Release train 2026-11

Release train 2026-11 over repos.yaml: finished.

Updated by train.yml (cmd/train, docs/train.md). Org owners can comment /skip <repo>, /retry <repo> or /abort. Don't edit the state comment at the end.

Stage	Repo	Status	From	Released	PRs	Detail
1	api	released	v0.22.1	v0.22.2	release api#541
1	gooci	released	v0.0.10	v0.0.11	release gooci#26
2	agent	released	v0.9.5	v0.9.6	bump agent#146, release agent#147
2	ui	released	v2.14.0			nothing to release
3	agent-action	released	v0.0.4	v0.0.5	bump agent-action#22, release agent-action#18
3	plugin-apt-versions	released	v0.7.1	v0.7.2	bump plugin-apt-versions#42, release plugin-apt-versions#39
3	plugin-apt-versions-policies	released	v0.5.2			nothing to release
3	plugin-aws-acm	released	v0.1.2	v0.1.3	bump plugin-aws-acm#36, release plugin-aws-acm#32
3	plugin-aws-acm-certificate-policies	released	v0.1.2			nothing to release
3	plugin-aws-apigateway	released	v0.1.1	v0.1.2	bump plugin-aws-apigateway#26, release plugin-aws-apigateway#22
3	plugin-aws-apigateway-policies	released	v0.1.1			nothing to release
3	plugin-aws-cloudfront	released	v0.1.1	v0.1.2	bump plugin-aws-cloudfront#25, release plugin-aws-cloudfront#21
3	plugin-aws-cloudfront-policies	released	v0.1.1			nothing to release
3	plugin-aws-ec2	released	v0.4.2	v0.4.3	bump plugin-aws-ec2#40, release plugin-aws-ec2#35
3	plugin-aws-ec2-policies	released	v0.4.1			nothing to release
3	plugin-aws-ecr	released	v0.1.2	v0.1.3	bump plugin-aws-ecr#33, release plugin-aws-ecr#29
3	plugin-aws-ecr-image-policies	released	v0.1.1			nothing to release
3	plugin-aws-ecr-registry-policies	released	v0.1.1			nothing to release
3	plugin-aws-ecr-repository-policies	released	v0.1.1			nothing to release
3	plugin-aws-eks	released	v0.1.3	v0.1.4	bump plugin-aws-eks#32, release plugin-aws-eks#27
3	plugin-aws-eks-addon-policies	released	v0.1.1			nothing to release
3	plugin-aws-eks-nodegroup-policies	released	v0.1.1			nothing to release
3	plugin-aws-eks-policies	released	v0.1.1			nothing to release
3	plugin-aws-elb	released	v0.1.2	v0.1.3	bump plugin-aws-elb#34, release plugin-aws-elb#30
3	plugin-aws-elb-listener-policies	released	v0.1.1			nothing to release
3	plugin-aws-elb-loadbalancer-policies	released	v0.1.1			nothing to release
3	plugin-aws-elb-targetgroup-policies	released	v0.1.1			nothing to release
3	plugin-aws-elb-targethealth-policies	released	v0.1.1			nothing to release
3	plugin-aws-rds-aurora-psql	released	v0.3.3	v0.3.4	bump plugin-aws-rds-aurora-psql#41, release plugin-aws-rds-aurora-psql#37
3	plugin-aws-rds-aurora-psql-policies	released	v0.3.1			nothing to release
3	plugin-aws-s3	released	v0.1.2	v0.1.3	bump plugin-aws-s3#31, release plugin-aws-s3#27
3	plugin-aws-s3-policies	released	v0.1.1			nothing to release
3	plugin-aws-secretsmanager	released	v0.1.3	v0.1.4	bump plugin-aws-secretsmanager#30, release plugin-aws-secretsmanager#26
3	plugin-aws-secretsmanager-policies	released	v0.1.2			nothing to release
