Skip to content

spinnaker

vspinnaker-release-2026.2.0 scope: spinnaker-release Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 25d Deployment Automation
✓ No known CVEs patched
Read the diff → Tool health → What is this tool? →

✓ No known CVEs patched in this version

Topics

ci-cd spinnaker

Affected surfaces

auth rbac

Summary

AI summary

Updates Other, Configuration, and Breaking Changes across a mixed release.

Full changelog

Breaking Changes

Features

  • api-tokens: add API token authentication support (aa01d1d8)
  • aws: make AmazonClientProvider bilingual (v1 + v2 SDK) (#7705) (ff7bffb5)
  • echo: add trace hierarchy, stage names and customData promotion to OTLP CDEvents spans (8bd917bc)
  • ecs: migrate ECS caching agents to AWS SDK v2 (#7742) (61d833ee)
  • teams: Allow adaptive and custom templates for MS Teams messages using Jinja (#7741) (e77f8489)
  • upgrades: Spring boot on a supported version - 3.5.14 (#7682) (7d1e46bc)

Configuration

Fixes

  • build: Add find step before closing Nexus repos (#7744) (71a7d490)
  • build: Close Nexus staging repo in a later GHA step (#7737) (802819e3)
  • build: Defer publishing configuration until -bom subproject evaluation (#7727) (68159cd1)
  • build: Support find Nexus staging repository task (#7738) (5752bb5f)
  • build: Temporary fix to ignore closing a staging repo (#7763) (#7764) (6964c765)
  • build: Use default resolution for javaPlatform (#7732) (d409ba18)
  • docker: Fixes an issue with RBAC around docker images. (#7746) (667e3208)
  • echo: Fix Microsoft Teams webhook URL doubling in Retrofit2 migration (#7718) (#7719) (a3e1f5e2)
  • echo: Fix Microsoft Teams webhook URL doubling in Retrofit2 migration (#7718) (294e8d71)
  • echo: GitHub status conversion exception (#7701) (#7706) (6f0250a4)
  • echo: GitHub status conversion exception (#7701) (a1ae9e5b)
  • jenkins: cancel Jenkins job when Spinnaker pipeline is cancelled (#7752) (3162d5f0)
  • mvc: UrlHandlerFilter to trailing slash handle route matching (#7755) (971162f7)
  • orca: Pipeline bulk save breaks with managed service accounts (#7688) (80676c9f)
  • perf: ECS loaded ALL data for ALL accounts then filtered. (#7672) (a59fcc0a)
  • spin: SPIN cli builds had a number of issues post changes to openapi spec. Fix these issues and make sure to use the monorepo packaging structure. (#7757) (#7762) (f909fe40)
  • tests: Add tests around retrofit incorrect call handling from previous PR (#7710) (#7722) (8d011e83)
  • tests: Add tests around retrofit incorrect call handling from previous PR (#7710) (0a0b6e1a)

Other

  • api-token: hardening fixes (#7695) (0fb23be0)
  • build: Upgrade to gradle 8 (#7680) (d6d10e07)
  • build: migrate deck & deck-kayenta from yarn to pnpm (#7694) (9bfad217)
  • change: CI fixes, ordering and jakarta (6c6e8098)
  • change: Fixes #7282: honor stageTimeoutMs in CreateWebhookTask (#7689) (ed6708e6)
  • change: Merge commit from fork (#7711) (de5a7a05)
  • change: Merge commit from fork (df32d568)
  • change: Merge pull request #7617 from tridentsx/feat/cdevents-otlp-mtls (6e47ef4c)
  • change: Merge pull request #7683 from stevenlandrydd/api-tokens (3e5e0d15)
  • change: fix redis token version usage (57d293b5)
  • change: review fixes (5a2b7b9c)
  • change: update customize (fd3c081c)
  • cleanup: Remove bearychat as dead code as it closed in 2021 (#7681) (f76c1d10)
  • deps-dev: bump webpack-dev-server from 5.2.1 to 5.2.4 in /deck (#7687) (c69d00e4)
  • deps-dev: bump webpack-dev-server in /deck/packages/app (#7684) (d31e47a9)
  • deps: bump esbuild from 0.25.12 to 0.28.1 in /deck (#7725) (365a90f7)
  • deps: bump fast-xml-builder in /.github/actions/spinnaker-release (#7676) (607d9700)
  • deps: bump uuid in /.github/actions/spinnaker-release (#7666) (d940059c)
  • echo: add Javadoc explaining subject.id stability for trace correlation (6d919c5d)
  • echo: stateless deterministic trace correlation for multi-pod (87fbeebf)
  • echo: use W3CTraceContextPropagator for trace correlation (476e2ce1)
  • tests: Adds integration tests for MTLS & OAuth2 flows with keycloak (#7726) (4d64cc86)
  • upgrade: Spring boot 3.5.14 -> 3.5.15 (#7715) (e1f75bf2)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track spinnaker

Get notified when new releases ship.

Sign up free

About spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.

All releases →

Related context

Beta — feedback welcome: [email protected]