Features
- the two 2.0 defaults actually flip, and the 50 failures that flushed out (#2437)
- the resolved inventory is a hierarchy, and says where each value came from (#2423)
- one run button, and a configure's reach is on the page (#2420)
- a run can ask for apply-then-configure, or decline it (#2419)
- send both spec URLs, pointing at the authenticated routes (#2388)
- accept and send the run task integration spec's shapes (#2387)
- serve the org run queue and capacity, and fold the two statuses go-tfe cannot read (#2386)
- serve the state-version outputs, so
tofu outputworks (#2384) - per-run variables, so
tofu plan -varmeans something (#2382) - support self-contained root modules with secured workflows (#1990)
Bug Fixes
- migrate the eight hover explanations, and lower the gate so the next one is caught (#2441)
- the contrast gate read half the app, and the dark theme had no gate at all (#2438)
- a catalog instance that could not be applied, four unpinned attributes, and a stack that grew per write (#2439)
- a download with no retry fails a PR on someone else's outage — nine of them, and the gate that said "not published" (#2436)
- §5.5/§5.6 documented behaviours that read as bugs, and §7 platform-tool review (#2431)
- §2.6 weak tests, and var-provenance plus the run queue reach every consumer (#2430)
- five gates that passed while what they guard was broken (#2429)
- a module-impact retry at the head is the PR row, and a pre-upgrade run is still cancelled (#2428)
- a credential carrying a retired field is repaired, not dropped (#2427)
- two-tier hints, dynamic inventory as one ordered field, and the audit's four (#2424)
- both admin forms adopt the workspace sections, and nothing collapses (#2422)
- a result indicator carries you to the phase that explains it (#2421)
- nothing collapses, and the inventory sub-view says which variables it means (#2418)
- the per-host filter has an address, and a result carries you to it (#2417)
- an Ansible credential carries secrets and nothing else (#2416)
- the confirm policy has one producer, and three more gates stop hiding (#2415)
- nothing is hidden by a gate, and the gate reaches every control (#2414)
- close the holes the review found in #2407's own gate (#2410)
- correct the queue-backlog runbook, and gate the class (#2407)
- bound the occupancy credit, so the cap cannot stall a pool (#2403)
- a burst of queued runs no longer over-admits past max_concurrent (#2401)
- a re-join no longer destroys the credential it is replacing (#2396)
- the three defects the audit verified and left (#2394)
- clear GHSA-g3hv-75wg-m249 with a scoped minimatch override (#2390)
- a variable set is visible by workspace reach, not to everyone (#2385)
- a run variable's value is HCL, so deliver it structured (#2383)
- the straightforward half of the TFE-surface survey (#2380)
- the catalog instance can choose its engine from Terraform (#2375)
- the MCP catalog surface, the 2.0 narrowings, and seven ungated archive protections (#2374)
- a missing Slack Secret must not take the API down; drop the committed SARIF artifacts (#2373)
- move the Postgres service to the job that now has the migration steps
- slack.enabled=false now actually disables the Slack secretKeyRefs
- suppress the SAST finding in the new provenance-immutability test
- Slack off in local dev, and the gate stops depending on that choice
- the four red CI jobs, and the two gates hidden behind one of them
- the run task payload described a run it was not describing (#2369)
- wire helm-smoke into the gates, or 39 steps stop gating
- gate the mirror, and the one workflow that was bypassing it (#2365)
- a refused re-join reported success, so the SSE loop hot-looped (#2358)
- the pre-release review's findings — a truncated listing stopped planning, and a proxy 403 destroyed a listener (#2355)
- a PR session closes on the provider's word, and GitHub's thumbs are +1/-1 (#2351)
Documentation
- §6.3/§6.6/§6.7/§6.8 operator gaps, and a copy-paste-to-422 in our own example (#2434)
- the front door and the feature pages tell the truth (#2426)
- the three gaps that assert policy, and one false claim behind one (#2393)
- catalogue the request bodies for the CLI-surface families (#2391)
- deleting a workspace from the CLI is deliberately unsupported (#2381)
Tests
- §2.7's twelve gates that could not fail, and §2.2's missing route test (#2440)
- §4.3 run-variable wire tests, and §0.4's last box — a gate for the title= commitment (#2433)
- call the Job template directly, so the name gate carries (#2404)
- pin the create half of the re-join's lost-race handler (#2398)
Maintenance
- regenerate the Python locks, and record the ansible-core review (#2397)
- drop the three accepted risks whose exit condition is met (#2395)
- bump checkov, add the
configuringstatus, mirror python:3.15-slim (#2392)
Other Changes
- Merge pull request #2326 from nickryand/self-contained-catalog
- Merge main into self-contained-catalog
- Merge main into self-contained-catalog
Full Changelog: 3.4.0...v2.0.0-beta.1