- test(ci): live-GitHub canaries, ATMOS_TEST_OFFLINE, toolchain retry @osterman (#3109)
- test: GitHub HTTP façade for toolchain, registry, and raw fetches @osterman (#3122)
- agent-skills: add auth migration sub-skills, fix undistributed path citations @osterman (#2740)
- fix(ci): grant timing summary PR comment permission @osterman (#3166)
- test: serve cloudposse/atmos git sources from a local mirror @osterman (#3105)
- fix(test): resolve three CI flakes (packer fixture race, Windows subprocess cap, pro test race) @osterman (#3158)
- chore: add cred preventions within .gitignore @nitrocode (#3161)
- chore(deps): add 14-day cooldown for Renovate updates @osterman (#3135)
- feat(website): add download/share to blog post cast embeds @osterman (#3126)
- ci: add sticky cross-workflow timing summary @osterman (#3125)
- ci: shard race detector tests across hosted runners @osterman (#3123)
- fix(ci): cap concurrent subprocess launches in acceptance test orchestration @osterman (#3116)
- fix(docs): use localhost redis URL in sops-secrets demo cast @osterman (#3120)
- fix(ci): stop Mergify updating bot PRs once approved @osterman (#3112)
- fix(ci): invalidate CloudFront cache on website deploys @osterman (#3103)
- Link changelog announcements to usage documentation @osterman (#3099)
- feat(website): Atmos Pro cast download/embed components @osterman (#2739)
- docs: flag Homebrew FIPS gap in fips-140-mode PRD @osterman (#3074)
- docs: add homebrew skill for atmos formula PR workflow @osterman (#3081)
- fix(ci): restore-only Go caches with a real warmup writer @osterman (#3077)
- test: parallelize blocker-free tests in the race job's slowest packages @osterman (#3078)
- fix(ci): serialize website deploys and fix Sentry loader key @osterman (#3072)
- feat(website): add Security & Trust page with live OpenSSF data @osterman (#3024)
- docs: define native Helm release lifecycle @shirkevich (#2846)
- ci: fix three post-release pipeline failures (summarizer egress, goreleaser 422, Homebrew) @aknysh (#3063)
✨ Features
- feat(metrics): measure terraform subprocess resource usage @osterman (#3104)
- feat(github): GitHub Enterprise Server support @osterman (#3107)
- feat: add concurrent vendoring with edition-aware defaults @osterman (#3169)
- Reduce workflow noise with daily experimental warnings @osterman (#3164)
- feat: support conditional component dependencies @zack-is-cool (#3084)
- feat(terraform): skip redundant terraform init via fingerprint-based smart auto-init @osterman (#3127)
- feat: add test steps, build controls, and default CLI help @osterman (#3124)
- feat(helm): add runtime value overrides and values output @osterman (#3094)
- Add single-label lookups with optional defaults @osterman (#3097)
- feat(vendor): add Azure DevOps pull-request provider @jorrite (#3048)
- feat(version): add yaml manager and json format field to Version Tracker @osterman (#3069)
- feat: implement native Helm release lifecycle controls @shirkevich (#2847)
🐛 Bug Fixes
- fix(secrets): prevent masked placeholders from reaching execution @osterman (#3174)
- fix(docs): refresh features, roadmap, and journey navigation @osterman (#3170)
- fix(scaffold): stop local-source templates re-ingesting their own output @osterman (#3172)
- fix(helm): harden plugin provisioning and reuse the Atmos CI cache @osterman (#3167)
- fix(emulator): floci health check no longer requires curl @osterman (#3171)
- Fix cast themes, standardize spinners, and render Braille glyphs @osterman (#3165)
- fix: honor ATMOS_PROCESS_TEMPLATES/ATMOS_PROCESS_FUNCTIONS in describe affected @aknysh (#3162)
- fix: describe/error/prompt DX bugs found while field-testing aws/cloudformation @osterman (#3106)
- fix(helm): carry
create_namespacethrough the stack processor @aknysh (#3134) - fix(ui): output-only plans no longer reported as NO CHANGES in --ui @osterman (#3121)
- fix(pro): report full logical component name in Atmos Pro uploads @goruha (#3111)
- fix(website): cast download polls render status as JSON, waits up to 30m @osterman (#3115)
- fix: terraform --all bootstrap, list-command lazy eval, init/UI polish @osterman (#3095)
- fix(examples): use real Infracost CLI @osterman (#3093)
- fix(scaffold): write conflict markers on manual merge, fix init --update, fix --force+--update @jorrite (#3047)
- fix(ci): test summary/JUnit dropped OpenTofu runs and late diagnostics @osterman (#3082)
- fix(ci): keep pinned atmos schema snapshots durable across deploys @osterman (#3092)
- fix(auth): clear Azure realm MSAL cache on logout so re-login is fresh @aknysh (#3087)
- fix: preserve prompted component/stack across profile-fallback re-exec @osterman (#3080)
- fix(terraform-ui): clean up terraform plan --ui output @osterman (#3083)
- fix(secret): stop leaking the resolved --stack into viper's override layer @osterman (#3075)
- fix(source): retry DNS/connect failures for JIT sources; clone JIT test fixtures locally @osterman (#3073)
- fix(ci): never create a bulk-run status without a real component @osterman (#3058)
- feat: add Helm lifecycle reporting and integration coverage @shirkevich (#2849)
- feat: propagate component execution context @shirkevich (#2848)
🤖 Automatic Updates
- chore(deps): update mcr.microsoft.com/vscode/devcontainers/base:debian docker digest to 1f85100 @renovate[bot] (#3117)
- chore(deps): update dependency posthog-js to v1.418.1 @renovate[bot] (#2954)
- chore(deps): update floci/floci-gcp docker digest to 102db65 @renovate[bot] (#2691)
- chore(deps): update floci/floci-az docker digest to 5e403a7 @renovate[bot] (#2648)
- chore(deps): update floci/floci docker digest to d2ecc80 @renovate[bot] (#2606)
- fix(deps): update module github.com/getsops/sops/v3 to v3.13.3 @renovate[bot] (#3085)
- chore(deps): update terraform local to v2.9.1 @renovate[bot] (#3118)
- chore(deps): update ghcr.io/charmbracelet/vhs:latest docker digest to b1afb4f @renovate[bot] (#3089)
- fix(deps): update module github.com/go-git/go-billy/v5 to v5.9.1 @renovate[bot] (#3090)
- build(deps): bump github.com/containerd/containerd/v2 from 2.3.3 to 2.3.5 in the go_modules group across 1 directory @dependabot[bot] (#3098)
- fix(deps): update module github.com/gofrs/flock to v0.13.1 @renovate[bot] (#3091)
- fix(deps): update github.com/hashicorp/terraform-config-inspect digest to 75d64de @renovate[bot] (#3054)
- fix(deps): update module github.com/gabriel-vasile/mimetype to v1.4.15 @renovate[bot] (#3079)
- fix(deps): update module github.com/charmbracelet/x/ansi to v0.11.8 @renovate[bot] (#3070)
- fix(deps): update module github.com/agiledragon/gomonkey/v2 to v2.14.2 @renovate[bot] (#3067)
- fix(deps): update module filippo.io/age to v1.3.2 @renovate[bot] (#3066)
- fix(deps): update aws-sdk-go-v2 monorepo @renovate[bot] (#3044)
- chore(deps): update terraform http to v3.6.1 @renovate[bot] (#2957)
- chore(deps): update step-security/harden-runner action to v2.21.1 @renovate[bot] (#3062)
- build(deps): bump golang from 1.27.0 to 1.27.1 in /.devcontainer @dependabot[bot] (#3059)