Skip to content

v0.55.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 06 Jul 08:24
v0.55.0
4107981
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Open-source platform replacement for Terraform Enterprise. This release hardens and extends the interactive Slack integration.

Highlights

  • Guaranteed Slack approval delivery — a run that needs approval always reaches the channel, even if the AI-review step never produced (a background safety net posts it, review-less, rather than leaving it silent). Carried from v0.54.1.
  • Confused-deputy-safe account linking — /terrapod link now lands on an explicit confirm screen (naming the Slack identity being bound to your Terrapod account) instead of binding automatically on page load. Binding is always attributed to the acting user.
  • Multiple Terrapod deployments in one Slack workspace — give each deployment a distinct slash command (api.config.slack.command, e.g. /terrapod-prod) and a short api.config.slack.label shown in every message, so a shared channel attributes each one. Everything else (linking, RBAC, approvals, notifications) already isolates per deployment.

Security

  • Account-link confused-deputy hardening (explicit confirm; bind always to the acting user); a non-consuming preview endpoint (POST /slack/link/preview).

Status

Beta — Slack integration is opt-in and disabled by default (api.config.slack.enabled: false).

Full Changelog: v0.54.1...v0.55.0

Assets 32
Loading