buildkite/elastic-ci-stack-for-aws v6.71.7 on GitHub

What's Changed

This patch release updates the default Buildkite Agent bundled with stack v6 to v3.138.1, which fixes a security issue where the agent ran git hooks from shared mirrors it had just updated. Stack v7 remains the latest major release.

Changed

Update v6 default agent to v3.138.1 by @scadu in #1932

Agent Changelog (v3.138.1)

🔒 Security

Stop running git hooks from shared mirrors when the agent updates them with git-mirrors-path set by @isaacsu in buildkite/agent#4520

🐛 Fixed

Stop leaking BUILDKITE_JOB_LOG_TMPFILE between jobs when --enable-job-log-tmpfile is used with --spawn by @isaacsu in buildkite/agent#4491
Prevent possible Windows agent crashes when a job is terminated more than once by @moskyb in buildkite/agent#4431

🏠 Internal

Various internal CI and release tooling changes by @moskyb in buildkite/agent#4431, buildkite/agent#4430 and buildkite/agent#4455
Dependency updates by @dependabot[bot] in buildkite/agent#4298, buildkite/agent#4335, buildkite/agent#4389, buildkite/agent#4362, buildkite/agent#4508 and buildkite/agent#4509

Full Changelog: buildkite/agent@v3.138.0...v3.138.1

Full Changelog: v6.71.6...v6.71.7

Upgrading

Perform a CloudFormation stack update with the following URL:
https://s3.amazonaws.com/buildkite-aws-stack/v6.71.7/aws-stack.yml

If you want to launch a new stack, you can use this link (make sure not to use your production AWS account, create a new one for CI):