Go modules · #831 by repository stars

github.com/Infisical/agent-vault

v0.40.0Infisical/agent-vault ↗New releases in your daily digest, changelog included.

Last release 7 days ago
01 Oct 2026
Ships fairly regularly
a new release about every 2 weeks
Rarely documented
notes for 13 of 55 stable releases
Nothing withdrawn
no release was ever pulled
6 months old
65 releases · first in 2026

Release timeline

65 releases since 2026

2026

20262026

One column per month.

Releases

v0.40.01 Oct 2026Security
bd1a325 fix(docs): vulnerability disclosure reporting
Changelog

45f227c deps: bump @tanstack/react-router from 1.170.18 to 1.170.32 in /web (#403)

910c5dc deps: bump @vitejs/plugin-react from 6.0.3 to 6.1.1 in /web (#405)

2b42ca5 deps: bump github.com/posthog/posthog-go from 1.24.0 to 1.24.4 (#396)

aa99a34 deps: bump golang from 1.27.0-alpine to 1.27.1-alpine (#397)

6a7a053 deps: bump node from aadf416 to 2d984a1 (#393)

ef1c202 deps: bump react-dom and @types/react-dom in /web (#398)

8b2c4e9 deps: bump vite from 8.1.5 to 8.2.2 in /web (#402)

f0cdfac feat(skills): add per-vault Skills tab with markdown instructions (#391)

bd1a325 fix(docs): vulnerability disclosure reporting (#392)

872578e fix(netguard): fall back across resolved addresses (#374)

Verify

# Verify checksum (portable across macOS and Linux) shasum -a 256 --ignore-missing -c checksums.txt # Verify signature (requires cosign v2+) cosign verify-blob \ --bundle checksums.txt.sig \ --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \ checksums.txt # Verify Docker image signature (requires cosign) cosign verify infisical/agent-vault:0.40.0 \ --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \ --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

v0.39.31 Sept 2026

e9515fe chore(web): patch nanoid advisory and split framework into vendor chunks

Changelog

e9515fe chore(web): patch nanoid advisory and split framework into vendor chunks (#389)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.39.3 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.39.21 Sept 2026

c856888 chore(ci): correct golangci-lint-action version comment

Changelog

c856888 chore(ci): correct golangci-lint-action version comment (#387)
232588d deps: bump @tailwindcss/vite from 4.3.2 to 4.3.3 in /web (#351)
96b7073 deps: bump @tanstack/react-router from 1.170.16 to 1.170.18 in /web (#350)
22eaef0 deps: bump github.com/jedib0t/go-pretty/v6 from 6.8.2 to 6.8.3 (#343)
576274c deps: bump github.com/posthog/posthog-go from 1.16.1 to 1.24.0 (#377)
c1c3edc deps: bump golang from 1.26.5-alpine to 1.27.0-alpine (#383)
03c2ec7 deps: bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#385)
7a2f898 deps: bump gorm.io/driver/postgres from 1.6.0 to 1.6.2 (#365)
f8f4a3a deps: bump modernc.org/sqlite from 1.52.0 to 1.57.0 (#384)
37b90f8 deps: bump node from e88a35b to aadf416 (#369)
477c18f deps: bump typescript from 6.0.3 to 7.0.2 in /web (#344)
ea1ff18 deps: bump vite from 8.1.0 to 8.1.5 in /web (#346)
51d4e05 fix(mitm): deflake the two request-log assertions (#388)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.39.2 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.39.13 Aug 2026

795e19a Fix punctuation in master password documentation

Changelog

795e19a Fix punctuation in master password documentation (#357)
bbb441d deps: bump @tailwindcss/vite from 4.3.0 to 4.3.2 in /web (#309)
d95712e deps: bump @tanstack/react-router from 1.170.15 to 1.170.16 in /web (#310)
48be6f8 deps: bump @vitejs/plugin-react from 6.0.2 to 6.0.3 in /web (#314)
da76ad4 deps: bump alpine from 3.24.0 to 3.24.1 (#283)
47f95fd deps: bump github.com/jedib0t/go-pretty/v6 from 6.8.0 to 6.8.2 (#286)
1b39a14 deps: bump github.com/posthog/posthog-go from 1.15.0 to 1.16.1 (#301)
43465fd deps: bump golang from 1.26.4-alpine to 1.26.5-alpine (#325)
479a77b deps: bump golang.org/x/crypto from 0.52.0 to 0.54.0 (#282)
32735cd deps: bump gorm.io/gorm from 1.31.1 to 1.31.2 (#302)
9e3a52a deps: bump node from 3ad34ca to e88a35b (#280)
715feb4 deps: bump vite from 8.0.16 to 8.1.0 in /web (#311)
0df6d5d docs(youtubevideo): adding agent vault general YT video to docs (#297)
1074383 feat(catalog): add 13 service templates and fix four incorrect ones (#361)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.39.1 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.39.024 Jun 2026

