Skip to content

v4.28.0

Choose a tag to compare

@Resonance1584 Resonance1584 released this 21 Sep 17:22
· 7 commits to main since this release
8efbe18

What's Changed

🐛 Immutable OIDC in Enterprise Account Factory Access Control

Fixed a bug affecting access control pull requests in Enterprise Account Factory.

The initial IAM trust policies now use immutable OIDC subject claims from delegated repositories.

✨ Stack generation for files read by stacks

Files read by stacks (e.g., by mark_as_read in a stack's locals) now trigger stack generation so that IaC changes can be detected.

Additionally, removing a file read by a stack will now trigger deletion protection if PIPELINES_FEATURE_VALIDATE_DAG_ON_DELETE is enabled.

✨ PIPELINES_HOOK_CTX_API_VERSION

Pipelines Hooks now receive a PIPELINES_HOOK_CTX_API_VERSION environment variable, initially set to v1.0.0. As more hook inputs are added over time, hook authors can check this variable against a minimum API version before their hooks attempt to run.

Full Changelog: v4.27.0...v4.28.0