v7.9.2 (2026-10-28)
Security
- Refresh the Amazon Linux 2023 AMIs with
libbrotli-1.1.0-1.amzn2023.0.2, fixing CVE-2026-111497 on AMD64 and ARM64.
Fixed
- Fix instance-storage setup to preserve existing filesystems and RAID arrays, avoid duplicate mounts, and handle NVMe renumbering. Also fix stack-helper arguments and support published templates through
TEMPLATE_URL#1830 (@wolfeidau). - Fix disabling the ECR plugin also disabling the secrets plugin on Linux and Windows #1936 (@RaphaelFakhri).
Internal
- Clean up abandoned Packer builders during builds and weekly AMI cleanup, bound provisioning waits, and retain service roles until test stacks are deleted #1914 (@scadu).
- Use c8a builders for Windows AMIs and faster builder storage without changing the output AMI's storage defaults #1967 (@scadu).
- Update changelog for v7.9.1 #1964 (@scadu).
Upgrading
Follow the v7 upgrade guide before updating. Remove or replace retired parameters in parameter files and deployment automation. If you use a custom AMI through ImageId or ImageIdParameter, rebuild it from the v7 base AMI and update it in the same stack update; a v6-based AMI might not boot under the v7 template depending on the configuration.
To receive the libbrotli fix, replace existing instances with instances using the updated AMI. Custom AMIs must include the patched package too.
Perform a CloudFormation stack update with the following URL:
https://s3.amazonaws.com/buildkite-aws-stack/v7.9.2/aws-stack.yml
If you want to launch a new stack, you can use this link (make sure not to use your production AWS account, create a new one for CI):
Full Changelog: v7.9.1...v7.9.2