spinnaker

vspinnaker-release-2026.2.1 scope: spinnaker-release Breaking

This release includes breaking changes for platform teams planning a safe upgrade.

Published 20d Deployment Automation

✓ No known CVEs patched

✓ No known CVEs patched in this version

Topics

ci-cd spinnaker

Affected surfaces

auth breaking_upgrade

Summary

AI summary

Updates Configuration, Breaking Changes, and Other across a mixed release.

Full changelog

aws: bridge v1 credentials to v2 in AmazonCredentials.getV2CredentialsProvider() AmazonCredentials.getV2CredentialsProvider() returned DefaultCredentialsProvider which cannot discover AWS credentials in non-AWS environments (e.g. GKE pods). All Spinnaker accounts have a configured v1 AWSCredentialsProvider that already handles STS assume-role with token refresh, but the v2 path ignored it entirely. Bridge the v1 provider to v2 by adapting each resolved credential (supporting both session and basic credentials). This makes the v2 SDK path work everywhere the v1 path works, without requiring a separate v2 credential discovery chain. Also removes the now-unnecessary override from NetflixAssumeRoleAmazonCredentials since the base class handles it for all subclasses. (#7766) (#7767) (160c50ab)

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Track spinnaker

Get notified when new releases ship.

About spinnaker

Spinnaker is an open source, multi-cloud continuous delivery platform for releasing software changes with high velocity and confidence.