Infrahub release notes
1.12
Feature releaseReview changes to data and Git-managed automation together with greater confidence, automate new services without renumbering your existing infrastructure, and validate large changes more efficiently.
1.11
Feature releaseScale and performance: a merge regenerates only the artifacts and Generators it actually affected, computed attributes recompute only when their inputs change, and schema constraint validation is scoped to the kinds and fields a change can violate. Webhook deliveries become tasks you can inspect, retry and cancel, an interrupted merge is detectable and recoverable, and task priority lanes keep user-facing operations ahead of background work.
Makes object creates and updates faster, most notably when creating objects from an object template, and stops API server memory growing without bound by evicting superseded GraphQL schemas. Also fixes read queries being pushed onto the async path, which made schema introspection take over ten seconds, and repairs nodes left without attribute rows when an existing kind started inheriting from a generic.
Fixes account preferences to preview the date and timezone values that saving will produce, cleans up an SSO account's identities and tokens when it is deleted, purges a deleted branch's settled tasks, and keeps the branch registry cache in sync with the database. Artifacts and Generators are now regenerated when a display label or human-friendly ID changes.
Adds a configurable CA bundle for outbound TLS, a command to reset the databases, and a load-shed marker header that the web UI uses to wait and retry. Schema load and check errors now return one 422 entry per offending field, and many fixes improve diff, merge, and listing performance on large branches.
Infrahub now refuses to serve an artifact file that no longer matches its checksum, adds an option to skip TLS certificate validation for S3 and syslog servers, and adds a command to delete unfrozen diffs. A rebase now emits an event for each of the branch's own changes, and many fixes improve diff and rebase correctness and performance on large branches.
Infrahub now uses updated versions of PyJWT, urllib3 and other dependencies that fix published security vulnerabilities, including a critical PyJWT vulnerability. Other fixes speed up operations on Profiles used by many objects, and resolve missing related objects in large GraphQL queries and searches that returned no results when the text starts or ends with a space.
Infrahub 1.11.6 brings the selective regeneration improvements from the 1.12 line to 1.11. After a merge or in a proposed change, regeneration now narrows to the affected members instead of regenerating every member of a definition, and artifacts and Generators regenerate again when a change touches a field their query filters on.
Infrahub 1.11.7 rejects concurrent creates of the same IP address on a branch other than the default branch when the schema declares a uniqueness constraint on it, and shows the info severity badge in task logs in blue.
Infrahub 1.11.8 regenerates only the artifacts and Generators whose query reads a changed node through a fragment, a generic or a relationship, and fixes several cases where they were not regenerated. It also limits the scheduled job that revokes approvals to open proposed changes, fixes the erase error in the Git credential helper, and adds Python 3.15 support to the infrahub-testcontainers package.
Infrahub 1.11.9 updates certifi to 2026.10.19 to remove the emSign root certificates (GHSA-6q48-6c7w-9gw2), allows a null node_metadata on relationships to a generic in the GraphQL schema, and no longer regenerates artifacts and Generators when a change only affects peers that a relationship filter excludes. It also fixes GraphQL queries that failed when they requested node_metadata on a relationship to a generic, and data conflicts on the fingerprint of Generator and Transformation definitions.
Infrahub 1.11.10 updates the base Python version of the container image to 3.14.10 so the bundled pip no longer ships a certifi version affected by GHSA-6q48-6c7w-9gw2, adds Redis Sentinel support and quorum queues for RabbitMQ, and raises the Redis requirement to version 6.0. It also fixes filters and search on a branch, schema changes that existing data violates, repository sync of changed artifact definitions, Transformations and check definitions, and proposed change checks that stayed in progress forever.
Infrahub 1.11.11 fixes GraphQL subscriptions bypassing authentication and saved-query permissions, an account signed in with a JWT token being able to delete the API token of another account, and vulnerabilities in dependencies, and removes the experimental NATS JetStream driver for the message bus and the cache. It also reduces the load that proposed change checks put on the API server and the task manager, and fixes time-range diffs of the default branch, global permissions changed on a branch, and flows failing when the Redis connection pool is full.
Infrahub 1.11.12 reduces the load on the task manager and its database, and shortens the time to load many IP addresses on the default branch and to save an object with many peers on a relationship. It also fixes the memory use of API servers growing until a restart, uniqueness checks that slowed down as more objects shared an attribute value, and zombie flow-run detection acting on flow runs that had already finished.