v3.75.0

Full Changelog

Added

• Introduce riscv64 architecture #2877 (@TimePrinciple)
• Add a SHA256SUMS file #2890 (@DrJosh9000)

Changed

• Reject more secrets #2884 (@DrJosh9000)
• Include repo name in Packages image path #2871 (@swebb)

Fixed

• Fix some common artifact download bugs #2878 (@DrJosh9000)
• SUP-2343: remove "retry" example from "buildkite-agent step get" as not valid #2879 (@tomowatt)

Internal

• Log in to buildkite packages right before pushing images #2892 (@moskyb)
• Update LICENSE.txt #2885 (@wooly)
• Remove Packagecloud agent publish steps from agent pipeline #2873 (@tommeier)
• Release Docker images on Buildkite Packages #2837 (@swebb)
• Fix the OIDC login for Packages #2875 (@swebb)
• Fix the Packages registry name #2874 (@swebb)
• Fix image name when pushing to Buildkite packages #2870 (@swebb)
• Dependabot updates: #2888, #2887, #2882, #2883, #2880 (@dependabot[bot])

v3.74.1

Full Changelog

Added

• Log public signing key thumbprint and signed step payload #2853 (@jordandcarter)

Fixed

• Don't try to early-set env vars #2852 (@DrJosh9000)
• Convey env vars between k8s containers #2851 (@DrJosh9000)
• Fix typo in "kuberentes" #2836 (@moskyb)

Internal

• Make the graphql endpoint for buildkite-agent tool sign configurable #2841 (@moskyb)
• Dependabot updates: #2863, #2862, #2857, #2860, #2864, #2856, #2867, #2846, #2848, #2847, #2845, #2840, #2844, #2842, #2843, #2849 (@dependabot[bot])

v3.74.0

Full Changelog

Security

• ⚠️ When using artifact download, artifacts that were uploaded with paths containing .. will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on .. for path traversal and cannot fix your pipeline, you can enable the new experiment allow-artifact-path-traversal #2815 (@DrJosh9000)
• Redact Job API token like other env vars #2834 (@DrJosh9000)

Added

• Add logs to allowed-[repositories|plugins] #2810 (@jakubm-canva)

Fixed

• Fix error in k8s after job completes #2804 (@DrJosh9000)

Changed

• PTY rows/cols increased #2806 (@pda)
• Dont sign initial steps with interpolations #2813 (@moskyb)

Internal

• kubernetes-exec is now a flag #2814 (@DrJosh9000)
• shell logger: Use fmt functions once #2805 (@DrJosh9000)
• Update deprecated import #2811 (@DrJosh9000)
• Use Rand per-test in agent/plugin/error_test.go #2795 (@moskyb)
• Publish debian and rpm packages to Buildkite Packages #2824 #2826 #2831 #2830 #2833 (@sj26)
• Dependabot updates: #2809, #2816, #2800, #2801, #2802, #2803, #2787, #2798, #2808, #2827 #2817, #2818, #2819, #2822, #2829, #2832, #2835 (@dependabot[bot])

v3.73.1

v3.73.1 (2024-05-23)

Full Changelog

Fixed

• Fix redaction when no initial redactors are present #2794 (@moskyb)
• Fix an issue where intermittently, commands run by the agent would fail with error: fork/exec: operation not permitted #2791 (@moskyb)
• Fix an issue where using cancel grace period would not work if signal grace period was not set #2788 (@tessereth)
• Emit a better error if the job API token is missing #2789 (@moskyb)

Internal

• Bump docker/library/golang from b1e05e2 to f43c6f0 in /.buildkite #2785 (@dependabot[bot])
• Upgrade math/rand to v2 #2792 (@DrJosh9000)

v3.73.0

v3.73.0 (2024-05-16)

Full Changelog

Changed

• Return earlier from non-get credential actions #2776 (@moskyb)
• Remove the --debug-http flag from the git credential helper #2772 (@moskyb)
• Write "unknown exit status" in expanded section #2783 (@DrJosh9000)

Fixed

• Fix poorly-timed timestamp insertions #2778 (@DrJosh9000)
• Fix typo in 'buildkite-agent redactor add' description. #2777 (@gilesgas)
• Fix checkout race condition on GitHub PR builds #2735 (@rianmcguire)
• Expand buildkite-agent secret command with a more useful description. #2775 (@gilesgas)

Internal

• Dependabot updates: #2779, #2782, #2781, #2771, #2770, #2769, #2767 (@dependabot[bot])

v3.72.0

v3.72.0 (2024-05-06)

Full Changelog

Added

• Add status.json endpoint to health check endpoints #2759 (@moskyb)

Changed

• Make failed job acquisitions return a specific exit code (27) #2762 (@moskyb)

Internal

• Refactor agent integration test API #2764 (@moskyb)
• Replace calls to %v for error values in fmt.Errorf with %w #2763 (@moskyb)
• Release pipeline changes:
  • Pass AWS creds into docker containers #2761 (@amu-g)
  • release: Pass AWS credentials to Docker containers #2760 (@lucaswilric)
  • Use oidc roles in release pipelines #2755 (@amu-g)
• Dependency updates #2752, #2751, #2750, #2739, #2740, #2753, #2757 (@dependabot[bot])

v3.71.0

v3.71.0 (2024-04-30)

Full Changelog

Fixed

• Make preferring runtime env default off #2747 (@patrobinson)
• Use roko to retry k8s socket dial #2746 (@DrJosh9000)
• Tweak ETXTBSY retry, and be helpful for ENOENT #2736 (@DrJosh9000)

Added

• Experiment: override zero exit code on cancel #2741 (@DrJosh9000)

v3.70.0

v3.70.0 (2024-04-18)

Full Changelog

Added

• Add BUILDKITE_STEP_KEY as a json logger field #2730 (@joeljeske)
• New flag --spawn-per-cpu The number of agents to spawn per cpu in parallel (mutually exclusive with --spawn) #2711 (@mmlb)
• Upload agent images to GHCR #2724 (@DrJosh9000)

Fixed

• Update go-pipeline to v0.7.0 (Correctly upload cache name and size command step settings, support cache: false) #2731 (@jordandcarter)
• Show descriptive error when annotation body size exceeds maximum when using stdin #2725 (@rianmcguire)

Internal

• Dependabot updates #2726 #2727 #2728 #2729 (@dependabot[bot])

v3.69.0

v3.69.0 (2024-04-10)

Full Changelog

Added

• Environment variable to control cache volume mounting on hosted agents #2720 #2722 (@moskyb)

Internal

• @dependabot, hard at work as usual #2717 #2721 #2719 #2718 #2715 (@dependabot)

v3.68.0

v3.68.0 (2024-04-04)

Full Changelog

Changed

• Ensure that disabled warnings get passed to the logger in kubernetes agents #2698 (@moskyb)
• Handle warnings from go-pipeline Parse #2675 (@DrJosh9000)
• Don't run pre-exit hooks without command phase #2707 (@DrJosh9000)

Internal

• Dependabot updates #2714, #2712, #2709, #2708, #2663 (@dependabot[bot])