Skip to content

Release history

Concourse releases

Concourse is a container-based automation system written in Go. It's mostly used for CI/CD.

All releases

9 shown

Upgrade now
v8.2.3 Security relevant
Auth

Open‑redirect CVE fix

Upgrade now
v8.2.2 Security relevant
Breaking upgrade Dependencies

CVE fix + bug fixes

No immediate action
v8.2.1 Bug fix

Pipeline render fix

v8.2.0 Breaking risk
Breaking changes
  • Disallow pipelines and teams containing '/' – rename before upgrading.
  • Semver resource (swift driver) drops 'api_key' field due to SDK migration.
Notable features
  • --team flag added to `fly pipelines` and `fly execute`
  • Opaque User Data Feature (Issue #8426)
  • Gitea authentication provider support
Full changelog

What's Changed

🚨 Breaking Changes

  • Don't allow pipelines or teams containing / to be set with the set_pipeline step by @taylorsilva in https://github.com/concourse/concourse/pull/9537
    • Teams or pipelines with / wouldn't display in the web UI. If you have teams or pipelines that have a /, rename them before upgrading.
  • Semver resource has a breaking change for users of the swift driver. We migrated the driver from using rackspace/gophercloud to gophercloud/gophercloud, which dropped the api_key field. We added all new AuthOptions from the new SDK.

✈️ Features

  • Add --team flag to fly pipelines command by @izabelacg in https://github.com/concourse/concourse/pull/9488
  • Add --team flag to fly execute command by @izabelacg in https://github.com/concourse/concourse/pull/9491
  • Enable hot-reloading of ATC HTTPS listener by @jghiloni in https://github.com/concourse/concourse/pull/9472
  • Opaque User Data Feature (Issue #8426) by @alicul in https://github.com/concourse/concourse/pull/9489
  • Smarter resource checking - Only check triggering resources by @taylorsilva in https://github.com/concourse/concourse/pull/9492
  • Add UserData field to pipeline API responses by @alicul in https://github.com/concourse/concourse/pull/9505
  • Make the Broadcast Message feature UI operable by @ceco556 in https://github.com/concourse/concourse/pull/9484
  • Worker healthcheck endpoint returns a detailed json response by @taylorsilva in https://github.com/concourse/concourse/pull/9529
  • feat(ui): display non-zero tasks exit codes in pipeline UI by @arakakimarcelo in https://github.com/concourse/concourse/pull/9527
  • feat(atc): natively inject BUILD_STATUS into resource metadata by @arakakimarcelo in https://github.com/concourse/concourse/pull/9523
  • Add TTL/expiry for task caches and CONCOURSE_DEFAULT_TASK_CACHE_TTL by @taylorsilva in https://github.com/concourse/concourse/pull/9533
  • Cache Vault KV version by mount path to reduce preflight calls (CONCOURSE_VAULT_ENABLE_KV_MOUNT_CACHE) by @IvanChalukov in https://github.com/concourse/concourse/pull/9530
  • atc: add base64 and hex encryption key flags by @samuelBarreto in https://github.com/concourse/concourse/pull/9542
  • Enable operators to pause/unpause web components by @taylorsilva in https://github.com/concourse/concourse/pull/9544
  • web: add next steps to download fly page by @samuelBarreto in https://github.com/concourse/concourse/pull/9545
  • Add Gitea as authentication provider by @taylorsilva in https://github.com/concourse/concourse/pull/9558
  • Add SimpleIcons support in pipeline resources by @jghiloni in https://github.com/concourse/concourse/pull/9564

