Harness Release Notes Summaries
Explore release notes from the last 30 days across the Harness Platform and modules.
INFO
Please review the full module release notes by selecting a module in the sidebar, or using the View full release notes links beside each module summary.
Looking for available features rather than recent changes? You can explore Beta and Limited GA features across Harness modules on the Feature Availability page.
Platform Release Notes
Platform
View full release notes →User & Access Management
- Resolved an issue where API Keys and Personal Access Tokens (PATs) for deleted users remained active, ensuring they are now automatically deleted when a user is removed.
- Fixed an issue where listing User Groups could fail when reusable roles with the same identifier but different scopes were assigned at the same scope level.
- Fixed an issue where users with partial view permissions received incorrect responses from the deletion API.
API & Integration Updates
- Improved error responses and request handling by adding payload validation to the Role Assignment filter API endpoints.
- Improved the reliability of the Purchase Credits API with atomic database operations and enhanced logging for overage details during credit resets.
- Updated API documentation to accurately reflect the behavior of the end impersonation endpoint when no active session exists.
System Performance & Stability
- Fixed a backend race condition to improve overall system stability and performance.
- Restored missing system configurations required to ensure proper platform performance and functionality.
Delegate
View full release notes →Security & Dependency Updates
- Resolved security vulnerabilities in the Jetty framework.
- Resolved security vulnerabilities in the Apache CXF framework.
- Resolved security vulnerabilities in the Azure Security Key Vault library.
Integrations & Secrets Management
- Improved Terraform Provider connector validation to use the connector's specified delegate selector, preventing validation failures across different accounts.
- Resolved an issue where AWS Secrets Manager failed after a delegate upgrade due to credential caching conflicts.
- Fixed a URL formatting issue for AWS Secrets Manager in newer AWS regions.
Pipeline Triggers & Artifacts
- Updated pull request triggers to fail early with a clear error message when the associated Git connector lacks required API access.
- Fixed Amazon S3 artifact triggers that failed after upgrading the delegate due to an API migration issue.
- Resolved intermittent custom artifact polling failures during parallel executions by preventing temporary file naming conflicts.
- Improved artifact triggers to gracefully handle missing packages at creation time rather than failing permanently.
Network & Core Platform
- Resolved metadata transfer issues that occurred during task execution.
- Fixed data collection connectors to properly respect no-proxy settings when a proxy is configured on the delegate.
Self-Managed Enterprise Edition
View full release notes →Security & Governance
- Enabled OIDC Delegate Selectors to pass delegate information as AWS session tags, allowing fine-grained IAM policy enforcement and environment-level secret isolation.
- Added support for OIDC authentication in AWS GovCloud regions with automated Security Token Service routing.
- Fixed an issue where secret values were exposed in plaintext in delegate logs during Custom Secret Manager connection tests.
- Resolved an issue where Open Policy Agent policy checks configured with a warning status did not display correctly in the interface.
- Corrected a misleading warning that incorrectly flagged users as the last administrator when deleting them at the organization or project scope.
Pipeline Configuration & Execution
- Added a validation API endpoint to dry-run and validate pipeline configurations, template expansions, and policies before committing changes to Git.
- Added support for referencing pipeline configurations and input sets in Git using Git tags for more stable release workflows.
- Introduced a new Executions Management page in Account Settings to view queue positions and cancel queued pipeline executions in bulk.
- Updated module name matching to be case-insensitive for improved configuration consistency.
- Prevented the creation of new entities with reserved system identifiers to avoid issues during updates or deletions.
Deployments & Cloud Integrations
- Added direct deployment support for Azure Container Apps, enabling serverless container deployments with canary strategies, instant rollbacks, and OIDC authentication.
- Resolved intermittent delays when downloading configuration files from Amazon S3.
- Fixed OCI Helm chart validation for Amazon ECR to work seamlessly without requiring dummy repository workarounds.
- Fixed an issue where Amazon S3 artifact triggers failed after a delegate upgrade.
CI & Build Tools
- Updated Harness CI to use versioned CLI binaries in Lite-Engine and Docker Runner for safer binary management and rollbacks.
- Improved test-splitting accuracy in Test Intelligence by utilizing historical average durations for more balanced parallel tests.
- Added NuGet dependency caching in Cache Intelligence using standard environment variables.
- Added flexibility to override Azure-specific fields in Cache Intelligence settings.
Platform Performance & UI
- Optimized the List Environments API to prevent timeouts by removing redundant permission checks.
- Fixed a sorting issue in the user interface where user groups were not ordered correctly by creation date.
AI for DevOps & Automation
Continuous Delivery & GitOps
View full release notes →Security & Access Control
- The Artifactory connector now supports OIDC authentication, enabling secure, credential-free federated authentication with JFrog Artifactory using short-lived tokens.
- AWS connectors now support environment-based session tags in OIDC tokens, allowing you to enforce environment-specific IAM policies and restrict production secrets to production pipelines.
- AWS connectors now pass delegate selector information as session tags in OIDC tokens, enabling IAM policy enforcement based on which delegates execute tasks.
