v0.27.0

v0.27.0 (2025-04-14)

Full Changelog

Fixed

• SUP-3616 - Fix duplicate calculation/application of podSpecPatch #555 (@petetomasik)
• Fix the max-in-flight default value in schema #559 (@nsuma8989)
• Skip jobs that are missing queue tag, enhance info logs #560 (@petetomasik)

Internal

• Reworking the Docs section #536 (@karensawrey)
• ✨ Improve issue raising, add templates #550 (@mcncl)
• fix: migrate golangci-lint to v2 #556 (@scadu)

Dependencies

• chore(deps): Bump gotest.tools/gotestsum from 1.12.0 to 1.12.1 #540 (@dependabot[bot])
• chore(deps): Bump github.com/buildkite/agent/v3 from 3.93.1 to 3.95.1 #551 (@dependabot[bot])
• chore(deps): Bump the k8s group across 1 directory with 4 updates #552 (@dependabot[bot])
• chore(deps): Bump github.com/spf13/viper from 1.19.0 to 1.20.1 #557 (@dependabot[bot])
• chore(deps): Bump github.com/go-playground/validator/v10 from 10.25.0 to 10.26.0 #558 (@dependabot[bot])
• chore(deps): Bump github.com/prometheus/client_golang from 1.21.1 to 1.22.0 #563 (@dependabot[bot])

New Contributors

• @mcncl made their first contribution in #550

Agent Changelog

v3.95.1 (2025-03-20)

Full Changelog

[!IMPORTANT]
Secrets (as visible to the agent in environment variables) are now redacted from annotations, meta-data values, and step updates, similar to how secrets are redacted from job logs.
If needed, this can be disabled by passing the flag --redacted-vars='' to the annotate, meta-data set, or step update command.

Security

• Fix incomplete processing in newly-redacted operations #3246 (@DrJosh9000)
• Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (resolves CVE-2025-30204) #3247 (@dependabot[bot])

v3.95.0 (2025-03-20)

Full Changelog

[!IMPORTANT]
Secrets (as visible to the agent in environment variables) are now redacted from annotations, meta-data values, and step updates, similar to how secrets are redacted from job logs.
If needed, this can be disabled by passing the flag --redacted-vars='' to the annotate, meta-data set, or step update command.

Changed

• Redact meta-data values and step attribute updates with warnings #3243 (@DrJosh9000)
• Redact annotations #3242 (@DrJosh9000)
• ANSI parser speedup #3237 (@DrJosh9000)

Fixed

• Agents running with disconnect-after-job or disconnect-after-idle-timeout can now be kept alive with agent pausing #3238 (@DrJosh9000)
• The pty-raw experiment no longer causes a warning to be logged #3241 (@DrJosh9000)

Dependency updates

• Bump google.golang.org/api from 0.224.0 to 0.226.0 in the cloud-providers group #3240 (@dependabot[bot])
• Bump the container-images group across 7 directories with 3 updates #3239 (@dependabot[bot])

v3.94.0 (2025-03-12)

Full Changelog

Security

• Fix redaction of multiline secrets printed as single lines #3233 (@DrJosh9000)

Changed

• Change healthHandler to log requests at debug level #3232 (@DrJosh9000)
• go.mod: go 1.23.0, toolchain go1.23.7 #3225 (@DrJosh9000)
• Record build URL in the buildkite-agent log for easier traceability #3215 (@mkrapivner-zipline)

Added

• Adding an initial bazel configuration #3141 (@CerealBoy)

Dependency bumps

• #3228, #3230, #3229, #3231, #3222, #3220, #3221, #3216, #3217, #3218 (@dependabot[bot])

Images

Helm chart

Image: public.ecr.aws/buildkite/helm/agent-stack-k8s:0.27.0
Image: ghcr.io/buildkite/helm/agent-stack-k8s:0.27.0
Digest: sha256:6a27bf70d58d64e2d76845f68ef4ce5e5a6b42fdc8d7f0bb793251e5d38fb89a

Controller

Image: public.ecr.aws/buildkite/agent-stack-k8s/controller:0.27.0
Image: ghcr.io/buildkite/agent-stack-k8s/controller:0.27.0
Digest: sha256:c101264f367383e33b7937b204de3ccaf8f19784c37d8df33eb007c55ee5885c

Agent

Image: ghcr.io/buildkite/agent:3.95.1
Digest: sha256:7e813c353bd315af56165c84837d221704ede175c9e0f715260df33ceb040231