3	plugin-aws-vpc	released	v0.3.2	v0.3.3	bump plugin-aws-vpc#44, release plugin-aws-vpc#39
3	plugin-aws-vpc-nacl-policies	released	v0.1.1			nothing to release
3	plugin-aws-vpc-policies	released	v0.1.1			nothing to release
3	plugin-aws-vpc-rt-policies	released	v0.1.1			nothing to release
3	plugin-aws-vpc-sg-policies	released	v0.3.1			nothing to release
3	plugin-aws-vpc-subnet-policies	released	v0.1.1			nothing to release
3	plugin-cloud-custodian	released	v0.3.1	v0.3.2	bump plugin-cloud-custodian#54, release plugin-cloud-custodian#51
3	plugin-cloud-custodian-policies	released	v0.2.3			nothing to release
3	plugin-dependabot	released	v0.9.0	v0.10.0	bump plugin-dependabot#40, release plugin-dependabot#36
3	plugin-dependabot-granular-policies	released	v0.2.1			nothing to release
3	plugin-dependabot-policies	released	v0.5.1			nothing to release
3	plugin-file-attestation	released	v0.2.2	v0.2.3	bump plugin-file-attestation#28, release plugin-file-attestation#25
3	plugin-file-attestation-ctrf-policies	released	v0.2.1			nothing to release
3	plugin-file-attestation-policies	released	v0.2.1			nothing to release
3	plugin-file-attestation-sarif-policies	released	v0.2.1			nothing to release
3	plugin-github-repositories	released	v0.11.0	v0.12.0	bump plugin-github-repositories#48, release plugin-github-repositories#44
3	plugin-github-repositories-custom-policies	released	v0.2.1			nothing to release
3	plugin-github-repositories-dependency-policies	released	v0.1.2			nothing to release
3	plugin-github-repositories-policies	released	v0.7.4			nothing to release
3	plugin-github-repositories-pr-policies	released	v0.2.1			nothing to release
3	plugin-github-settings	released	v0.7.0	v0.8.0	bump plugin-github-settings#38, release plugin-github-settings#34
3	plugin-github-settings-policies	released	v0.4.2			nothing to release
3	plugin-gitlab-repositories	released	v0.1.2	v0.1.3	bump plugin-gitlab-repositories#31, release plugin-gitlab-repositories#27
3	plugin-gitlab-repositories-policies	released	v0.1.1			nothing to release
3	plugin-http-collector	released	v0.2.1	v0.2.2	bump plugin-http-collector#26, release plugin-http-collector#23
3	plugin-http-collector-policies	released	v0.2.1			nothing to release
3	plugin-intruder	released	v0.2.1	v0.2.2	bump plugin-intruder#33, release plugin-intruder#30
3	plugin-intruder-policies	released	v0.1.1			nothing to release
3	plugin-jira	released	v0.2.4	v0.2.5	bump plugin-jira#31, release plugin-jira#28
3	plugin-jira-custom-policies	released	v0.2.1			nothing to release
3	plugin-jira-policies	released	v0.2.1			nothing to release
3	plugin-k8s	released	v0.2.3	v0.2.4	bump plugin-k8s#38, release plugin-k8s#37
3	plugin-k8s-opres-policies	released	v0.2.1			nothing to release
3	plugin-local-ssh	released	v0.5.1	v0.5.2	bump plugin-local-ssh#52, release plugin-local-ssh#49
3	plugin-local-ssh-policies	released	v0.3.2			nothing to release
4	helm-charts	released	ccf-agent v0.5.0, ccf-app v0.10.0	ccf-agent v0.5.1, ccf-app v0.10.1	bump helm-charts#63, release helm-charts#64

