✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
ReleasePort's take
Light signalPipecd v0.56.0 adds the pipectl transfer command for moving deployments between environments.
Why it matters: Test the new pipectl transfer command in a development pipeline before production use; no urgent migration required.
Summary
AI summaryIntroduce pipectl transfer command
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Security | Medium |
Reduce Dockerfile vulnerabilities across multiple services Reduce Dockerfile vulnerabilities across multiple services Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Security | Medium |
Harden codegen image security Harden codegen image security Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add Traffic Routing to Multi_K8s-Plugin Add Traffic Routing to Multi_K8s-Plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement ECS Primary Rollout and Canary Rollout stages Implement ECS Primary Rollout and Canary Rollout stages Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement ECS Livestate Plugin for state tracking Implement ECS Livestate Plugin for state tracking Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement ECS_TRAFFIC_ROUTING stage in ECS plugin Implement ECS_TRAFFIC_ROUTING stage in ECS plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement Multi Canary Rollout in Multi_K8s-Plugin Implement Multi Canary Rollout in Multi_K8s-Plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Enhance rollback to clean CANARY and BASELINE variants Enhance rollback to clean CANARY and BASELINE variants Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement ECS_CANARY_CLEAN stage in ECS plugin Implement ECS_CANARY_CLEAN stage in ECS plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement ECS_ROLLBACK stage in ECS plugin Implement ECS_ROLLBACK stage in ECS plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement ECS Plan Preview functionality Implement ECS Plan Preview functionality Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement Kubernetes plugin health status tracking Implement Kubernetes plugin health status tracking Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement Primary Rollout in Multi_K8s-Plugin Implement Primary Rollout in Multi_K8s-Plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement Baseline Rollout in Multi_K8s-Plugin Implement Baseline Rollout in Multi_K8s-Plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add config hash support for StatefulSet and DaemonSet Add config hash support for StatefulSet and DaemonSet Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Support per-target kustomizeDir in kubernetes_multicluster plugin Support per-target kustomizeDir in kubernetes_multicluster plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add support for configurable Plan Preview behavior in piped Add support for configurable Plan Preview behavior in piped Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement Baseline Clean stage in Multi_K8s-Plugin Implement Baseline Clean stage in Multi_K8s-Plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Implement Canary Clean stage in Multi_K8s-Plugin Implement Canary Clean stage in Multi_K8s-Plugin Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Introduce pipectl transfer command for deployments Introduce pipectl transfer command for deployments Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Add --force-plugin-redownload flag to piped Add --force-plugin-redownload flag to piped Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump runc from 1.1.14 to 1.2.8 Bump runc from 1.1.14 to 1.2.8 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix deadlock on stage report command execution Fix deadlock on stage report command execution Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Prevent nil pointer dereference in eventwatcher re-clone Prevent nil pointer dereference in eventwatcher re-clone Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix nil pointer dereference in UpdatePluginMetadata Fix nil pointer dereference in UpdatePluginMetadata Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Update