Changelog Bug fixes b091543: fix(ci): restore linux build (#7175) 1a1adec: fix(docs): point nightly links to the current nightly release (#7155) Other work 048a586: chore: auto-update generated files (#7152) 827aa03: chore: auto-update generated files (#7159) ff8de3d: chore: auto-update generated files (#7165) 27ef66d: chore: auto-update generated files (#7166) a9d676f: chore: auto-update generate…
Nightly releases are snapshots of the development activity on the Packer project that may include new features and bug fixes scheduled for upcoming releases. These releases are made available to make it easier for users to test their existing build configurations against the latest Packer code base for potential issues or to experiment with new features, with a chance to provide feedback on ways t…
Changelog Bug fixes b091543: fix(ci): restore linux build (#7175) 1a1adec: fix(docs): point nightly links to the current nightly release (#7155) Other work 048a586: chore: auto-update generated files (#7152) 827aa03: chore: auto-update generated files (#7159) ff8de3d: chore: auto-update generated files (#7165) 27ef66d: chore: auto-update generated files (#7166) Full Changelog: v2.18.2...v2.19.0-9b…
feat(orca): add metric for system errors when starting executions (#8…
What shipped this week Between September 27 and October 3, 2026, we published 4 changelog entries and 35 releases across 13 public repos. Three things run through them: more control and predictability for platform teams, fewer gaps for teams moving off GitHub Actions, and more of the platform agents can drive directly. Tightened how secrets are handled. Pipeline-scoped secrets live in pipeline set…
What's Changed 🐞 Bug Fixes worker: keep in-flight overlay dirs during orphan sweep by @ShravanthReddy in #9695 Align GetResourceVersion behaviour with ListResourceVersion's by @taylorsilva in #9729 Remove parent-dir references from paths provided to pipeline steps by @taylorsilva in #9735 - Resolves GHSA fix: Vault URL validation scheme broken with placeholder by @Kump3r in #9714 fix: baggageclaim…
perf(fiat): serialize resources once per sync and skip unchanged Redi…
perf(fiat): serialize resources once per sync and skip unchanged Redi…
perf(fiat): serialize resources once per sync and skip unchanged Redi…
perf(fiat): index restricted resources by group and use sets for serv…
perf(fiat): index restricted resources by group and use sets for serv…
perf(fiat): index restricted resources by group and use sets for serv…
perf(clouddriver/orca): use label selectors for kubernetes artifact l…
perf(sql): avoid loading the full execution for foreign partition che…
perf(sql): avoid loading the full execution for foreign partition che…
chore(aws): Allow aws init calls to be made based accounts region (#8…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
feat(artifacts): add Fiat permissions to artifact accounts Artifact accounts had no authorization model at all: any caller could list every account and download through any of them, with the account name resolved at pipeline-execution time never checked against the caller's permissions. Give every artifact account type (S3, GCS, GitHub, GitLab, Bitbucket, HTTP, Maven, Ivy, Helm, Jenkins, Oracle, G…
1.16.5 (September 30, 2026) BUG FIXES: Fixed a crash that happens when a tainted instance state is seen without a valid status (#39287) resource-identity: fixed an issue where resource identity could be nil during delete (#39285)
This release updates Kubernetes to v1.36.5, and fixes a number of issues. For more details on what's new, see the Kubernetes release notes. Changes since v1.36.4+k3s1: Bump rancher/mirrored-coredns-coredns image version (#14534) Bump gateway-api and traefik image versions for K3s 1.36 (#14567) Bump Traefik image to 3.7.12 and gateway-api to 1.6.1 Bump Traefik to v3.7.13 (#14610) Bump google.golang…
fix(gate): let JsonHttpMessageConverter hand back raw JSON bodies as …
fix(gate): let JsonHttpMessageConverter hand back raw JSON bodies as …
fix(gate): let JsonHttpMessageConverter hand back raw JSON bodies as …
GitLab's Threat Research Group discovered a command execution vulnerability (GHSA-grg2-7gc6-36m6, CVE-2026-102437) in DeepSeek-Reasonix Studio, a desktop git client designed for developers pairing with AI coding assistants. The flaw, called ConfigPoisoning, could allow attacker-supplied code to execute when a developer views a file's diff. To address this vulnerability, you should update to DeepSe…