v0.43.0

[github-actions[bot]]

What's Changed

Provider AzureDevops

• fix: webhook authentication for Azure DevOps Server by @Zamiell in fix: webhook authentication for Azure DevOps Server #6159

Provider GitHub

• fix(github): Fall back to git blobs API for large files in GetFileContent by @jayceebernardino in fix(github): Fall back to git blobs API for large files in GetFileContent #6401

Provider GitLab

• fix: support GitLab hosted under a URL subpath by @philslab-ninja in fix: support GitLab hosted under a URL subpath #6406
• fix(gitlab): prevent PullIsMergeable from self-blocking on Atlantis commit statuses by @gian25-work in fix(gitlab): prevent PullIsMergeable from self-blocking on Atlantis commit statuses #6369

Bug fixes 🐛

• fix(events): make undiverged honor module autoplanning by @krewenki in fix(events): make undiverged honor module autoplanning #6428
• fix: Prevent infinite Gitea pagination loops by @shblue21 in fix: Prevent infinite Gitea pagination loops #6032
• fix: trigger PR event handling on PR updates for Gitea/Forgejo by @kfkonrad in fix: trigger PR event handling on PR updates for Gitea/Forgejo #6178
• fix: prevent diffKeywordRegex from falsely matching YAML key=value list items in heredocs by @GMartinez-Sisti in fix: prevent diffKeywordRegex from falsely matching YAML key=value list items in heredocs #6422
• fix: cancellation bug for parallel invocations without execution_order and a larger amount of tasks than the poolSize by @ramonvermeulen in fix: cancellation bug for parallel invocations without execution_order and a larger amount of tasks than the poolSize #6215
• fix: respect autodiscover.ignore_paths during apply-all by @jholm117 in fix: respect autodiscover.ignore_paths during apply-all #6397
• fix(events): prevent autoplan module recursion cycles by @krewenki in fix(events): prevent autoplan module recursion cycles #6025
• fix: Reorder autodiscover logic by @lukemassa in fix: Reorder autodiscover logic #6240
• fix: include error values in init_step_runner log messages by @kuishou68 in fix: include error values in init_step_runner log messages #6382
• fix: use read lock for clone reuse check to unblock parallel plans by @matthewmrichter in fix: use read lock for clone reuse check to unblock parallel plans #6376
• fix(kustomize): pin image tag to v0.42.0 instead of latest by @nicknikolakakis in fix(kustomize): pin image tag to v0.42.0 instead of latest #6400

Security changes

• fix: harden VCS comment parsing against injection with configurable blocked-args by @Copilot in fix: harden VCS comment parsing against injection with configurable blocked-args #6225
• build(docker): strip file capabilities from image filesystem by @milindc2031 in build(docker): strip file capabilities from image filesystem #6363

Documentation

• docs: add AI_USAGE_POLICY.md by @Copilot in docs: add AI_USAGE_POLICY.md #6347
• docs: fix --emoji-reaction supported VCS list (remove Azure DevOps, add Gitea) by @akihiro17 in docs: fix --emoji-reaction supported VCS list (remove Azure DevOps, add Gitea) #6407
• docs: update Azure DevOps allowlist format for visualstudio.com URLs by @nimro in docs: update Azure DevOps allowlist format for visualstudio.com URLs #6083
• docs: Add CloudScript to adopters list by @xcloudscript in docs: Add CloudScript to adopters list #6411

Dependencies

• chore(deps): update node.js to v24.15.0 in .node-version (main) by @renovate[bot] in chore(deps): update node.js to v24.15.0 in .node-version (main) #6423
• chore(deps): Bump dompurify from 3.2.6 to 3.4.1 by @dependabot[bot] in chore(deps): Bump dompurify from 3.2.6 to 3.4.1 #6420
• chore(deps-dev): Bump postcss from 8.5.8 to 8.5.12 by @dependabot[bot] in chore(deps-dev): Bump postcss from 8.5.8 to 8.5.12 #6432
• chore(deps): update ghcr.io/runatlantis/atlantis:latest docker digest to a8873d7 in dockerfile.dev (main) by @renovate[bot] in chore(deps): update ghcr.io/runatlantis/atlantis:latest docker digest to a8873d7 in dockerfile.dev (main) #6418
• chore(deps): update debian:12.13-slim docker digest to f9c6a2f in dockerfile (main) by @renovate[bot] in chore(deps): update debian:12.13-slim docker digest to f9c6a2f in dockerfile (main) #6421
• chore(deps): update ngrok/ngrok:latest docker digest to 013f046 in docker-compose.yml (main) by @renovate[bot] in chore(deps): update ngrok/ngrok:latest docker digest to 013f046 in docker-compose.yml (main) #6424
• chore(deps): update alpine docker tag to v3.23.4 in dockerfile (main) by @renovate[bot] in chore(deps): update alpine docker tag to v3.23.4 in dockerfile (main) #6429
• chore(deps): update ngrok/ngrok:latest docker digest to f737dcc in docker-compose.yml (main) by @renovate[bot] in chore(deps): update ngrok/ngrok:latest docker digest to f737dcc in docker-compose.yml (main) #6434
• chore(deps): update ngrok/ngrok:latest docker digest to 6ead432 in docker-compose.yml (main) by @renovate[bot] in chore(deps): update ngrok/ngrok:latest docker digest to 6ead432 in docker-compose.yml (main) #6436
• chore(deps): update dependency hashicorp/terraform to v1.14.9 in testdrive/utils.go (main) by @renovate[bot] in chore(deps): update dependency hashicorp/terraform to v1.14.9 in testdrive/utils.go (main) #6446

Other Changes

• docs: Add CloudScript to adopters list by @xcloudscript in docs: Add CloudScript to adopters list #6411

New Contributors

• @xcloudscript made their first contribution in docs: Add CloudScript to adopters list #6411
• @shblue21 made their first contribution in fix: Prevent infinite Gitea pagination loops #6032
• @jayceebernardino made their first contribution in fix(github): Fall back to git blobs API for large files in GetFileContent #6401
• @kuishou68 made their first contribution in fix: include error values in init_step_runner log messages #6382
• @kfkonrad made their first contribution in fix: trigger PR event handling on PR updates for Gitea/Forgejo #6178
• @ramonvermeulen made their first contribution in fix: cancellation bug for parallel invocations without execution_order and a larger amount of tasks than the poolSize #6215
• @matthewmrichter made their first contribution in fix: use read lock for clone reuse check to unblock parallel plans #6376
• @nicknikolakakis made their first contribution in fix(kustomize): pin image tag to v0.42.0 instead of latest #6400
• @milindc2031 made their first contribution in build(docker): strip file capabilities from image filesystem #6363
• @jholm117 made their first contribution in fix: respect autodiscover.ignore_paths during apply-all #6397
• @philslab-ninja made their first contribution in fix: support GitLab hosted under a URL subpath #6406
• @gian25-work made their first contribution in fix(gitlab): prevent PullIsMergeable from self-blocking on Atlantis commit statuses #6369
• @krewenki made their first contribution in fix(events): make undiverged honor module autoplanning #6428
• @Zamiell made their first contribution in fix: webhook authentication for Azure DevOps Server #6159
• @nimro made their first contribution in docs: update Azure DevOps allowlist format for visualstudio.com URLs #6083

Full Changelog: v0.42.0...v0.43.0

---

This discussion was created from the release v0.43.0.