Harness Release Notes Summaries
Explore release notes from the last 30 days across the Harness Platform and modules.
INFO
Please review the full module release notes by selecting a module in the sidebar, or using the View full release notes links beside each module summary.
Looking for available features rather than recent changes? You can explore Beta and Limited GA features across Harness modules on the Feature Availability page.
Platform Release Notes
Platform
View full release notes →Access & Identity Management
- Added the ability to clone existing Resource Groups directly from the UI to simplify role-based access configuration.
- Added the ability to clone existing Access Control roles directly from the UI to quickly duplicate permission sets.
- Improved SCIM user group provisioning to prevent identifier collisions and maintain accurate group memberships and access.
Administration & Integrations
- Introduced the Usage Analytics dashboard, enabling teams to monitor module adoption and validate platform usage in one place.
- Added support for project IDs in Google Cloud Secret Manager dynamic expressions to enable cross-project secret access.
- Fixed an issue where editing notification rules displayed incorrect identifiers for project-scoped service accounts.
Delegate
View full release notes →Security & Vulnerability Fixes
- Upgraded the bundled MIME library to address a high-severity security vulnerability.
- Resolved security vulnerabilities in the Jackson Core dependency.
Deployment & Pipeline Steps
- Fixed an issue in Helm blue-green deployments where incorrect step output caused the swap selectors step to fail.
- Ensured dot-notation variables are correctly formatted as nested objects when creating files during the Update Release Repo step.
- Improved error handling for Jenkins build triggers to display clear error messages when the remote server returns an unexpected response.
Performance & Integrations
- Added token caching for GitHub App integrations to prevent rate-limit failures during high-concurrency repository operations.
- Resolved an issue where parallel pipeline executions targeting the same host via WinRM with NTLM authentication would stall due to credential contention.
Code Repository
View full release notes →Pull Request & Code Review
- Added the ability to sort reviewers by status to easily track review progress.
- Added direct file editing capabilities within the pull request view.
- Added support for pasting images directly into pull request comment threads.
- Added a button to quickly jump to the top of long file diffs during code reviews.
- Fixed an issue where opening a pull request from the review-requested list redirected to the repository homepage.
- Fixed broken branch links on pull request pages that caused 404 errors.
- Fixed pull request search filtering to accurately return results when filtering by key:value labels.
Branch & Merge Management
- Added a branch rule to prevent merges when the target branch commit is not an ancestor, with automatic rebasing during merge.
- Fixed the auto-merge dropdown to display only the merge strategies enabled for the repository.
- Fixed text highlighting issues in branch search results.
Repository & Tag Management
- Fixed an issue where tags from a previously viewed repository remained visible after switching repositories.
- Fixed tag comparisons that incorrectly reported no changes or returned 404 errors.
- Improved error messages and user feedback when contributor permissions are missing during Helm operations.
AI for DevOps & Automation
Continuous Integration
View full release notes →Build Infrastructure & Platforms
- Updated default Harness Cloud virtual machine images to Ubuntu 24.04 for Linux and macOS Sequoia for macOS, and deprecated macOS Sonoma.
- Added global build queuing for macOS workloads on Harness Cloud to reduce stockout errors and improve availability.
- Added Windows Server 2025 support across Cache, GCS, S3, Artifactory, and Buildx plugins.
- Resolved an execution failure during Git Clone steps on ARM64 nodes.
Security & Access Management
- Added Workload Identity support for CI Run steps, allowing direct OIDC authentication with AWS, GCP, Azure, and Vault without storing static credentials.
- Added support for injecting custom internal CA certificates into Windows build environments to securely connect to private registries and services.
- Resolved known security vulnerabilities in the Harness CLI.
- Fixed an issue where secrets failed to resolve during database schema clone steps on Kubernetes build infrastructure.
- Fixed an issue where Build Intelligence did not honor AWS cross-account IAM roles configured with service account authentication.
Networking & Proxy Support
- Improved egress proxy support in Build and Push steps by forwarding proxy configuration and trusting custom CA certificates in the build engine.
- Added custom CA certificate support to Docker and Buildx plugins to prevent validation errors behind inspecting proxies.
