Harness Release Notes Summaries
Explore release notes from the last 30 days across the Harness Platform and modules.
INFO
Please review the full module release notes by selecting a module in the sidebar, or using the View full release notes links beside each module summary.
Looking for available features rather than recent changes? You can explore Beta and Limited GA features across Harness modules on the Feature Availability page.
Platform Release Notes
Platform
View full release notes →Access & User Management
- Resolved an issue where API Keys and Personal Access Tokens for deleted users remained active; these tokens are now automatically deleted when a user is removed.
- Fixed an issue where listing user groups failed when reusable roles with identical identifiers but different scopes were assigned at the same scope level.
- Fixed an issue where users with partial view permissions for users or user groups received incorrect responses when attempting to delete them.
API & Documentation
- Added payload validation to the Role Assignment filter API endpoints to provide clearer error responses for invalid requests.
- Improved the reliability and logging of the Purchase Credits API by making database operations atomic.
- Updated the API documentation for ending a user impersonation session to accurately reflect its actual response behavior.
User Interface & Alerts
- Introduced Platform Alerts, an in-app notification system that automatically displays important account events, such as approaching resource limits and release announcements, directly in the user interface.
- Fixed a user interface issue where the Resource Scope dropdown displayed incorrect values after a selected project or organization was deleted.
System Stability & Performance
- Resolved a race condition to improve overall system stability and ensure consistent behavior.
- Restored a missing Redis configuration to ensure proper backend platform functionality.
Delegate
View full release notes →Security & Dependencies
- Resolved security vulnerabilities in the Jetty framework.
- Resolved security vulnerabilities in Apache CXF.
- Resolved security vulnerabilities in the Azure Security Key Vault SDK.
Infrastructure & Integrations
- Improved Terraform Provider connector validation to use the connector's specific delegate selector instead of the executing delegate's selector, preventing cross-account validation failures.
- Resolved an issue where AWS Secrets Manager failed after delegate upgrades due to credential caching conflicts.
- Resolved a malformed URL issue with AWS Secrets Manager in newer AWS regions.
- Configured Continuous Verification data collection connectors to respect proxy bypass settings on the delegate.
- Resolved an issue with incorrect task metadata sent during delegate task execution.
Artifacts & Triggers
- Pipeline executions triggered by pull requests now fail early with a clear error message if the Git connector lacks API access.
- Resolved an issue where Amazon S3 artifact triggers failed after delegate upgrades.
- Resolved intermittent custom artifact polling failures during parallel stage executions by preventing temporary file conflicts.
- Improved artifact triggers to handle missing packages gracefully at creation time instead of failing permanently.
Self-Managed Enterprise Edition
View full release notes →Deployment & Cloud Integrations
- Deploy applications directly to Azure Container Apps with support for progressive traffic shifting, instant rollback, and secure keyless authentication.
- Resolved an issue where downloading configuration files from Amazon S3 intermittently took more than 30 minutes.
- Fixed validation issues when pulling OCI Helm charts from Amazon ECR, removing the need for a workaround repository.
- Fixed an issue where Amazon S3 artifact triggers failed following delegate upgrades.
Security & Governance
- Enabled environment-level secret isolation by passing delegate selector information as AWS session tags in OIDC tokens.
- Added OIDC authentication support for AWS GovCloud regions, automatically routing requests to the appropriate regional endpoints.
- Prevented secret values from being logged in plaintext during Custom Secret Manager connection tests.
- Ensured OPA policy evaluation warnings and errors are properly displayed in the user interface when configured with Warn and Continue.
Pipeline & Execution Management
- Introduced a dry-run validation API endpoint to check pipeline configurations before committing changes to Git.
- Enabled referencing pipeline configurations and input sets using Git tags during trigger-based executions.
- Added an Executions Management page to provide account-level visibility and bulk control over queued pipeline executions.
- Optimized the List Environments API to prevent timeouts caused by redundant permission checks.