Gate	Version	Result
plugin-apt-versions	0.7.2	passed
plugin-apt-versions-policies	0.5.2	passed
plugin-aws-acm	0.1.3	passed
plugin-aws-acm-certificate-policies	0.1.2	passed
plugin-aws-apigateway	0.1.2	passed
plugin-aws-apigateway-policies	0.1.1	passed
plugin-aws-cloudfront	0.1.2	passed
plugin-aws-cloudfront-policies	0.1.1	passed
plugin-aws-ec2	0.4.3	passed
plugin-aws-ec2-policies	0.4.1	passed
plugin-aws-ecr	0.1.3	passed
plugin-aws-ecr-image-policies	0.1.1	passed
plugin-aws-ecr-registry-policies	0.1.1	passed
plugin-aws-ecr-repository-policies	0.1.1	passed
plugin-aws-eks	0.1.4	passed
plugin-aws-eks-addon-policies	0.1.1	passed
plugin-aws-eks-nodegroup-policies	0.1.1	passed
plugin-aws-eks-policies	0.1.1	passed
plugin-aws-elb	0.1.3	passed
plugin-aws-elb-listener-policies	0.1.1	passed
plugin-aws-elb-loadbalancer-policies	0.1.1	passed
plugin-aws-elb-targetgroup-policies	0.1.1	passed
plugin-aws-elb-targethealth-policies	0.1.1	passed
plugin-aws-rds-aurora-psql	0.3.4	passed
plugin-aws-rds-aurora-psql-policies	0.3.1	passed
plugin-aws-s3	0.1.3	passed
plugin-aws-s3-policies	0.1.1	passed
plugin-aws-secretsmanager	0.1.4	passed
plugin-aws-secretsmanager-policies	0.1.2	passed
plugin-aws-vpc	0.3.3	passed
plugin-aws-vpc-nacl-policies	0.1.1	passed
plugin-aws-vpc-policies	0.1.1	passed
plugin-aws-vpc-rt-policies	0.1.1	passed
plugin-aws-vpc-sg-policies	0.3.1	passed
plugin-aws-vpc-subnet-policies	0.1.1	passed
plugin-cloud-custodian	0.3.2	passed
plugin-cloud-custodian-policies	0.2.3	passed
plugin-dependabot	0.10.0	passed
plugin-dependabot-granular-policies	0.2.1	passed
plugin-dependabot-policies	0.5.1	passed
plugin-file-attestation	0.2.3	passed
plugin-file-attestation-ctrf-policies	0.2.1	passed
plugin-file-attestation-policies	0.2.1	passed
plugin-file-attestation-sarif-policies	0.2.1	passed
plugin-github-repositories	0.12.0	passed
plugin-github-repositories-custom-policies	0.2.1	passed
plugin-github-repositories-dependency-policies	0.1.2	passed
plugin-github-repositories-policies	0.7.4	passed
plugin-github-repositories-pr-policies	0.2.1	passed
plugin-github-settings	0.8.0	passed
plugin-github-settings-policies	0.4.2	passed
plugin-gitlab-repositories	0.1.3	passed
plugin-gitlab-repositories-policies	0.1.1	passed
plugin-http-collector	0.2.2	passed
plugin-http-collector-policies	0.2.1	passed
plugin-intruder	0.2.2	passed
plugin-intruder-policies	0.1.1	passed
plugin-jira	0.2.5	passed
plugin-jira-custom-policies	0.2.1	passed
plugin-jira-policies	0.2.1	passed
plugin-k8s	0.2.4	passed
plugin-k8s-opres-policies	0.2.1	passed
plugin-local-ssh	0.5.2	passed
plugin-local-ssh-policies	0.3.2	passed
stack-smoke		passed

