- Added DNS configuration support for ACME external CAs and PostHog tracking for secret sync events.
- Updated documentation to replace Linux binary deployment guide with Linux package (infisical ctl) hardening guide.
- Fixed multiple issues: secrets now retain tags, batch‑logic regression, missing service‑account name in Helm chart, sub‑org selector visibility, and batch folder deletion via commit endpoint.