v2.5.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:2.5.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• refactor: remove trivy workflows by @lukaszbasz in #111
• chore: bump Go to v1.26 by @peterdeme in #112

Full Changelog: v2.4.0...v2.5.0

v2.4.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:2.4.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• ci: add dependabot auto-merge workflow by @peterdeme in #103
• Bump github.com/bugsnag/bugsnag-go/v2 from 2.6.2 to 2.6.3 in the go-dependencies group by @dependabot[bot] in #104
• Bump google.golang.org/grpc from 1.78.0 to 1.79.1 in the go-dependencies group by @dependabot[bot] in #105
• Bump github.com/spacelift-io/spcontext from 0.0.13 to 0.1.0 in the go-dependencies group by @dependabot[bot] in #106
• Update Trivy action version in workflow by @lukaszbasz in #107
• Bump the go-dependencies group with 2 updates by @dependabot[bot] in #108
• Bump aquasecurity/trivy-action from 0.34.2 to 0.35.0 in the actions group by @dependabot[bot] in #109
• Bump google.golang.org/grpc from 1.79.2 to 1.79.3 by @dependabot[bot] in #110

New Contributors

• @lukaszbasz made their first contribution in #107

Full Changelog: v2.3.0...v2.4.0

v2.3.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:2.3.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• VCS Agent - should exit when misconfigured by @marko-kos in #101
• fix: handle nil Bugsnag notifier and modernize signal handling by @peterdeme in #102

New Contributors

• @marko-kos made their first contribution in #101

Full Changelog: v2.2.0...v2.3.0

v2.2.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:2.2.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• Remove CodeQL job from security workflow by @peterdeme in #100

Full Changelog: v2.1.0...v2.2.0

v2.1.0

Warning

FIPS 140-3 / TLS 1.2 Breaking Change

The VCS Agent was upgraded to Go 1.25 in this release. When running in FIPS 140-3 mode, Go 1.25 requires Extended Master Secret (RFC 7627) support for TLS 1.2 connections.

If the remote VCS endpoint (e.g., GitLab or a TLS terminator in front of it) does not negotiate Extended Master Secret, TLS handshakes will fail with:

tls: FIPS 140-3 requires the use of Extended Master Secret

Environments without EMS support may need to:

• Upgrade their TLS endpoint to support RFC 7627, or
• Pin to v2.0.0 if FIPS compliance is not required.

See the Go 1.25 release notes for details: "When FIPS 140-3 mode is enabled, Extended Master Secret is now required in TLS 1.2, and Ed25519 and X25519MLKEM768 are now allowed."

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:2.1.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• Add a warning if using HTTP and Gitlab by @tomasmik in #97
• chore: version bumps & improvements by @peterdeme in #98
• Bump github/codeql-action from 3 to 4 in the actions group by @dependabot[bot] in #99

Full Changelog: v2.0.0...v2.1.0

v2.0.0

What's Changed

Starting in v2.0.0 we're building the VCS agent with FIPS mode enabled. We don't anticipate that this should cause any issues and there are no steps that need to be taken by customers as a result, but please reach out to us if you notice any problems running the VCS Agent after upgrading to v2.0.0.

Changes in this release:

• feat: build VCS agent in FIPS mode by @adamconnelly in #95
• chore: fixing a couple of linter errors by @adamconnelly in #96
• fix: parsing of the DIAL_INSECURE env var by @adamconnelly in #94

Full Changelog: v1.10.0...v2.0.0

v1.10.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:1.10.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• chore: bump packages & bump Alpine version by @peterdeme in #93

Full Changelog: v1.9.0...v1.10.0

v1.9.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:1.9.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• feat: add get user URL to allowed bitbucket patterns by @eliecharra in #92

New Contributors

• @eliecharra made their first contribution in #92

Full Changelog: v1.8.0...v1.9.0

v1.8.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:1.8.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• Create CODEOWNERS by @mbialon in #89
• feat: support ca certificates by @Apollorion in #91

Full Changelog: v1.7.0...v1.8.0

v1.7.0

Artifacts

Docker images

The following multi-arch Docker images have been published:

• public.ecr.aws/spacelift/vcs-agent:latest
• public.ecr.aws/spacelift/vcs-agent:1.7.0

Binaries

The latest binaries are available in this release page, as well as on Spacelift's CDN:

URL	Architecture
https://downloads.spacelift.io/spacelift-vcs-agent-x86_64	Linux (amd64)
https://downloads.spacelift.io/spacelift-vcs-agent-aarch64	Linux (arm64)

What's Changed

• Maintenance (2025 may) by @peterdeme in #88

Full Changelog: v1.6.0...v1.7.0