Release digest draft: 2026-11

Draft for #ccf-release-digests; edit before posting.

Repo	Version	From
api	v0.22.2	v0.22.1
gooci	v0.0.11	v0.0.10
agent	v0.9.6	v0.9.5
ui	no release	v2.14.0
agent-action	v0.0.5	v0.0.4
plugin-apt-versions	v0.7.2	v0.7.1
plugin-apt-versions-policies	no release	v0.5.2
plugin-aws-acm	v0.1.3	v0.1.2
plugin-aws-acm-certificate-policies	no release	v0.1.2
plugin-aws-apigateway	v0.1.2	v0.1.1
plugin-aws-apigateway-policies	no release	v0.1.1
plugin-aws-cloudfront	v0.1.2	v0.1.1
plugin-aws-cloudfront-policies	no release	v0.1.1
plugin-aws-ec2	v0.4.3	v0.4.2
plugin-aws-ec2-policies	no release	v0.4.1
plugin-aws-ecr	v0.1.3	v0.1.2
plugin-aws-ecr-image-policies	no release	v0.1.1
plugin-aws-ecr-registry-policies	no release	v0.1.1
plugin-aws-ecr-repository-policies	no release	v0.1.1
plugin-aws-eks	v0.1.4	v0.1.3
plugin-aws-eks-addon-policies	no release	v0.1.1
plugin-aws-eks-nodegroup-policies	no release	v0.1.1
plugin-aws-eks-policies	no release	v0.1.1
plugin-aws-elb	v0.1.3	v0.1.2
plugin-aws-elb-listener-policies	no release	v0.1.1
plugin-aws-elb-loadbalancer-policies	no release	v0.1.1
plugin-aws-elb-targetgroup-policies	no release	v0.1.1
plugin-aws-elb-targethealth-policies	no release	v0.1.1
plugin-aws-rds-aurora-psql	v0.3.4	v0.3.3
plugin-aws-rds-aurora-psql-policies	no release	v0.3.1
plugin-aws-s3	v0.1.3	v0.1.2
plugin-aws-s3-policies	no release	v0.1.1
plugin-aws-secretsmanager	v0.1.4	v0.1.3
plugin-aws-secretsmanager-policies	no release	v0.1.2
plugin-aws-vpc	v0.3.3	v0.3.2
plugin-aws-vpc-nacl-policies	no release	v0.1.1
plugin-aws-vpc-policies	no release	v0.1.1
plugin-aws-vpc-rt-policies	no release	v0.1.1
plugin-aws-vpc-sg-policies	no release	v0.3.1
plugin-aws-vpc-subnet-policies	no release	v0.1.1
plugin-cloud-custodian	v0.3.2	v0.3.1
plugin-cloud-custodian-policies	no release	v0.2.3
plugin-dependabot	v0.10.0	v0.9.0
plugin-dependabot-granular-policies	no release	v0.2.1
plugin-dependabot-policies	no release	v0.5.1
plugin-file-attestation	v0.2.3	v0.2.2
plugin-file-attestation-ctrf-policies	no release	v0.2.1
plugin-file-attestation-policies	no release	v0.2.1
plugin-file-attestation-sarif-policies	no release	v0.2.1
plugin-github-repositories	v0.12.0	v0.11.0
plugin-github-repositories-custom-policies	no release	v0.2.1
plugin-github-repositories-dependency-policies	no release	v0.1.2
plugin-github-repositories-policies	no release	v0.7.4
plugin-github-repositories-pr-policies	no release	v0.2.1
plugin-github-settings	v0.8.0	v0.7.0
plugin-github-settings-policies	no release	v0.4.2
plugin-gitlab-repositories	v0.1.3	v0.1.2
plugin-gitlab-repositories-policies	no release	v0.1.1
plugin-http-collector	v0.2.2	v0.2.1
plugin-http-collector-policies	no release	v0.2.1
plugin-intruder	v0.2.2	v0.2.1
plugin-intruder-policies	no release	v0.1.1
plugin-jira	v0.2.5	v0.2.4
plugin-jira-custom-policies	no release	v0.2.1
plugin-jira-policies	no release	v0.2.1
plugin-k8s	v0.2.4	v0.2.3
plugin-k8s-opres-policies	no release	v0.2.1
plugin-local-ssh	v0.5.2	v0.5.1
plugin-local-ssh-policies	no release	v0.3.2
helm-charts	ccf-agent v0.5.1, ccf-app v0.10.1	ccf-agent v0.5.0, ccf-app v0.10.0

Features

plugin-dependabot v0.10.0

GitHub App authentication (#35) (6ec409e)

plugin-github-repositories v0.12.0

GitHub App authentication (#43) (65774a2)

plugin-github-settings v0.8.0

GitHub App authentication (#33) (67a1f3e)

Bug Fixes

api v0.22.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#538) (202d01e)
deps: update aws-sdk-go-v2 monorepo (#544) (5cc55a6)

gooci v0.0.11

deps: build with the supported go1.26.10 toolchain so Renovate can ship Go security fixes (#25) (c8b0e13)

agent v0.9.6

deps: bump api to v0.22.2, gooci to v0.0.11 (#146) (d98e161)

agent-action v0.0.5

deps: bump agent to v0.9.5 (#19) (7df9834)
deps: bump agent to v0.9.6 (#22) (0133f90)
docker: run the action on distroless base-debian13:debug instead of bookworm-slim (#17) (4c97132)
docker: run the action on distroless/static now that concom is static (#20) (5e642cc)

plugin-apt-versions v0.7.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#38) (aae7ca2)
deps: bump agent to v0.9.6 (#42) (d786917)

plugin-aws-acm v0.1.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#31) (dc276f7)
deps: bump agent to v0.9.6 (#36) (f7fed4f)
deps: update aws-sdk-go-v2 monorepo (#34) (02bd204)

plugin-aws-apigateway v0.1.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#21) (4e28b26)
deps: bump agent to v0.9.6 (#26) (1afa6a3)
deps: update aws-sdk-go-v2 monorepo (#25) (6f5e24a)

plugin-aws-cloudfront v0.1.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#20) (5a9c932)
deps: bump agent to v0.9.6 (#25) (a94ae95)
deps: update aws-sdk-go-v2 monorepo (#23) (5b981b6)

plugin-aws-ec2 v0.4.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#36) (7ccd2c1)
deps: bump agent to v0.9.6 (#40) (1d279ef)
deps: update aws-sdk-go-v2 monorepo (#38) (f2040f3)
deps: update module github.com/aws/aws-sdk-go-v2/service/ec2 to v1.340.0 (#34) (b9db627)

