Repository navigation
v4.28.0
What's Changed
🐛 Immutable OIDC in Enterprise Account Factory Access Control
Fixed a bug affecting access control pull requests in Enterprise Account Factory.
The initial IAM trust policies now use immutable OIDC subject claims from delegated repositories.
✨ Stack generation for files read by stacks
Files read by stacks (e.g., by mark_as_read in a stack's locals) now trigger stack generation so that IaC changes can be detected.
Additionally, removing a file read by a stack will now trigger deletion protection if PIPELINES_FEATURE_VALIDATE_DAG_ON_DELETE is enabled.
✨ PIPELINES_HOOK_CTX_API_VERSION
Pipelines Hooks now receive a PIPELINES_HOOK_CTX_API_VERSION environment variable, initially set to v1.0.0. As more hook inputs are added over time, hook authors can check this variable against a minimum API version before their hooks attempt to run.
Full Changelog: v4.27.0...v4.28.0