3bd0c1e feat: add Pi, Devin, Windsurf, Cline, and Roo Code to knownAgents

Changelog

3bd0c1e feat: add Pi, Devin, Windsurf, Cline, and Roo Code to knownAgents (#295)
fc0443d feat: resolve actor names in request log details (#292)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.39.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.38.022 Jun 2026

3e4f57d feat: allow users to remove themselves from a vault

Changelog

3e4f57d feat: allow users to remove themselves from a vault (#290)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.38.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.37.119 Jun 2026

102206d feat: add database_backend to server-start telemetry

Changelog

102206d feat: add database_backend to server-start telemetry (#276)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.37.1 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.37.019 Jun 2026

cedd958 docs(slack-template): add slack agent template example

Changelog

cedd958 docs(slack-template): add slack agent template example (#275)
26b68d5 feat: add PostgreSQL database support for production deployments (#273)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.37.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.36.116 Jun 2026

1a44036 fix: include substitution keys in credential-usage checks

Changelog

1a44036 fix: include substitution keys in credential-usage checks (#272)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.36.1 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.36.016 Jun 2026

c17d1a1 feat: add anonymous usage telemetry

Changelog

c17d1a1 feat: add anonymous usage telemetry (#270)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.36.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.35.114 Jun 2026

30ff25c fix(broker): resolve dynamic secrets through the MITM proxy

Changelog

30ff25c fix(broker): resolve dynamic secrets through the MITM proxy (#269)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.35.1 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.35.014 Jun 2026

8f0d57f deps: bump @tanstack/react-router from 1.170.10 to 1.170.15 in /web

Changelog

8f0d57f deps: bump @tanstack/react-router from 1.170.10 to 1.170.15 in /web (#265)
f28b88d deps: bump @tanstack/react-router from 1.170.8 to 1.170.10 in /web (#248)
f38292b deps: bump alpine from 3.23.4 to 3.24.0 (#263)
f269ab2 deps: bump github.com/infisical/go-sdk from 0.7.1 to 0.8.0 (#243)
a842f9d deps: bump github.com/jedib0t/go-pretty/v6 from 6.7.10 to 6.8.0 (#266)
54c529d deps: bump golang from 1.26.3-alpine to 1.26.4-alpine (#240)
735d53f deps: bump golang.org/x/sync from 0.20.0 to 0.21.0 (#267)
bca1e6a deps: bump modernc.org/sqlite from 1.50.1 to 1.52.0 (#245)
f5540d3 deps: bump node from 144769e to 3ad34ca (#264)
972d435 deps: bump node from 79723b4 to 3fe807a in /internal/isolation/assets (#261)
feb6b5c deps: bump node from 7c6af15 to 144769e (#241)
0d5f068 deps: bump node from e89172f to 79723b4 in /internal/isolation/assets (#239)
39ccfdf deps: bump react and @types/react in /web (#246)
e159203 deps: bump react-dom from 19.2.6 to 19.2.7 in /web (#244)
d96286c deps: bump vite from 8.0.15 to 8.0.16 in /web (#247)
ed9840c docs(readme): tighten Pluggable Credential Stores blurb
6dc2b79 feat(infisical): support dynamic secrets as leased credentials (#268)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.35.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →

v0.34.013 Jun 2026

543bb06 feat(web): move vault settings editing into a side drawer

Changelog

543bb06 feat(web): move vault settings editing into a side drawer (#259)
5e340cd feat: switch a vault's credential store in place (#260)

Verify

# Verify checksum (portable across macOS and Linux)
shasum -a 256 --ignore-missing -c checksums.txt

# Verify signature (requires cosign v2+)
cosign verify-blob \
  --bundle checksums.txt.sig \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com" \
  checksums.txt

# Verify Docker image signature (requires cosign)
cosign verify infisical/agent-vault:0.34.0 \
  --certificate-identity-regexp "^https://github\.com/Infisical/agent-vault/\.github/workflows/release\.yml@refs/tags/" \
  --certificate-oidc-issuer "https://token.actions.githubusercontent.com"

Open source →