Zach 508114d484 feat: user secret database encryption (#24218) ...

Add dbcrypt support for user secret values. When database encryption is
enabled, secret values are transparently encrypted on write and
decrypted on read through the existing dbcrypt store wrapper.

- Wrap `CreateUserSecret`, `GetUserSecretByUserIDAndName`,
`ListUserSecretsWithValues`, and `UpdateUserSecretByUserIDAndName` in
enterprise/dbcrypt/dbcrypt.go.
- Add rotate and decrypt support for user secrets in
enterprise/dbcrypt/cliutil.go (`server dbcrypt rotate` and `server
dbcrypt decrypt`).
- Add internal tests covering encrypt-on-create, decrypt-on-read,
re-encrypt-on-update, and plaintext passthrough when no cipher is
configured.

2026-04-10 09:34:11 -06:00

..

external-auth

feat!: support PKCE in the oauth2 client's auth/exchange flow (#21215)

2025-12-15 17:41:47 +00:00

infrastructure

docs: fix 10k docs to include 600 provisioners (#21597)

2026-01-22 10:43:13 +04:00

integrations

fix: OAuth2 cancel button in the authorization page not working (#24058)

2026-04-10 12:49:22 +03:00

licensing

docs: document that license validation works offline (#24013)

2026-04-06 20:43:49 +02:00

monitoring

fix: separate SMTP envelope and header addresses (#21840)

2026-02-02 13:53:02 +01:00

networking

docs: add upgrade best practices guide (#21656)

2026-02-06 16:08:59 +00:00

provisioners

docs: add provisioner job state transition diagram (#17882)

2025-05-19 17:23:36 -04:00

security

feat: user secret database encryption (#24218)

2026-04-10 09:34:11 -06:00

setup

docs: rename AI Bridge to AI Gateway and Agent Boundaries to Agent Firewall (#24094)

2026-04-09 10:07:50 +00:00

templates

docs: replace dockerd with service docker start in Sysbox examples (#24004)

2026-04-08 13:03:18 +00:00

users

feat: make service accounts a Premium feature (#24020)

2026-04-07 12:25:32 -06:00

index.md

docs: restructure dev container documentation (#21157)

2025-12-09 13:03:02 +02:00