- Resolved secret resolution failures in pipelines configured to use egress proxies.
Build & Cache Intelligence
- Added support for configuring custom resource limits for Build Intelligence and Cache Intelligence in V1 YAML pipelines.
- Added Azure Blob Storage support for Docker Layer Caching in V1 YAML pipelines.
- Fixed an issue where Cache Intelligence defaulted to auto-detected cache paths instead of user-specified source paths.
- Fixed an application crash in Test Intelligence when running parallel calculations with no matching test files.
- Fixed a build failure where Gradle auto-injection corrupted property files that were missing a trailing newline.
Container Image Builds
- Resolved intermittent image pull failures in BuildKit-based Build and Push steps by stabilizing the build image version.
- Fixed an issue in Kaniko-based Build and Push steps where overly strict validation rejected valid symbolic links.
Infrastructure as Code Management
View full release notes →Workspace & Cost Management
- Redesigned the workspace overview tab to display live infrastructure costs, resource counts, cost optimization recommendations, and recent activity in a single view.
- Added ephemeral workspaces that automatically tear down infrastructure and optionally remove workspace records once they expire.
Risk Analysis & Governance
- Introduced an AI-powered blast radius analysis step to evaluate infrastructure plans, calculate risk scores, and visualize dependency impacts before applying changes.
- Added module lifecycle management rules to automatically classify module versions as Supported, Update Required, or Deprecated.
AWS CDK & Provisioning Tools
- Added Drift Detection and Destroy pipeline steps for AWS CDK workspaces to identify unmanaged changes and cleanly delete managed CloudFormation stacks.
- Added an approval step for AWS CDK pipelines to require manual review of plan diffs prior to deployment.
- Expanded AWS CDK workspace support to include Java, JavaScript, and Go in addition to Python and TypeScript.
- Resolved an issue where provisioner downloads failed behind corporate TLS-intercepting proxies by adding support for custom CA certificate bundles.
Artifact Registry
View full release notes →General Updates
- Updates for this period are documented on the dedicated Artifact Registry Release Notes page.
AI for Testing & Resilience
Feature Management & Experimentation
View full release notes →General Updates
- Updates for this period are documented on the dedicated Feature Management & Experimentation release notes page.
Chaos Engineering
View full release notes →Onboarding & Overview
- Replaced the Chaos landing page with a unified Resilience Testing Overview tailored for both new and existing accounts.
- Added a service risk scan step to the onboarding flow with the option to skip and complete setup immediately.
- Connected infrastructure creation directly to the service-based onboarding workflow.
- Fixed an issue where the Overview page failed to auto-refresh when starting onboarding or running a new scan.
- Fixed an issue where initiating onboarding from the Resilience Infrastructure page could lead to a blank screen.
Resilience & Risk Management
- Added Resilience Testing activity tracking, including disaster recovery executions, directly to service pages.
- Resolved an issue where Resilience Testing Activity displayed as empty on individual service pages.
- Updated terminology on service pages to reference Chaos Infrastructure instead of Chaos Agent.
- Improved the empty state for services with no detected risks to display a clear zero-risk message.
- Fixed missing metadata details in the Scanned Risks Summary section.
- Fixed the Risks table source filter so it correctly filters between different source types.
- Resolved an issue where service names were duplicated in the Risk column on pipeline scan results.
- Cleaned up deprecated options from the category filter.
Load Testing
- Added sample JMeter load tests and improved button labels to easily distinguish between Locust, k6, and JMeter.
- Renamed Load Test Type to Load Test Engine for clearer engine selection.
- Fixed an issue where JMeter scripts displayed as raw base64 strings instead of readable file lists.
Last updated Aug 21, 2026
AI Investigation & Assistance
- Added the ability to feed worker agent and pipeline execution outputs from runbooks directly into AI Investigator root cause analysis.
- Introduced Ask AI SRE, a conversational interface for asking natural language questions about incidents, service health, and on-call schedules.
Reporting & Analytics
- Enabled custom incident analytics dashboards to track incident volume trends, MTTR metrics, alert-to-incident ratios, and service health.
- Integrated AI SRE data into the Harness Knowledge Graph and Model Context Protocol (MCP) for cross-module analytics and correlation with CI/CD and infrastructure data.
