Harness Release Notes Summaries
Explore release notes from the last 30 days across the Harness Platform and modules.
INFO
Please review the full module release notes by selecting a module in the sidebar, or using the View full release notes links beside each module summary.
Looking for available features rather than recent changes? You can explore Beta and Limited GA features across Harness modules on the Feature Availability page.
Platform Release Notes
Platform
View full release notes →User Management & Access Control
- Added request payload validation and clearer error handling for the Role Assignment filter APIs.
- Resolved an issue where API Keys and Personal Access Tokens remained active after a user was deleted; they are now automatically cleaned up and deleted upon user removal.
- Fixed a bug that caused the User Groups list to fail when reusable roles with identical identifiers were assigned across different scopes.
- Fixed incorrect API responses returned to users with partial view permissions during delete operations.
APIs & Integration
- Enhanced the reliability and tracking of the Purchase Credits API by making database operations atomic and improving overage logging.
- Updated the API documentation for ending user impersonation to accurately reflect the correct response behavior.
System Stability & Performance
- Resolved a race condition to ensure more consistent system behavior and stability.
- Restored a missing Redis configuration required for proper backend services functionality.
Delegate
View full release notes →Security & Dependency Updates
- Resolved a security vulnerability in the Glassfish dependency.
- Resolved a security vulnerability in the Jetty framework dependency.
- Resolved a security vulnerability in the Apache CXF dependency.
Connector & Integration Improvements
- Improved Terraform Provider connector validation to use its own delegate selector, preventing validation failures when different secret managers and Git connectors use separate delegates.
- Pull request triggers now require API access to be enabled on Git connectors to ensure pipelines fail early with a clear error instead of failing silently.
- Resolved an issue where Self-Managed Platform AWS connectors failed with a generic error message.
Deployment & Pipeline Execution
- Fixed an issue where ECS scheduled scaling failed when start or end times included timezone offsets.
- Added runtime support for destination and header routing fields within step configurations.
- Fixed an issue where the Terraform Cloud Apply step would intermittently retry despite completing successfully due to log streaming disconnections.
- Resolved a delegate selector collision during Helm Canary Deployments when using delegate-pinned Git connectors with different selectors.
Error Handling & Diagnostics
- Fixed a potential crash in Continuous Delivery error reporting when password resolution returns empty values.
- Improved error messaging for deployments using empty or invalid Amazon EKS cluster names, replacing generic script failures with a clear validation message.
Self-Managed Enterprise Edition
View full release notes →Security & Authentication
- Enabled passing delegate selector information as AWS session tags in OIDC tokens to enforce IAM policies based on executing delegates.
- Added support for OIDC authentication and automatic STS request routing in AWS GovCloud regions.
- Resolved an issue where secret values were logged in plaintext during Custom Secret Manager test connections.
Build & Cache Intelligence
- Improved build tool binary management and rollbacks by utilizing versioned command-line binaries in runners.
- Enhanced Test Intelligence splitting accuracy by using historical average durations for more balanced parallelism.
- Added support for caching NuGet dependencies based on environment variables.
- Added the ability to override Azure-specific storage settings in Cache Intelligence.
- Resolved validation failures when pulling Helm charts directly from Amazon ECR without needing a dummy repository workaround.
Deployment & Git Integration
- Added direct deployment support to Azure Container Apps, enabling canary deployments and keyless OIDC authentication.
- Enabled referencing pipeline configurations and input sets in Git using Git tags for trigger-based executions.
- Introduced a dry-run validation API to check pipeline configurations against validation rules and schemas before committing to Git.
- Fixed an issue where Amazon S3 configuration files intermittently experienced significant download delays.
- Resolved an issue where Amazon S3 artifact triggers failed following a delegate upgrade.
Governance & Administration
- Added a new Executions Management page providing account-level visibility, filtering, and bulk cancellation for queued pipeline executions.
- Resolved an incorrect "last admin" warning when deleting users at organization or project scopes.
