S

Spinnaker

S
Spinnaker DevOps v2026.4-5

gate-2026.4-5

fix(gate): scope pipeline lookup by id to the requested application (…

S
Spinnaker DevOps v2026.4-3

deck-2026.4-3

fix(deck): restore full-width controller and job selects in CI build …

S
Spinnaker DevOps v2026.2-23

gate-2026.2-23

fix(gate): scope pipeline lookup by id to the requested application (…

S
Spinnaker DevOps v2026.3-17

gate-2026.3-17

fix(gate): scope pipeline lookup by id to the requested application (…

S
Spinnaker DevOps

gate-main-196

fix(gate): scope pipeline lookup by id to the requested application (…

S
Spinnaker DevOps v2026.4-2

deck-2026.4-2

fix(deck): avoid nested modals and overlapping stage options (#8342) …

S
Spinnaker DevOps v2026.4.1

Spinnaker 2026.4.1

Breaking Changes Features Configuration Fixes ci: release SBOM naming for deck and trim slim/standard image SBOMs (#8300) (#8309) (8645fd74) cloudrun: Cloudrun never authoratatively cached LB data, so the clusters view never worked for cloudrun operations. (#8317) (#8330) (546e5655) ecs: make ecs-native deploys work end to end (#8315) (#8324) (40e1c327) gate: honor configured SAML session cookie s…

S
Spinnaker DevOps v2026.2-23

rosco-2026.2-23

fix(security): remove compromised eMudhra roots from JRE 17 images (#…

S
Spinnaker DevOps v2026.4.1

rosco-2026.4.1: chore(deps): bump Spring Boot to 4.1.2 (Tomcat 11.0.27) (#8314) (#8334)

springBoot 4.1.1 -> 4.1.2 and tomcat 11.0.24 -> 11.0.27 (the version Boot 4.1.2 manages), httpcore5 5.4.3 -> 5.4.4. Drop the freemarker 2.3.35 override: Boot 4.1.2 manages it. Drop the netty-bom 4.1.137 pin: Boot 4.1.2 manages Netty 4.2.19. Derive the verifySpringBootBaseline expectation from versions.springBoot instead of a hardcoded version. keel-sql: jOOQ 3.21.9 (managed by Boot 4.1.2) generate…

S
Spinnaker DevOps v2026.4-4

orca-2026.4-4: chore(deps): bump Spring Boot to 4.1.2 (Tomcat 11.0.27) (#8314) (#8334)

springBoot 4.1.1 -> 4.1.2 and tomcat 11.0.24 -> 11.0.27 (the version Boot 4.1.2 manages), httpcore5 5.4.3 -> 5.4.4. Drop the freemarker 2.3.35 override: Boot 4.1.2 manages it. Drop the netty-bom 4.1.137 pin: Boot 4.1.2 manages Netty 4.2.19. Derive the verifySpringBootBaseline expectation from versions.springBoot instead of a hardcoded version. keel-sql: jOOQ 3.21.9 (managed by Boot 4.1.2) generate…

S
Spinnaker DevOps v2026.4-3

rosco-2026.4-3: chore(deps): bump Spring Boot to 4.1.2 (Tomcat 11.0.27) (#8314) (#8334)

springBoot 4.1.1 -> 4.1.2 and tomcat 11.0.24 -> 11.0.27 (the version Boot 4.1.2 manages), httpcore5 5.4.3 -> 5.4.4. Drop the freemarker 2.3.35 override: Boot 4.1.2 manages it. Drop the netty-bom 4.1.137 pin: Boot 4.1.2 manages Netty 4.2.19. Derive the verifySpringBootBaseline expectation from versions.springBoot instead of a hardcoded version. keel-sql: jOOQ 3.21.9 (managed by Boot 4.1.2) generate…

