Skip to content

v0.14.0

Choose a tag to compare

View all tags
@lox lox released this 16 Aug 22:39
v0.14.0
14917cc
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Highlights

  • Adds GitHub Actions-compatible OIDC for host JavaScript and composite actions. Jobs with id-token: write can use toolkit getIDToken() calls, including aws-actions/configure-aws-credentials.
  • Adds native merge_group support for Buildkite merge queue builds, including checks_requested activity and target-branch filters.
  • Expands GitHub expression compatibility across coercion, comparison, indexing, projection, pure functions, step fields, and statically resolvable reusable-workflow inputs.
  • Adds hosted Linux job and service containers, including service networking, health checks, ports, volumes, and explicit registry credentials.
  • Makes hosted runner labels case-insensitive and supports macos-latest; generated Linux jobs now run as the dedicated runner user by default.

Upgrade notes

  • The runner-user default requires a root bootstrap environment and buildkite-gha v0.13.7 or newer. Use experimental-runner-user: false only as a temporary opt-out.
  • OIDC tokens contain Buildkite claims, not GitHub-issued claims. Update cloud trust policies before migrating OIDC workflows. The endpoint is not available to shell steps, Docker actions, or actions running in job containers.

Full changelog: v0.13.16...v0.14.0

Assets 5
Loading