cloudposse/atmos v1.234.0-nightly.41747937081

on GitHub

📦 Other Changes

• test: Improve coverage for mock AWS auth provider credential and identity flows @Copilot (#2511)

• feat: add plugin distribution and verification services @osterman (#3457)

• feat: add plugin bootstrap and authoring services @osterman (#3458)

• feat(cli): add discovery metadata for core commands @osterman (#3466)

• feat(cli): add discovery metadata for supporting commands @osterman (#3467)

• docs: demonstrate CI failure annotations locally @osterman (#3472)

• fix(ci): stabilize quality reporting and CI dependencies @osterman (#3476)

• Add runnable CDK examples with casts for the CDK tutorial @osterman (#3481)

• Clean up stale overrides in copyable Atmos examples @osterman (#3485)

• Reconcile bundled skills and command documentation @osterman (#3491)

• chore(review): encourage extracting legacy catch-all packages @osterman (#3521)

• chore: bump Claude Code plugin version to v1.233.2 @cloudposse-releaser[bot] (#3528)

• fix(release): recognize landed native stack members @osterman (#3536)

• fix(ci): re-check quality:ready PRs whose head status fails @osterman (#3539)

• fix(ci): select current workflow results in quality gate @osterman (#3540)

• fix: plugin release inputs and changelog release badge @osterman (#3554)

• docs: add plugin pages and fix CI network checks @osterman (#3575)

• fix(release): group release preview issues by release-notes category @osterman (#3577)

• fix(ci): stop the Quality Gate from blocking on unapproved signal runs @osterman (#3583)

• fix(release): resolve merge-queue commits GitHub left unmerged @osterman (#3613)

✨ Features

• feat(cast): interpret VHS tapes and add atmos cast record @osterman (#2889)

• Add stack planning, selectors, CI, and directory scaffolding @osterman (#3429)

• feat(cast): Starlark cast recorder, script source, and CI cast checks @osterman (#3431)

• Add stack lifecycle orchestration and scaffold creation @osterman (#3442)

• Add safe Doctor migrations and fix nested error rendering @osterman (#3454)

• feat: enable native Go plugins and OIDC authentication @osterman (#3459)

• feat(policy): add validation engines and shared runtime context @osterman (#3461)

• fix(yaml): require explicit function tags with edition compatibility @osterman (#3463)

• feat(cli): add --docs and --example command discovery @osterman (#3468)

• Add Fogg migration and CDK guides with CloudFormation improvements @osterman (#3471)

• feat: conditional stack imports and tagging tutorials; fix deferred rendering @osterman (#3473)

• Validate merged stack auth and preserve secret discovery safety @osterman (#3487)

• Generalize component executable overrides and execution flags @osterman (#3488)

• Fix source handling and add backend and alias inspection @osterman (#3490)

• Run repository checks through Atmos Git hooks and Starlark @osterman (#3494)

• feat(starlark): add modules, records, and typed configuration @osterman (#3505)

• feat(plugins): add public releases, catalog, and auth-secrets @osterman (#3510)

• feat(starlark): add stdin, file writes, and script-local OS controls @osterman (#3526)

• feat(yaml): support bounded parallel exec evaluation @osterman (#3527)

• Add conditional retries for component error events @osterman (#3542)

• feat: native Vault identities and explicit credential templates @noeljackson (#3557)

🐛 Bug Fixes

• fix(ai): use provider default models in --ai config hints @pcbeingused333 (#3413)

• fix(include): resolve base_path before the working directory @djal (#3426)

• test: cover a stack-wide terraform_workspace_template, list it in metadata docs @bercedev (#3453)

• refactor: establish shared API and native plugin SDK @osterman (#3455)

• fix: unify credential handling and OCI registry access @osterman (#3456)

• fix(terraform): run lifecycle hooks in prepared workdirs @osterman (#3462)

• fix: preserve Helm repository auth and AWS ambient context @osterman (#3470)

• Preserve literal values and diagnose YAML function scope @osterman (#3486)

• Fix runtime evaluation and command execution boundaries @osterman (#3489)

