v3.107.0

v3.107.0 (2025-09-18)

Full Changelog

Added

• Added ability to fetch multiple secrets in a single call #3483 (@moskyb)
• Experiment for propagating agent config env vars #3471 (@DrJosh9000)
• oidc request-token can now output in a GCP Workload Federation-compatible format #3480 (@moskyb)

Changed

• Update docs for apply-if-changed information with agent minimum version #3485 (@Damilola-obasa)

Internal

• Use the go.mod tool block for more tools #3481 (@DrJosh9000)
• Update shellwords to v1.0.1, relax Go version directive #3464 (@moskyb)
• build(deps): bump the container-images group across 5 directories with 1 update #3478 (@dependabot[bot])
• Split Dependabot container updates #3477 (@DrJosh9000)

v3.106.0

v3.106.0 (2025-09-15)

Full Changelog

Changed

• Support upcoming secrets pipeline syntax (currently in private preview) #3453 (@matthewborden)
• Better plugin and hook path checks #3445 (@DrJosh9000)

v3.105.0

v3.105.0 (2025-09-10)

Full Changelog

Fixed

• PS-1101: refresh Executor config for Job API env change in polyglot hook #3467 (@zhming0)
• PB-610: fix hook environment variable unable to propagate via bk-agent env set #3466 (@zhming0)

Added

• Support agent checkout on pull request merge refspecs #3436 (@jonathanly)

Internal

• Lower Go containers back to 1.24 #3468 (@DrJosh9000)
• Add replacer fuzz test corpus to repo, with fix #3448 (@DrJosh9000)
• Re-add test race detection, and skip a known-racy test under the race regime #3452 (@moskyb)
• Dependancy updates: #3463, #3465, #3462 ,#3457, #3460, #3456, #3454 (@dependabot[bot])

v3.104.0

v3.104.0 (2025-09-05)

Full Changelog

Security

• Automatically redact OIDC tokens in logs #3450 (@matthewborden)

Added

• Allow multiple pipeline files for upload #3431 (@DrJosh9000)

Changed

• Promote use-zzglob experiment to default #3428 (@DrJosh9000)

Fixed

• Ensure bootstrap waits for signal propagation before exiting #3443 (@moskyb)
• Fix experiment promotion message #3432 (@DrJosh9000)

Internal

• Add disclosures/credits to PR template #3433 (@DrJosh9000)
• Fix code owners #3422 (@zhming0)
• Dependency updates #3437, #3438, #3442, #3441, #3435, #3425, #3423, #3426, #3427, #3424 (@dependabot[bot])

v3.103.1

v3.103.1 (2025-08-07)

Full Changelog

Fixed

• PS-980: fix custom TMPDIR break hook wrapper #3416 (@zhming0)

Changed

• PS-1000: ensure a static & short checkout path for k8s stack agent #3420 (@zhming0)
• Make the 'Pipeline upload not yet applied: processing' message info, not warning #3419 (@moskyb)

Internal

• build(deps): bump thor from 0.19.4 to 1.4.0 #3417 (@dependabot[bot])
• build(deps): bump the cloud-providers group across 1 directory with 7 updates #3414 (@dependabot[bot])
• build(deps): bump the container-images group across 7 directories with 4 updates #3415 (@dependabot[bot])
• Update to use OIDC session tags on AWS role assumption #3412 (@duckalini)
• chore: move the tool.go to new tool dependency #3409 (@wolfeidau)
• Upgrade to go-pipeline v0.15.0 #3408 (@DrJosh9000)
• Only run tests if code has changed #3407 (@DrJosh9000)

v3.103.0

v3.103.0 (2025-07-22)

Full Changelog

Added

• Configurable kubernetes-bootstrap connection timeout #3398 (@zhming0)

Changed

• Exit with a specific code when the Job being Acquired is Locked #3403 (@CerealBoy)
• Rename local -> repository hooks, global -> agent hooks #3401 (@moskyb)
• Use BUILDKITE_PIPELINE_DEFAULT_BRANCH as a default git diff base #3396 (@DrJosh9000)
• apply-if-changed now enabled by default - if_changed improvements #3387 (@DrJosh9000)

Internal

• Update to use OIDC session tokens on AWS role assumption #3395 (@duckalini)
• Annotate with lint findings #3404 (@DrJosh9000)
• Lint fixes #3383, #3399 (@DrJosh9000)

Dependencies

• build(deps): bump the cloud-providers group with 5 updates #3406 (@dependabot[bot])
• build(deps): bump the container-images group across 6 directories with 2 updates #3405 (@dependabot[bot])
• build(deps): bump the golang-x group with 4 updates #3391 (@dependabot[bot])
• build(deps): bump google.golang.org/api from 0.240.0 to 0.241.0 in the cloud-providers group #3389 (@dependabot[bot])
• build(deps): bump the container-images group across 6 directories with 3 updates #3390 (@dependabot[bot])
• build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.74.2 to 1.74.3 #3388 (@dependabot[bot])

v3.102.2

v3.102.2 (2025-07-15)

Full Changelog

Changed

• Fix to reflect-exit-status flag #3393 (@DrJosh9000)

v3.102.1

v3.102.1 (2025-07-14)

Full Changelog

Fixed

• Add reflect-exit-status flag to control exiting with job status #3385 (@DrJosh9000)
• Normalise indentation in redactor add usage #3382 (@DrJosh9000)

v3.102.0

v3.102.0 (2025-07-09)

Full Changelog

Added

• Add disconnect-after-uptime flag to set a max lifetime for agents #3370 (@nosammai)

Changed

• Exit with same code in acquire-job mode #3376 (@DrJosh9000)

Fixed

• Fix git mirrors + refspec #3381 (@sj26)
• Print valid JSON in log output #3374 (@ChrisBr)
• Adding a reference in our docs the limit of an annotation's contexts #3261 (@lizrabuya)
• docs redactor clarify multi-secret JSON usage and limit #3343 (@ivannalisetska)

Internal

• Update homebrew formula location #3375 (@sj26)

Dependencies

• build(deps): bump the container-images group across 6 directories with 2 updates #3379 (@dependabot[bot])
• build(deps): bump google.golang.org/api from 0.239.0 to 0.240.0 in the cloud-providers group #3377 (@dependabot[bot])
• build(deps): bump the container-images group across 7 directories with 3 updates #3378 (@dependabot[bot])

v3.101.0

v3.101.0 (2025-07-01)

Full Changelog

Added

• Add support for http/protobuf transport for OTLP #3366 (@catkins)

Fixed

• Tweak apply-if-changed flag and usage string #3367 (@DrJosh9000)
• Gather changed files list once #3368 (@DrJosh9000)
• if_changed fixes: support older Git versions, adhere to skip string limit #3372 (@DrJosh9000)
• Self-execute the path from os.Executable in more places #3338 (@DrJosh9000)

Dependencies

• build(deps): bump the otel group with 9 updates #3362 (@dependabot[bot])
• build(deps): bump the cloud-providers group with 2 updates #3363 (@dependabot[bot])
• build(deps): bump the container-images group across 6 directories with 2 updates #3364 (@dependabot[bot])
• build(deps): bump gopkg.in/DataDog/dd-trace-go.v1 from 1.74.0 to 1.74.2 #3365 (@dependabot[bot])
• build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 #3371 (@dependabot[bot])