Incident & On-Call Management
- Introduced native SLO management within AI SRE, featuring dedicated configuration screens and automated alerts that feed into incident management workflows.
- Added on-call schedule sharing via automated daily or weekly email digests and Slack commands.
AI for Security & Compliance
Security Testing Orchestration
View full release notes →Remediation & Integrations
- Added support for creating pull requests in GitLab and Bitbucket directly from Harness AI remediations.
- Jira tickets created from STO now automatically include vulnerability summaries and occurrence details to streamline triage and prioritization.
Vulnerability Management
- Added support for bulk exemption requests, allowing you to apply the same scope, duration, and reason across multiple vulnerabilities at once.
- Resolved an issue where remediated issues in the Vulnerabilities tab only appeared if resolved across all scanned targets in a pipeline execution.
User Interface Improvements
- Fixed a display issue in the issue panel where code snippets were rendered with unreadable highlighting.
Supply Chain Security
View full release notes →Access Control & Governance
- Added support for Resource Groups across Account, Organization, and Project scopes, allowing administrators to configure granular access controls for Supply Chain Security resources.
- Resolved an issue where Repository Security Posture Management APIs did not consistently enforce role-based access control across project, organization, and account scopes.
Integrations & Artifact Security
- Introduced GitLab CI/CD integration to generate and ingest SBOMs, enforce policies, track SLSA provenance, and sign or verify artifacts directly within GitLab workflows.
- Made Artifact Registry integration generally available for signing and verifying container images and software artifacts.
SBOM & Policy Management
- Added support for AI Bill of Materials (AIBOM) generation in CycloneDX format to track AI components such as models, datasets, agents, and frameworks within source repositories.
- Fixed an issue where SBOM orchestration failed to parse tool information from CycloneDX SBOMs generated by JFrog Xray.
- Resolved intermittent pipeline execution failures during SBOM policy enforcement and SLSA verification.
AI for Cost & Optimization
Cloud Cost Management
View full release notes →AI Cost Tracking & Integrations
- Added support for Anthropic Platform and Enterprise product types to track Claude Enterprise and developer API usage separately.
- Added Devin connector support to ingest and monitor Devin cost and usage data alongside other AI providers.
- Added Cursor connector support to manage and monitor Cursor costs alongside OpenAI and Anthropic.
- Added a Token Count column in AI Perspectives to analyze token usage alongside total spend.
- Added a Trends and Histogram tab in Service Traces to compare metrics over time and analyze cost distribution percentiles.
- Updated the Service Traces drawer to sort traces by highest cost by default.
- Expanded AI Perspective drill-downs to support Provider, Sub Provider, Sub Account ID, Model, and Token Type when grouped by Principal.
Cost Recommendations & AutoStopping
- Fixed an issue where Jira statuses on recommendations did not update when changed in Jira.
- Fixed cost category mapping in Recommendations Explore so Azure subscription costs group correctly instead of showing as unattributed.
- Fixed applied Kubernetes node pool recommendations to capture and display complete utilization and metric snapshots.
- Fixed an issue where manually applied recommendations continued to display an inferred-as-applied banner.
- Fixed an issue where editing an RDS AutoStopping rule failed to retain the saved proxy.
Cost Explorer & Analysis
- Added visual indicators in Cost Explorer to clearly mark sections with unsaved changes.
- Fixed an issue where drill-down label filters in Cost Explorer overwrote existing label filters.
- Fixed an issue where returning to Cost Explorer from the Anomalies page failed to preserve the previous view state.
- Fixed an issue where the Edit button disappeared after adding the maximum allowed Unit Cost filters.
- Improved error messaging when trend statistics reference an unresolved perspective.
Dashboards & Data Ingestion
- Added cost category filtering to the Overview page to focus dashboard tiles on specific categories.
- Enhanced Overview widgets with a time-series chart and stale count for Anomalies, alongside clearer Budget status views.
- Fixed AWS cost data ingestion to reliably process both legacy and updated cost and usage report path formats.
AI DLC Insights
View full release notes →Documentation & Platform Updates
- Refer to the AI DLC Insights release notes documentation page for details on updates during this period.