• fix(helmfile): colorize diff output by default on a TTY @STiFLeR7 (#3498)

• fix: upgrade Node.js to 24.22.1 and Go to 1.26.10 for CVEs @osterman (#3502)

• fix(stacks): resolve inherited metadata.component directories @osterman (#3508)

• build: streamline releases and pin GitHub Actions runners @osterman (#3509)

• fix(terraform): propagate skipped functions to nested lookups @osterman (#3513)

• fix(terraform): run tests without generating a backend @osterman (#3514)

• fix(secret): honor scoped providers during key generation @osterman (#3515)

• fix(sops): resolve nested recipient files and relative rules @osterman (#3516)

• fix(secret): allow stack secrets without a component @osterman (#3517)

• fix(commands): honor stack on custom Atmos steps @osterman (#3518)

• fix(emulator): validate the Kubernetes API port before startup @osterman (#3519)

• fix(ui): render email autolinks once and clarify test behavior @osterman (#3520)

• fix(sops): restore missing recipients from existing age keys @osterman (#3522)

• fix(ui): don't mangle list markers and emails in ui.* messages @osterman (#3524)

• feat(duration): human-readable minutes/hours in resource-usage summary @osterman (#3529)

• fix(security): reduce scanner noise and patch dependencies @osterman (#3541)

• fix(auth): isolate store identity auth from the component manager @osterman (#3546)

• fix(ai): default Gemini to gemini-3.8-flash @pcbeingused333 (#3553)

• fix(imports): support oci:// in stack and atmos.yaml imports @osterman (#3556)

• fix(ai): report cached prompt tokens for OpenAI-compatible providers @pcbeingused333 (#3565)

• fix(ai): send max_completion_tokens for OpenAI o-series and gpt-6 models @pcbeingused333 (#3566)

• fix: stabilize CI and clarify script failures @osterman (#3569)

• Restore bulk Terraform plan summaries and enforce size limits @osterman (#3580)

• fix: upgrade regressions in YAML functions, store hooks, custom flags @osterman (#3584)

• fix(ai): default Anthropic and Bedrock to Claude Sonnet 5 @pcbeingused333 (#3585)

• fix(terraform): inject Atmos Auth credentials into terraform shell @osterman (#3604)

• fix: repair plugin publication and AI release previews @osterman (#3605)

• fix(terraform): show Terraform's error when workspace setup fails @osterman (#3610)

🤖 Automatic Updates

• chore(deps): bump github.com/posthog/posthog-go from 1.12.6 to 1.17.4 @dependabot[bot] (#2764)

• chore(deps): update dependency @types/node to v22.20.5 @renovate[bot] (#3422)

• chore(deps): update dependency tsx to v4.23.15 @renovate[bot] (#3423)

• build(deps): bump al.essio.dev/pkg/shellescape from 1.6.0 to 1.6.1 @dependabot[bot] (#3425)

• chore(deps): update dependency prettier to v3.9.10 @renovate[bot] (#3507)

• chore(deps): bump golang.org/x/tools from 0.51.0 to 0.52.0 in /tools/lintroller @dependabot[bot] (#3534)

• chore(deps): bump golang from 1.27.1 to 1.27.2 in /.devcontainer @dependabot[bot] (#3558)

• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.47.1 to 1.47.3 @dependabot[bot] (#3559)

• chore(deps): bump github.com/PuerkitoBio/goquery from 1.12.0 to 1.13.0 @dependabot[bot] (#3560)

• fix(deps): update github.com/cyberphone/json-canonicalization digest to 32a4819 @renovate[bot] (#3572)

• chore(deps): update actions/upload-artifact action to v7.0.2 @renovate[bot] (#3574)

• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/resourcegroupstaggingapi from 1.39.0 to 1.41.4 @dependabot[bot] (#3597)

• chore(deps): update step-security/harden-runner action to v2.22.1 @renovate[bot] (#3601)

• fix(deps): update module github.com/agnivade/levenshtein to v1.2.2 - abandoned @renovate[bot] (#3608)