Create a key, follow this source in the app, then request entries for your selected sources. Free covers 10 followed sources; Pro includes unlimited catalog access with REST and local MCP.
September 2026 Version 1.157.0 New Features and Enhancements Added zero-config npm caching to Cache Intelligence. Node.js and npm projects are now cached automatically, with no custom path configuration required, reducing dependency install time on repeat builds. (CI-24147) Added OIDC authentication support to the Artifactory Upload step. You can now upload artifacts to JFrog Artifactory using an OIDC-authenticated Artifactory connector, instead of requiring username-and-password or anonymous credentials. (CI-24560, ZD-122881) Added AWS session tag support for Workload Identity. When authenticating to AWS with Workload Identity, session tags configured on the connector are now propagated to the assumed role. (CI-24636) Fixed Issues Fixed an issue where the Build and Push step failed with a fatal buildx builder bootstrap error ( exit status 1 ) when Docker Layer Caching was enabled on Harness Cloud VM build infrastructure. (CI-24717, ZD-124075) Fixed an issue where a secret resolution failure from AWS Secrets Manager surfaced a misleading There are no eligible delegates present error. CI task failures now show a clearer, generic hint that points to the actual cause. (CI-24387, ZD-117103) Fixed an issue where a manual branch build could intermittently succeed while <+codebase.branch> remained unresolved, because the codebase step silently swallowed SCM response errors. The codebase step now fails when the SCM response cannot be processed. (CI-24617, ZD-123400) Harness Images Updates Image Change Previous Version New Version harness/ci-addon Version update (CI-24779) 1.18.33 1.18.34 harness/ci-addon (rootless) Version update (CI-24779) 1.18.33-rootless 1.18.34-rootless harness/ci-lite-engine Version update (CI-24779) 1.18.33 1.18.34 harness/ci-lite-engine (rootless) Version update (CI-24779) 1.18.33-rootless 1.18.34-rootless plugins/cache (gcs, s3, azure, generic) Zero-config npm caching (CI-24147) 1.10.11 1.10.12 plugins/artifactory OIDC authentication support (CI-24560) 1.9.0 1.9.3 Version 1.156.0 New Features and Enhancements Added an ignoreMissingPaths option to the Save Cache steps (S3, GCS, Azure, and generic). When enabled, the step skips paths that do not exist instead of failing, making cache creation more resilient for optional or conditionally generated directories. (CI-24067) Fixed Issues Fixed an issue where adding internal CA certificates to the Windows certificate store spawned a separate process for each certificate, causing resource exhaustion on Windows build pods. Certificates are now imported in a single batched operation. (CI-24495, ZD-122268) Fixed an issue where the TI proxy returned an empty savings response message was logged on every step of Kubernetes builds. The warning is now suppressed for steps that are not Test Intelligence optimized. (CI-24551) Harness Images Updates Image Change Previous Version New Version harness/ci-addon Version update (CI-24634) 1.18.32 1.18.33 harness/ci-addon (rootless) Version update (CI-24634) 1.18.32-rootless 1.18.33-rootless harness/ci-lite-engine Version update (CI-24634) 1.18.32 1.18.33 harness/ci-lite-engine (rootless) Version update (CI-24634) 1.18.32-rootless 1.18.33-rootless plugins/cache (drone-cache) ignoreMissingPaths support (CI-24067) 1.10.10 1.10.11 Version 1.155.0 New Features and Enhancements Added support for custom subject claims in the Azure OIDC plugin. You can now define a custom subject claim using Harness expressions when authenticating to Azure with OIDC. (CI-20580) Added secret reference tracking for CI builds. Secrets referenced in CI pipelines now record their runtime usage, so you can see where a secret is consumed at the account, organization, and project levels. (CI-24119) Improved codebase step logs by printing the delegate task ID used to fetch codebase details, making it easier to correlate and troubleshoot Git clone operations. (CI-22292) Fixed Issues Fixed an issue