- Prevented the creation of new entities, such as folders, secrets, and services, using reserved keywords to avoid configuration issues.
- Fixed an issue where user groups could not be sorted by creation date in the user interface.
- Fixed an issue where warning messages for specific policy evaluation checks did not display correctly in the user interface.
Platform & APIs
- Optimized the List Environments API to prevent timeouts and improve response times.
- Standardized module name matching to be case-insensitive for configuration consistency.
AI for DevOps & Automation
Continuous Delivery & GitOps
View full release notes →Security & Authentication
- Added support for OIDC-based federated authentication in the Artifactory connector, enabling credential-free authentication using short-lived tokens.
- Added environment identifiers as session tags in AWS OIDC tokens, allowing you to enforce environment-specific policies and restrict production secrets to production pipelines.
- Added the ability to pass delegate selector information as AWS session tags in OIDC tokens, enabling environment-level secret isolation based on which delegate executes tasks.
- Resolved an issue where the pipeline ID was missing from OIDC subject claims during containerized step group executions.
Governance & Approvals
- Upgraded Harness AI capabilities for policies, enabling faster generation, optimization, and plain-language descriptions of Open Policy Agent rules without needing deep coding knowledge.
- Introduced a project-level setting to allow users without approval permissions to view approval step details during pipeline runs.
- Fixed a bug where Git configuration details were missing in the policy request payload during the initial creation of services, infrastructures, or environments.
Deployment & Infrastructure Platforms
- Added match logic options (AND/OR) for Istio traffic routing rules, letting you control whether all rules or just a single rule must match for request routing.
- Added an option to skip auto-scaling interactions during ECS rolling deployments to prevent API rate limit issues when deploying multiple services concurrently.
- Released updated Docker images for AWS CDK deployments containing the latest CDK library updates.
- Fixed an issue where temporary log streaming losses caused successful Terraform Cloud Apply steps to unnecessarily retry.
- Resolved a authorization error during Google Cloud Functions rollbacks by preserving invoker permissions.
- Fixed a rollback failure in ECS scheduled scaling caused by parsing issues with timezone-offset values.
- Resolved a delegate selector conflict that caused Helm canary deployments to fail when using delegate-pinned Git connectors.
Git Experience & Automation
- Updated pull request triggers to require API access on the linked Git connector, preventing silent execution failures.
- Introduced a dry-run validation API endpoint to validate pipeline configuration syntax, template expansions, and policies before committing changes to Git.
- Resolved an error about existing files when concurrently creating pipelines using Git Experience with the Terraform provider.
- Fixed an issue where the system mapped templates to the wrong repository context instead of the actual pipeline repository.
User Interface & Visibility
- Fixed an issue where the GitOps step returned incomplete rollout status data in execution logs.
- Fixed a display issue where service runtime inputs were missing from the inputs tab of pipeline execution views.
Continuous Integration
View full release notes →Test Management & Intelligence
- Added a test management dashboard that displays all tests, including quarantined and flaky tests, along with their health status and last run results.
- Enhanced test-splitting accuracy in Test Intelligence by using historical average durations to achieve more balanced parallel execution.
Network & Security
- Added the ability to configure network egress restrictions for cloud-hosted Linux and Windows build environments directly from the Harness user interface.
- Improved PrivateLink connection reliability by automatically configuring delegate selectors for private-connect connectors.
- Ensured proxy-enabled platform connector validation works correctly in PrivateLink environments by routing validation tasks through Harness Cloud.
- Routed source control management tasks for proxy-enabled connectors through cloud delegates to enable source code operations over private networks.
- Upgraded the Harness CLI tool to resolve high-severity security vulnerabilities.
- Patched known security vulnerabilities in the build caching image.
- Fixed an issue where log sanitization and masking patterns did not apply consistently to container-based steps on Kubernetes.
Build Cache & Performance
- Optimized build initialization for Kubernetes pipelines by reducing payload sizes, resulting in faster and more reliable build startups.
