Important
This release include some important changes:
- The terrakube-ui container is now built using the following image instead of the
bitnami/nginxused in previous version.- Make sure to use the following helm chart version https://github.com/terrakube-io/terrakube-helm-chart/releases/tag/terrakube-3.28.0
- Terraform Modules versions are now managed inside the database instead of using redis, Terrakube will start to update all the modules at startup the firtst time, this could take some minutes depending the numbers of modules you have, for more information check #2324
- Support to use dynamic credentials to authenticate with Openbao or Vault
- Support to use merge request and releases to trigger jobs in Gitlab
- Support to use pull request and release to trigger jobs in Bitbucket
- Improve devcontainer support to use POSTGRESQL and MSSQL
- All the project was migrated to
io.terrakubeand all previous quartz jobs are now migrated to the new package here
What's Changed
Features
- feat: Migrate to spring-boot 3.5.0 and remove unused imports by @alfespa17 in #2177
- feat: Support to use MSSQL and POSTGRESQL in devcontainer by @alfespa17 in #2180
- feat: Simplify executor code, removing redundant code by @alfespa17 in #2204
- feat: Update docker compose to 2.26.1 [skip ci] by @alfespa17 in #2205
- feat: Openbao/Vault dynamic credentials support by @alfespa17 in #2245
- feat: Allow specifying securityContext for Ephemeral Executor pods by @Vx-V in #2247
- feat: Migrate Terrakube dependencies to new io.terrakube package by @alfespa17 in #2248
- feat: Migrate to new package by @alfespa17 in #2249
- feat: Adding Tuta sponsor by @alfespa17 in #2250
- feat: Add detailed setup instructions for Openbao dynamic credentials [skip ci] by @alfespa17 in #2262
- feat: Create SECURITY.md by @alfespa17 in #2268
- feat: Migrate test to Wiremock by @alfespa17 in #2294
- feat: ephemeral agents resource limits by @BenjaminDecreusefond in #2296
- feat: Implement web client for fetching terraform/tofu index by @alfespa17 in #2297
- feat: Migrate QRTZ_JOB_DETAILS.JOB_CLASS_NAME to use prefix io by @alfespa17 in #2298
- feat: refactor gitlab project id logic by @alfespa17 in #2302
- feat: refactor gitlab project id search to use pagination by @alfespa17 in #2304
- feat: gitlab commit status by @alfespa17 in #2303
- feat: Support merge_request event in gitlab by @alfespa17 in #2320
- feat: Add configurable color output toggle for Terraform logs by @alfespa17 in #2321
- feat: Support gitlab releases event to trigger jobs by @alfespa17 in #2322
- feat: Bitbucket support for push, pull request and tag creation events by @alfespa17 in #2323
- feat: Implement paginated fetching of GitLab merge request diffs by @alfespa17 in #2346
- feat: Improve GitLab MR processing and webhook logging by @alfespa17 in #2348
- feat: Store module versions in database by @stanleyz in #2324
- feat: Migrate terrakube UI dockerfile to use nginxinc/nginx-unprivileged instead of bitnami by @alfespa17 in #2356
Fixes
- fix: change volume ownership for ephemeral executor by @BenjaminDecreusefond in #2161
- fix: Show team tokens correctly in the UI by @alfespa17 in #2179
- fix: Set webhook priority to 0 for old workspaces by @alfespa17 in #2185
- fix: registry parameter mismatch by @alfespa17 in #2222
- fix: Remove padding from jwks endpoint by @alfespa17 in #2242
