v3.121.0

v3.121.0 (2026-03-25)

Full Changelog

Tip

In order to make Git Mirrors more reliable, checkouts using a mirror can now be dissociated from the mirror. This approach still avoids fetching objects from the remote if they are present the mirror, but stores a copy of the objects in the checkout, preventing the checkout from becoming corrupted through entirely normal operation of the mirror.
To opt into this behaviour set the flag --git-mirror-checkout-mode=dissociate or agent environment variable BUILDKITE_GIT_MIRROR_CHECKOUT_MODE=dissociate.

Added

• Add GCP KMS Signing #3660 (@tomowatt)
• Support for dissociated clones of git mirrors #3775, #3788 (@DrJosh9000)
• Add --subject-claim flag to oidc request-token #3784 (@zero51)

Changed

• Job logger trace correlation #3782 (@aapzu)