where HARNESS_BASE_URL was masked in build logs because it was treated as a secret. It is now always exposed as a plain, non-secret environment variable. (CI-24378, ZD-122148, ZD-122280, ZD-122380) Fixed an issue where a sparse-checkout configuration leaked into subsequent Git Clone steps, causing incomplete clones. (CI-24388, ZD-122592) Fixed an issue where macOS pipelines were queued indefinitely on accounts that did not have macOS builds enabled. (CI-24315) Fixed an issue where remote debug ( CI_REMOTE_DEBUG ) did not work on the macOS local runner build infrastructure because the debug command did not skip its timeout. (CI-24163) Harness Images Updates Image Change Previous Version New Version harness/ci-addon Version update (CI-24540) 1.18.31 1.18.32 harness/ci-addon (rootless) Version update (CI-24540) 1.18.31-rootless 1.18.32-rootless harness/ci-lite-engine Version update (CI-24540) 1.18.31 1.18.32 harness/ci-lite-engine (rootless) Version update (CI-24540) 1.18.31-rootless 1.18.32-rootless plugins/buildx BuildKit upstream rebase (CI-23302) 1.3.25 1.3.26 plugins/buildx-ecr , buildx-acr , buildx-gar BuildKit upstream rebase (CI-23302) 1.5.5 1.5.6 harness/buildkit BuildKit upstream rebase (CI-23302) 1.0.20 1.0.21 harness/harness-cache-server Version update (CI-18519) 1.7.25 1.7.29 August 1, 2026 August 2026
Version 1.154.0 New Features and Enhancements Added Harness Artifact Registry (HAR) as a container registry option in the Test Intelligence step. You can now use registryRef to pull test runner images from HAR instead of requiring an external Docker connector. (CI-21929, ZD-114248) Fixed Issues Fixed an issue where OPA policy evaluation calls from CI Manager sent a JWT without principal claims, causing 401 authorization errors during step-time governance policy evaluation. (CDS-130610) Harness Images Updates Image Change Previous Version New Version harness/ci-addon Version update (CI-24371, CI-24309) 1.18.29 1.18.31 harness/ci-addon (rootless) Version update (CI-24371, CI-24309) 1.18.29-rootless 1.18.31-rootless harness/ci-lite-engine Version update (CI-24371, CI-24309) 1.18.29 1.18.31 harness/ci-lite-engine (rootless) Version update (CI-24371, CI-24309) 1.18.29-rootless 1.18.31-rootless Version 1.153.0 New Features and Enhancements Added Workload Identity support for CI Run steps, enabling OIDC cloud authentication (AWS, GCP, Azure, Vault) without requiring a connector. You can now define an identities block in your Run step to mint and federate OIDC tokens directly. (CI-23932) Added support for resource overrides for Build Intelligence and Cache Intelligence in V1 YAML pipelines. You can now configure custom resource limits directly in V1 pipeline YAML and templates. (CI-22033) Added Azure Blob Storage support for Docker Layer Caching (DLC) in V1 YAML pipelines. (CI-24192) Updated Harness Cloud default VM images. The Linux latest image tag now points to Ubuntu 24.04 (previously Ubuntu 22.04), and the macOS latest image tag now points to macOS Sequoia (previously macOS Sonoma). Pipelines explicitly pinned to a specific image version are not affected. macOS Sonoma is now deprecated. Fixed Issues Fixed an issue where the drone-git image update to version 1.7.23 or higher failed on ARM64 nodes due to an incorrect multi-architecture manifest resolution, causing "exec format error" during Git Clone steps. (CI-23890, ZD-119773) Fixed an issue where Gradle auto-injection corrupted the gradle.properties file when it did not end with a trailing newline, causing build failures. (CI-24154, ZD-121100) Harness Images Updates Image Change Previous Version New Version harness/drone-git ARM64 manifest fix (CI-23890) 1.7.20 1.7.25 harness/drone-git (rootless) ARM64 manifest fix (CI-23890) 1.7.20-rootless 1.7.25-rootless plugins/cache (all variants) Gradle auto-injection fix (CI-24154) 1.10.9 1.10.10 Version 1.152.0 New Features and Enhancements Added support for internal CA certificate injection in Windows build pods. When configured, custom CA certificates are automatically imported into the Windows certificate store during CI builds, enabling