Harness Release Notes Summaries
Explore release notes from the last 30 days across the Harness Platform and modules.
INFO
These are AI-generated summaries intended to help you scan what changed. They are not complete release notes.
Please review the full module release notes by selecting a module in the sidebar, or using the View full release notes links beside each module summary.
Platform Release Notes
Platform
View full release notes →Security & Compliance
- Updated core cryptographic libraries to ensure secure platform operations.
- Enforced security policies during token rotation to maintain strict expiration limits.
User Management & Access
- Added safeguards to prevent the deletion of user groups that are currently linked to notification channels.
- Improved the accuracy of user searches when filtering by email addresses containing special characters.
- Fixed an issue where specific user group permission checks were not correctly applied.
Infrastructure & Dependencies
- Updated the base Java runtime and internal utility tools to improve platform stability and performance.
- Standardized the versioning of internal development tools to ensure environment consistency.
Secrets Management
- Enhanced the Google Secrets Manager connector to support access to secrets across multiple projects using a single connector.
- Resolved an issue where secret metadata was mismatched with encrypted records.
Delegate Management
- Improved delegate identification logic to allow delegates with identical hostnames and IP addresses across different infrastructures.
- Resolved network routing and virtual service conflicts to ensure reliable traffic flow for Delegate APIs.
Delegate
View full release notes →Authentication & Access
- Added support for Bitbucket Cloud API tokens for more secure authentication, replacing deprecated app passwords.
- Improved error messaging for AWS authentication to clarify permission and installation requirements.
- Resolved errors during connector validation to ensure consistent and accurate connection status reports.
Deployment Management
- Updated Kubernetes deployments to store release history in Secrets for improved security and management when pruning is enabled.
- Fixed a retry loop issue for pods that could not be found during the event phase.
- Improved the accuracy of ECS deployment status checks by filtering out outdated AWS events.
- Enhanced task retry logic to ensure all conditions are re-evaluated before each attempt.
Integration & Monitoring
- Added the ability to configure the maximum number of tags fetched for Nexus3 triggers to optimize polling.
- Introduced a setting to disable artifact path validation for specific Nexus3 repositories.
- Refined request logging for Continuous Verification connectors to streamline diagnostics.
- Improved the accuracy of health monitoring and anomaly detection in scenarios with limited data.
Infrastructure & Performance
- Introduced dynamic port configuration to allow unique ports for each delegate instance while maintaining backward compatibility.
- Updated delegate infrastructure components with the latest underlying libraries for improved security and stability.
AI for DevOps & Automation
Continuous Delivery & GitOps
View full release notes →Cloud & Multi-Account Deployments
- Added support for Blue-Green deployments to Google Cloud Platform Managed Instance Groups with zero downtime and gradual traffic shifting.
- Enabled multi-account deployments for AWS CDK using a single connector to override regions and IAM roles at the step level.
- Expanded authentication options for Google Cloud Platform in Terraform steps, including OIDC, manual credentials, and inherited permissions.
- Integrated the Harness Artifact Registry as a native source for container images and packaged artifacts across all deployment types.
- Resolved an issue where Google Cloud Run deployments failed during reruns when services were scaled to zero.
- Fixed a bug where AWS Auto Scaling Group deployments did not correctly identify manual rollback states.
Governance & Access Control
- Integrated Open Policy Agent with GitOps to enable policy-based governance and validation for applications.
- Fixed an issue that prevented saving pipelines when Bitbucket OAuth was configured with a custom provider.
- Restored administrative permissions to manage Git webhooks regardless of global account-level settings.
Pipeline Management & Automation
- Added support for executing pipeline configurations stored in Git repositories within Dynamic Stages.
- Improved trigger reliability by ensuring a failure in one trigger evaluation no longer blocks other eligible triggers.
- Fixed a reconciliation error for pipelines using shared templates stored in remote Git repositories.
Monitoring & Notifications
- Introduced a new notification event for when pipelines pause for user input, such as approvals or manual interventions.
- Added support for custom webhook notifications for verification sub-tasks to provide real-time status updates.
- Enabled cross-project access for Google Cloud Operations health sources to query metrics and logs from different projects.
- Updated Jenkins integrations to maintain compatibility with recent API changes.
- Improved the log viewer to maintain a user's scroll position and prevent jumping during active pipeline executions.
User Interface Improvements
- Added YAML validation for GitOps ApplicationSets to prevent the creation of invalid configurations.
- Fixed a display issue where the tag selection dropdown was not showing recently generated tags.
- Corrected the display of artifact icons in the interface to accurately reflect the artifact type for WinRM services.
Continuous Integration
View full release notes →Security & Secret Management
- Enhanced Kubernetes builds to support granular access claims when integrating with HashiCorp Vault for secret management.
- Updated internal security components to address potential vulnerabilities in Test Intelligence.
- Improved the security of the cache service image by updating core cryptographic libraries.
- Resolved issues with handling multiline secrets in the Run step for Kubernetes-based builds.
- Fixed an issue where double-quoted secrets in expressions caused failures in the Run step.
Infrastructure Improvements
- Added support for Azure Managed Identity for authentication in container registry build and push steps.
- Improved environment variable handling for Docker Buildx Bake within Kubernetes environments.