- Prevented the creation of entities like Secrets and Environments using reserved identifiers to avoid configuration conflicts.
Build, Test & Cache Performance
- Improved build tool management and rollback capabilities by standardizing tool versions in the build runner.
- Enhanced test splitting accuracy using historical average durations to optimize parallelism.
- Added caching support for NuGet dependencies based on environment variables.
- Allowed overriding Azure-specific storage settings when configuring build caches.
Administration & Usability
- Updated module name matching to be case-insensitive for more consistent configuration behavior.
- Fixed an incorrect warning about deleting the last administrative user when deleting organization- or project-scoped users.
- Fixed sorting functionality to correctly display user groups by creation date.
AI for DevOps & Automation
Continuous Delivery & GitOps
View full release notes →Security & Authentication
- The Artifactory connector now supports OIDC authentication, enabling credential-free federated authentication with JFrog Artifactory using short-lived tokens.
- AWS connectors using OIDC authentication now include environment identifiers as session tags, enabling environment-specific access control policies for secrets and resources.
- AWS connectors now support passing delegate selector details as session tags in OIDC tokens, allowing access control policies to be enforced based on the executing delegate.
Policy & Governance
- Enhanced the AI assistant for Open Policy Agent (OPA) policies to provide more accurate, context-aware policy suggestions and detailed natural-language descriptions of existing policies.
- Fixed an issue where Git configuration details were missing from policy validation requests when creating new service, infrastructure, or environment entities.
Pipeline & Trigger Workflows
- Approval steps now support project-level settings to allow users without approval permissions to view approval details during pipeline execution.
- Pull request triggers now require the linked Git connector to have API access enabled to prevent pipeline execution failures.
- Fixed an issue where service runtime inputs failed to display in the execution details of completed deployments.
- Fixed an issue where Amazon S3 artifact triggers failed after a delegate upgrade.
Deployment & Traffic Management
- Istio traffic routing steps now support configurable match logic, allowing users to choose whether all or any configured route rules must match to route requests.
- ECS Rolling deployments now support skipping AWS Application Auto Scaling interactions to prevent API rate limit issues during parallel service deployments.
- Fixed an issue where Helm canary deployments failed due to delegate selector conflicts when using delegate-pinned Git connectors.
- Fixed an issue where Helm chart validation for Amazon Elastic Container Registry (ECR) required a dummy repository workaround to function correctly.
- Fixed an issue in Cloud Run deployments where a blank image name resulted in an infinite retry loop.
- Fixed a system error in Cloud Run deployments that occurred when no manifests were configured.
Developer Tools & Infrastructure
- Added a dry-run validation API endpoint to validate pipeline configuration changes, including schema verification, template expansion, and policy evaluation, before committing them to Git.
- Released updated Docker images for AWS Cloud Development Kit (CDK) deployments.
- Fixed a misleading file conflict error when concurrently creating pipelines using the Terraform provider.
- Fixed an issue where an invalid or empty cluster name in Amazon EKS infrastructure definitions produced a misleading system error instead of a validation warning.
- Resolved an intermittent performance issue where downloading configuration files from Amazon S3 took an unusually long time.
Continuous Integration
View full release notes →Network & Security
- Configure network egress restrictions for Linux and Windows cloud build VMs directly from the UI.
- Improved PrivateLink reliability by automatically routing private-connect connectors without selectors to the cloud delegate.
- Routed connector validation tasks through the cloud delegate to ensure validation works correctly in PrivateLink setups.
- Routed source control management tasks through cloud delegates to support private network operations.
- Patched known vulnerabilities in the cache image to enhance security.
- Prevented rate limiting on public Amazon ECR image pulls by ensuring authenticated pulls are used when an AWS connector is configured.
Build Cache & Performance
- Added support for Azure Blob Storage as a backend option for Build Cache operations.
- Improved test splitting accuracy in Test Intelligence by using historical average durations for more balanced parallelism.
- Resolved Docker Layer Caching key collisions when running multiple Build and Push steps in parallel for different target platforms.
- Fixed an issue that prevented custom access control configurations from applying to cached objects.
- Fixed an issue where unexpected build provenance and security attestations were generated during artifact registry pushes when Docker Layer Caching was active.
Pipeline Execution & Logs
- Improved CLI binary management and rollback capabilities within the runner engine.
- Fixed an issue where unresolved environment variables caused null values in pipeline execution tags.
- Removed a false warning regarding outdated CI image versions when referencing images using SHA256 digests instead of tags.
- Resolved log upload timeouts to ensure complete log visibility for containerized step groups.
Container & Registry Integrations
- Use custom container images from private registries for cloud builds with Docker connector support.
- Resolved a permission denied error during source control operations in self-managed environments.
- Fixed a file system error that caused Build and Push steps to fail due to storage driver conflicts.
Artifact Registry
View full release notes →Security & Risk Mitigation
- Automatically block artifacts that exceed configured open-source risk thresholds based on maintenance status, known vulnerabilities, and community health.
- Identify and block package versions flagged as malicious in threat intelligence databases.
Swift Package Support
- Introduced native Swift Package Manager workflow support, compatible with standard login, publish, and resolve commands.
- Securely host proprietary Swift packages inside your Harness account.
- Proxy and cache packages from external Swift sources to accelerate builds and reduce external dependencies.
Generic File & HTTP Storage
- Store and reference files directly by their file path, ideal for managing build artifacts, reports, and shared configurations.
- Push and pull files using standard HTTP clients like curl without requiring custom plugins.
- Proxy and cache files from external HTTP sources to improve build performance.
Data Protection & Lifecycle
- Easily restore deleted packages, versions, or soft-deleted registries directly from the user interface.
- Enable cascading soft-deletes to automatically clean up nested packages, images, and versions when a registry is deleted, with support for restoring parent-child relationships.
AI for Testing & Resilience
Feature Management & Experimentation
View full release notes →Platform Updates
- Refer to the main Feature Management & Experimentation release notes page for the latest updates and detailed documentation.
Feature Flags
View full release notes →Documentation & Updates
- Refer to the Feature Flags release notes page for the latest updates and documentation.
Chaos Engineering
View full release notes →User Experience & Design
- Introduced a new landing page and streamlined routing for risk insights.
- Added support for editing step names directly within Chaos Studio.
- Added user interface support for entering runtime inputs for connectors.
- Updated the infrastructure icon representation for Windows systems under ChaosGuard.
Security & Access Control
- Streamlined experiment execution permissions by transitioning to a unified execution permission and deprecating the old pipeline-specific permission.
- Ensured infrastructure security contexts are properly propagated to experiment and helper pods.
- Resolved an issue where users received incorrect error messages during permission-related failures.
- Fixed an issue that temporarily prevented some users from accessing the subscriptions page.
Experiment Execution
- Added status tracking for helper pods during Pending and Failed states to prevent experiments from stalling.
- Resolved an issue where experiments remained stuck in a running state when pods failed to launch on target infrastructure.
- Ensured custom chaos resources are correctly propagated to experiment and helper pods.
- Added support for configuring extra volume mounts and volumes in background processor jobs.
- Fixed an issue where unexpected characters in the chaos experiment YAML caused validation errors.
- Added validation to verify that the target exists for pod-autoscaler faults.
APIs & Reporting
- Enabled the download report functionality directly from the subscriptions page.
- Added support for filtering the chaos experiment list in the REST API.
- Fixed an issue where the status filter did not work correctly on the V3 list experiment API.
- Fixed missing environment details in Linux and Windows experiment reports.
- Resolved a date validation error occurring with composite load tests in pipelines.
AI Test Automation
View full release notes →Test Execution & Automation
- Added support for the Playwright execution engine.