Minio image to fix ARM64 crash in quickstart Update Minio image to fix ARM64 crash in quickstart Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix ECS parseContainerImage to handle images with registry ports Fix ECS parseContainerImage to handle images with registry ports Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix Multi_K8s-Plugin livestate drift detection and filtering Fix Multi_K8s-Plugin livestate drift detection and filtering Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix OIDC avatarURL conditional variable in authentication Fix OIDC avatarURL conditional variable in authentication Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Fix Multi_K8s-Plugin DetermineStrategy for multi-target deployments Fix Multi_K8s-Plugin DetermineStrategy for multi-target deployments Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
Release v0.56.0 with changes since v0.55.0
New Features
- Introduce pipectl transfer command (#6692)
Notable Changes
- bug(ecs): fix parseContainerImage to handle images with registry ports (#6576)
- fix: prevent nil pointer dereference in eventwatcher re-clone (#6356)
Internal Changes
- Release v0.56.0
- Support per-target kustomizeDir in kubernetes_multicluster plugin (#6718)
- Support labels value for client API add application endpoint (#6724)
- build: add root documentation files to labeler config (#6550)
- Add support for configurable Plan Preview behavior in piped (#6646)
- Fix typos and heading level in piped configuration docs (#6725)
- build(deps): bump go.opentelemetry.io/otel (#6713)
- build(deps): bump go.opentelemetry.io/otel (#6714)
- build(deps): bump go.opentelemetry.io/otel (#6715)
- Update NodeJS version to v20.19.0 for CI and Docs (#6704)
- build(deps): bump google.golang.org/grpc in /pkg/plugin/sdk (#6702)
- build(deps): bump google.golang.org/grpc (#6700)
- build(deps): bump google.golang.org/grpc (#6701)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6639)
- build(deps): bump github.com/aws/aws-sdk-go-v2/service/lambda (#6652)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6642)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6640)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6637)
- build(deps): bump github.com/go-jose/go-jose/v4 in /pkg/plugin/sdk (#6638)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6635)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6636)
- build(deps): bump follow-redirects from 1.15.6 to 1.16.0 in /web (#6664)
- build(deps): bump go.opentelemetry.io/otel/sdk from 1.28.0 to 1.43.0 (#6656)
- build(deps): bump picomatch from 2.2.2 to 2.3.2 in /web (#6619)
- build(deps): bump github.com/go-jose/go-jose/v4 (#6641)
- build(deps): bump yaml from 1.10.2 to 1.10.3 in /web (#6618)
- build(deps): bump flatted from 3.3.3 to 3.4.2 in /web (#6605)
- build(deps): bump google.golang.org/grpc from 1.64.1 to 1.79.3 (#6601)
- build(deps): bump node-forge from 1.3.2 to 1.4.0 in /web (#6625)
- build(deps): bump lodash from 4.17.21 to 4.18.1 in /web (#6634)
- build(deps): bump google.golang.org/grpc from 1.64.1 to 1.79.3 in /pkg/app/pipedv1/plugin/ecs (#6603)
- [Multi_K8s-Plugin] Fix livestate drift detection and resource filtering (#6673)
- [Multi_K8s-Plugin] Config hash for StatefulSet and DaemonSet (#6697)
- build(deps): bump google.golang.org/grpc (#6615)
- build(deps): bump google.golang.org/grpc (#6623)
- build(deps): bump google.golang.org/grpc in /pkg/app/pipedv1/plugin/wait (#6602)
- fix: remove unnecessary spaces in markdown links for improved formatting (#6681)
- [Multi_K8s-Plugin] Fix DetermineStrategy to be multi-target aware (#6672)
- [ECS-Plugin] Update README (#6683)
- [ECS-Plugin]: Determine strategy for deployment (#6671)
- [ECS-Plugin]: Determine version for images used by TaskDefinition (#6670)
- docs: add guest blog post 'Your First GitOps Project with PipeCD' (#6663)
- Docs v1: added plugin development resources (#6643)
- [ECS-Plugin] Implement ECS_CANARY_CLEAN stage (#6608)
- [ECS-Plugin] Implement Livestate Plugin (#6620)
- [ECS-Plugin]: Implement Plan Preview (#6614)
- feat: enhance rollback functionality to clean up CANARY and BASELINE variants (#6660)