- Pull Request triggers now require the linked Git connector to have API access enabled to ensure successful pipeline execution.
Deployment & Orchestration
- Added configurable match logic for Istio traffic routing steps, enabling more precise control over how requests are routed based on all or individual rules.
- ECS Rolling deployments now support skipping Application Auto Scaling API interactions, allowing you to manage auto-scaling externally and prevent API rate limiting.
- Updated the AWS CDK runner with the latest CDK version for CDK deployments.
- Fixed an issue where Helm canary deployments failed due to delegate selector conflicts when using delegate-pinned Git connectors.
- Fixed an issue where pulling OCI Helm charts from Amazon ECR failed unless an empty repository workaround was used.
- Fixed an Amazon S3 artifact trigger failure that occurred after a delegate upgrade.
- Fixed an issue in Cloud Run deployments where a blank image name triggered an infinite retry loop.
- Fixed an issue where Cloud Run deployments failed with a null pointer exception when no manifests were configured.
Pipeline Governance & Validation
- Enhanced Harness AI capabilities to provide more accurate, context-aware policy generation and plain-language descriptions of existing OPA policies.
- Introduced a new dry-run validation API endpoint to validate pipeline YAML changes, schema, templates, and OPA policies before committing them to Git.
- Added a setting to allow users without approval permissions to view approval step details during pipeline execution while keeping approval actions disabled.
- Fixed an issue where Git configuration was missing from OPA request payloads during the creation of services, environments, or infrastructures.
- Improved validation for Amazon EKS infrastructure to display a clear error message instead of a JSON error when a cluster name is invalid or empty.
Developer Experience & Platform
- Fixed an issue where service runtime inputs were missing from the inputs section of pipeline executions.
- Fixed an issue where downloading configuration files from Amazon S3 experienced intermittent delays.
- Fixed a file-already-exists error that occurred in the Terraform provider during concurrent pipeline creation with Git Experience.
Continuous Integration
View full release notes →Security & Network Connectivity
- Added the ability to configure network egress allowlists for Linux and Windows cloud build VMs directly in the Harness UI.
- Improved PrivateLink connectivity reliability by automatically assigning the cloud delegate selector to private connectors.
- Ensured connector validation tasks for proxy-enabled platform connectors route correctly through Harness Cloud when using PrivateLink.
- Routed codebase source control tasks through Harness Cloud delegates to enable operations over private network paths.
- Patched security vulnerabilities in the cache plugin image.
- Resolved rate-limiting issues for public container image pulls by ensuring authenticated pulls are used when an AWS connector is available.
Build Caching & Performance
- Added support for Azure Blob Storage as a backend for build caching.
- Improved test splitting accuracy in Test Intelligence by using historical average test durations.
- Resolved Docker Layer Caching key collisions when running parallel build steps on different platforms.
- Fixed an issue where custom access control list configurations could not be applied to cache steps.
Cloud Infrastructure & Runners
- Added support for custom container images from private registries in Harness Cloud builds.
- Improved binary management and rollback capabilities by using versioned Harness CLI binaries.
- Resolved a permission denied error in self-managed environments during git-based source control operations.
- Fixed a file system error that caused Docker build steps to fail.
- Fixed an issue where unexpected build attestations were generated during artifact pushes to Google Artifact Registry when Docker Layer Caching was enabled.
Pipeline Execution & Visibility
- Fixed an issue where unresolved environment variables caused null values to be added to pipeline execution tags.
- Removed false warning messages about outdated image versions when using secure digest references.
- Resolved log upload timeouts for containerized step groups, ensuring complete log visibility during pipeline execution.
Artifact Registry
View full release notes →Security & Compliance
- Automatically block open-source artifacts that exceed configured risk thresholds, factoring in vulnerabilities, maintenance status, and community health.
- Identify and block artifact versions flagged as malicious in global threat intelligence databases.
Swift Package Support
- Support native Swift Package Manager workflows, including login, publish, and resolve commands.
- Host proprietary, private Swift packages securely within your Harness account.
- Cache packages from external Swift sources via upstream proxy support to accelerate builds.
File Storage & HTTP Workflows
- Manage build artifacts, reports, and configurations using path-based file storage.
- Push and pull files using standard HTTP clients like curl without needing a custom command-line plugin.
- Configure upstream proxy support to cache files from external HTTP sources directly through Harness.
Registry & Package Management
- Restore soft-deleted packages, versions, and registries from the Deleted tab or row menu.
- Soft-delete entire registries and cascade the deletion to all contained packages, with automatic parent registry restoration when a child is restored.
AI for Testing & Resilience
Feature Management & Experimentation
View full release notes →Documentation & Updates
- Refer to the Feature Management & Experimentation release notes page for the latest updates.
Feature Flags
View full release notes →Documentation & Updates
- Refer to the Feature Flags release notes page for the latest updates and detailed documentation for this period.
Chaos Engineering
View full release notes →Security & Access Control
- Propagated infrastructure security contexts to experiment and helper pods.