plugin-aws-ecr v0.1.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#28) (dd5db84)
deps: bump agent to v0.9.6 (#33) (bd99f17)
deps: update aws-sdk-go-v2 monorepo (#32) (e83d9ba)

plugin-aws-eks v0.1.4

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#26) (db39c27)
deps: bump agent to v0.9.6 (#32) (b018219)
deps: update aws-sdk-go-v2 monorepo (#31) (b42d35e)
deps: update module github.com/aws/aws-sdk-go-v2/service/eks to v1.104.2 (#29) (111ef91)

plugin-aws-elb v0.1.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#29) (76aec5a)
deps: bump agent to v0.9.6 (#34) (843a10d)
deps: update aws-sdk-go-v2 monorepo (#33) (518cde3)

plugin-aws-rds-aurora-psql v0.3.4

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#36) (64406ac)
deps: bump agent to v0.9.6 (#41) (b97add3)

plugin-aws-s3 v0.1.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#24) (3122980)
deps: bump agent to v0.9.6 (#31) (b5ec697)
deps: update aws-sdk-go-v2 monorepo (#30) (0307b0a)
deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.114.4 (#25) (b75f4c4)
deps: update module github.com/aws/smithy-go to v1.28.6 (#26) (ce9a1a8)

plugin-aws-secretsmanager v0.1.4

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#25) (26d88a4)
deps: bump agent to v0.9.6 (#30) (157598c)
deps: update aws-sdk-go-v2 monorepo (#28) (7631463)

plugin-aws-vpc v0.3.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#40) (c34d191)
deps: bump agent to v0.9.6 (#44) (be9b5c6)
deps: update aws-sdk-go-v2 monorepo (#38) (2eedf54)
deps: update aws-sdk-go-v2 monorepo (#42) (4c4b59b)

plugin-cloud-custodian v0.3.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#50) (ba31535)
deps: bump agent to v0.9.6 (#54) (d2c4d91)

plugin-dependabot v0.10.0

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#37) (17e0393)
deps: bump agent to v0.9.6 (#40) (439e124)

plugin-file-attestation v0.2.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#24) (c0a99a6)
deps: bump agent to v0.9.6 (#28) (dd808eb)

plugin-github-repositories v0.12.0

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#45) (2d7eded)
deps: bump agent to v0.9.6 (#48) (49d2b87)

plugin-github-settings v0.8.0

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#35) (9ec6142)
deps: bump agent to v0.9.6 (#38) (9a9f25c)

plugin-gitlab-repositories v0.1.3

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#26) (a270046)
deps: bump agent to v0.9.6 (#31) (5a59164)
deps: update all non-major dependencies (#25) (8b98d70)
deps: update module gitlab.com/gitlab-org/api/client-go/v3 to v3.33.0 (#29) (4c5ebfc)
deps: update module gitlab.com/gitlab-org/api/client-go/v3 to v3.34.0 (#30) (09ae622)

plugin-http-collector v0.2.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#22) (7256667)
deps: bump agent to v0.9.6 (#26) (72c3da1)

plugin-intruder v0.2.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#29) (40b7b99)
deps: bump agent to v0.9.6 (#33) (568eb7b)

plugin-jira v0.2.5

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#27) (ea14398)
deps: bump agent to v0.9.6 (#31) (6cc0ea3)

plugin-k8s v0.2.4

deps: bump agent to v0.9.6 (#38) (0789574)
deps: update aws-sdk-go-v2 monorepo (#35) (2191a52)

plugin-local-ssh v0.5.2

deps: build with the go1.26.10 toolchain so Renovate can ship Go security fixes (#48) (586b7df)
deps: bump agent to v0.9.6 (#52) (dc1db2e)

helm-charts ccf-agent-v0.5.1

deps: bump agent to v0.9.6, api to v0.22.2, ui to v2.14.0 (#63) (360d193)

helm-charts ccf-app-v0.10.1

deps: bump agent to v0.9.6, api to v0.22.2, ui to v2.14.0 (#63) (360d193)

Navigation Menu

Repository navigation

Release train 2026-11 #183

Release digest draft: 2026-11

Features

Bug Fixes

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Release train 2026-11 #183

Description

Activity

github-actions commented on Nov 4, 2026

Release digest draft: 2026-11

Features

Bug Fixes

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions