v6.71.10 (2026-11-06)
Security
- Include the Agent fix preventing Windows environment-variable case variants from bypassing job signature verification and allowlist checks buildkite/agent#4605 (@CerealBoy).
- Include the Agent fix rejecting excessive YAML alias expansion during pipeline upload instead of exhausting memory buildkite/agent#4579 (@dependabot[bot]).
Changed
- Update the stable Buildkite agent from v3.138.2 to v3.138.3 on Linux and Windows #1991 (@renovate[bot]).
Internal
- Build and test all final AMIs on release tags so change filtering cannot skip release jobs #1974 (@scadu).
- Clean up tagged Packer builders older than 24 hours during normal builds and weekly AMI cleanup, and keep service roles until test stacks are deleted #1975 (@scadu).
- Allow an optional instance profile for Windows AMI builders and use
packer-ssmfor SSM access in CI. WinRM and runtime stack roles stay unchanged #1976 (@scadu). - Speed up Windows AMI builds and stack tests with
c8a.xlargeinstances and faster gp3 storage. Output AMI storage and published stack defaults stay unchanged #1977, #1978 (@scadu).
Agent Changelog (v3.138.3)
v3.138.3
What's Changed
🔒 Security
- Prevent case variants of Windows job environment variable names from bypassing signature verification and allowlist checks by @CerealBoy in buildkite/agent#4605
- Reject pipeline YAML with excessive alias expansion instead of exhausting memory during
buildkite-agent pipeline uploadby @dependabot[bot] in buildkite/agent#4579
🐛 Fixed
- Prevent unnecessary ping-stream reconnections and keep paused agents paused when receiving keepalives or unknown stream actions by @moskyb in buildkite/agent#4616
🏠 Internal
- Fix copying release binaries to the S3 latest directory in v3 release pipelines by @moskyb in buildkite/agent#4561
- Dependency updates by @dependabot[bot] in buildkite/agent#4575, buildkite/agent#4577, buildkite/agent#4578, buildkite/agent#4584, buildkite/agent#4581, buildkite/agent#4580, buildkite/agent#4582, buildkite/agent#4601, buildkite/agent#4603 and buildkite/agent#4604
Full Changelog: buildkite/agent@v3.138.2...v3.138.3
Upgrading
Perform a CloudFormation stack update with the following URL:
https://s3.amazonaws.com/buildkite-aws-stack/v6.71.10/aws-stack.yml
If you want to launch a new stack, you can use this link (make sure not to use your production AWS account, create a new one for CI):