- Optimized the size of generated Kubernetes configurations to prevent failures during build resource deployment.
Integration Updates
- Updated GitLab integration to provide real-time pipeline status updates for merge requests.
- Fixed an issue that caused pipeline re-runs to fail when using specific delegate selectors with source control tasks.
- Improved error reporting for intermittent connection failures caused by source control provider rate-limiting.
Visibility & Logging
- Enabled real-time visibility of background build logs during stage execution.
- Enhanced error messages to display the full path of the Dockerfile when it cannot be located during build steps.
Artifact Registry
View full release notes →Format & Tooling Support
- Expanded support for multiple artifact formats, including Maven, npm, Python, and Conda.
- Directly manage Python and NuGet packages via the command line interface.
- Capability to remove entire registries from projects using the command line.
Governance & Lifecycle
- Custom metadata management for tracking ownership, environment tagging, and compliance across registries and packages.
- Enhanced lifecycle management with the ability to delete specific artifact versions or entire package histories.
Pipeline & Storage Management
- Integrated a new CI step to streamline artifact uploads to the Harness Artifact Registry from any pipeline.
- Move artifact versions between registries with specialized support for models and datasets.
AI for Testing & Resilience
Chaos Engineering
View full release notes →Chaos Experiments & Probes
- Added a new fault to simulate node downtime in Azure Kubernetes Service.
- Improved the Availability Zone Blackhole fault to correctly target all subnets within a selected zone.
- Resolved an error that occurred when container probes encountered a failed condition.
- Fixed an issue that prevented the successful creation of APM probe templates.
Resilience Insights & Analytics
- Introduced a new Risk UI accessible at the project, organization, and account levels.
- Implemented a new backend architecture and database schema to support resilience risk assessment.
- Ensured resilience scores and coverage metrics update correctly in application maps.
Platform & Infrastructure
- Upgraded the base image for chaos components to improve security and performance.
- Introduced initial configuration support for load testing.
- Resolved a configuration issue regarding helper pod annotations in Kubernetes.
AI Test Automation
View full release notes →AI Intelligence
- Refined AI-powered prompt generation for better precision.
- Updated the default AI model to the latest version.
User Interface & Experience
- Improved the date range selection experience within the calendar.
- Resolved issues with calendar windows to ensure smoother navigation.
Performance & Communication
- Optimized simultaneous test processing to reduce overall completion times.
- Improved browser compatibility for more reliable system performance.
- Streamlined Slack notifications for more consistent team updates.
AI for Security & Compliance
Security Testing Orchestration
View full release notes →Security Scanning Capabilities
- Introduced source code analysis to identify security issues, exposed secrets, and vulnerable dependencies within codebases.
- Added container image scanning to detect vulnerabilities in operating system packages and libraries with risk-based prioritization.
Vulnerability Insights & Reporting
- Improved visibility of external policy failures by surfacing them as distinct issue types rather than informational alerts.
- Added support for including custom metadata comments in scanner configurations to provide additional context in issue details.
Integration & Workflow Improvements
- Streamlined Jira ticket creation by enabling users to select from existing project components instead of entering them manually.
Supply Chain Security
View full release notes →SBOM & Dependency Management
- Added the ability to filter Software Bill of Materials (SBOM) components by dependency type, such as direct or indirect relationships.
- Enabled the display of vulnerabilities identified by all integrated security scanners within the SBOM view.
- Resolved an issue where dependency risk filters on the SBOM page were not functioning as expected.
- Fixed a data mismatch between the SBOM counts shown on the Overview dashboard and the SBOM tab.
- Updated the SBOM Score API to correctly handle repository names that include URL prefixes.
Platform & Compatibility
- Enhanced plugin compatibility with various Docker environments to ensure stable pipeline execution.
- Improved Java environment handling to prevent configuration errors during the automated generation of software bills of materials.
Traceability & User Experience
- Ensured all deployment events are correctly captured in the Chain of Custody for complete artifact traceability.
- Standardized artifact naming across all security steps to ensure consistency throughout the supply chain workflow.
- Improved the responsiveness of the search bar and the visibility of filtering options within the interface.
AI for Cost & Optimization
Cloud Cost Management
View full release notes →Anomalies & Cost Insights
- Improved anomaly detection accuracy for scenarios with sparse data by better aligning statistical models.
- Resolved a visual issue where resource names and tags overlapped in the anomaly details table.
- Replaced 'Cost Impact' with 'One-Day Change' in anomaly views to provide clearer day-over-day spend insights.
- Updated the anomaly detection pages with clearer spend metrics, simplified layouts, and improved data sorting and tooltips.
Cost Organization & Workflow
- Fixed an issue where rules using the 'NOT IN' operator incorrectly excluded items with empty or undefined field values.
- Streamlined the Cost Category creation process by moving it to a dedicated page for a more consistent user experience.
- Standardized filter operators to 'NOT IN' and 'NOT NULL' to improve clarity across Perspective and Cost Category builders.
Reporting & Governance
- Improved precision in financial reporting by rounding budget variance percentages to two decimal places.
- Standardized data labels for unallocated costs to ensure consistent reporting across dashboards regardless of the selected strategy.
- Fixed an issue in Governance recommendations to ensure the interface correctly displays options for managing ignored items.