- [ECS-Plugin]: Implement ECS_TRAFFIC_ROUTING stage (#6613)
- blog: add post about My-first-30-days-as-an-lfx-mentee-with-pipecd (#6655)
- docs: add blog post for kubernetes_multicluster plugin (#6661)
- Init copilot (#6659)
- ci(publish_site): bump nodejs to current lts (#6657)
- ci(publish_site): fix workflow (#6647)
- [Multi_K8s-Plugin] Traffic Routing Log Updates (#6648)
- [Multi_K8s-Plugin] Traffic Routing (#6629)
- docs: add KubeStellar Console guided install reference (#6631)
- Fix: wrong conditional variable for avatarURL claim key in OIDC (#6630)
- fix: update broken community meeting link in CONTRIBUTING.md (#6506)
- build(deps-dev): bump picomatch from 2.3.0 to 2.3.2 in /docs (#6624)
- docs: fix typo "reffered" to "referred" in configuration reference (#6626)
- build(deps): bump lodash-es from 4.17.21 to 4.18.1 in /web (#6633)
- Add flag --force-plugin-redownload to download plugin from path everytime (#6628)
- added changes for quickstart (#6590)
- fix: report all golangci-lint issues regardless of diff (#6622)
- [Multi_K8s-Plugin] Baseline Clean (#6607)
- [Multi_K8s-Plugin] Baseline Rollout (#6606)
- [Multi_K8s-Plugin] Primary Rollout (#6591)
- [ECS-Plugin]: Implement Primary Rollout and Canary Rollout Stage (#6587)
- [PipeCD-DataStore] fix: nil pointer dereference in UpdatePluginMetadata (#6611)
- fix: remove extra blank line in canary_test.go to satisfy gofmt (#6609)
- [Multi_K8s-Plugin] Canary Clean (#6589)
- build(deps): bump google.golang.org/grpc from 1.71.0 to 1.79.3 in /pkg/app/pipedv1/plugin/kubernetes (#6604)
- [ECS-Plugin] Setting default value for config (#6585)
- Fix (Lint): Seperate internal import with external import (#6597)
- [ECS-Plugin] Implement ECS_ROLLBACK stage (#6573)
- [Multi_K8s-Plugin] Multi Canary Rollout (#6583)
- [ECS-Plugin] Fix lint (#6588)
- Add CNCF status badge to README (#6534)
- hide version selector (#6554)
- added the label when someone makes changes to the docs (#6491)
- Add contributing and readme to docs approvers approvable scope (#6538)
- Apply defaults for Kubernetes rollout and multicluster configs (#6518)
- Apply default values in Terraform and CloudRun plugin (#6516)
- [ECS-Plugin] Implement ECS_ SYNC stage (#6559)
- Codegen Image Security Hardening (#6461)
- docs: fix broken configuration reference links (#6582)
- fix: upgrade @mui/icons-material from 7.3.5 to 7.3.6 (#6388)
- fix: make lint/go for non-interactive environments (#6448)
- Update welcome message for first-time contributors (#6447)
- Fix links in CONTRIBUTING.md (#6500)
- apply default values in stage plugins (#6513)
- build(deps): bump golang.org/x/crypto in /pkg/app/pipedv1/plugin/ecs (#6558)
- initialize scaffolding of the ecs plugin (#6557)
- fix: use the right command to run piped (#6546)
- Add config reference files for further contributions (#6544)
- Add ecs app kind fix (#6522)
- V1-Docs (UserGuide): Add Managing Piped Section (#6347)
- Add Plugins section (#6537)
- fixed numbering of subheading in installing-controlplane-on-k8s section (#6521)
- fixed the 404 link for pprof guide in faq section (#6519)
- hide version selector and make v1 deafult (#6480)
- Docs: v1 fix grammar and inconsistencies (#6463)
- docs(contributing): expand contribution guidelines with new sections (#6399)
- ADD userguide/managingApp/configuration-drift-detection (#6411)
- ADD userguide/managingApp/rolling-back-a-deployment (#6410)
- ADD userguide/managingApp/deployment-trace (#6413)
- Update docs FAQ (#6494)
- Enable taxonomy pages for categories and tags (#6469)
- Add Eeshaan Sawant to MAINTAINERS.md (#6462)
- Add Eeshaan to docs approvers group (#6405)
- fix capitalisation and inconsistencies (#6457)
- ADD userguide/managingApp/secret-management (#6412)
- V1 merge Architectural overview into Concepts section (#6433)
- Enhance first-time contributor welcome message (#6439)
- blog: implement contributor guide for local PipeCD setup (#6375)
- build(deps): bump golang.org/x/crypto (#6423)
- docs: add 'Contributing to plugins' guide (#6398)
- fix image path and spelling mistakes (#6437)
- docs: add CI overview and link from contributing guide (#6406)