- fix: terraform login protocol authentication with expired token by @alfespa17 in #2246
- fix: Add Bouncy Castle dependency in API, Executor, and Registry modules by @alfespa17 in #2269
- fix: Change some old references by @alfespa17 in #2270
- docs: Adding Open Collective [skip ci] by @alfespa17 in #2273
- fix: gitlab webhooks for projects and subgroups by @alfespa17 in #2274
- fix: Rename parameter from mergeRequestId to mergeRequestIid by @alfespa17 in #2347
- fix: legacy quartz module refresh job cleanup by @alfespa17 in #2350
- fix: changing column name commit is reserved word in mssql by @alfespa17 in #2351
- fix: 401 unauthenticated error by @tengis in #2354
Dependencies
View Dependency Changes
- deps: bump org.postgresql:postgresql from 42.7.5 to 42.7.6 by @dependabot[bot] in #2162
- deps: bump software.amazon.awssdk:bom from 2.31.50 to 2.31.54 by @dependabot[bot] in #2169
- deps: bump org.apache.groovy:groovy-all from 4.0.26 to 4.0.27 by @dependabot[bot] in #2163
- deps: bump @types/node from 22.15.21 to 22.15.29 in /ui by @dependabot[bot] in #2174
- deps: bump @babel/standalone from 7.27.2 to 7.27.4 in /ui by @dependabot[bot] in #2173
- deps: bump @babel/core from 7.27.1 to 7.27.4 in /ui by @dependabot[bot] in #2171
- deps: bump web-vitals from 5.0.1 to 5.0.2 in /ui by @dependabot[bot] in #2170
- deps: bump eslint-import-resolver-typescript from 4.4.1 to 4.4.2 in /ui by @dependabot[bot] in #2168
- deps: bump antd from 5.25.3 to 5.25.4 in /ui by @dependabot[bot] in #2167
- deps: bump eslint-plugin-prettier from 5.4.0 to 5.4.1 in /ui by @dependabot[bot] in #2164
- deps: bump eslint from 9.27.0 to 9.28.0 in /ui by @dependabot[bot] in #2166
- deps: bump @typescript-eslint/parser from 8.32.1 to 8.33.0 in /ui by @dependabot[bot] in #2172
- deps: bump typescript-eslint from 8.32.1 to 8.33.0 in /ui by @dependabot[bot] in #2165
- deps: bump software.amazon.awssdk:bom from 2.31.54 to 2.31.59 by @dependabot[bot] in #2190
- deps: bump jgit.version from 7.2.1.202505142326-r to 7.3.0.202506031305-r by @dependabot[bot] in #2191
- deps: bump org.apache.maven:maven-artifact from 3.9.9 to 3.9.10 by @dependabot[bot] in #2188
- deps: bump com.microsoft.azure:msal4j from 1.20.1 to 1.21.0 by @dependabot[bot] in #2192
- deps: bump react-router-dom from 7.6.1 to 7.6.2 in /ui by @dependabot[bot] in #2189
- deps: bump @babel/standalone from 7.27.4 to 7.27.6 in /ui by @dependabot[bot] in #2196
- deps: bump @vitejs/plugin-react from 4.5.0 to 4.5.1 in /ui by @dependabot[bot] in #2193
- deps: bump @types/node from 22.15.29 to 22.15.30 in /ui by @dependabot[bot] in #2195
- deps: bump eslint-import-resolver-typescript from 4.4.2 to 4.4.3 in /ui by @dependabot[bot] in #2194
- deps: bump core-js-pure from 3.42.0 to 3.43.0 in /ui by @dependabot[bot] in #2197
- build(deps): bump org.postgresql:postgresql from 42.7.6 to 42.7.7 in /api by @dependabot[bot] in #2200
- [Snyk] Security upgrade minimatch from 10.0.1 to 10.0.2 by @alfespa17 in #2202
- deps: bump org.terrakube.terraform:terraform-spring-boot-starter from 0.16.1 to 0.16.2 by @dependabot[bot] in #2215
- deps: bump software.amazon.awssdk:bom from 2.31.59 to 2.31.63 by @dependabot[bot] in #2219
- deps: bump @vitejs/plugin-react from 4.5.1 to 4.5.2 in /ui by @dependabot[bot] in #2216
- deps: bump com.google.cloud:libraries-bom from 26.61.0 to 26.62.0 by @dependabot[bot] in #2218
