Skip to content

Releases: freefair/semaphore-ex

Release list

Semaphore EX v2.20.0-ex.1

Semaphore EX v2.20.0-ex.1 Latest
Latest

Choose a tag to compare

View all tags
@github-actions github-actions released this 13 Sep 01:21
v2.20.0-ex.1
7e9f6cd
This commit was signed with the committer’s verified signature.
Frisch12 Dennis Fricke
SSH Key Fingerprint: 8GhrwnxEpncY617tTODogAjtXz8bb5uKED9ztfCCBjE
Verified
Learn about vigilant mode.

First published release of the fork.

Upstream base

  • Built on upstream semaphoreui/semaphore develop as of 2026-09-11
    (commit 9b90ea43, between v2.20.0-alpha2 and the upcoming v2.20.0),
    merged in commit 41965a6f. Upstream migrations 2.20.4 and 2.20.5 ship as
    local migrations 2.20.68 and 2.20.69; see maintenance/migrations.yml.
  • Go 1.26.8 toolchain and container base images; Node 24 frontend build.

Added

  • One full-featured edition without edition selection, licensing or subscription
    quotas. /api/info reports "edition": "enhanced" together with the core and
    enhanced revisions the binary was built from.
  • Runners and placement: project runner registration, lifecycle, health and
    history, reconciliation, tag-based placement, executor images, secure mode.
  • Task diagnostics and secrets: task summaries, structured file logs, audit
    webhook export, debug log filtering, Vault and OpenBao runtime secrets, managed
    secret storage, TOTP and LDAP capability lifecycles.
  • Workflows: graphical editor with validation, linear and conditional parallel
    runs, artifacts, parameters and overrides, triggers, approvals, reconciliation,
    versions and cross-project references, workflow RBAC and role-based approvals.
  • High availability: cluster dashboard, cross-node coordination, task recovery,
    workflow progression and a resilience verification gate that runs in CI.
  • Roles and identity: custom project roles, global and template roles, LDAP and
    OIDC group mapping.
  • Container executors: Docker and Kubernetes executors with hardening policies.
  • Governance and delivery: notification governance, PagerDuty, Opsgenie and
    ServiceNow delivery, signed webhooks.
  • Credentials: global credential grants, dispatch-time resolution with audit,
    server-generated SSH keys, template search, per-schedule time zones.
  • Policy controls: execution preflight, deployment windows, policy guardrails,
    artifact retention and provenance.

Packaging

  • Container images ghcr.io/freefair/semaphore-ex (server) and
    ghcr.io/freefair/semaphore-ex-runner for linux/amd64 and linux/arm64,
    published with SBOM and provenance attestations.
  • Archives, deb and rpm packages named semaphore-ex; the package conflicts
    with the upstream semaphore package because both install /usr/bin/semaphore.
    Checksums are signed with the release key in
    deployment/packaging/semaphore-ex-release.asc.

Known inherited risks

  • The web frontend uses Vue 2 and Vuetify 2, which are end of life upstream and
    carry open advisories (see SECURITY.md). A migration is an upstream project
    and not part of this release.

Upgrade notes

  • Upgrading from upstream Semaphore UI is supported along the shared migration
    history up to upstream 2.20.5; the fork appends its own migrations after it.
    Take a database backup first. Downgrading back to upstream is not supported.
Assets 26