- Introduced support for Azure Blob Storage as a backend for build caching, expanding storage options beyond Amazon S3 and Google Cloud Storage.
- Fixed an issue where exporting AWS credentials as output variables caused Cache Intelligence steps to fail with a permission error.
- Resolved a cache key collision issue in Docker Layer Caching when running multiple build and push steps in parallel across different platform variants.
- Fixed an issue that prevented custom access control list configurations from being applied to cached objects in Cache Intelligence steps.
Infrastructure & Build Execution
- Enabled support for custom container images from private registries in cloud-hosted builds.
- Improved management and rollback capabilities for Harness CLI binaries within execution environments.
- Resolved a permission denied error encountered during Git operations in self-managed environments.
- Resolved a file system error that caused Build and Push steps utilizing Buildx to fail.
- Resolved a false outdated-version warning that appeared when referencing runner images using SHA-256 digests instead of tags.
- Fixed an issue where referencing unresolved environment variables resulted in null values being added to pipeline execution tags.
Artifact Registry
View full release notes →Security & Risk Mitigation
- Block artifacts that exceed defined open-source risk thresholds, evaluating factors like maintenance, known vulnerabilities, and community health.
- Prevent the use of artifact versions flagged as malicious in threat intelligence databases.
Artifact Lifecycle Management
- Configure cleanup rules to soft-delete artifact versions based on age, count, or name patterns, while keeping them recoverable during a set grace period.
- Implement retention rules to protect critical artifacts from any manual or automated deletion attempts.
Governance & Visibility
- Define cleanup and retention rules at the account, organization, or project level and apply them across multiple registries.
- Preview which artifact versions will be affected by a rule before enabling it using dry-run mode.
- Track rule executions with detailed logs showing which artifact versions were deleted or retained.
- Receive centralized notifications automatically when cleanup rules or dry-run simulations finish executing.
AI for Testing & Resilience
Feature Management & Experimentation
View full release notes →Pipeline Integration
- Integrated Feature Management and Experimentation capabilities directly within Harness Pipelines.
API & Developer Tools
- Introduced a new Admin API endpoint to fully update feature flag definitions within an environment.
Feature Flags
View full release notes →Documentation & Resources
- Refer to the Feature Flags release notes page for the latest updates and documentation.
Chaos Engineering
View full release notes →Experiment Execution & Controls
- Added conditional execution for faults, probes, and actions to control step execution based on custom conditions.
- Enabled remote Kubernetes execution for Linux and Windows experiments, allowing you to run probes, actions, and faults against a default configured infrastructure.
- Removed legacy Prometheus, Datadog, and Dynatrace probe types from Kubernetes (migration to current equivalent probes is required).
- Improved experiment stability by adding support for Pending and Failed statuses in helper pods.
Security & Infrastructure
- Resolved high-severity security vulnerabilities in the log-watcher component.
- Enabled the propagation of infrastructure security contexts to experiment and helper pods.
- Enabled the propagation of DDCR resources to experiment and helper pods.
- Added support for extra volume mounts and volumes in background processor jobs.
User Interface & Dashboards
- Introduced a new risk insights landing page and associated navigation.
- Enabled the "Download report" button on the chaos subscriptions page.
- Resolved an issue where load test dashboard graphs displayed gaps during transient gateway failures.
- Fixed missing action icons and titles on the input set screen during experiment execution.
- Added missing tooltips to the advanced configuration options during chaos onboarding.
Permissions & APIs
- Simplified permissions for running experiments from pipelines by consolidating execution permissions.
- Corrected inaccurate error messages displayed during permission errors.
- Added filtering support for the chaos experiment list in the REST API.
AI Test Automation
View full release notes →Test Creation & Management
- Generate and download test cases in natural language.
- Prevented the accidental creation of duplicate test suites.
- Ensured creating a task from test steps correctly enables nested tasks.
- Updated general tasks to run exclusively as manual actions.
