v0.44.1

[github-actions[bot]]

This patch release focuses on provider correctness, safer apply behavior, plan/output rendering fixes, and refreshed runtime foundations.

Highlights

• Broader GitHub Enterprise support: existing GitHub Enterprise Server behavior is preserved, and GitHub Enterprise Cloud *.ghe.com tenants now use the correct REST and GraphQL API endpoint patterns.
• The Debian-based Atlantis image now uses Debian 13 Trixie with refreshed pinned system packages including curl, git, OpenSSH, GnuPG, OpenSSL, and libcap.
• Apply safety is improved by failing closed when apply-lock backends cannot be reached and by correctly evaluating pull request status for API apply requirements.
• Mergeability and status behavior is more accurate across GitHub, GitLab, GitHub App checkout flows, and no-change apply statuses.
• Terraform/OpenTofu plan output rendering now handles to forget, multi-unit summaries, heredoc/multiline-string diffs, and very long single-line command output more reliably.

Provider fixes

• GitHub: support GitHub Enterprise Cloud *.ghe.com API URL patterns. (fix: support GitHub Enterprise Cloud (*.ghe.com) API URL pattern #6339)
• GitHub: truncate status contexts to GitHub's 255-character limit. (fix: truncate GitHub status context to 255 characters #6541)
• GitHub App: skip unused source remotes on fork-safe checkout paths. (fix(github): Skip unused "source" remote on GitHub App path #6568)
• GitLab: filter mergeability status checks by the merge request ref/SHA. (fix(gitlab): filter PullIsMergeable commit statuses by MR ref to prevent cross-ref contamination #6557)
• GitLab: scope project apply mergeability to the project being applied. (fix(gitlab): scope the mergeable apply requirement to the project being applied #6543)
• Azure DevOps: guard nil pull request status values while parsing pull events. (fix(azuredevops): guard nil Status in ParseAzureDevopsPull (#6492) #6496)
• Gitea: avoid nil response dereferences while logging API errors. (fix(vcs/gitea): nil-check resp before accessing StatusCode in error logs #6442)

Apply, plan, and output fixes

• Show no-change plans as up to date in apply statuses instead of implying they were applied. (fix(vcs): show "up to date" in apply status when plan has no changes #6498)
• Preserve and aggregate to forget plan statistics. (fix: support forget plan statistics #6570)
• Aggregate multi-unit plan summaries correctly. (fix: aggregate Plan summary counters across multiple units #6490)
• Remove stale .tfplan files when refreshing a working directory to a new ref. (fix: purge stale .tfplan files when updating working dir to new ref #6358)
• Skip non-git directories when finding pending plans. (fix: skip non-git subdirs in pending plan finder #6453)
• Preserve command output lines longer than 64 KiB. (fix: don't silently drop command output lines longer than 64KiB #6544)
• Color changed lines inside heredoc and multiline-string diffs. (fix: color changed lines inside heredoc/multiline-string diffs #6561)
• Fix a divergence check order issue. (fix: divergence check order issue #6452)

Runtime and maintenance

• Updated the Debian image base to Debian 13 Trixie. (chore(docker): Update base image to latest Debian Trixie #6572)
• Updated OpenTofu and CI/test image digests. (chore(deps): update dependency opentofu/opentofu to v1.12.3 in dockerfile (main) #6549, chore(deps): update ghcr.io/runatlantis/atlantis:latest docker digest to dc6cd24 in dockerfile.dev (main) #6580, chore(deps): update ghcr.io/runatlantis/testing-env:latest docker digest to dc683c3 in .github/workflows/test.yml (main) #6581)
• Removed the obsolete check-lint Makefile target. (chore: Remove check-lint from Makefile #6554)
• Pinned scorecard-related Go and npm commands for OpenSSF compliance. (chore: pin go and npm commands for OpenSSF scorecard compliance #6480)
• Updated website and CI dependencies, including security-related frontend dependency updates. (chore(deps-dev): Bump markdown-it from 14.1.1 to 14.2.0 #6563, chore(deps): update dependency vite to v6.4.3 [security] (main) #6564, chore(deps): Bump js-yaml and markdownlint-cli #6565, chore(deps): Bump dompurify from 3.4.1 to 3.4.11 #6566)

Documentation

• Clarified GitHub App merge checkout behavior. (docs: clarify GitHub App merge checkout behavior #6577)
• Clarified recent status, locking, VCS, pending-plan, and output-handling behavior. (docs: clarify recent status and locking behavior #6578, docs: clarify recent VCS and output handling fixes #6582)

New Contributors

• @lachlankidson made their first contribution in chore(docker): Update base image to latest Debian Trixie #6572
• @Atul-Koundal made their first contribution in fix: support forget plan statistics #6570
• @gBarczyszyn made their first contribution in fix(api): populate PullRequestStatus so apply requirements are evaluated #6535
• @vklindukh made their first contribution in fix(github): Skip unused "source" remote on GitHub App path #6568
• @nburns made their first contribution in fix(vcs): show "up to date" in apply status when plan has no changes #6498
• @Cesarsk made their first contribution in fix(gitlab): scope the mergeable apply requirement to the project being applied #6543
• @SAY-5 made their first contribution in fix(azuredevops): guard nil Status in ParseAzureDevopsPull (#6492) #6496
• @cpaulik made their first contribution in fix: color changed lines inside heredoc/multiline-string diffs #6561
• @SamuelMolling made their first contribution in fix: aggregate Plan summary counters across multiple units #6490
• @the-nando made their first contribution in fix: divergence check order issue #6452
• @adnankobir made their first contribution in fix: support GitHub Enterprise Cloud (*.ghe.com) API URL pattern #6339

Full Changelog: v0.44.0...v0.44.1

---

This discussion was created from the release v0.44.1.