S
Spinnaker DevOps v2026.3-15

rosco-2026.3-15

fix(security): remove compromised eMudhra roots from JRE 17 images (#…

S
Spinnaker DevOps v4.1.2

orca-main-219: chore(deps): bump Spring Boot to 4.1.2 (Tomcat 11.0.27) (#8314)

springBoot 4.1.1 -> 4.1.2 and tomcat 11.0.24 -> 11.0.27 (the version Boot 4.1.2 manages), httpcore5 5.4.3 -> 5.4.4. Drop the freemarker 2.3.35 override: Boot 4.1.2 manages it. Drop the netty-bom 4.1.137 pin: Boot 4.1.2 manages Netty 4.2.19. Derive the verifySpringBootBaseline expectation from versions.springBoot instead of a hardcoded version. keel-sql: jOOQ 3.21.9 (managed by Boot 4.1.2) generate…

S
Spinnaker DevOps v4.1.2

rosco-main-147: chore(deps): bump Spring Boot to 4.1.2 (Tomcat 11.0.27) (#8314)

springBoot 4.1.1 -> 4.1.2 and tomcat 11.0.24 -> 11.0.27 (the version Boot 4.1.2 manages), httpcore5 5.4.3 -> 5.4.4. Drop the freemarker 2.3.35 override: Boot 4.1.2 manages it. Drop the netty-bom 4.1.137 pin: Boot 4.1.2 manages Netty 4.2.19. Derive the verifySpringBootBaseline expectation from versions.springBoot instead of a hardcoded version. keel-sql: jOOQ 3.21.9 (managed by Boot 4.1.2) generate…

S
Spinnaker DevOps v2026.4-2

rosco-2026.4-2

fix(security): remove compromised eMudhra roots from JRE images (#832…

S
Spinnaker DevOps

igor-main-148: fix(security): remove compromised eMudhra roots from JRE images (#8325)

Require the Alpine OpenJDK 25 build that fixes CVE-2026-91403 and CVE-2026-114820. Deselect emSign Root CA - G1 in every Java runtime image and regenerate the OS-backed Java truststore, including Ubuntu’s required fresh rebuild. Fail image builds if any of the four impacted roots remain trusted. Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

S
Spinnaker DevOps

kayenta-main-230: fix(security): remove compromised eMudhra roots from JRE images (#8325)

Require the Alpine OpenJDK 25 build that fixes CVE-2026-91403 and CVE-2026-114820. Deselect emSign Root CA - G1 in every Java runtime image and regenerate the OS-backed Java truststore, including Ubuntu’s required fresh rebuild. Fail image builds if any of the four impacted roots remain trusted. Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

S
Spinnaker DevOps

keel-main-136: fix(security): remove compromised eMudhra roots from JRE images (#8325)

Require the Alpine OpenJDK 25 build that fixes CVE-2026-91403 and CVE-2026-114820. Deselect emSign Root CA - G1 in every Java runtime image and regenerate the OS-backed Java truststore, including Ubuntu’s required fresh rebuild. Fail image builds if any of the four impacted roots remain trusted. Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

S
Spinnaker DevOps

orca-main-218: fix(security): remove compromised eMudhra roots from JRE images (#8325)

Require the Alpine OpenJDK 25 build that fixes CVE-2026-91403 and CVE-2026-114820. Deselect emSign Root CA - G1 in every Java runtime image and regenerate the OS-backed Java truststore, including Ubuntu’s required fresh rebuild. Fail image builds if any of the four impacted roots remain trusted. Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>

S
Spinnaker DevOps v2026.4-2

kayenta-2026.4-2: fix(ecs): make ecs-native deploys work end to end (#8315) (#8324)

fix(clouddriver): resolve generic convertDescription types for description pre-processors OperationsService picks the description pre-processors for an operation by the return type of the converter's convertDescription(Map). It read that type with ResolvableType.forMethodReturnType(method).getRawClass(), which is null when the method is declared generically on a base class, e.g. D convertDescripti…

S
Spinnaker DevOps v2026.4-2

orca-2026.4-2: fix(ecs): make ecs-native deploys work end to end (#8315) (#8324)

fix(clouddriver): resolve generic convertDescription types for description pre-processors OperationsService picks the description pre-processors for an operation by the return type of the converter's convertDescription(Map). It read that type with ResolvableType.forMethodReturnType(method).getRawClass(), which is null when the method is declared generically on a base class, e.g. D convertDescripti…