- ADD userguide/managingApp/triggering-a-deployment (#6400)
- build(deps): bump golang.org/x/crypto (#6414)
- remove qemu step and use arm runner (#6403)
- ci: cancel in-progress test and lint workflows on new commits (#6393)
- docs(contribution-guidelines): update guide title, fix grammar, add blog contribution rules (#6396)
- ADD userguide/adding-an-app (#6376)
- update CONTRIBUTING.md (#6386)
- Fix typo: enviroment → environment (#6394)
- fix: upgrade @mui/material from 7.3.5 to 7.3.6 (#6389)
- ci: welcome first-time contributors on first PR (#6407)
- Fix typo in CONTRIBUTING.md (#6397)
- Revert "refactor dockerfile (#6402)" (#6404)
- refactor dockerfile (#6402)
- fix(quickstart): update minio image to RELEASE.2024-11-07 to fix ARM64 crash (#6390)
- ADD manifest-attachment (#6383)
- Revert "Support ECS capacity provider strategy (#6331)" (#6385)
- Revert "Support ecs quicksync force new deployment config (#6336)" (#6384)
- UPDATE CONTRIBUTING.md (#6382)
- fix: upgrade react-router-dom from 6.30.1 to 6.30.2 (#6373)
- ADD app-livestate, cancelling-deployment (#6378)
- Docs-V1(UserGuide): Add root content in v1/User-Guide (#6343)
- fix typo in migration guides (#6374)
- Remove examples (#6371)
- Bump golang.org/x/crypto in /pkg/app/pipedv1/plugin/waitapproval (#6370)
- fix: upgrade formik from 2.2.9 to 2.4.8 (#6369)
- K8s plugin health status implementation (#6320)
- docs: fix spelling and grammar issues in docs-dev (#6357) (#6361)
- docs: clarify that HelmChart version field is only for chart repository (#6368)
- fix: upgrade @mui/material from 7.3.4 to 7.3.5 (#6362)
- Bump golang.org/x/crypto in /pkg/app/pipedv1/plugin/analysis (#6367)
- Bump node-forge from 1.3.1 to 1.3.2 in /web (#6364)
- docs: add user guide index.md (#6365)
- Fix failed site build (#6360)
- docs: create 'Contribute to Documentation' guide (#6329)
- Bump golang.org/x/crypto in /pkg/app/pipedv1/plugin/wait (#6359)
- Docs-V1: Add Installation Pages (#6328)
- fix: upgrade dayjs from 1.11.18 to 1.11.19 (#6358)
- Bump golang.org/x/crypto in /tool/actions-plan-preview (#6354)
- Bump golang.org/x/crypto in /pkg/app/pipedv1/plugin/scriptrun (#6355)
- Update docs v1 concepts (#6351)
- UPDATE overview for v1docs (#6350)
- Docs V1: Update FAQs (#6344)
- ADD userguide/managingControlplane (#6346)
- fix: upgrade @tanstack/react-query from 4.41.0 to 4.42.0 (#6338)
- ADD v1-userguide/examples (#6342)
- Docs-V1: Add Concepts Page (#6321)
- Docs: Add V1 Control plane screenshot (#6333)
- fix: upgrade @mui/icons-material from 7.3.2 to 7.3.4 (#6337)
- fix: upgrade @tanstack/react-query-devtools from 4.41.0 to 4.42.0 (#6339)
- Support ecs quicksync force new deployment config (#6336)
- Bump github.com/opencontainers/runc from 1.1.14 to 1.2.8 (#6335)
- fix: upgrade @mui/material from 7.3.2 to 7.3.3 (#6326)
- Fix flaky tests (#6334)
- Support ECS capacity provider strategy (#6331)
- update quickstart/index.md (initial commit) (#6327)
- Init PipeCD Docs for PipeCD v1 (#6316)
- [bot] Publish pipedv1 experimental quickstart manifests (#6324)
- Update permission for pipedv1 build and publish workflow (#6322)
- fix: tool/actions-gh-release/Dockerfile to reduce vulnerabilities (#6309)
- fix: tool/piped-base/Dockerfile to reduce vulnerabilities (#6310)
- fix: docs/Dockerfile to reduce vulnerabilities (#6311)
- fix: cmd/pipectl/Dockerfile to reduce vulnerabilities (#6312)
- fix: cmd/helloworld/Dockerfile to reduce vulnerabilities (#6313)
- fix: cmd/pipecd/Dockerfile to reduce vulnerabilities (#6314)
- Docs: Add doc for migrating to v1 (#6301)
- Add workflow to build and publish pipedv1 quickstart manifest (#6319)
- Add plugin config to pipedv1 manifest template (#6318)
- fix: tool/codegen/Dockerfile to reduce vulnerabilities (#6304)
- Fix plugin version showing unspecified (#6307)
- Pass BUILD_VERSION in pipedv1 workflow (#6305)
- Implement health state for replica set (#6303)
- Fix deadlock on stage report command handled execution (#6302)
- [bot] Publish quickstart manifests (#6300)
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
Related context
Related tools
Beta — feedback welcome: [email protected]