v3.76.0

v3.76.0 (2024-07-31)

Full Changelog

Warning

This version of the agent has an issue which causes agents to intermittently disconnect for several minutes
This results in jobs failing with "agent lost" (status code -1).
Please use v3.82.1 or later. See #3005 for more info.

Note

This release fixed an issue which caused the HTTP client in the agent to fall back to HTTP/1.1, see #2908. If you need to disable HTTP/2.0 in your environment you can do this using the --no-http2 flag or matching configuration option.

Changed

• fix enable http/2 by default as intended by flags #2908 (@wolfeidau)

Fixed

• Let artifact phase and post-command run in grace period #2899 (@DrJosh9000)

Internal

• Dependabot updates: #2902, #2907, #2903, #2904, #2901, #2905, #2896, #2897 (@dependabot[bot])

v3.75.1

v3.75.1 (2024-07-22)

Full Changelog

Fixed

• Fix downloaded artifact permissions #2894 (@DrJosh9000)

v3.75.0

Full Changelog

Added

• Introduce riscv64 architecture #2877 (@TimePrinciple)
• Add a SHA256SUMS file #2890 (@DrJosh9000)

Changed

• Reject more secrets #2884 (@DrJosh9000)
• Include repo name in Packages image path #2871 (@swebb)

Fixed

• Fix some common artifact download bugs #2878 (@DrJosh9000)
• SUP-2343: remove "retry" example from "buildkite-agent step get" as not valid #2879 (@tomowatt)

Internal

• Log in to buildkite packages right before pushing images #2892 (@moskyb)
• Update LICENSE.txt #2885 (@wooly)
• Remove Packagecloud agent publish steps from agent pipeline #2873 (@tommeier)
• Release Docker images on Buildkite Packages #2837 (@swebb)
• Fix the OIDC login for Packages #2875 (@swebb)
• Fix the Packages registry name #2874 (@swebb)
• Fix image name when pushing to Buildkite packages #2870 (@swebb)
• Dependabot updates: #2888, #2887, #2882, #2883, #2880 (@dependabot[bot])

v3.74.1

Full Changelog

Added

• Log public signing key thumbprint and signed step payload #2853 (@jordandcarter)

Fixed

• Don't try to early-set env vars #2852 (@DrJosh9000)
• Convey env vars between k8s containers #2851 (@DrJosh9000)
• Fix typo in "kuberentes" #2836 (@moskyb)

Internal

• Make the graphql endpoint for buildkite-agent tool sign configurable #2841 (@moskyb)
• Dependabot updates: #2863, #2862, #2857, #2860, #2864, #2856, #2867, #2846, #2848, #2847, #2845, #2840, #2844, #2842, #2843, #2849 (@dependabot[bot])

v3.74.0

Full Changelog

Security

• ⚠️ When using artifact download, artifacts that were uploaded with paths containing .. will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on .. for path traversal and cannot fix your pipeline, you can enable the new experiment allow-artifact-path-traversal #2815 (@DrJosh9000)
• Redact Job API token like other env vars #2834 (@DrJosh9000)

Added

• Add logs to allowed-[repositories|plugins] #2810 (@jakubm-canva)

Fixed

• Fix error in k8s after job completes #2804 (@DrJosh9000)

Changed

• PTY rows/cols increased #2806 (@pda)
• Dont sign initial steps with interpolations #2813 (@moskyb)

Internal

• kubernetes-exec is now a flag #2814 (@DrJosh9000)
• shell logger: Use fmt functions once #2805 (@DrJosh9000)
• Update deprecated import #2811 (@DrJosh9000)
• Use Rand per-test in agent/plugin/error_test.go #2795 (@moskyb)
• Publish debian and rpm packages to Buildkite Packages #2824 #2826 #2831 #2830 #2833 (@sj26)
• Dependabot updates: #2809, #2816, #2800, #2801, #2802, #2803, #2787, #2798, #2808, #2827 #2817, #2818, #2819, #2822, #2829, #2832, #2835 (@dependabot[bot])

v3.73.1

v3.73.1 (2024-05-23)

Full Changelog

Fixed

• Fix redaction when no initial redactors are present #2794 (@moskyb)
• Fix an issue where intermittently, commands run by the agent would fail with error: fork/exec: operation not permitted #2791 (@moskyb)
• Fix an issue where using cancel grace period would not work if signal grace period was not set #2788 (@tessereth)
• Emit a better error if the job API token is missing #2789 (@moskyb)

Internal

• Bump docker/library/golang from b1e05e2 to f43c6f0 in /.buildkite #2785 (@dependabot[bot])
• Upgrade math/rand to v2 #2792 (@DrJosh9000)

v3.73.0

v3.73.0 (2024-05-16)

Full Changelog

Changed

• Return earlier from non-get credential actions #2776 (@moskyb)
• Remove the --debug-http flag from the git credential helper #2772 (@moskyb)
• Write "unknown exit status" in expanded section #2783 (@DrJosh9000)

Fixed

• Fix poorly-timed timestamp insertions #2778 (@DrJosh9000)
• Fix typo in 'buildkite-agent redactor add' description. #2777 (@gilesgas)
• Fix checkout race condition on GitHub PR builds #2735 (@rianmcguire)
• Expand buildkite-agent secret command with a more useful description. #2775 (@gilesgas)

Internal

• Dependabot updates: #2779, #2782, #2781, #2771, #2770, #2769, #2767 (@dependabot[bot])

v3.72.0

v3.72.0 (2024-05-06)

Full Changelog

Added

• Add status.json endpoint to health check endpoints #2759 (@moskyb)

Changed

• Make failed job acquisitions return a specific exit code (27) #2762 (@moskyb)

Internal

• Refactor agent integration test API #2764 (@moskyb)
• Replace calls to %v for error values in fmt.Errorf with %w #2763 (@moskyb)
• Release pipeline changes:
  • Pass AWS creds into docker containers #2761 (@amu-g)
  • release: Pass AWS credentials to Docker containers #2760 (@lucaswilric)
  • Use oidc roles in release pipelines #2755 (@amu-g)
• Dependency updates #2752, #2751, #2750, #2739, #2740, #2753, #2757 (@dependabot[bot])

v3.71.0

v3.71.0 (2024-04-30)

Full Changelog

Fixed

• Make preferring runtime env default off #2747 (@patrobinson)
• Use roko to retry k8s socket dial #2746 (@DrJosh9000)
• Tweak ETXTBSY retry, and be helpful for ENOENT #2736 (@DrJosh9000)

Added

• Experiment: override zero exit code on cancel #2741 (@DrJosh9000)

v3.70.0

v3.70.0 (2024-04-18)

Full Changelog

Added

• Add BUILDKITE_STEP_KEY as a json logger field #2730 (@joeljeske)
• New flag --spawn-per-cpu The number of agents to spawn per cpu in parallel (mutually exclusive with --spawn) #2711 (@mmlb)
• Upload agent images to GHCR #2724 (@DrJosh9000)

Fixed

• Update go-pipeline to v0.7.0 (Correctly upload cache name and size command step settings, support cache: false) #2731 (@jordandcarter)
• Show descriptive error when annotation body size exceeds maximum when using stdin #2725 (@rianmcguire)

Internal

• Dependabot updates #2726 #2727 #2728 #2729 (@dependabot[bot])