v2.19.5-beta4 Release Summary
This beta release includes runner status improvements, Docker image fixes, security hardening for Git repositories, dependency updates, and backend refactoring.
Improvements
- Added runner status reporting in the API and web UI, so runners can now be shown as
onlineoroffline. - Added backend logic to calculate runner status based on the latest runner heartbeat.
- Improved integration handling by moving integration storage access into the integration controller.
Security fixes
- Added Git repository URL validation to prevent Git option injection.
- Repository URLs that start with
-are now rejected because Git could interpret them as command-line options instead of repository locations.
Docker fixes
- Added Paramiko support to the Docker image for Ansible environments.
- Fixed the Docker package/library name used for Paramiko installation.
Dependencies
- Updated
axiostov1.18.1. - Updated
github.com/coreos/go-oidc/v3tov3.19.0. - Improved Renovate configuration with a custom manager.
Internal changes
- Added an implementation plan for IdP-initiated OIDC authentication.
- Refactored backend code to use dependency injection in integrations.
- Added tests for runner status calculation.