runs-on

v3.0.7 Breaking

This release includes 1 breaking change for platform teams planning a safe upgrade.

Published 21d Pipelines

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

aws ci-cd cloudformation ec2-spot github-runners on-premise

+2 more

self-hosted self-hosted-runners

ReleasePort's take

Light signal

editorial:auto 13d

runs-on v3.0.7 adds ECS deployment control, fixes WAF IP seeding and IAM policy rendering for custom KMS keys, and requires AWS provider >= 6.33.

Why it matters: Requires AWS provider >= 6.33. Upgrade to access ECS deployment control, WAF IP fixes, and IAM policy corrections. Test provider version in staging before deploying.

Summary

AI summary

Minor fixes and improvements.

Changes in this release

Type	Severity	Summary	CVE
Feature	Medium	Add app_force_new_deployment to force ECS control-plane deployment Add app_force_new_deployment to force ECS control-plane deployment Source: llm_adapter@2026-05-21 Confidence: high	—
Dependency	Medium	Raise minimum AWS provider version to >= 6.33 Raise minimum AWS provider version to >= 6.33 Source: llm_adapter@2026-05-21 Confidence: low	—
Bugfix	Medium	Fix IAM policy rendering for custom EBS KMS keys Fix IAM policy rendering for custom EBS KMS keys Source: llm_adapter@2026-05-21 Confidence: high	—
Bugfix	Medium	Stop seeding managed WAF IP sets with dummy addresses Stop seeding managed WAF IP sets with dummy addresses Source: llm_adapter@2026-05-21 Confidence: low	—

Full changelog

Spotlight

No major product changes in this release.

CloudFormation

No CloudFormation-specific changes in this release.

Terraform

Add app_force_new_deployment so operators can force one ECS control-plane deployment, especially when migrating installs across the v3.0.6 ECS capacity provider change or changing app_capacity_provider.
Stop seeding managed WAF IP sets with dummy addresses and let the sync Lambda own address updates without Terraform drift.
Fix IAM policy rendering for custom EBS KMS keys by avoiding mixed statement shapes that could break Terraform planning.
Raise the minimum AWS provider version for Terraform modules to >= 6.33 and update generated module docs.

Other fixes

No additional user-facing fixes in this release.

Release resources

Upgrade guide: https://runs-on.com/guides/upgrade/
CloudFormation template: https://runs-on.s3.eu-west-1.amazonaws.com/cloudformation/template-v3.0.7.yaml

Breaking Changes

Raise the minimum AWS provider version for Terraform modules to >= 6.33

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track runs-on

Get notified when new releases ship.

About runs-on

Self-hosted GitHub Actions runners made simple. For AWS. 10x cheaper, 40% faster, and unlimited caching. Best alternative to Actions Runner Controller.

All releases →