🐞 Bug Fixes

  • return BreakoutError when symlink does not link to a path inside the destination by @taylorsilva in https://github.com/concourse/concourse/pull/9486
  • Make the set_pipeline step respect the CONCOURSE_DISABLE_REDACT_SECRETS setting by @taylorsilva in https://github.com/concourse/concourse/pull/9497
  • Finish wiring up the concourse_builds_check_finished_total metric by @taylorsilva in https://github.com/concourse/concourse/pull/9500
  • Fix missing volumesStreamedViaFallback Prometheus metric by @alicul in https://github.com/concourse/concourse/pull/9503
  • worker/runtime: wrap containers from NewContainer and Containers with request timeout by @Kump3r in https://github.com/concourse/concourse/pull/9509
  • Allow pending builds in paused pipelines to be aborted and automatically abort pending builds in archived pipelines by @taylorsilva in https://github.com/concourse/concourse/pull/9521
  • Don't error if the overlaysDir does not exist during orphan volume cleanup by @taylorsilva in https://github.com/concourse/concourse/pull/9528
  • fix(atc): retain var_sources visibility inside across interpolation steps by @arakakimarcelo in https://github.com/concourse/concourse/pull/9525
  • fix resource types query returning duplicate resource types by @taylorsilva in https://github.com/concourse/concourse/pull/9534
  • fix fly's [yN] prompt by @taylorsilva in https://github.com/concourse/concourse/pull/9540
  • fix: redact secrets from task config in build events by @pierluigilenoci in https://github.com/concourse/concourse/pull/9551

🛠️ Misc. Changes

  • [chore] regenerate counterfeiter fakes by @alicul in https://github.com/concourse/concourse/pull/9483
  • db: optimize IsFirstOccurrence query for jobs with many builds by @analytically in https://github.com/concourse/concourse/pull/9422
  • nit: TSA cleanup by @taylorsilva in https://github.com/concourse/concourse/pull/9516
  • nit: use idiomatic "for range" over channel by @taylorsilva in https://github.com/concourse/concourse/pull/9518
  • nit: API cleanup by @taylorsilva in https://github.com/concourse/concourse/pull/9517
  • Database cleanup and optimizations by @taylorsilva in https://github.com/concourse/concourse/pull/9522
  • log container placement strategies being used by web node by @taylorsilva in https://github.com/concourse/concourse/pull/9538
  • Bump tedsuo/ifrit by @taylorsilva in https://github.com/concourse/concourse/pull/9539
  • Import concourse/flag package into main repo by @taylorsilva in https://github.com/concourse/concourse/pull/9541
  • Bump go dependencies and fix Dex signing key setup by @taylorsilva in https://github.com/concourse/concourse/pull/9549
  • Have lidar check non-triggering input resources that have no versions or errored by @taylorsilva in https://github.com/concourse/concourse/pull/9552
  • Upgrade fly to charm v2 by @taylorsilva in https://github.com/concourse/concourse/pull/9553
  • Update to containerd v2.3.0 by @taylorsilva in https://github.com/concourse/concourse/pull/9562
  • Emit a more useful error if we get the "rootfs empty" error by @taylorsilva in https://github.com/concourse/concourse/pull/9563

📦 Bundled Resource Types

New Contributors

  • @alicul made their first contribution in https://github.com/concourse/concourse/pull/9483
  • @arakakimarcelo made their first contribution in https://github.com/concourse/concourse/pull/9527
  • @samuelBarreto made their first contribution in https://github.com/concourse/concourse/pull/9542
  • @pierluigilenoci made their first contribution in https://github.com/concourse/concourse/pull/9551

Full Changelog: https://github.com/concourse/concourse/compare/v8.1.1...v8.2.0

v8.1.1 Security relevant
Security fixes
  • Symlink validation prevents directory traversal attacks
v8.1.0 New feature
Security fixes
  • HMAC-signed stateless OAuth state tokens
Notable features
  • Glob patterns for get.passed
  • Searchable container selection in fly intercept
  • Job disable reruns property
v8.0.2 Security relevant
Security fixes
  • Rebuilt containerd, runc, and CNI plugins to eliminate Go-related CVEs
v8.0.1 Bug fix

Fixed JSON null value handling in migration, corrected down migration indices, and added flag to disable secret redaction for compatibility.

v8.0.0 Breaking risk
Breaking changes
  • Deprecated {{old_style}} variable syntax removed
  • MD5 hashing replaced with SHA256
  • containerd now default Linux runtime
Notable features
  • Broadcast messages
  • containerd log-level configuration
  • SQL driver retry logic

Beta — feedback welcome: [email protected]