat(gateway): report active channel count for pool load balancing

v0.43.125

Compare Source

Changelog

v0.43.124

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.123...v0.43.124

Changelog

  • e61a60b Merge pull request #​358 from Infisical/bernie/pki-348-increase-windows-post-command-character-limit-to-8192
  • 8f1be78 Merge remote-tracking branch 'origin/main' into bernie/pki-348-increase-windows-post-command-character-limit-to-8192
  • cc16fa6 Merge pull request #​371 from Infisical/PAM-415
  • 32d0a82 fix review and patch vuln
  • 17c9ddf remove password hiding
  • d9f772d Merge branch 'main' into PAM-415
  • d654b35 hide secret prompt inputs + general fixes and improvements
  • 301ce6a Merge pull request #​346 from Infisical/PAM-336
  • ee7d9eb fix: gate the output poll until stdin is closed
  • 67115dd tidy
  • 501cf6f retriggering jobs
  • eaa2bab update RDP with a fake s3 bucket
  • cfee62b implement k8s
  • be247cb Merge branch 'main' into PAM-336
  • ae037a2 address veria comment
  • 67dedf4 remove echo-off masking
  • 2977453 address reviews
  • 95c9a21 feat(pam): ssh session log parsing in gateway
  • fac2de3 fix: stop shortening the WSMan operation timeout for stdin commands
  • 838ec94 fix: count post-sync command characters rather than bytes
  • 08d7923 feat: raise the WinRM post-sync command limit to 8192 characters
  • 20ae686 improve code
  • fda890c erge branch 'main' into PAM-336
  • 08faa96 fix
  • ab33130 restore PAM e2e tests

v0.43.123

Compare Source

Changelog

  • 5d3f2ca Merge pull request #​353 from Infisical/bernie/pam-341-add-kubernetes-auth-support-for-gateway-enrollment
  • d717aec Merge pull request #​354 from Infisical/bernie/kms-24-add-auto-renewal-of-kmip-server-certificates
  • f506ec1 chore: retrigger checks
  • 83663e6 chore: pin infisical-kmip to the released v0.3.20
  • 39a6035 chore: retrigger checks
  • a91c1a7 misc: added ignore
  • 20ba9b6 chore(kmip): trim comments to the non-obvious parts
  • 880262a Merge remote-tracking branch 'origin/main' into bernie/kms-24-add-auto-renewal-of-kmip-server-certificates
  • 37f3588 test(kmip): cover the STS refresh decision edge cases
  • 2ca9021 fix(kmip): decide STS refresh from the recorded enroll method
  • e00f865 chore: bump infisical-kmip for renewal loop review fixes
  • d0384f3 fix: bound AWS token refresh with timeouts and wire it on flagless restarts
  • 8759a78 chore: bump infisical-kmip past isRenewal flag removal
  • 878168b chore: bump infisical-kmip to key/cert pair validation fix
  • 0dea9a7 chore: tidy e2e module for infisical-kmip bump
  • f53d5f3 feat: wire KMIP server certificate auto-renewal token refresh
  • 32295a0 feat(gateway): add --enroll-method=kubernetes

v0.43.122

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.121...v0.43.122

Changelog

  • 7cdc61d Merge pull request #​362 from Infisical/fix/multi-connection-proxy-pam
  • 1cae993 misc: added ignore
  • 86d3b62 misc: removed unnecessary changes
  • 46dc18f fix: multi-connection proxy pam

v0.43.121

Compare Source

What's Changed

Full Changelog: Infisical/cli@v0.43.120...v0.43.121

Changelog

  • 242df55 Merge pull request #​351 from Infisical/feat/add-pam-agent
  • a63e0cb fix: socket
  • 6d02c4e misc: addressed comments
  • bf8bb43 Merge remote-tracking branch 'origin/main' into feat/add-pam-agent
  • f7a1216 misc: addressed socket block
  • 727fe0e misc: addressed comments
  • 27f7ba4 misc: fail fast when sandbox cannot be started
  • 2acb621 misc: added proper sandboxing
  • 4bc2d0c misc: used agentic access instead
  • 3ce5278 misc: address reported vulnerability
  • 652c839 misc: addressed comments
  • af757de misc: removed description
  • a7fb6b4 misc: add limitation for aws
  • f0eb2f0 feat: removed manifest
  • 459c20f Merge remote-tracking branch 'origin/main' into feat/add-pam-agent
  • 5c0751a feat: add pam agent

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate

renovate Bot commented Oct 23, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@curiousgeorgios curiousgeorgios mentioned this pull request Oct 29, 2026
Merged
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@curiousgeorgios