Buildkite v3.40.0 Release Notes
Release Date: 2022-11-08 // 11 months ago-
๐ Full Changelog
โ Added
๐ Security
- ๐ (Fixed in 3.39.1) A security issue in environment handling between buildkite-agent and Bash 5.2 #1781 (@moskyb)
- ๐ Secret redaction now handles secrets containing UTF-8 code points greater than 255 #1809 (@DrJosh9000)
- โก๏ธ The update to Go 1.19.3 fixes two Go security issues (particularly on Windows):
- The current directory (
.
) in$PATH
is now ignored for finding executables - see https://go.dev/blog/path-security - Environment variable values containing null bytes are now sanitised - see https://github.com/golang/go/issues/56284
- The current directory (
๐ Changed
- ๐ 5xx responses are now retried when attempting to start a job #1777 (@jonahbull)
- โก๏ธ ๐งน A variety of dependency updates and cleanups!