- Updated pipeline experiment executions to use a unified execution permission, deprecating the pipeline-specific permission.
- Resolved an issue where incorrect error messages were displayed for permission errors.
- Fixed access issues that prevented some users from viewing the subscriptions page.
User Interface & Experience
- Introduced a dedicated risk insights landing page and navigation routes.
- Enabled the ability to download reports directly from the subscriptions page.
- Added support for editing step names directly within Chaos Studio.
- Added user interface support for runtime inputs when configuring connectors.
- Updated the Windows infrastructure icon under ChaosGuard conditions for better visual clarity.
- Fixed an issue where experiment reports for Linux and Windows did not display environment details.
APIs & Integrations
- Added filtering capabilities to the chaos experiment list in the REST API.
- Resolved an issue with the experiment status filter in the V3 list experiment API.
Execution & Infrastructure
- Improved status handling for helper pods by adding support for Pending and Failed states.
- Enabled propagation of DDCR resources to experiment and helper pods.
- Fixed an issue where background processor jobs did not support extra volumes and volume mounts.
- Resolved an issue where experiments remained stuck in a running state if the target pod failed to initialize.
- Added validation to ensure the target exists for the pod-autoscaler fault.
- Fixed a date-related error when running composite load tests in pipelines.
- Resolved an unexpected character issue in Chaos Experiment YAML files.
AI Test Automation
View full release notes →Test Execution & Automation
- Introduced the Playwright execution engine for enhanced browser automation.
- Added drag-and-drop action support for Playwright tests.
- Added clipboard action support for Playwright tests.
- Blocked manual click commands during active automated runs to prevent execution conflicts.
Task & Workflow Management
- Introduced a maximum nesting depth limit for tasks to improve workflow control.
- Resolved an issue where creating a task from test steps failed to correctly enable nested tasks.
- Updated general tasks to run exclusively as manual actions.
Environment & Integration Updates
- Added support for Oracle and MS SQL databases in query tasks.
- Prevented the accidental creation of duplicate test suites.
- Resolved an issue where the BASE_URL path was duplicated when switching between environments.
User Interface & Sessions
- Improved session management with proactive expiry warnings and graceful timeout handling.
- Enhanced the formatting and visual presentation of session components.
Last updated Jun 15, 2026
Team Collaboration
- Enhanced the Google Chat integration with bidirectional timeline sync and new runbook actions to automatically create spaces and add members.
- Improved the Slack integration by displaying incident summaries in a modal dialog to reduce channel noise.
Workflow Automation
- Added the ability to duplicate existing runbooks, preserving all configurations, metadata, and action steps for faster workflow creation.
- Introduced a new expression engine that supports advanced conditional logic, regex matching, and date formatting across alerts, runbooks, and webhooks.
On-Call & Escalation
- Updated escalation policies to target specific rotations within a schedule, providing more granular control alongside entire schedules and individual users.
AI for Security & Compliance
Security Testing Orchestration
View full release notes →Jira Integration & Ticketing
- Jira tickets now include enriched metadata, such as vulnerability summaries and occurrence details, directly in the ticket description.
- Added support for creating Jira tickets for issues found in non-baseline targets like feature branches and pull requests.
Exemption & Policy Governance
- Introduced custom durations for vulnerability exemption requests, giving requesters and approvers more flexibility and control.
- Fixed an issue where searching by Issue ID did not work for exempted and remediated issues on the Issues page.
Interface & Filtering Updates
- Fixed an issue on the Vulnerabilities tab where stage names did not display alongside step names in the filter.
Supply Chain Security
View full release notes →Access Control & Permissions
- Introduced Role-Based Access Control (RBAC) to enable granular access management across Account, Organization, and Project scopes.
- Restricted users with view-only roles from performing write operations unless explicitly granted permissions.
Security & Risk Management
- Added detection for malicious packages and typosquatting risks in open-source dependencies, including filtering capabilities and pipeline policy enforcement.
- Introduced automatic classification of Software Bill of Materials (SBOM) licenses into families to improve risk assessment and compliance enforcement.
Integrations & Setup
- Added support for discovering, onboarding, and managing Bitbucket repositories directly within the platform.
- Resolved an issue where Software Bill of Materials (SBOM) upload orchestration steps failed due to incorrect configuration settings.
AI for Cost & Optimization
Cloud Cost Management
View full release notes →AI Cost Management
- Connect OpenAI and Anthropic accounts securely using a new guided three-step setup wizard with built-in connection testing.
- Analyze AI service execution and cost attribution in Cost Explorer by grouping traces by service name and drilling down into detailed execution flows.
Spend & Savings Analytics
- Identify spend concentration quickly using the new Top Spenders card, with options to filter by service categories or sub-account IDs.
- Track your financial progress with a consolidated Optimization Impact view showing realized versus potential recommendation savings and AutoStopping performance.
AI DLC Insights
View full release notes →New Features & Enhancements
- Updates for this period are documented on the AI DLC Insights release notes page.