- deps: bump web-vitals from 5.0.2 to 5.0.3 in /ui by @dependabot[bot] in #2212
- deps: bump @typescript-eslint/parser from 8.33.1 to 8.34.0 in /ui by @dependabot[bot] in #2207
- deps: bump @types/node from 22.15.30 to 24.0.3 in /ui by @dependabot[bot] in #2209
- deps: bump eslint from 9.28.0 to 9.29.0 in /ui by @dependabot[bot] in #2208
- deps: bump typescript-eslint from 8.33.1 to 8.34.0 in /ui by @dependabot[bot] in #2210
- deps: bump jest-environment-jsdom from 29.7.0 to 30.0.0 in /ui by @dependabot[bot] in #2217
- deps: bump ts-jest from 29.3.4 to 29.4.0 in /ui by @dependabot[bot] in #2211
- deps: bump axios from 1.9.0 to 1.10.0 in /ui by @dependabot[bot] in #2214
- deps: bump antd from 5.25.4 to 5.26.1 in /ui by @dependabot[bot] in #2220
- deps: bump software.amazon.awssdk:bom from 2.31.63 to 2.31.68 by @dependabot[bot] in #2232
- deps: bump com.microsoft.sqlserver:mssql-jdbc from 12.10.0.jre11 to 12.10.1.jre11 by @dependabot[bot] in #2231
- deps: bump com.azure:azure-storage-blob from 12.30.0 to 12.30.1 by @dependabot[bot] in #2230
- deps: bump minimatch from 10.0.2 to 10.0.3 in /ui by @dependabot[bot] in #2238
- deps: bump jest-environment-jsdom from 30.0.0 to 30.0.2 in /ui by @dependabot[bot] in #2234
- deps: bump org.springframework.boot:spring-boot-starter-parent from 3.5.0 to 3.5.3 by @dependabot[bot] in #2229
- deps: bump eslint-plugin-import from 2.31.0 to 2.32.0 in /ui by @dependabot[bot] in #2227
- deps: bump oidc-client-ts from 3.2.1 to 3.3.0 in /ui by @dependabot[bot] in #2233
- deps: bump prettier from 3.5.3 to 3.6.0 in /ui by @dependabot[bot] in #2239
- deps: bump @vitejs/plugin-react from 4.5.2 to 4.6.0 in /ui by @dependabot[bot] in #2235
- deps: bump jest and @types/jest in /ui by @dependabot[bot] in #2236
- deps: bump eslint-plugin-prettier from 5.4.1 to 5.5.0 in /ui by @dependabot[bot] in #2237
- deps: bump software.amazon.awssdk:bom from 2.31.68 to 2.31.73 by @dependabot[bot] in #2263
- deps: bump eslint-import-resolver-typescript from 4.4.3 to 4.4.4 in /ui by @dependabot[bot] in #2252
- deps: bump prettier from 3.6.1 to 3.6.2 in /ui by @dependabot[bot] in #2264
- deps: bump @babel/core from 7.27.4 to 7.27.7 in /ui by @dependabot[bot] in #2254
- deps: bump @types/node from 24.0.3 to 24.0.7 in /ui by @dependabot[bot] in #2253
- deps: bump react-router-dom from 7.6.2 to 7.6.3 in /ui by @dependabot[bot] in #2260
- deps: bump @babel/standalone from 7.27.6 to 7.27.7 in /ui by @dependabot[bot] in #2258
- deps: bump @typescript-eslint/parser from 8.34.1 to 8.35.0 in /ui by @dependabot[bot] in #2261
- deps: bump eslint from 9.29.0 to 9.30.0 in /ui by @dependabot[bot] in #2257
- deps: bump typescript-eslint from 8.34.1 to 8.35.0 in /ui by @dependabot[bot] in #2251
- deps: bump vite from 6.3.5 to 7.0.0 in /ui by @dependabot[bot] in #2256
- deps: bump antd from 5.26.1 to 5.26.4 in /ui by @dependabot[bot] in #2278
- deps: bump com.nimbusds:nimbus-jose-jwt from 10.3 to 10.3.1 by @dependabot[bot] in #2288
- deps: bump com.google.cloud:libraries-bom from 26.62.0 to 26.63.0 by @dependabot[bot] in #2286
- deps: bump software.amazon.awssdk:bom from 2.31.73 to 2.31.77 by @dependabot[bot] in #2281
- deps: bump vite from 7.0.0 to 7.0.2 in /ui by @dependabot[bot] in #2285
- deps: bump eslint from 9.30.0 to 9.30.1 in /ui by @dependabot[bot] in #2292
- deps: bump jest-environment-jsdom from 30.0.2 to 30.0.4 in /ui by @dependabot[bot] in #2290
