Platform Changelog

feedbefore 2026-10-08patches hidden unless security or breaking

2026-10-0625 days ago

Argo CDv3.5.4patchbreakingsecurity+~~******!!!!!!!!Argo CD v3.5.4 ships 19 changes, 11 of them security fixes, including several critical issues in the repo-server: Kustomize remote refs and Helm config home can run commands, and Jsonnet imports can read files. It also fixes an AppProject restriction bypass via PreDelete/PostDelete hooks and a high-severity command injection through repository proxy URLs on SSH Git repositories. Two changes are marked breaking: Kustomize builds rendering Helm charts no longer honor helmGlobals.configHome, and OCI manifests larger than 4 MiB are now rejected.platform teamsPlatform teams running Argo CD 3.5 should upgrade to pick up the repo-server and AppProject fixes. Teams using Kustomize with Helm plugins from a custom config home, or with OCI manifests above 4 MiB, need to check their builds before upgrading because those will fail.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Argo CDv3.4.10patchbreakingsecurity+~~****!!!!!!!!Argo CD v3.4.10 ships fixes for 11 security issues, including several rated critical: command execution via Kustomize remote refs and Helm config home in the repo-server, a Jsonnet import that reads repo-server files, and an AppProject restriction bypass through PreDelete/PostDelete hooks. It also includes two breaking changes: Kustomize no longer honors helmGlobals.configHome for Helm plugins registered from that directory, and OCI manifests larger than 4 MiB are rejected. The release also adds username logging on login attempts and four bug fixes.platform teamsPlatform teams running Argo CD 3.4 should upgrade to pick up the critical repo-server and AppProject fixes. Teams using Kustomize with Helm plugins from configHome or OCI manifests above 4 MiB need to check their builds before upgrading because those will now fail.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Argo CDv3.3.15patchbreakingsecurity~~*********!!!!!!!Argo CD v3.3.15 ships fixes for 12 security issues and 11 other fixes, with 2 changes marked breaking. Breaking changes: Kustomize builds that render Helm charts no longer honor helmGlobals.configHome, so builds relying on a Helm plugin registered from that directory will fail, and OCI manifests larger than 4 MiB are now rejected. Critical advisories cover command execution via Kustomize remote refs and Helm config home, Jsonnet file reads from the repo-server, and AppProject restriction bypass via PreDelete/PostDelete hooks.platform teamsPlatform teams running Argo CD 3.3 should plan to upgrade, and check any Kustomize-with-Helm pipelines that use a plugin from configHome or OCI manifests over 4 MiB before rolling out. Repo-server exposure from the listed critical issues makes the update a priority.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Jenkins2.585minor+++++****Jenkins 2.585 was released with 11 changes. Five are additions, including a new Manage Jenkins UI enabled by default and filtering on the experimental Job page. Four are fixes, including a sortable date column ordering fix and a missing New Item button in the new dashboard view. The minimum required Remoting version is raised to 3256.3258.v858f3c9a_f69d.platform teamsTeams running Jenkins controllers will see the new Manage Jenkins UI by default and must confirm agents meet the raised minimum Remoting version. The release notes describe no breaking changes beyond that requirement.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-10-011 month ago

Tektonv1.17.0minor+++******Pipeline release v1.17.0 "Egyptian Mau Robocop"Tekton Pipelines v1.17.0 was released with 60 changes in total. The release notes list 3 added items, including a new reconcile.write_intent span attribute, pod event surfacing, and a TaskRun ReconcileKind span tag on cancel or timeout. It also lists 6 fixes, covering Windows script placement, error messages on task resolution failure, variable-reference handling, and resolver request enqueueing.platform teamsPlatform teams running Tekton get better tracing on TaskRun cancellation and timeouts, plus clearer error messages when task resolution fails. No breaking change is listed in the condensed notes.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Actions Runner Controller0.15.0minor++++~----*********gha-runner-scale-set-0.15.0Actions Runner Controller released gha-runner-scale-set 0.15.0 with 79 changes, including removal of legacy e2e tests and several unused APIs and printer columns. New flags add default and per-controller max-concurrent-reconciles settings, and terminationGracePeriodSeconds is now configurable. The release also includes many fixes to listener pod patching, RBAC permissions, and scale-set drift detection.platform teamsPlatform teams running self-hosted GitHub Actions runners on Kubernetes should review the removed status-field printer columns and the new reconcile concurrency and termination grace period settings before upgrading. Runner status is now reported through metrics rather than status fields, so dashboards or scripts that read those fields will need updating.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-301 month ago

Kargov1.12.0minorbreaking++++++++++~~~~****Kargo v1.12.0 removes the Connect-based gRPC API, the createTargetBranch option on git-open-pr, and the author block on git-commit. It changes the git-push default integration policy to RebaseOrMerge and removes the legacy Secret namespace chart values, so upgrades that still set them will fail. The release also adds a tar step, an oci-push srcPath option, cross-account ECR pulls, and per-request actor attribution in API logs.platform teamsPlatform teams upgrading Kargo must check integrations for the removed gRPC API, remove deprecated step fields from promotion tasks, and confirm required Secrets exist in the system and shared resources namespaces before upgrading. Teams relying on rebase-only pushes should set pushIntegrationPolicy to AlwaysRebase in Helm values to keep the old behavior.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Jenkins2.580.1patch~Jenkins 2.580.1 was released on 2026-09-30. The release notes point to the changelog and upgrade guide for breaking changes and other update considerations, but the condensed source does not list specific changes.platform teamsPlatform teams running Jenkins should read the changelog and upgrade guide before updating. The source text does not name any concrete change.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-291 month ago