- Introduced drag-and-drop capabilities for Playwright execution.
- Added clipboard interaction support during Playwright execution.
- Prevented manual click commands from disrupting automated test execution.
- Configured general tasks to run strictly as manual actions.
Test Creation & Task Management
- Set a maximum nesting depth for tasks to prevent configuration errors.
- Resolved an issue where creating a task from test steps did not properly enable nested tasks.
- Prevented the accidental creation of duplicate test suites.
Database & Environment Settings
- Added database query support for Oracle and MS SQL databases.
- Resolved an issue that caused base URL paths to duplicate when switching environments.
User Experience & Session Security
- Improved session handling with clearer warnings and timeout management.
- Enhanced the visual layout and formatting of session components.
Last updated Jun 10, 2026
AI Insights & Diagnostics
- Automatically generate structured post-incident reviews using AI when an incident is closed.
- Detect and extract action items in real-time from active incident chats, transcripts, and notes.
- Automatically correlate ServiceNow change records with active incidents to accelerate root cause analysis.
Collaboration & Communication
- Integrate Google Chat to create dedicated incident spaces, post updates, and collaborate in real-time.
- Sync incident timelines bidirectionally with Google Chat and automate space management via runbooks.
- View incident summaries in a clean modal dialog in Slack to reduce channel noise.
- Send structured email updates directly to subscribers of impacted services from active incidents.
Alerting & Runbook Automation
- Target specific on-call rotations within a schedule for more precise escalation routing.
- Use Common Expression Language (CEL) to write advanced conditions and dynamic values across runbooks, triggers, and alerts.
- Execute runbook automations directly from Slack using short slash commands.
AI for Security & Compliance
Security Testing Orchestration
View full release notes →Jira Integration & Ticketing
- Enhanced the Jira integration to display vulnerability summaries and occurrence details directly within Jira tickets.
- Added support for creating Jira tickets for security issues found in non-baseline targets, such as feature branches and pull requests.
Exemption & Vulnerability Management
- Introduced customizable exemption durations, giving requesters and approvers more flexibility when managing exemption timelines.
- Resolved an issue where searching by Issue ID did not return remediated or exempted issues on the Issues page.
User Interface & Usability
- Fixed a filtering issue on the Vulnerabilities tab where stage names did not display next to step names.
Supply Chain Security
View full release notes →Access Control & Permissions
- Introduced Role-Based Access Control (RBAC) to enable granular permission management across Account, Organization, and Project scopes.
- Restricted users with view-only roles from performing unauthorized write operations.
Risk & Compliance
- Added detection for malicious packages and typosquatting in open-source dependencies, enabling policy enforcement in pipelines.
- Introduced License Family Classification in Software Bill of Materials (SBOM) to automatically categorize licenses, manage custom mappings, and enforce compliance policies.
Integrations & Reliability
- Enabled direct onboarding and management of Bitbucket repositories within the platform.
- Resolved an issue where Software Bill of Materials (SBOM) uploads failed during orchestration due to misapplied configuration settings.
AI for Cost & Optimization
Cloud Cost Management
View full release notes →Dashboard Updates
- Revamped the Cloud & AI Cost Management Overview page with a refreshed layout, new widgets, and finer control over cost displays.
- Added starred Perspectives directly to the Overview page for quick, one-click access to preferred views.
Spend Visibility
- Introduced a Top Spenders card on the Overview page to highlight areas of concentrated spend.
- Filter and slice top spend details by Service Categories or Sub-account IDs for deeper insights.
Savings & Cost Optimization
- Consolidated savings metrics across all modules into a single, unified Optimization Impact view.
- Track realized and potential savings from recommendations, including the history of applied optimizations.
- Monitor cost savings generated from AutoStopping, Cluster Orchestrator, and Asset Governance in one place.
AI DLC Insights
View full release notes →Documentation & Updates
- Access the latest updates and detailed documentation on the dedicated AI DLC Insights release notes page.