- deps: bump jest from 30.0.3 to 30.0.4 in /ui by @dependabot[bot] in #2283
- deps: bump @babel/preset-env from 7.27.2 to 7.28.0 in /ui by @dependabot[bot] in #2277
- deps: bump @types/node from 24.0.7 to 24.0.10 in /ui by @dependabot[bot] in #2293
- deps: bump dotenv from 16.5.0 to 17.0.1 in /ui by @dependabot[bot] in #2280
- deps: bump @babel/standalone from 7.27.7 to 7.28.0 in /ui by @dependabot[bot] in #2291
- deps: bump @babel/core from 7.27.7 to 7.28.0 in /ui by @dependabot[bot] in #2284
- deps: bump globals from 16.2.0 to 16.3.0 in /ui by @dependabot[bot] in #2282
- deps: bump cronstrue from 2.61.0 to 3.0.0 in /ui by @dependabot[bot] in #2279
- build(deps): bump org.apache.commons:commons-lang3 from 3.17.0 to 3.18.0 in /api by @dependabot[bot] in #2305
- deps: bump software.amazon.awssdk:bom from 2.31.77 to 2.31.78 by @dependabot[bot] in #2318
- deps: bump @types/node from 24.0.10 to 24.0.13 in /ui by @dependabot[bot] in #2317
- deps: bump eslint from 9.30.1 to 9.31.0 in /ui by @dependabot[bot] in #2315
- deps: bump @babel/standalone from 7.28.0 to 7.28.1 in /ui by @dependabot[bot] in #2310
- deps: bump @typescript-eslint/parser from 8.35.1 to 8.36.0 in /ui by @dependabot[bot] in #2307
- deps: bump org.liquibase:liquibase-core from 4.32.0 to 4.33.0 by @dependabot[bot] in #2308
- deps: bump dotenv from 17.0.1 to 17.2.0 in /ui by @dependabot[bot] in #2306
- deps: bump typescript-eslint from 8.35.1 to 8.36.0 in /ui by @dependabot[bot] in #2311
- deps: bump vite from 7.0.2 to 7.0.4 in /ui by @dependabot[bot] in #2312
- deps: bump luxon from 3.6.1 to 3.7.1 in /ui by @dependabot[bot] in #2314
- deps: bump core-js-pure from 3.43.0 to 3.44.0 in /ui by @dependabot[bot] in #2313
- deps: bump antd from 5.26.4 to 5.26.6 in /ui by @dependabot[bot] in #2340
- deps: bump com.azure:azure-storage-blob from 12.30.1 to 12.31.0 by @dependabot[bot] in #2331
- deps: bump commons-io:commons-io from 2.19.0 to 2.20.0 by @dependabot[bot] in #2330
- deps: bump software.amazon.awssdk:bom from 2.31.78 to 2.32.4 by @dependabot[bot] in #2328
- deps: bump com.microsoft.azure:msal4j from 1.21.0 to 1.22.0 by @dependabot[bot] in #2327
- deps: bump vite from 7.0.4 to 7.0.5 in /ui by @dependabot[bot] in #2338
- deps: bump org.apache.maven:maven-artifact from 3.9.10 to 3.9.11 by @dependabot[bot] in #2329
- deps: bump html-react-parser from 5.2.5 to 5.2.6 in /ui by @dependabot[bot] in #2339
- deps: bump eslint-config-prettier from 10.1.5 to 10.1.8 in /ui by @dependabot[bot] in #2337
- deps: bump com.google.cloud:libraries-bom from 26.63.0 to 26.64.0 by @dependabot[bot] in #2326
- deps: bump eslint-plugin-prettier from 5.5.1 to 5.5.3 in /ui by @dependabot[bot] in #2336
- deps: bump cronstrue from 3.0.0 to 3.1.0 in /ui by @dependabot[bot] in #2335
- deps: bump @types/node from 24.0.13 to 24.0.15 in /ui by @dependabot[bot] in #2333
- deps: bump react-router-dom from 7.6.3 to 7.7.0 in /ui by @dependabot[bot] in #2332
- deps: bump form-data from 4.0.2 to 4.0.4 in /ui by @dependabot[bot] in #2341
- deps: bump @vitejs/plugin-react from 4.6.0 to 4.7.0 in /ui by @dependabot[bot] in #2334
- deps: bump axios from 1.10.0 to 1.11.0 in /ui by @dependabot[bot] in #2345
- deps: Update buildpack version by @alfespa17 in #2352
- deps: Update springboot starter client by @alfespa17 in #2355
Full Changelog: 2.26.0...2.27.0