⚠️ When using artifact download, artifacts that were uploaded with paths containing .. will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on .. for path traversal and cannot fix your pipeline, you can enable the new experiment allow-artifact-path-traversal#2815 (@DrJosh9000)
Redact Job API token like other env vars #2834 (@DrJosh9000)
Added
Add logs to allowed-[repositories|plugins] #2810 (@jakubm-canva)
Fixed
Fix error in k8s after job completes #2804 (@DrJosh9000)
[!IMPORTANT]
When using artifact download, artifacts that were uploaded with paths containing .. will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on .. for path traversal and cannot fix your pipeline, you can enable the new experiment allow-artifact-path-traversal
Fixed
Lazy-unmount /tmp before masking #1327 (@DrJosh9000)
Dependencies
Bump Docker buildx to v0.15.0 #1329 (@rianmcguire)
v6.22.0 (2024-06-19)
Full Changelog
Added
Changed
Full Agent Changelog
Full Changelog
Security
artifact download
, artifacts that were uploaded with paths containing..
will no longer be able to traverse up from the destination path. This change is unlikely to break the vast majority of pipelines, however if you are relying on..
for path traversal and cannot fix your pipeline, you can enable the new experimentallow-artifact-path-traversal
#2815 (@DrJosh9000)Added
Fixed
Changed
Internal
Fixed
Dependencies