Concourse
PipelinesConcourse is an open‑source automation system written in Go, designed for CI/CD pipelines that emphasize idempotency, immutability, and reproducible builds.
Features
- Declarative pipeline configuration
- Stateless workers for scalable execution
- Built‑in support for idempotent and immutable operations
- Extensible via resource types and custom steps
Recent releases
View all 9 releases →
v8.2.0
Breaking risk
Breaking changes
- Disallow pipelines and teams containing '/' – rename before upgrading.
- Semver resource (swift driver) drops 'api_key' field due to SDK migration.
Notable features
- --team flag added to `fly pipelines` and `fly execute`
- Opaque User Data Feature (Issue #8426)
- Gitea authentication provider support
Full changelog
What's Changed
🚨 Breaking Changes
- Don't allow pipelines or teams containing
/to be set with the set_pipeline step by @taylorsilva in https://github.com/concourse/concourse/pull/9537- Teams or pipelines with
/wouldn't display in the web UI. If you have teams or pipelines that have a/, rename them before upgrading.
- Teams or pipelines with
- Semver resource has a breaking change for users of the
swiftdriver. We migrated the driver from using rackspace/gophercloud to gophercloud/gophercloud, which dropped theapi_keyfield. We added all newAuthOptionsfrom the new SDK.
✈️ Features
- Add
--teamflag tofly pipelinescommand by @izabelacg in https://github.com/concourse/concourse/pull/9488 - Add
--teamflag tofly executecommand by @izabelacg in https://github.com/concourse/concourse/pull/9491 - Enable hot-reloading of ATC HTTPS listener by @jghiloni in https://github.com/concourse/concourse/pull/9472
- Opaque User Data Feature (Issue #8426) by @alicul in https://github.com/concourse/concourse/pull/9489
- Smarter resource checking - Only check triggering resources by @taylorsilva in https://github.com/concourse/concourse/pull/9492
- Add UserData field to pipeline API responses by @alicul in https://github.com/concourse/concourse/pull/9505
- Make the Broadcast Message feature UI operable by @ceco556 in https://github.com/concourse/concourse/pull/9484
- Worker healthcheck endpoint returns a detailed json response by @taylorsilva in https://github.com/concourse/concourse/pull/9529
- feat(ui): display non-zero tasks exit codes in pipeline UI by @arakakimarcelo in https://github.com/concourse/concourse/pull/9527
- feat(atc): natively inject BUILD_STATUS into resource metadata by @arakakimarcelo in https://github.com/concourse/concourse/pull/9523
- Add TTL/expiry for task caches and
CONCOURSE_DEFAULT_TASK_CACHE_TTLby @taylorsilva in https://github.com/concourse/concourse/pull/9533 - Cache Vault KV version by mount path to reduce preflight calls (
CONCOURSE_VAULT_ENABLE_KV_MOUNT_CACHE) by @IvanChalukov in https://github.com/concourse/concourse/pull/9530 - atc: add base64 and hex encryption key flags by @samuelBarreto in https://github.com/concourse/concourse/pull/9542
- Enable operators to pause/unpause web components by @taylorsilva in https://github.com/concourse/concourse/pull/9544
- web: add next steps to download fly page by @samuelBarreto in https://github.com/concourse/concourse/pull/9545
- Add Gitea as authentication provider by @taylorsilva in https://github.com/concourse/concourse/pull/9558
- Add SimpleIcons support in pipeline resources by @jghiloni in https://github.com/concourse/concourse/pull/9564
🐞 Bug Fixes
- return BreakoutError when symlink does not link to a path inside the destination by @taylorsilva in https://github.com/concourse/concourse/pull/9486
- Make the set_pipeline step respect the CONCOURSE_DISABLE_REDACT_SECRETS setting by @taylorsilva in https://github.com/concourse/concourse/pull/9497
- Finish wiring up the
concourse_builds_check_finished_totalmetric by @taylorsilva in https://github.com/concourse/concourse/pull/9500 - Fix missing volumesStreamedViaFallback Prometheus metric by @alicul in https://github.com/concourse/concourse/pull/9503
- worker/runtime: wrap containers from NewContainer and Containers with request timeout by @Kump3r in https://github.com/concourse/concourse/pull/9509
- Allow pending builds in paused pipelines to be aborted and automatically abort pending builds in archived pipelines by @taylorsilva in https://github.com/concourse/concourse/pull/9521
- Don't error if the overlaysDir does not exist during orphan volume cleanup by @taylorsilva in https://github.com/concourse/concourse/pull/9528
- fix(atc): retain var_sources visibility inside across interpolation steps by @arakakimarcelo in https://github.com/concourse/concourse/pull/9525
- fix resource types query returning duplicate resource types by @taylorsilva in https://github.com/concourse/concourse/pull/9534
- fix fly's [yN] prompt by @taylorsilva in https://github.com/concourse/concourse/pull/9540
- fix: redact secrets from task config in build events by @pierluigilenoci in https://github.com/concourse/concourse/pull/9551
🛠️ Misc. Changes
- [chore] regenerate counterfeiter fakes by @alicul in https://github.com/concourse/concourse/pull/9483
- db: optimize IsFirstOccurrence query for jobs with many builds by @analytically in https://github.com/concourse/concourse/pull/9422
- nit: TSA cleanup by @taylorsilva in https://github.com/concourse/concourse/pull/9516
- nit: use idiomatic "for range" over channel by @taylorsilva in https://github.com/concourse/concourse/pull/9518
- nit: API cleanup by @taylorsilva in https://github.com/concourse/concourse/pull/9517
- Database cleanup and optimizations by @taylorsilva in https://github.com/concourse/concourse/pull/9522
- log container placement strategies being used by web node by @taylorsilva in https://github.com/concourse/concourse/pull/9538
- Bump tedsuo/ifrit by @taylorsilva in https://github.com/concourse/concourse/pull/9539
- Import concourse/flag package into main repo by @taylorsilva in https://github.com/concourse/concourse/pull/9541
- Bump go dependencies and fix Dex signing key setup by @taylorsilva in https://github.com/concourse/concourse/pull/9549
- Have lidar check non-triggering input resources that have no versions or errored by @taylorsilva in https://github.com/concourse/concourse/pull/9552
- Upgrade fly to charm v2 by @taylorsilva in https://github.com/concourse/concourse/pull/9553
- Update to containerd v2.3.0 by @taylorsilva in https://github.com/concourse/concourse/pull/9562
- Emit a more useful error if we get the "rootfs empty" error by @taylorsilva in https://github.com/concourse/concourse/pull/9563
📦 Bundled Resource Types
- bosh-io-release: v1.3.4
- bosh-io-stemcell: v1.5.4
- docker-image: v1.13.0
- git: v1.22.2
- github-release: v1.14.0
- hg: v1.5.3
- mock: v0.14.5
- pool: v1.8.1
- registry-image: v1.17.0
- s3: v2.5.4
- semver: v2.0.0
- time: v1.11.3
New Contributors
- @alicul made their first contribution in https://github.com/concourse/concourse/pull/9483
- @arakakimarcelo made their first contribution in https://github.com/concourse/concourse/pull/9527
- @samuelBarreto made their first contribution in https://github.com/concourse/concourse/pull/9542
- @pierluigilenoci made their first contribution in https://github.com/concourse/concourse/pull/9551
Full Changelog: https://github.com/concourse/concourse/compare/v8.1.1...v8.2.0
v8.1.1
Security relevant
Security fixes
- Symlink validation prevents directory traversal attacks
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Install & Platforms
Install via
binary
docker
helm