connectivity to internal registries and services behind corporate CAs. This feature is behind a feature flag. (CI-24139) Improved egress proxy support for Build and Push steps using the buildx driver. Standard proxy environment variables are now forwarded to the buildx builder, and custom BuildKit containers trust the configured CA certificate path. (CI-23744) Fixed Issues Fixed an issue where the ci-addon process crashed when calculating tests in parallel with Test Intelligence enabled and no matching test files were found. (CI-23548, ZD-117896) Fixed an issue where Cache Intelligence selected an incorrect or default cache path instead of the user-specified source paths. Auto-detection is now disabled when custom source paths are provided. (CI-24161, ZD-120996, ZD-121307) Fixed an issue where Build Intelligence did not honor the AWS connector cross-account role for S3 backend with IRSA (IAM Roles for Service Accounts). (CI-23624, ZD-118233) Improved hcli security by resolving known vulnerabilities. (CI-23724, ZD-120547) Harness Images Updates Image Change Previous Version New Version harness/ci-addon Windows CA cert injection (CI-24139) 1.18.27 1.18.29 harness/ci-lite-engine Windows CA cert injection (CI-24139) 1.18.27 1.18.29 plugins/buildx Egress proxy improvements (CI-23744) 1.3.23 1.3.25 plugins/buildx-ecr , buildx-acr , buildx-gcr , buildx-gar Egress proxy improvements (CI-23744) 1.5.3 1.5.5 harness/buildkit Egress proxy CA trust (CI-23744) 1.0.19 1.0.20 plugins/docker , ecr , acr , gcr , gar Version update 21.3.2 21.3.3 harness/harness-cache-server Version update 1.7.23 1.7.25 Version 1.151.0 New Features and Enhancements Improved egress proxy support by passing proxy environment variables at the step level and moving docker daemon reload to lite-engine. This resolves secret resolution issues for pipelines using egress proxy configuration. (CI-23936) Fixed Issues Fixed an issue where secrets were not resolved in DBOps Schema Apply clone codebase child steps on Kubernetes build infrastructure when the db_schema_clone_script_secrets_provided_runtime account setting was enabled. (CI-24059) Resolved intermittent image pull failures affecting BuildKit-based Build and Push steps by pinning the BuildKit image to a stable version. (CI-23987, ZD-120087, ZD-120475, ZD-120589) Harness Images Updates Rolled back the Buildkit image from 1.0.20 to 1.0.19 to resolve intermittent image pull failures. (CI-23987) July 1, 2026 July 20263 months ago
Version 1.150.0 New Features and Enhancements Added global queuing for macOS builds on Harness Cloud. Mac build executions are now queued globally to improve capacity utilization and reduce stockout failures. (CI-23880) Fixed Issues Fixed an issue where the Build and Push step failed with Kaniko 1.13.9 due to overly strict symlink validation that rejected valid symbolic links (e.g., /etc/pki/java/cacerts ) with a "resolves outside destination" error. (CI-23751, ZD-119116, ZD-119213, ZD-120017) Fixed an issue where Harness Cloud builds on GCP runners failed with Public ECR rate-limit errors during plugin image pulls. The error message now surfaces actionable guidance to switch to GAR-hosted images. (CI-23169, ZD-115110) Improved hcli security by upgrading to v0.21 to resolve high and medium severity CVEs in delegate and CI addon images. (CI-23724) Harness Images Updates Upgraded Kaniko plugin images ( kaniko , kaniko-ecr , kaniko-gcr , kaniko-gar , kaniko-acr ) from 1.13.9 to 1.13.10. (CI-23751) Upgraded Buildkit image from 1.0.19 to 1.0.20. (CI-23744) Version 1.149.0 New Features and Enhancements Added support for HARNESS_CA_PATH in Docker and Buildx plugins, enabling builds behind TLS-intercepting egress proxies. The Docker plugin installs the CA into the host trust store before starting the daemon. The Buildx plugin forwards proxy environment variables and the CA path to the BuildKit container, resolving x509: certificate signed by unknown authority errors for base-image pulls. (CI-23743, CI-23744) Added Windows Server 2025 support for Cache, GCS, S3, Artifactory, and Buildx plugins. You can now run