woodpecker-ci/woodpecker v3.17.0

3.17.0

on GitHub

3.17.0 - 2026-07-31

❤️ Thanks to all contributors! ❤️

@6543, @AnayGarodia, @DerRockWolf, @Kernald, @Komzpa, @OCram85, @TowyTowy, @cyphercodes, @glitch-ux, @healdropper, @ivanvc, @jleider, @kanywst, @nicolasbatistoni, @qwerty287, @rfinnie, @roian6, @xoxys, @youdie006, @zmully

🔒 Security

• Update module github.com/getkin/kin-openapi to v0.144.0 [SECURITY] [#6896]
• Make grpc secret autogenerated [#6845]
• Gate Kubernetes nodeSelector backend step config behind agent config [#6809]

✨ Features

• WebUI: show runtime workflow errors [#6577]

📈 Enhancement

• Add Docker backend AppArmor profile option [#6909]
• refactor: rework k8s utils to handle resource names and labels [#6855]
• Make matrix axis permutation order deterministic [#6847]
• feat(server): add unix socket permission option [#6839]
• Add step type label to step-level Prometheus metrics [#6824]
• Stamp trusted commit-branch and event pod labels [#6802]
• Rename CI_COMMIT_PRERELEASE to CI_PIPELINE_RELEASE_PRE [#6794]
• Rework pipeline data structure: Release & Tag [#6774]

🐛 Bug Fixes

• fix(server): guard DAG cycle check against filtered-out optional dependencies [#6915]
• all yaml unmarshalling should use maxDepth [#6911]
• Don't count step error as workflow runtime error [#6904]
• Do not allow 0 minute timeout [#6903]
• Fix pipeline queue default template data [#6906]
• Use toLabelValue instead of toDNSName in Kubernetes step label [#6890]
• ReFetch secrets on pipeline restart [#6857]
• fix(forgejo): treat 404 on empty repos as empty pull request list [#6872]
• fix(github): resolve tag pagination loop in release hook [#6870]
• Fix CreatePipeline retry [#6859]
• WebUI: unregister scaffold Tab on unmount and stable Tab order [#6842]
• WebUI: Fixes three bugs around component unmount and reset in compositions [#6843]
• fix(server): heal users left on forge_id=0 with closed registration [#6823]
• Correct forge_id and org handling on user/repo [#6820]

🧪 Tests

• Add fuzz target to make [#6828]
• Add mock for server scheduler [#6848]

📚 Documentation

• Remove dependency overrides [#6912]
• Document CLI configuration [#6899]
• Update pnpm to v11.17.0 [#6892]
• Update docs npm deps non-major [#6835]
• docs: document the scope of built-in environment variables [#6879]
• Add NestGuard plugin to plugins.json [#6873]
• Minor adjustments for API usage example [#6605]
• docs: add note about pull_request events with path filter and correct comment about on_empty [#6819]
• Update docs npm deps non-major [#6788]

📦️ Dependency

• Update dependency mvdan/gofumpt to v0.11.0 [#6926]
• Lock file maintenance [#6931]
• Update docker.io/mysql Docker tag to v26 [#6930]
• Update dependency jsdom to v30 [#6929]
• Update pre-commit hook hadolint/hadolint to v2.15.1 [#6927]
• Update golang-packages [#6920]
• Update module github.com/mattn/go-sqlite3 to v1.14.49 [#6919]
• Update module gitlab.com/gitlab-org/api/client-go/v2 to v2.53.0 [#6917]
• Update golang-packages [#6910]
• Update web npm deps non-major [#6894]
• Lock file maintenance [#6901]
• Update module github.com/docker/go-connections to v0.8.0 [#6900]
• Update dependency fast-uri to v4 [#6897]
• Update golang-packages [#6889]
• Update dependency brace-expansion to v5 [#6895]
• Update pre-commit hook rbubley/mirrors-prettier to v3.9.6 [#6893]
• Update golang-packages [#6883]
• Update web npm deps non-major [#6866]
• Update golang-packages [#6867]
• Update pnpm to v11.15.0 [#6865]
• Update pre-commit hook igorshubovych/markdownlint-cli to v0.49.1 [#6861]
• Update dependency pinia to v4 [#6864]
• Update gitea/gitea Docker tag to v1.27 [#6863]
• Update web npm deps non-major [#6862]
• Update docker.io/woodpeckerci/plugin-ready-release-go Docker tag to v4.1.2 [#6860]
• Update golang-packages [#6858]
• Update web npm deps non-major [#6815]
• Update golang-packages [#6821]
• Update docker.io/woodpeckerci/plugin-docker-buildx Docker tag to v6.1.1 [#6834]
• Update docker.io/woodpeckerci/plugin-codecov Docker tag to v2.3.2 [#6833]
• Update dependency golang to v1.26.5 [#6832]
• Update golang-packages [#6785]
• Lock file maintenance [#6816]
• Update pnpm to v11.10.0 [#6814]
• Update module github.com/cenkalti/backoff/v6 to v7 [#6812]
• Update web npm deps non-major [#6787]
• Lock file maintenance [#6799]