Jenkins2.584minor+~****Jenkins 2.584 raises the minimum required Remoting version to 3256.3258.v858f3c9a_f69d. It also includes fixes to PackedMap equality and hash codes, workspaceDir and buildsDir persistence, a breadcrumbs-overflow TypeError when the logo item is missing, the wording of the -jnlpUrl deprecation warning, and ZIP creation for unreadable files.platform teamsTeams running Jenkins controllers and inbound agents need to check that their agents meet the new minimum Remoting version before upgrading. The other changes are bug fixes with no new capability to plan around.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-251 month ago

OpenFeaturev0.17.0minorbreakingsecurity++~*!flagd: v0.17.0

2026-09-221 month ago

Jenkins2.583minor+++*Jenkins 2.583 adds initial implementations of a new dashboard list and a new builds list for the experimental Dashboard and Job UIs. It also adds a 'Success' banner on saving the Manage Jenkins page and fixes QueryParameterMap failing on parameters without a value.platform teamsPlatform teams running Jenkins see only experimental UI changes behind an opt-in interface, plus a bug fix for parameters with no value. Nothing here changes pipelines, APIs or operations, so no planning is needed.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Tektonv1.15.3patch*Pipeline release v1.15.3 "Toyger Orisa" LTSTekton Pipelines v1.15.3, an LTS patch release, was published on 2026-09-22. The condensed release notes list one fix that allows tt.params as a valid variable-reference prefix, plus an examples update, with 19 maintenance changes omitted.platform teamsPlatform teams using Tekton pipelines that reference parameters through the tt.params prefix will see that reference accepted after this patch. Otherwise the source describes no other concrete change for teams that run or evaluate Tekton.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-201 month ago

Jenkins2.582minor+**Jenkins 2.582 adds a new root certificate, removes an expired one, and updates the description of v2. It also fixes plain text log output dropping trailing partial lines and fixes OpenSearch XML content-type with a moz:SearchForm addition.platform teamsTeams running Jenkins controllers should check the certificate change if their setup depends on the affected root certificate. The log output fix may matter for pipelines that parse plain text logs.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-181 month ago

Argo Workflows4.1.4patchsecurity~~~~****!!!!Argo Workflows v4.1.4 was released with two changes, one added and one other, and one of them is marked breaking. The release notes provided do not describe the specific changes, pointing readers to the upgrading guide, GitHub issues, and the project blog and changelog.platform teamsPlatform teams running Argo Workflows should read the upgrading guide before rolling out v4.1.4, since a breaking change is flagged. The source text does not name the affected behavior, so impact cannot be assessed from this entry alone.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

Argo Workflowsv4.0.12patchsecurity~~~****!!Argo Workflows v4.0.12 was released on 2026-09-18. The release notes list two changes, one added and one other, and mark one of them as breaking, but the condensed notes do not describe the changes themselves. They point readers to the upgrading guide and the blog and changelog for details.platform teamsPlatform teams running Argo Workflows should read the upgrading guide before rolling out this patch, since a breaking change is flagged. The source text does not say what the breaking change is.written by claude-haiku-5-5, prompt 7cbe154, checked by publish rules

2026-09-111 month ago

Argo Workflowsv4.1.3patchsecurity**********!!!!!

Argo Workflowsv4.0.11patchsecurity*********!!!!

2026-09-101 month ago

OpenFeaturev0.16.3patchsecurity+++!flagd: v0.16.3

Helmv3.22.0minor~~~~~~~~*******

2026-09-091 month ago

Helmv4.3.0minor++~~~~~~~~~~*******

2026-09-081 month ago

Jenkins2.581minor***

2026-09-021 month ago

Jenkins2.580minorsecurity!

2026-09-012 months ago

Flaggerv1.45.0minor+++**

2026-08-312 months ago

Tektonv1.16.0minor++*****Pipeline release v1.16.0 "Manx WALL-E"

Kargov1.9.11minor

2026-08-272 months ago

Argo CDv3.4.8patchsecurity****!!!

Argo Rolloutsv1.10.0minor**********

2026-08-252 months ago

Jenkins2.579minor+~*******

2026-08-212 months ago

Argo Workflowsv4.1.2patchsecurity********!!!

Argo Workflowsv4.0.10patchsecurity****!!!

older entries

daily email

statuslast 30 days for lines

tools tracked43releases in registry964released in the last 30 days106entries published336breaking change lines18security lines84

change typestwo-column gutter, like git status

+addedNew functionality.
~changedExisting behavior changed.
-deprecatedStill works, scheduled for removal.
-removedDecommissioned, gone in this version.
*fixedA defect corrected.
!securityA vulnerability closed or a dependency patched for one.
!breakingFlag in the first column; the change needs action before upgrading.

filter

categoryall idp & portals ai agents on platform ci/cd observability supply chain cost & governance reports & dx data enterprise app platforms

showmajor only releases case studies postmortems include patches

Platform Changelog: what shipped in platform engineering, developer experience and DevOps