these plugins on Windows 2025 build infrastructure. (CI-23758, CI-23733, CI-23661) You can now opt in to CI init reduction time at the stage level by setting the stage variable CI_INIT_REQUIRED_FIELDS_ONLY to true . This reduces init time for stages with large step configurations without requiring the account-level feature flag CI_INIT_REQUIRED_FIELDS_ONLY to be enabled. This allows individual teams to adopt the optimization per project after upgrading their delegate. Requires delegate version 26.06.89309 or later. (CI-23664) Improved Build and Push step performance on Kubernetes by eliminating double tar serialization in the Buildx plugin. Build + Scan + Push workflows now output images directly without intermediate tar load/save steps. (CI-22998) Harness Images Updates Upgraded Drone Git from 1.7.19 to 1.7.23. Upgraded Drone Docker plugins from 21.3.0 to 21.3.2 with HARNESS_CA_PATH and proxy support. (CI-23743) Upgraded Buildx plugins from 1.3.20 to 1.3.22 with proxy forwarding and CA trust for BuildKit. (CI-23744) Upgraded Buildkit to 1.5.2. (CI-23733) Upgraded Cache Plugin from 1.6.10 to 1.6.12. (CI-23733) Version 1.148.0 New Features and Enhancements You can now view CPU and memory usage metrics for pipeline stages running on VM build infrastructure, giving better visibility into resource utilization during CI builds. (CI-22896) Reduced initialization time for CI pipelines by removing the redundant execution graph copy from the initialization payload. This optimization is enabled by default for all V0 YAML pipelines across all build infrastructure types (Kubernetes, VMs, Harness Cloud, and others) and does not require a feature flag to activate. If you experience unexpected behavior, you can get this optimization disabled by enabling the kill-switch feature flag CI_DISABLE_INIT_STAGE_EXECUTION_STRIP for your account, which restores the previous full-copy behavior. (CI-23660, ZD-118018) Fixed Issues Fixed an issue where Sysdig Drift Control blocked the drone-git plugin execution, causing database change workflows to fail. (CI-22635, ZD-113405) Fixed an issue where the expression pipeline.sequenceId returned null when manually running a build using a Harness Code repository with the CI_ENABLE_BRANCH_SEQUENCE_ID feature flag enabled. The expression now resolves correctly for both triggered and manual builds. (CI-22819, ZD-114394) Fixed a database index build failure related to the pipeline branch sequence feature that occurred due to duplicate data in production. (CI-23050) Fixed an issue where secret identifiers were not displayed in error messages during Initialize step failures. Secret names now appear in failure logs, improving troubleshooting visibility. (CI-23116, ZD-116285) Fixed an issue where connectors configured in CI Default Settings were parsed even when Test Intelligence features were disabled, causing unnecessary processing overhead. (CI-23314) Fixed an issue where Git Clone operations failed in certain advanced configurations. (CI-23523) Fixed an intermittent credential issue where the Push to ECR step failed when running multiple Build and Push steps in parallel with different connectors within the same stage. (CI-23591, ZD-118232) Fixed an issue where secret values were incorrectly printed as Java object references (e.g., SecretRefData@77d2ae9e ) in logs instead of being properly masked. (CI-23597) Improved CI Manager API security by enforcing stricter account-tenant isolation on API endpoints. (CI-23645) Improved harnesssecure/cache security by resolving vulnerabilities in the container image. (CI-23240) Improved harnesssecure/artifactory security by resolving vulnerabilities in the container image. (CI-23241) Harness Images Updates Image Change Previous Version New Version harness/ci-addon Version update 1.18.26 1.18.27 harness/ci-lite-engine Version update 1.18.26 1.18.27 Version 1.147.0 Fixed Issues Fixed an issue where secret retrieval from Hashicorp vault was failing. (CI-23109) Improved harnesssecure/kaniko security by resolving vulnerabilities in the container image. (CI-23227) June 1, 2026 June 20264 months ago