Test Execution & Playwright
- Introduced the Playwright execution engine to run tests.
- Added drag-and-drop support for Playwright test steps.
- Added clipboard interaction support for Playwright test steps.
- Disabled user click commands during automated execution to prevent test interference.
User Experience & Sessions
- Improved session expiry warnings and timeout handling.
- Enhanced the visual layout and formatting of session components.
Last updated Jun 15, 2026
Runbooks & Automation
- Added the ability to duplicate existing runbooks, including all configurations and metadata, to easily create variations without starting from scratch.
- Introduced support for Common Expression Language (CEL) alongside Mustache templates, enabling advanced logic, regex matching, and datetime formatting in alert rules, trigger conditions, and runbooks.
Collaboration & Integrations
- Upgraded the Google Chat integration with bidirectional timeline sync and new automated runbook actions to create spaces and manage members.
- Updated Slack incident summaries to open in a modal dialog, improving readability and reducing channel clutter.
Incident Response & On-Call
- Enhanced escalation policies to target specific rotations within a schedule, allowing for more granular on-call routing.
AI for Security & Compliance
Security Testing Orchestration
View full release notes →Jira Integration Updates
- Improved the Jira integration to display vulnerability summaries and occurrence details directly within Jira tickets.
- Added support for creating Jira tickets for issues found in non-baseline targets, such as feature branches and pull requests.
Exemption Management
- Introduced custom duration limits for exemptions that can be configured by both requesters and approvers.
- Enhanced the exemption review process to give approvers greater control and flexibility when overriding requests.
Search & Filtering Fixes
- Fixed an issue where searching by Issue ID did not return results for remediated or exempted issues on the Issues page.
- Fixed an issue where stage names were missing next to step names in the Vulnerabilities tab filters.
Supply Chain Security
View full release notes →Access Control & Governance
- Introduced granular Role-Based Access Control (RBAC) across Account, Organization, and Project scopes to manage permissions for Supply Chain Security workflows.
- Enforced restrictions for view-only roles, ensuring users without write permissions cannot modify Supply Chain Security resources.
Security & Risk Management
- Added detection for malicious packages and typosquatting in open-source dependencies, enabling risk filtering and policy-based enforcement in pipelines.
- Introduced automatic License Family Classification for Software Bill of Materials (SBOM) to streamline license compliance and policy enforcement.
Integrations & Workflows
- Added support for discovering, onboarding, and managing Bitbucket repositories directly within Supply Chain Security.
- Resolved an issue where Software Bill of Materials (SBOM) upload steps failed due to custom connection settings being applied incorrectly.
AI for Cost & Optimization
Cloud Cost Management
View full release notes →Overview & Dashboard Updates
- Enjoy a revamped Cloud & AI Cost Management Overview page with a refreshed layout and more granular cost display controls.
- Access your starred Perspectives directly from the Overview page, with automatic default views shown if none are starred.
- Identify where spend is concentrated using the new Top Spenders card, featuring quick tabs to slice your data.
- Track total active anomalies more easily with consolidated calculations that display resource-level and cost-level anomalies on the Overview page.
Cost Exploration & Analytics
- Ensure accurate node pool savings calculations for Net-amortized cost types, matching displayed savings with the selected-cost basis.
- Navigate Cost Explorer more easily with clearer messaging in the Advanced Filters drawer and improved preferences handling for filtered-out providers.
- View consolidated renewal events in Commitment Orchestration with a single indicator that displays detailed info on hover.
- Analyze AI service execution and attribute trace-level costs using the new Service Traces drawer in Cost Explorer.
Governance & Integrations
- Configure cloud cost preferences and savings programs for AWS, GCP, and Azure using a new, unified Settings drawer in Asset Governance.
- Connect OpenAI and Anthropic accounts through a secure, guided three-step setup wizard with real-time connection testing.
AI DLC Insights
View full release notes →Documentation & Resources
- Refer to the dedicated AI DLC Insights release notes page for updates during this period.