3.18.1 - 2026-09-08 ❤️ Thanks to all contributors! ❤️ @6543, @YouCD, @dylanpulver, @lafriks, @mattwilkinsonn, @qwerty287 🔒 Security Fix docs securityscan [#7094] 🐛 Bug Fixes Add timezone data to docker images [#7093] Log an expected log-stream close failure at debug instead of error [#7117] Log a filtered webhook at debug instead of error [#7116] Fix workflow-level when.status so a failure-only wo…
3.18.0 - 2026-08-24 ⚠️ This release contains a migration that alters log storage. Depending on the number of stored log lines, it can take a while to complete. Back up before upgrading and allow for extra downtime. ❤️ Thanks to all contributors! ❤️ Special thanks to @arpitjain099, @abdullaabdullazade, @George928 and @RealFakeAccount for reporting security vulnerabilities! @6543, @AhmadNajiKam, @DE…
3.17.0 - 2026-07-31 ❤️ Thanks to all contributors! ❤️ @6543, @AnayGarodia, @DerRockWolf, @Kernald, @Komzpa, @OCram85, @TowyTowy, @cyphercodes, @glitch-ux, @healdropper, @ivanvc, @jleider, @kanywst, @nicolasbatistoni, @qwerty287, @rfinnie, @roian6, @xoxys, @youdie006, @zmully 🔒 Security Update module github.com/getkin/kin-openapi to v0.144.0 [SECURITY] [#6896] Make grpc secret autogenerated [#6845]…
3.16.0 - 2026-06-27 ❤️ Thanks to all contributors! ❤️ @6543, @AkashKumar7902, @M31ancholy, @MeurillonGuillaume, @WeslleyNasRocha, @gedankenstuecke, @head1328, @mahlzahn, @mmeier86, @nati737, @nijave, @qwerty287, @simonckemper, @simonmeyerrr 🔒 Security Gate Kubernetes serviceAccountName backend step config behind agent config [#6792] Harden agent rpc to check agentID on workflow [#6759] Security up…
3.14.1 - 2026-05-12 ❤️ Special thanks the security researchers and those who fixed them ❤️ Thanks to Shivam Kumar (@shivamkumarcyber) and Ranganatha Rao Sridhar (Praetorian) independently finding and reporting the bug And @6543 fixing the bugs and orchestrating the communication CVE-2026-50141 EUVD-2026-37897 🔒 Security Server: make sure agent_id can not be spoofed by agent [#6567]
3.15.0 - 2026-05-28 ❤️ Thanks to all contributors! ❤️ @6543, @AkashKumar7902, @EdwardSalter, @M31ancholy, @anbraten, @hhamalai, @johanvdw, @jolheiser, @julienvincent, @lephuongbg, @mateuszkamola, @qwerty287, @rfinnie, @simonmeyerrr, @wucm667 Special thanks to @geo-chen for finding and reporting vulnerabilities! 🔒 Security Use Gitlab username [#6653] Update uuid [#6647] server: for grpc store extra…
3.14.0 - 2026-05-01 ❤️ Thanks to all contributors! ❤️ @6543, @Aex12, @AhmadNajiKam, @CrimsonFez, @LUKIEYF, @LoricAndre, @M31ancholy, @MartinSchmidt, @Pnkcaht, @Sim-hu, @TumbleOwlee, @api2062, @bclermont, @brainbaking, @cliffmccarthy, @confusedsushi, @dccdis, @hhamalai, @hnb2, @lephuongbg, @mehrdadbn9, @mofr93, @myers, @myselfghost, @njaaazi, @packrat386, @paulovitorbal, @qwerty287, @rfinnie, @rhaf…
3.14.0-rc.2 - 2026-04-27 ❤️ Thanks to all contributors! ❤️ @6543, @LoricAndre, @bclermont, @hhamalai, @lephuongbg, @njaaazi, @rhafer 🔒 Security docs: bump follow-redirects [#6441] 📈 Enhancement Refactor: remove Auth() from Forge interface [#6505] Move wait for log uploads logic out of logger and tracer into pipeline runtime [#6471] Make agent reconnect retry timeout configurable [#6470] Handle re-…
3.14.0-rc.1 - 2026-04-15 ❤️ Thanks to all contributors! ❤️ @6543, @AhmadNajiKam, @M31ancholy, @lephuongbg, @packrat386, @qwerty287, @utafrali 🔒 Security chore(deps): update dependency axios to v1.15.0 [security] [#6417] fix(deps): update go.opentelemetry.io/otel to v1.43.0 [#6416] WebUI: remove "lodash" dep [#6369] Sanitize agent introduced pipeline/workflow/step state changes and log streaming [#…
3.14.0-rc.0 - 2026-04-01 ❤️ Thanks to all contributors! ❤️ @6543, @CrimsonFez, @LUKIEYF, @MartinSchmidt, @Pnkcaht, @Sim-hu, @TumbleOwlee, @api2062, @brainbaking, @cliffmccarthy, @confusedsushi, @dccdis, @hhamalai, @hnb2, @mehrdadbn9, @mofr93, @myers, @myselfghost, @paulovitorbal, @qwerty287, @samoli, @savv, @stardothosting 🔒 Security Send 404 if logs are not allowed to access [#6349] Prevent regis…
3.13.0 - 2026-01-14 ❤️ Thanks to all contributors! ❤️ @6543, @Javex, @KhalidAlansary, @MartinSchmidt, @abhiyerra, @anbraten, @bentasker, @gjuoun, @gsaslis, @henkka, @jolheiser, @mogsie, @qwerty287, @sloonz, @sugar700, @tuxmainy, @xoxys 🔒 Security Update quic-go/qpack & quic-go/quic-go [#5885] fix: updateRepoPermissions to cleanup old permissions [#5790] ✨ Features Add cli contexts [#5929] 📈 Enhanc…
3.12.0 - 2025-11-18 ❤️ Thanks to all contributors! ❤️ @1001Josias, @6543, @JohnWalkerx, @LUKIEYF, @MeurillonGuillaume, @Utkarsh9571, @Xuxe, @anbraten, @chamburr, @henkka, @hhamalai, @marcusramberg, @pixelateapotato, @qwerty287, @yyewolf 🔒 Security chore(deps): update dependency vite to v7.1.11 [security] [#5660] 📈 Enhancement feat(bitbucketserver): get changes from all commits in a single push eve…
3.11.0 - 2025-10-19 ❤️ Thanks to all contributors! ❤️ @6543, @Gusted, @MartinSchmidt, @anbraten, @eikemeier, @henkka, @joariasl, @marcusramberg, @qwerty287, @xoxys ✨ Features Allow to configure a config extension per repo [#3349] 📈 Enhancement Improve log.CopyByLine to be more robust [#5641] Add pagination for Repos() and Teams() in Forge interface [#5638] Modernize a couple of loops, fix incorrec…